This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3139322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: JvHVF3tfWYxVykhtjYmZkRwP7mCZ0i7KgihN2sADajA=
Subject key identifier: 05:53:F8:43:4E:27:39:B3:08:56:4A:5C:57:AD:95:86:14:E0:56:D6
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5DDBF9A4FFF770E9C961BC9D4610D61B2B94B764
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32322d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:53:10 +0000
ROA not before: Mon 09 Feb 2026 07:48:10 +0000
ROA not after: Mon 08 Feb 2027 07:53:10 +0000
asID: 834
IP address blocks: 147.125.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:db:f9:a4:ff:f7:70:e9:c9:61:bc:9d:46:10:d6:1b:2b:94:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:48:10 2026 GMT
Not After : Feb 8 07:53:10 2027 GMT
Subject: CN=0553F8434E2739B308564A5C57AD958614E056D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:0d:16:d8:ba:b7:1a:19:c8:60:98:b2:6d:
c8:5e:cd:07:ef:bb:32:16:08:d1:9b:c1:9a:b5:2f:
fa:05:1d:4b:bd:41:e2:97:53:48:81:0d:26:c1:7e:
5b:9a:a1:9e:9d:2c:b1:6a:1a:9c:13:60:08:17:00:
92:0a:6b:85:ab:67:c0:25:55:5b:6f:b4:2e:23:07:
6c:53:9e:d3:14:b4:3e:52:58:3c:8c:d0:88:4b:ae:
d5:bd:a2:e6:77:71:4d:3e:f2:33:c0:1e:bb:60:5c:
8b:3d:62:a1:bb:b9:d0:33:4d:6f:35:6b:35:2a:91:
fb:79:9c:bd:17:70:27:98:a3:f4:67:89:ac:57:50:
21:7a:9d:03:47:0e:d8:59:f3:20:54:63:6c:f8:c5:
04:fd:47:1c:36:0d:6a:62:7a:20:1f:fd:93:6a:3b:
56:4d:42:89:03:17:72:6a:5d:eb:1b:ac:0c:b2:fd:
2f:ce:a8:97:53:de:e2:7e:a6:58:70:0d:e2:7e:8f:
de:d7:46:d7:49:87:b6:1a:12:08:d0:17:02:82:3e:
99:00:b1:6b:c1:06:6b:ec:d9:7f:57:9e:c4:37:ad:
9a:96:97:3c:5d:65:db:cb:0f:15:8b:bb:f0:5e:ab:
a2:9d:ea:78:a5:0d:10:b5:0a:5a:5d:c7:3f:98:26:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:53:F8:43:4E:27:39:B3:08:56:4A:5C:57:AD:95:86:14:E0:56:D6
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b9:d6:d0:2b:fd:3c:38:b9:bf:2f:88:3f:8a:32:4d:77:43:
88:3b:48:89:3e:0f:f8:02:a5:55:0a:6c:79:c9:65:a1:09:db:
e4:85:f8:02:d9:58:63:8e:c7:50:0a:02:b2:62:6a:87:e4:fb:
2c:9b:f9:3e:e3:41:71:05:b3:86:f9:d3:ca:2b:97:47:71:fb:
98:f2:fa:6d:f1:62:5f:af:11:7b:06:c5:66:e0:64:f4:1c:85:
9d:71:5d:30:4b:d3:91:ff:4c:5d:e3:e3:e5:84:38:16:34:8b:
2b:a0:5b:d9:a1:b2:85:48:06:06:c1:26:3a:14:89:aa:d5:53:
44:ac:0f:de:42:42:75:45:88:76:e6:e2:69:aa:5f:fd:0f:54:
43:9e:70:e9:4e:8e:04:ce:61:f1:56:90:31:24:89:5d:8c:4a:
f4:c0:69:47:de:9b:23:11:06:e4:6a:d3:b6:62:40:85:d0:9d:
a3:b8:59:36:43:40:6d:34:8b:03:3b:d0:a3:91:33:8d:ea:45:
e1:9f:7f:f9:fb:59:8f:1c:72:d9:fb:61:dd:80:5d:9b:3b:3e:
f7:3b:7b:ff:da:74:c6:15:e1:44:7a:ee:38:a3:a7:5d:28:9e:
6c:1f:91:71:a7:d7:4e:b2:69:9f:b1:d4:9e:ed:ac:2d:96:86:
20:fd:35:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:16 2026 by rpki-client