This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3139352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: kM2//WZWPDfCV2XrEiVObOAqpe1/Pmajy+ykp7mwfOU= Subject key identifier: 86:9E:81:B5:15:AD:6B:CB:AA:58:82:75:63:16:5C:3F:65:6C:92:E8 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6BE2EF2F1BC9A06247823174A5BD4DB151802EFD Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e2039333034.roa Signing time: Fri 09 Jan 2026 08:11:30 +0000 ROA not before: Fri 09 Jan 2026 08:06:30 +0000 ROA not after: Fri 08 Jan 2027 08:11:30 +0000 asID: 9304 IP address blocks: 147.125.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e2:ef:2f:1b:c9:a0:62:47:82:31:74:a5:bd:4d:b1:51:80:2e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:06:30 2026 GMT Not After : Jan 8 08:11:30 2027 GMT Subject: CN=869E81B515AD6BCBAA58827563165C3F656C92E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e8:6f:67:89:db:33:28:b5:9b:01:b0:00:85: 64:f1:a5:7b:e4:c5:c2:f1:de:e6:9d:31:85:45:c2: e2:c1:07:d7:83:38:58:e0:60:eb:3a:09:d9:41:b8: 0e:e5:fb:3b:66:6f:88:10:77:6e:99:4b:21:4b:7e: 35:8c:64:bf:c0:9f:b9:30:8c:43:6d:86:64:67:33: b3:f4:a3:fd:56:48:8a:b8:98:eb:08:50:c7:be:85: f5:20:5d:8d:3a:2a:65:ac:09:4c:d2:3b:74:ea:ac: 0a:47:fd:16:7c:57:2e:af:93:a0:b7:36:ae:ba:25: 9a:2a:e8:09:73:51:b2:ea:d4:a5:da:30:35:81:1c: 13:14:2d:b5:ea:ea:2e:d3:7b:d0:a1:30:3f:da:5b: ab:15:cd:29:ee:83:b8:ab:03:79:11:b1:d7:39:18: da:68:ef:fe:96:30:77:43:56:12:48:9f:8b:c8:2c: 26:db:b8:cc:0c:b7:76:12:c3:b8:83:40:4b:76:40: 9d:63:2c:24:76:aa:bd:e7:78:86:eb:06:32:92:90: 68:44:d8:79:36:7e:22:e7:c1:b8:7e:c5:39:33:4b: 28:35:f7:f2:ee:9e:19:00:11:83:c3:74:fd:12:d4: f8:9a:28:30:34:1a:28:21:1c:41:ec:4e:32:b6:f6: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9E:81:B5:15:AD:6B:CB:AA:58:82:75:63:16:5C:3F:65:6C:92:E8 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.195.0/24 Signature Algorithm: sha256WithRSAEncryption 55:ca:f1:07:46:9f:10:d4:78:d8:c4:eb:77:49:b9:94:f4:ec: 27:0d:dd:67:3a:d6:59:3d:23:70:c7:3d:8c:24:fb:ab:6b:cf: cd:db:09:c3:35:c9:41:1b:f9:99:30:30:da:c0:44:11:dd:8d: 56:c4:b2:a6:ed:45:e2:5b:d2:22:7e:19:4b:2a:20:66:e1:33: 60:fc:32:5d:a5:98:a6:da:ea:9d:fc:34:3f:fb:8a:d6:81:92: 02:ab:30:56:8e:b5:37:b0:22:2f:11:83:5b:0f:82:63:e4:28: 9e:f9:84:d1:33:fc:53:9a:fd:4d:d3:7c:4e:5f:ed:06:02:9e: bf:97:af:c3:9a:9c:57:6e:1b:47:2e:97:b3:95:22:63:86:b2: 54:4d:a4:eb:04:c3:88:dc:2d:a5:f2:0d:a4:32:57:59:14:de: 72:95:f3:ab:eb:94:9f:67:da:01:6c:e4:d2:bc:6a:94:a2:1e: 64:1b:51:77:2c:04:f3:37:9b:90:07:8a:ff:45:c3:c2:35:ad: 45:24:d7:5e:0b:57:45:89:a8:91:f8:32:33:0c:cd:1e:a7:08: 1f:c2:aa:50:0f:81:d8:e1:d9:52:88:e7:42:c7:19:8a:3e:90: 17:7b:71:10:80:98:2d:6b:17:c8:82:1c:3e:bf:ce:2f:89:f7: cf:98:12:05 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUa+LvLxvJoGJHgjF0pb1NsVGALv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODA2MzBaFw0yNzAxMDgwODExMzBaMDMxMTAvBgNV BAMTKDg2OUU4MUI1MTVBRDZCQ0JBQTU4ODI3NTYzMTY1QzNGNjU2QzkyRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ6G9nidszKLWbAbAAhWTxpXvk xcLx3uadMYVFwuLBB9eDOFjgYOs6CdlBuA7l+ztmb4gQd26ZSyFLfjWMZL/An7kw jENthmRnM7P0o/1WSIq4mOsIUMe+hfUgXY06KmWsCUzSO3TqrApH/RZ8Vy6vk6C3 Nq66JZoq6AlzUbLq1KXaMDWBHBMULbXq6i7Te9ChMD/aW6sVzSnug7irA3kRsdc5 GNpo7/6WMHdDVhJIn4vILCbbuMwMt3YSw7iDQEt2QJ1jLCR2qr3neIbrBjKSkGhE 2Hk2fiLnwbh+xTkzSyg19/LunhkAEYPDdP0S1PiaKDA0GighHEHsTjK29kRXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhp6BtRWta8uqWIJ1YxZcP2VskugwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k33DMA0GCSqGSIb3DQEBCwUAA4IBAQBVyvEHRp8Q1HjYxOt3SbmU9OwnDd1nOtZZ PSNwxz2MJPura8/N2wnDNclBG/mZMDDawEQR3Y1WxLKm7UXiW9IifhlLKiBm4TNg /DJdpZim2uqd/DQ/+4rWgZICqzBWjrU3sCIvEYNbD4Jj5Cie+YTRM/xTmv1N03xO X+0GAp6/l6/DmpxXbhtHLpezlSJjhrJUTaTrBMOI3C2l8g2kMldZFN5ylfOr65Sf Z9oBbOTSvGqUoh5kG1F3LATzN5uQB4r/RcPCNa1FJNdeC1dFiaiR+DIzDM0epwgf wqpQD4HY4dlSiOdCxxmKPpAXe3EQgJgtaxfIghw+v84viffPmBIF -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:50 2026 by rpki-client