This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32342d3234203d3e203633313939.roa File: 3134372e3132352e3137322e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: dBdyf4+0/eHp9yxZZHhjCcQX7ezdOe/rKhghw/WWVRg= Subject key identifier: 86:02:C0:F6:EE:0B:98:24:EF:BF:52:39:F6:0D:8E:AE:85:90:51:F6 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6F04A83C6239ED36A00D8D4643F988A631568CB5 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32342d3234203d3e203633313939.roa Signing time: Mon 17 Nov 2025 09:48:55 +0000 ROA not before: Mon 17 Nov 2025 09:43:55 +0000 ROA not after: Mon 16 Nov 2026 09:48:55 +0000 asID: 63199 IP address blocks: 147.125.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:04:a8:3c:62:39:ed:36:a0:0d:8d:46:43:f9:88:a6:31:56:8c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 09:43:55 2025 GMT Not After : Nov 16 09:48:55 2026 GMT Subject: CN=8602C0F6EE0B9824EFBF5239F60D8EAE859051F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:f9:9f:be:43:f5:2a:33:3e:ac:d6:e0:bb: 20:11:5b:08:a6:92:71:5f:39:b4:ea:f8:91:42:3e: 55:e3:3b:1d:11:0b:bb:d9:87:09:e4:bf:81:63:01: 6d:e1:e1:cc:90:12:7e:74:33:2e:c3:c9:b5:bd:3c: ab:b2:36:ad:da:fc:2d:af:06:1b:53:4e:d9:91:50: 51:62:37:be:06:46:02:74:1f:c8:b2:95:c8:33:78: ba:37:0f:76:99:67:38:07:a1:1a:ac:67:da:eb:fc: 86:b0:10:70:e6:36:dd:15:db:48:8f:f2:1d:e1:e4: 51:e6:11:47:b9:17:56:62:72:ac:ab:be:78:67:9e: ec:5b:2c:78:70:2d:30:cd:2b:68:e5:80:f1:7c:f4: c7:0a:26:35:f0:00:7c:16:da:ee:41:c8:59:e0:5a: 71:2d:58:2d:80:1c:64:f7:3a:ef:08:e9:9a:d4:81: ed:41:06:4e:7f:e3:9c:43:41:96:fb:10:f0:01:02: a3:38:f2:c8:3b:2e:4c:46:80:f6:86:c7:d7:10:b9: d3:20:d0:d8:0f:6f:7f:da:70:37:d9:14:82:84:67: 80:d8:02:f7:a2:8b:5e:50:f7:ee:31:57:b2:1e:ab: 23:2e:f9:c0:b5:61:fb:57:30:71:36:87:be:75:9a: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:02:C0:F6:EE:0B:98:24:EF:BF:52:39:F6:0D:8E:AE:85:90:51:F6 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137322e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.172.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:f0:25:3d:02:86:97:a0:38:01:de:92:78:82:d3:9f:3e:33: e6:a1:ec:38:5e:09:0d:46:34:94:76:7f:22:a5:57:38:8f:4e: e6:c6:52:3c:34:60:69:90:fd:3c:63:0e:1b:f2:1b:f2:06:ef: 90:a5:ab:9d:34:bc:cd:3b:c7:a0:19:e2:d8:fa:df:19:7e:6e: 7c:e9:16:3e:87:37:16:c9:7a:fc:c0:c3:aa:09:05:3e:62:cf: 99:87:68:3f:33:5a:04:89:bf:43:a2:20:75:0d:84:4a:3d:d8: 5b:b2:e7:d7:af:40:e8:5c:44:21:24:d3:3d:43:c1:93:00:91: 02:6c:e1:8a:f8:8e:1c:3b:e1:cb:04:b7:a8:dc:2c:6e:0a:8d: 43:08:5e:8c:ff:f9:ee:84:9b:e6:72:06:73:0b:43:31:15:d2: d9:59:ea:d6:e3:af:f4:31:66:38:d6:d2:cc:bb:4f:d2:fc:a5: 56:1f:38:63:f7:f1:13:b4:fe:cf:90:03:4d:5e:ae:9a:f5:37: 91:dc:e8:a8:09:83:21:cb:ff:db:5c:09:2a:85:70:3f:06:ee: 33:7c:42:25:2f:0b:bf:ed:52:4e:98:f0:72:39:0a:e9:69:1e: 6d:51:85:5c:83:05:98:2a:9c:40:d4:18:85:5f:75:05:62:7a: 1a:49:60:32 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUbwSoPGI57TagDY1GQ/mIpjFWjLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcwOTQzNTVaFw0yNjExMTYwOTQ4NTVaMDMxMTAvBgNV BAMTKDg2MDJDMEY2RUUwQjk4MjRFRkJGNTIzOUY2MEQ4RUFFODU5MDUxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mfmfvkP1KjM+rNbguyARWwim knFfObTq+JFCPlXjOx0RC7vZhwnkv4FjAW3h4cyQEn50My7DybW9PKuyNq3a/C2v BhtTTtmRUFFiN74GRgJ0H8iylcgzeLo3D3aZZzgHoRqsZ9rr/IawEHDmNt0V20iP 8h3h5FHmEUe5F1ZicqyrvnhnnuxbLHhwLTDNK2jlgPF89McKJjXwAHwW2u5ByFng WnEtWC2AHGT3Ou8I6ZrUge1BBk5/45xDQZb7EPABAqM48sg7LkxGgPaGx9cQudMg 0NgPb3/acDfZFIKEZ4DYAveii15Q9+4xV7IeqyMu+cC1YftXMHE2h751mqyzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUhgLA9u4LmCTvv1I59g2OroWQUfYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzMTM5Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfawwDQYJKoZIhvcNAQELBQADggEBAJrwJT0ChpegOAHekniC058+M+ah7Dhe CQ1GNJR2fyKlVziPTubGUjw0YGmQ/TxjDhvyG/IG75Clq500vM07x6AZ4tj63xl+ bnzpFj6HNxbJevzAw6oJBT5iz5mHaD8zWgSJv0OiIHUNhEo92Fuy59evQOhcRCEk 0z1DwZMAkQJs4Yr4jhw74csEt6jcLG4KjUMIXoz/+e6Em+ZyBnMLQzEV0tlZ6tbj r/QxZjjW0sy7T9L8pVYfOGP38RO0/s+QA01erpr1N5Hc6KgJgyHL/9tcCSqFcD8G 7jN8QiUvC7/tUk6Y8HI5CulpHm1RhVyDBZgqnEDUGIVfdQViehpJYDI= -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:49 2025 by rpki-client