This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: P6JbezN276yGpN6sa6eYI71wV9tv1n8BbzAbBLVxa2Y=
Subject key identifier: 42:58:D9:82:03:0E:A6:61:C8:32:C2:BA:C9:84:11:16:A5:C4:6A:F5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3045D0A1D94C1FF335132222CFE9F6FBF7A1B4A5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20383334.roa
Signing time: Fri 06 Feb 2026 06:31:16 +0000
ROA not before: Fri 06 Feb 2026 06:26:16 +0000
ROA not after: Fri 05 Feb 2027 06:31:16 +0000
asID: 834
IP address blocks: 147.125.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:45:d0:a1:d9:4c:1f:f3:35:13:22:22:cf:e9:f6:fb:f7:a1:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 6 06:26:16 2026 GMT
Not After : Feb 5 06:31:16 2027 GMT
Subject: CN=4258D982030EA661C832C2BAC9841116A5C46AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:9c:66:28:fa:bb:f3:39:b3:53:3f:79:24:
3b:72:e5:a9:5d:26:bf:b8:57:e9:04:17:bd:4d:4f:
1a:f9:b4:01:e3:f2:75:86:78:d2:f8:1e:93:01:a7:
0d:2a:b9:64:27:8e:35:fc:ad:df:27:08:58:34:a7:
c2:74:ed:55:27:f5:56:67:73:10:01:df:cb:b6:f2:
5d:0d:b5:a6:f2:03:30:1a:20:9c:b6:c7:6f:78:60:
ca:59:fb:23:39:6d:64:36:a3:36:b7:ae:59:01:89:
3c:10:4f:5f:86:2b:01:69:91:40:30:9b:41:85:f7:
ff:82:ae:59:a1:97:f7:4e:dd:af:fc:89:b9:57:10:
0b:40:a4:2f:db:7a:e7:d5:a3:6d:bd:e4:1d:54:30:
3d:b3:eb:d9:07:8a:6f:69:b5:4f:f9:4c:50:c7:23:
cb:a9:91:ea:bb:e4:f0:06:99:be:3f:74:3f:3b:50:
43:f8:c5:0b:3c:22:9f:07:42:64:02:65:94:dd:34:
f5:68:a0:47:bd:b3:ac:60:18:b0:89:f4:68:c8:24:
5e:80:45:65:14:85:83:71:24:ac:52:f1:82:65:15:
ff:65:5b:ca:66:5a:00:ac:77:0e:36:5f:ef:ac:3d:
75:6a:71:31:ba:ef:b5:34:bc:be:46:a1:f2:ac:a3:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:58:D9:82:03:0E:A6:61:C8:32:C2:BA:C9:84:11:16:A5:C4:6A:F5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:17:6a:2a:56:2f:b2:28:fd:05:80:5e:8b:c5:2e:69:ec:80:
9c:cf:30:33:da:38:d3:ff:0c:e2:d4:25:3f:af:e6:ba:5e:2f:
c2:c9:65:a6:3f:a3:72:17:dd:6d:be:84:c4:0f:06:d3:52:d2:
9e:6c:25:d4:27:ac:2b:d2:e8:59:2d:95:6f:29:71:62:51:bb:
3e:93:86:22:25:2d:92:77:85:c4:ac:61:61:cc:fb:ed:e3:eb:
7b:7b:f9:8d:98:12:6f:06:e0:14:ab:5d:90:af:10:bc:6e:b8:
bf:df:e5:39:31:8d:a4:42:4b:f1:92:d1:8d:aa:c6:42:4a:8f:
8e:2e:1d:33:04:4f:08:8b:b9:27:b0:ff:a2:1e:0d:0e:41:25:
e4:8a:d3:98:06:8d:24:11:f9:24:bc:ec:02:d3:b0:0c:c2:7d:
19:57:50:65:00:aa:c0:f1:11:40:4c:1f:04:9b:f4:90:cb:ce:
da:6c:9a:37:e1:5e:7e:4e:86:a0:b9:4c:ca:20:58:20:ed:8b:
d5:86:7c:91:d3:01:25:ab:4b:09:88:66:f0:f4:65:12:ef:62:
53:4d:9d:fa:31:4d:12:b7:02:04:a8:45:62:ac:f6:3a:27:40:
10:00:d6:91:a2:62:35:a7:b9:aa:07:e0:f9:9b:2e:1c:45:29:
a4:a9:52:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:32 2026 by rpki-client