This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3139302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 5WO8CUvecTtTc9Pl7MVNUtsRdekLsgzKUiRpAvxgPmg=
Subject key identifier: 57:A3:2B:A1:D2:48:93:14:E6:25:58:A5:46:DF:FA:3A:6F:F5:2C:5E
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 745A23D0748B98560735F0DFCB2581AF5DFFB23C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32332d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:53:10 +0000
ROA not before: Mon 09 Feb 2026 07:48:10 +0000
ROA not after: Mon 08 Feb 2027 07:53:10 +0000
asID: 834
IP address blocks: 147.125.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5a:23:d0:74:8b:98:56:07:35:f0:df:cb:25:81:af:5d:ff:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:48:10 2026 GMT
Not After : Feb 8 07:53:10 2027 GMT
Subject: CN=57A32BA1D2489314E62558A546DFFA3A6FF52C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:c9:71:f8:f6:70:a7:f2:92:bb:cf:3f:2b:
b3:d4:78:f1:2c:61:60:59:ab:fe:14:bf:95:97:14:
4f:dc:20:18:57:19:aa:c2:93:47:71:05:87:8e:81:
31:74:53:e2:0f:56:e4:4c:49:ba:5e:8b:31:db:e3:
af:d7:a6:73:a2:91:4a:e9:7a:4c:2e:4b:77:64:f2:
9d:1a:3a:0b:c7:d5:34:1e:27:c1:e6:cf:dd:b8:bc:
95:6a:dc:a9:62:83:ec:19:e9:4c:c3:8a:34:37:c7:
25:04:e3:d4:78:d3:ce:96:5b:67:e8:db:f0:f6:91:
25:52:b0:d1:92:3f:77:04:4a:11:a6:b6:68:ba:8d:
1f:65:56:8b:37:f9:94:cb:a5:c8:59:e2:95:b0:30:
04:b7:2d:12:2f:91:35:55:cc:5f:11:a9:84:91:cd:
28:46:a2:93:87:11:bb:75:2b:66:0d:b5:b6:94:25:
66:89:25:96:bc:e1:a4:d3:d6:c7:c1:62:df:88:06:
8c:c4:4a:b1:16:a0:20:51:7b:64:78:74:0c:f6:a8:
12:d3:2b:3e:be:13:cf:99:37:52:70:e1:53:73:a3:
ad:0d:be:7e:0b:f5:f4:8d:e4:53:86:70:2d:82:1e:
73:e1:b3:82:20:2e:74:59:09:1a:e9:06:db:49:19:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A3:2B:A1:D2:48:93:14:E6:25:58:A5:46:DF:FA:3A:6F:F5:2C:5E
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.190.0/23
Signature Algorithm: sha256WithRSAEncryption
55:c6:0b:8e:80:77:7e:35:19:2c:51:b5:22:36:b2:74:c7:9b:
81:90:92:22:62:e4:fd:b3:70:ac:ff:ec:0e:b1:08:3f:b4:4f:
e6:e8:44:0a:d2:5b:2e:4f:74:97:2f:26:ca:b5:5a:6d:bc:67:
e8:2d:4d:a2:23:a5:db:4e:05:6d:83:1c:e8:bd:af:32:49:6d:
a6:ef:83:8b:67:2f:9a:8f:29:36:71:85:7a:06:d7:f7:c5:ba:
d1:b4:60:b2:c9:e7:e6:76:ae:50:23:90:e8:86:53:38:ef:0a:
bd:9f:fb:5b:6d:dc:b1:ad:3e:ca:25:d8:db:f3:c7:78:58:57:
97:3c:f4:54:f7:f9:64:33:a7:30:53:fb:c3:f8:c5:ad:72:ff:
dd:61:d5:66:d0:a4:4c:0f:24:59:58:52:bd:6d:29:19:1e:be:
91:8f:20:0d:17:eb:2f:ec:8d:c2:99:1a:9d:e8:22:a6:3c:65:
98:f4:ac:b8:1b:87:a2:5c:90:54:48:59:5a:89:2c:28:01:b7:
dc:34:cd:5b:ae:6f:0e:52:6d:ef:73:83:83:db:0e:d2:58:a6:
08:d3:0d:e2:86:c2:17:fb:3a:1e:43:e6:fd:01:5c:77:54:bd:
98:a9:da:df:1a:66:51:35:30:dd:19:23:d9:18:52:bf:23:62:
a0:fe:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:32 2026 by rpki-client