This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32332d3234203d3e2034373636.roa File: 3134372e3132352e3137382e302f32332d3234203d3e2034373636.roa (raw, json) Hash identifier: GjZ/hp4nT82LTJAnne+Tr+OKgfWj+V3U2/2d2qz/roc= Subject key identifier: 81:DB:6C:95:46:90:43:7C:81:11:FC:01:A3:41:A1:BC:9D:2B:8C:54 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 4CCC9DD4A65A7A03739B7338BCC689A6F78F8502 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32332d3234203d3e2034373636.roa Signing time: Wed 19 Nov 2025 09:13:52 +0000 ROA not before: Wed 19 Nov 2025 09:08:52 +0000 ROA not after: Wed 18 Nov 2026 09:13:52 +0000 asID: 4766 IP address blocks: 147.125.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cc:9d:d4:a6:5a:7a:03:73:9b:73:38:bc:c6:89:a6:f7:8f:85:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 19 09:08:52 2025 GMT Not After : Nov 18 09:13:52 2026 GMT Subject: CN=81DB6C954690437C8111FC01A341A1BC9D2B8C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:69:75:cb:e8:09:43:e1:8e:c6:d4:01:91: 04:5c:79:06:c2:86:78:b0:5a:8a:e7:7f:7a:c1:ed: 50:1f:24:f3:2e:23:8a:0d:0b:59:cd:3d:9b:a9:7d: b3:b2:e5:9d:a4:34:66:0c:51:f9:1e:68:e1:5f:c9: 43:3a:a2:fa:7c:11:de:81:ad:42:d1:82:91:23:fb: 09:12:6f:bf:ab:f6:f3:dd:a8:90:6b:a8:36:0e:92: 2a:29:a1:6b:0f:dd:50:b2:b2:44:8e:91:d2:d6:74: 33:5c:38:ae:ed:82:56:12:b4:13:de:5d:ad:4d:9f: 8b:53:35:dc:ff:ae:18:e5:17:6a:76:2e:51:9d:cf: 3d:05:2b:8c:33:71:6c:d6:95:16:1d:6c:d5:67:78: 32:fe:10:af:7a:df:df:94:4c:57:43:2b:d6:2d:b0: 88:2e:cf:c8:50:76:5b:77:a3:1b:5f:0d:b9:59:93: 1f:af:87:4a:6d:1a:4b:b3:26:f5:3f:34:78:43:95: 70:03:20:ba:0c:5c:06:89:78:78:3a:b6:42:27:ee: 67:bb:ff:48:fa:c1:11:d8:51:10:88:ff:2d:95:24: 44:73:da:1d:42:21:3c:99:09:9f:f9:8d:df:7f:80: 90:49:d8:75:43:1f:d8:11:b0:e4:28:c1:0b:ef:af: 83:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DB:6C:95:46:90:43:7C:81:11:FC:01:A3:41:A1:BC:9D:2B:8C:54 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32332d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.178.0/23 Signature Algorithm: sha256WithRSAEncryption 12:51:6d:80:3e:34:04:46:5c:c7:72:78:6b:b8:05:1a:0d:96: cc:b0:34:73:c0:13:6e:09:be:9a:42:bf:0a:58:2d:10:eb:14: c8:97:2e:cf:19:ef:14:e9:21:bc:bf:39:80:95:bb:22:fc:cd: 4d:f9:5a:a5:f7:34:1f:6b:ff:3f:ef:4b:1f:df:44:9c:52:3e: aa:d9:b7:55:88:4a:52:01:15:00:f8:64:4e:f9:dd:1f:0f:d3: 7d:85:2a:1e:55:e1:31:f4:1c:de:27:08:30:44:36:12:b8:5c: 63:7d:15:36:29:c7:8d:c2:db:ba:2a:1b:0c:bc:19:43:2e:54: 07:7b:fb:08:33:b0:ba:0d:da:2b:c9:c2:53:11:ae:f7:d5:db: 52:61:11:57:13:ca:6b:c4:52:8f:30:7e:0d:fb:8a:b1:fc:15: 82:4f:e9:5c:4d:90:42:86:28:82:72:f6:ec:ed:d6:7a:91:11: 2d:62:79:d2:9e:d1:99:f9:1a:72:63:a2:03:39:a2:99:87:12: ba:be:a0:ad:8c:7f:3c:8c:f8:ed:bd:52:7d:dc:c6:b3:40:ef: 0d:c5:d5:a6:1a:1c:09:90:45:ad:ee:f8:23:2b:f3:a9:13:6a: bc:60:59:82:cb:19:6e:96:67:22:6d:ef:93:5f:f3:93:8b:02: 29:73:65:ef -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTMyd1KZaegNzm3M4vMaJpvePhQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTkwOTA4NTJaFw0yNjExMTgwOTEzNTJaMDMxMTAvBgNV BAMTKDgxREI2Qzk1NDY5MDQzN0M4MTExRkMwMUEzNDFBMUJDOUQyQjhDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmd2l1y+gJQ+GOxtQBkQRceQbC hniwWornf3rB7VAfJPMuI4oNC1nNPZupfbOy5Z2kNGYMUfkeaOFfyUM6ovp8Ed6B rULRgpEj+wkSb7+r9vPdqJBrqDYOkiopoWsP3VCyskSOkdLWdDNcOK7tglYStBPe Xa1Nn4tTNdz/rhjlF2p2LlGdzz0FK4wzcWzWlRYdbNVneDL+EK9639+UTFdDK9Yt sIguz8hQdlt3oxtfDblZkx+vh0ptGkuzJvU/NHhDlXADILoMXAaJeHg6tkIn7me7 /0j6wRHYURCI/y2VJERz2h1CITyZCZ/5jd9/gJBJ2HVDH9gRsOQowQvvr4ONAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUgdtslUaQQ3yBEfwBo0GhvJ0rjFQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB k32yMA0GCSqGSIb3DQEBCwUAA4IBAQASUW2APjQERlzHcnhruAUaDZbMsDRzwBNu Cb6aQr8KWC0Q6xTIly7PGe8U6SG8vzmAlbsi/M1N+Vql9zQfa/8/70sf30ScUj6q 2bdViEpSARUA+GRO+d0fD9N9hSoeVeEx9BzeJwgwRDYSuFxjfRU2KceNwtu6KhsM vBlDLlQHe/sIM7C6DdorycJTEa731dtSYRFXE8prxFKPMH4N+4qx/BWCT+lcTZBC hiiCcvbs7dZ6kREtYnnSntGZ+RpyY6IDOaKZhxK6vqCtjH88jPjtvVJ93MazQO8N xdWmGhwJkEWt7vgjK/OpE2q8YFmCyxlulmcibe+TX/OTiwIpc2Xv -----END CERTIFICATE-----Generated at Thu Dec 4 21:24:11 2025 by rpki-client