This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32342d3234203d3e20343031383139.roa File: 3134372e3132352e3136342e302f32342d3234203d3e20343031383139.roa (raw, json) Hash identifier: m53NEvtjb7k8o+miRDMC5irGqe2zFV7WUyq8GIhlJCI= Subject key identifier: 54:D4:89:CE:F3:33:38:53:61:B1:25:6B:01:5A:C4:55:79:08:8F:C7 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6B1F5B429D631D18224EC28FEC92C0C3F401632E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32342d3234203d3e20343031383139.roa Signing time: Thu 08 Jan 2026 09:23:26 +0000 ROA not before: Thu 08 Jan 2026 09:18:26 +0000 ROA not after: Thu 07 Jan 2027 09:23:26 +0000 asID: 401819 IP address blocks: 147.125.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1f:5b:42:9d:63:1d:18:22:4e:c2:8f:ec:92:c0:c3:f4:01:63:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 8 09:18:26 2026 GMT Not After : Jan 7 09:23:26 2027 GMT Subject: CN=54D489CEF333385361B1256B015AC45579088FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:0c:21:9f:b5:1f:0d:f2:38:48:2b:4d:90: c3:76:48:26:33:6b:e3:92:bd:78:a5:6b:55:d0:55: eb:a2:53:55:45:ad:bb:f1:10:6e:80:b4:8d:2e:e6: b7:c4:92:9c:f1:03:20:c4:45:cf:a1:f1:41:98:15: 28:80:41:69:dd:1f:b2:01:22:41:18:a8:c8:53:cb: 77:f5:bb:df:37:7c:88:4f:2e:ef:72:f3:fe:39:f2: 1d:f5:70:fd:95:61:d7:6a:a3:72:63:1f:0e:2a:09: 39:01:fb:da:34:40:64:70:93:37:ed:3f:23:49:65: 68:72:80:fa:59:78:4d:77:77:03:fa:f8:04:1f:a2: 2e:5c:8f:2b:63:02:18:5d:7f:69:a8:cd:f2:19:12: 38:f4:9b:1e:91:fb:1d:96:d8:0d:44:3f:c5:7c:63: 06:2a:0e:1c:53:53:05:22:9f:aa:de:6a:38:96:34: 5e:2e:5b:ba:65:24:19:e7:a6:bb:bc:7e:87:cb:37: e7:bc:ca:2d:cc:1c:2f:27:cc:ef:22:3b:fb:eb:bd: 59:0c:3b:b1:48:af:ff:f6:86:e8:1f:fd:68:07:e2: 5d:81:9f:da:07:a0:25:e8:fe:b1:2b:9b:3f:ef:57: b4:b5:a0:88:67:bb:10:5b:af:47:a2:83:58:c0:e5: 15:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D4:89:CE:F3:33:38:53:61:B1:25:6B:01:5A:C4:55:79:08:8F:C7 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32342d3234203d3e20343031383139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.164.0/24 Signature Algorithm: sha256WithRSAEncryption 36:6a:d5:c2:0b:9e:12:7c:91:ae:d1:cb:52:9c:eb:14:0d:41: 0e:dd:ab:cd:40:f4:56:79:06:8b:68:4f:76:a9:d4:c6:99:24: 9d:ab:07:e7:77:69:35:dc:3e:da:53:31:2b:e8:40:11:c0:1b: 5a:b4:b4:80:09:bf:29:5a:14:db:43:93:1e:dc:6b:4f:58:77: 6e:00:c8:cb:87:8f:fc:b5:05:d5:a4:76:f7:3d:56:66:9e:aa: 67:f5:b9:e0:99:f5:b4:94:83:22:1c:e1:f7:20:8f:31:2e:c8: fa:c6:ff:e3:75:63:6c:a3:03:7b:bc:69:14:43:0a:cb:33:e5: 81:57:78:3f:03:72:23:58:b1:3d:7e:d5:a7:bc:eb:cb:24:bd: 6d:86:05:21:9d:dc:6d:a4:9b:72:46:3f:89:be:5c:f1:34:b9: 29:a8:59:06:82:24:bc:9d:05:8e:a0:ab:ad:5b:d6:cc:d3:0f: 44:e8:03:ea:29:20:b8:1b:9a:e8:f3:85:51:87:7c:9d:76:03: 2b:4d:ce:13:ba:ae:73:3d:a4:95:4a:8b:1d:7b:a3:7b:91:81: 00:f1:35:d3:be:b7:28:56:21:4e:77:a8:bc:13:c2:77:15:12: 20:85:18:35:d1:29:f0:b2:fc:40:5f:85:9b:63:cb:92:2c:ae: aa:b8:b9:80 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUax9bQp1jHRgiTsKP7JLAw/QBYy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDgwOTE4MjZaFw0yNzAxMDcwOTIzMjZaMDMxMTAvBgNV BAMTKDU0RDQ4OUNFRjMzMzM4NTM2MUIxMjU2QjAxNUFDNDU1NzkwODhGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3gwhn7UfDfI4SCtNkMN2SCYz a+OSvXila1XQVeuiU1VFrbvxEG6AtI0u5rfEkpzxAyDERc+h8UGYFSiAQWndH7IB IkEYqMhTy3f1u983fIhPLu9y8/458h31cP2VYddqo3JjHw4qCTkB+9o0QGRwkzft PyNJZWhygPpZeE13dwP6+AQfoi5cjytjAhhdf2mozfIZEjj0mx6R+x2W2A1EP8V8 YwYqDhxTUwUin6reajiWNF4uW7plJBnnpru8fofLN+e8yi3MHC8nzO8iO/vrvVkM O7FIr//2hugf/WgH4l2Bn9oHoCXo/rErmz/vV7S1oIhnuxBbr0eig1jA5RXJAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUVNSJzvMzOFNhsSVrAVrEVXkIj8cwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzAzMTM4MzEzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9pDANBgkqhkiG9w0BAQsFAAOCAQEANmrVwgueEnyRrtHLUpzrFA1BDt2r zUD0VnkGi2hPdqnUxpkknasH53dpNdw+2lMxK+hAEcAbWrS0gAm/KVoU20OTHtxr T1h3bgDIy4eP/LUF1aR29z1WZp6qZ/W54Jn1tJSDIhzh9yCPMS7I+sb/43VjbKMD e7xpFEMKyzPlgVd4PwNyI1ixPX7Vp7zryyS9bYYFIZ3cbaSbckY/ib5c8TS5KahZ BoIkvJ0FjqCrrVvWzNMPROgD6ikguBua6POFUYd8nXYDK03OE7qucz2klUqLHXuj e5GBAPE10763KFYhTneovBPCdxUSIIUYNdEp8LL8QF+Fm2PLkiyuqri5gA== -----END CERTIFICATE-----Generated at Sat Jan 10 22:33:20 2026 by rpki-client