This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3138362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: kRUqgaiGOY8vS3aMdiVdbo7WvafCkWJM5mZ22lrEBJE=
Subject key identifier: 62:36:2B:1B:F2:F6:A7:7F:EF:58:61:DC:C2:98:8F:C5:FC:44:B7:20
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 32E7F77DA8138259BE1C9A3938D5BF4AC8233A4D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32332d3234203d3e20383334.roa
Signing time: Fri 06 Feb 2026 06:31:16 +0000
ROA not before: Fri 06 Feb 2026 06:26:16 +0000
ROA not after: Fri 05 Feb 2027 06:31:16 +0000
asID: 834
IP address blocks: 147.125.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e7:f7:7d:a8:13:82:59:be:1c:9a:39:38:d5:bf:4a:c8:23:3a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 6 06:26:16 2026 GMT
Not After : Feb 5 06:31:16 2027 GMT
Subject: CN=62362B1BF2F6A77FEF5861DCC2988FC5FC44B720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:36:a6:f7:d0:76:c0:03:5e:81:e9:26:0a:
5e:cc:75:88:f0:b3:00:6c:56:45:66:28:38:a7:40:
35:5e:2f:7d:10:ab:13:76:6d:20:84:f5:47:34:9c:
83:46:78:38:75:ee:de:75:15:de:0d:28:83:69:81:
a2:4a:bd:43:0f:f3:0f:e6:bd:0f:65:6e:87:cf:e3:
a1:f8:58:6b:ba:c9:b7:6b:7f:cc:d7:ce:a6:80:8b:
01:78:8d:73:0a:08:1c:38:97:46:b2:b3:e3:a1:37:
57:73:bd:97:45:f0:60:5e:bf:2c:e0:5c:35:12:9e:
00:a2:2b:ca:72:b0:03:0d:2b:37:83:51:77:f0:93:
60:52:63:fa:10:2c:77:f3:c9:bf:03:0a:c6:f3:c0:
1f:e8:b1:d2:0b:1b:b4:ec:d2:d6:c4:42:34:a4:84:
f1:df:12:01:33:0f:0b:0c:54:a7:ef:60:1d:1c:e0:
7e:9f:bc:f8:3e:3f:08:59:8f:a8:d3:58:61:96:b0:
b1:d4:35:e1:64:d9:0d:99:5a:2e:87:3e:4c:3e:07:
d7:b2:a9:25:1a:7d:be:ca:93:ba:32:fb:0e:d9:67:
30:d9:21:15:91:bf:0f:72:00:46:4b:f7:7f:49:83:
7b:4b:9b:54:66:b8:69:d2:0c:da:f1:5d:31:ad:1f:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:36:2B:1B:F2:F6:A7:7F:EF:58:61:DC:C2:98:8F:C5:FC:44:B7:20
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.186.0/23
Signature Algorithm: sha256WithRSAEncryption
87:8a:c3:9b:7d:49:6f:37:ba:52:2f:41:45:eb:8e:a4:6a:0b:
1b:dc:d4:a3:87:55:74:d8:17:5d:e5:a3:18:ac:ac:e4:72:78:
33:cf:da:b7:d2:a9:94:60:c7:cc:08:a5:d7:42:29:1c:c6:ef:
3b:b0:4e:a3:63:3f:84:21:c3:78:c7:fc:e7:95:c2:17:10:ed:
ff:34:96:7b:78:ce:99:76:10:f1:3a:a5:28:fb:8a:23:bf:85:
4d:fb:79:cd:a9:d3:a3:ad:ff:4c:bf:cd:7c:68:39:33:4a:71:
5d:e7:d4:8d:a1:28:73:85:f6:54:38:1c:8e:89:1b:77:7c:6f:
b0:bc:e5:ad:5e:7d:bb:0d:ab:39:f1:42:15:a8:ac:bd:ed:1d:
50:de:0f:4b:a8:e7:4f:a8:fb:27:c5:ee:05:bd:89:c4:94:4f:
4f:22:7c:b7:a9:09:5f:00:b8:22:0d:8d:f6:7e:cb:8a:5a:ec:
ae:01:c5:83:6d:ca:4c:3f:e1:96:9c:b5:24:19:bb:4f:32:a9:
26:b4:9b:9c:c4:6a:02:69:34:2d:56:f7:bd:95:b4:d3:1e:03:
4a:61:5b:30:d3:05:12:86:ee:82:0d:23:4b:7b:e6:10:4e:7d:
4a:4d:41:3a:f8:33:6b:6a:d1:1e:aa:07:1f:17:d8:b9:29:ef:
96:78:de:bc
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUMuf3fagTglm+HJo5ONW/SsgjOk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjAyMDYwNjI2MTZaFw0yNzAyMDUwNjMxMTZaMDMxMTAvBgNV
BAMTKDYyMzYyQjFCRjJGNkE3N0ZFRjU4NjFEQ0MyOTg4RkM1RkM0NEI3MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXDam99B2wANegekmCl7MdYjw
swBsVkVmKDinQDVeL30QqxN2bSCE9Uc0nINGeDh17t51Fd4NKINpgaJKvUMP8w/m
vQ9lbofP46H4WGu6ybdrf8zXzqaAiwF4jXMKCBw4l0ays+OhN1dzvZdF8GBevyzg
XDUSngCiK8pysAMNKzeDUXfwk2BSY/oQLHfzyb8DCsbzwB/osdILG7Ts0tbEQjSk
hPHfEgEzDwsMVKfvYB0c4H6fvPg+PwhZj6jTWGGWsLHUNeFk2Q2ZWi6HPkw+B9ey
qSUafb7Kk7oy+w7ZZzDZIRWRvw9yAEZL939Jg3tLm1RmuGnSDNrxXTGtH0DbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUYjYrG/L2p3/vWGHcwpiPxfxEtyAwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzgzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9
ujANBgkqhkiG9w0BAQsFAAOCAQEAh4rDm31Jbze6Ui9BReuOpGoLG9zUo4dVdNgX
XeWjGKys5HJ4M8/at9KplGDHzAil10IpHMbvO7BOo2M/hCHDeMf855XCFxDt/zSW
e3jOmXYQ8TqlKPuKI7+FTft5zanTo63/TL/NfGg5M0pxXefUjaEoc4X2VDgcjokb
d3xvsLzlrV59uw2rOfFCFaisve0dUN4PS6jnT6j7J8XuBb2JxJRPTyJ8t6kJXwC4
Ig2N9n7LilrsrgHFg23KTD/hlpy1JBm7TzKpJrSbnMRqAmk0LVb3vZW00x4DSmFb
MNMFEobugg0jS3vmEE59Sk1BOvgza2rRHqoHHxfYuSnvlnjevA==
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:32 2026 by rpki-client