This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32312d3234203d3e20383334.roa
File: 3134372e3132352e3137362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: acK/jIjsatFNyA4Ywx/pMlyzQL5hfO1tp1FL34PmEUk=
Subject key identifier: 98:6C:BA:01:1D:7B:37:2E:B6:E3:FB:17:97:88:3D:A0:70:4C:69:6C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 27F647AC855758C120941A72D16EC1B1481B7B45
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32312d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:56:15 +0000
ROA not before: Mon 09 Feb 2026 07:51:15 +0000
ROA not after: Mon 08 Feb 2027 07:56:15 +0000
asID: 834
IP address blocks: 147.125.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f6:47:ac:85:57:58:c1:20:94:1a:72:d1:6e:c1:b1:48:1b:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:51:15 2026 GMT
Not After : Feb 8 07:56:15 2027 GMT
Subject: CN=986CBA011D7B372EB6E3FB1797883DA0704C696C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:9a:8e:8e:a2:cc:dc:b8:a5:7f:a4:f1:b9:
dd:67:37:62:6a:77:0b:d0:e1:24:26:f3:21:e5:b6:
56:7e:0b:3a:95:52:d7:42:36:08:36:98:41:3f:46:
e7:4c:c0:b9:a0:c1:10:f6:28:2c:d1:81:8d:a1:78:
c8:da:96:0f:70:30:a7:3f:a9:12:f2:19:8c:5f:09:
cb:bb:01:91:7d:48:bf:7b:d3:bb:bc:1a:46:c9:ec:
ec:ce:a9:59:32:17:e8:0e:f1:2c:2f:2d:38:ac:3a:
9f:b4:61:36:31:36:44:3c:3b:d8:1f:55:92:68:24:
cf:ca:39:0f:c8:65:d5:a7:62:d5:bf:6a:eb:9e:28:
e3:4f:90:77:4e:3d:d6:91:ae:19:fc:80:8b:9e:f7:
0c:24:a7:8b:e8:51:71:8a:bc:4b:aa:f1:ab:ca:30:
76:cd:e2:18:ee:cd:f4:75:17:5f:73:2c:7a:70:63:
f9:62:3d:ee:07:e7:91:fe:9c:61:36:03:fe:ca:f9:
55:c9:2b:ee:5b:e9:d7:e7:1d:a9:e9:39:61:60:0a:
ef:07:78:0f:29:d1:fa:a5:80:2e:76:e5:51:76:2a:
a1:ac:c1:33:84:40:08:2f:9f:ca:2c:95:dd:a1:a6:
f3:ee:f5:90:3d:84:de:83:bf:61:c7:ea:03:5c:50:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6C:BA:01:1D:7B:37:2E:B6:E3:FB:17:97:88:3D:A0:70:4C:69:6C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.176.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:f3:60:46:37:d9:87:ea:09:35:53:f2:0a:4f:d4:07:16:e2:
85:8c:48:91:bf:71:e0:c6:d3:7b:e5:6c:59:89:bc:d7:10:dc:
f5:bc:d4:06:53:2e:f9:dc:55:3a:81:c1:01:91:84:fb:15:56:
40:28:37:69:74:9b:e9:96:23:43:89:7f:55:1c:ea:0b:70:ba:
5c:2c:52:d6:b1:87:c0:61:91:f0:70:59:3d:31:16:6e:43:67:
5d:be:6c:4b:16:d4:40:59:99:bb:4a:dd:8e:dc:2e:18:38:81:
97:61:6a:d6:bb:19:2d:70:3c:70:57:6c:c6:d2:19:d0:b5:a8:
eb:3f:fa:cb:ee:2f:c6:e7:c0:7e:fb:c1:d7:7c:d6:97:21:29:
94:21:5e:65:47:12:54:45:53:b4:6a:29:a8:c2:5d:69:42:36:
03:1a:3e:e7:07:63:c4:89:9a:27:7e:2b:08:a3:bb:af:ce:20:
67:97:01:09:be:e2:57:2d:c9:0b:a1:eb:ed:d7:de:fc:e2:8e:
82:89:52:29:3a:d1:78:f4:87:fe:8e:7b:07:5c:3c:16:02:4f:
1d:4a:43:de:b7:71:6b:dd:c8:df:92:d7:a3:c6:a0:16:87:cb:
ce:49:67:0d:b9:e5:37:c9:a5:8a:d7:c1:12:fb:b7:32:a2:32:
f9:6c:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:31 2026 by rpki-client