This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e203136323736.roa File: 3134372e3132352e3139382e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: klz4eZvI9wLVlAWYSxhgfaysl71tT63EFB8T+VBQrTE= Subject key identifier: 4B:5B:6C:5A:AE:AD:59:3D:38:72:79:89:18:82:6B:C7:B2:73:78:89 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6E3ED02E0BF7C97A39B9A6B982E99FAA2A780460 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e203136323736.roa Signing time: Tue 09 Dec 2025 16:33:26 +0000 ROA not before: Tue 09 Dec 2025 16:28:26 +0000 ROA not after: Tue 08 Dec 2026 16:33:26 +0000 asID: 16276 IP address blocks: 147.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3e:d0:2e:0b:f7:c9:7a:39:b9:a6:b9:82:e9:9f:aa:2a:78:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 9 16:28:26 2025 GMT Not After : Dec 8 16:33:26 2026 GMT Subject: CN=4B5B6C5AAEAD593D3872798918826BC7B2737889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4b:48:41:e4:b8:e9:f6:cb:b5:bc:98:13:cc: ed:d3:36:02:7a:ce:aa:7d:72:3b:2e:fe:4b:50:c4: 4c:fa:c1:87:c1:f5:54:00:2d:eb:d2:7c:a6:00:a5: f8:01:5b:03:d8:1e:f8:a9:1c:ee:ac:75:59:01:69: 14:b1:fc:1f:46:43:6a:5d:32:05:9f:62:9d:f1:56: ed:bb:9e:15:9b:d3:d1:95:bf:08:97:2d:d0:06:16: db:cd:b8:67:5e:66:e3:ed:73:e1:41:f8:00:87:a9: b7:f5:85:74:16:9b:d4:78:72:41:57:2f:b4:00:03: 34:2d:90:ca:f9:a5:e4:c4:7e:a2:10:a5:f0:73:01: 18:f5:af:95:79:e0:c8:c1:4e:28:e2:b9:e7:59:86: 50:fd:45:48:ef:f2:d9:ab:c3:98:5b:1e:c7:dc:3e: ba:a1:31:56:ab:b1:78:d6:a9:2e:d5:96:12:08:6f: 05:8d:57:d7:52:1d:29:ff:09:e7:f9:e8:40:2d:05: 9a:bb:b6:b1:65:51:60:ef:91:56:ed:e0:95:9b:d3: 7b:f1:ab:09:b1:82:5a:31:f8:43:18:7f:af:48:ab: 20:4f:35:4d:12:92:23:30:94:78:e2:90:8b:c7:27: 0c:17:2e:66:10:73:fe:50:70:45:f0:eb:06:e3:b2: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5B:6C:5A:AE:AD:59:3D:38:72:79:89:18:82:6B:C7:B2:73:78:89 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.198.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:f0:f9:25:23:37:ac:e7:2a:1f:51:5a:5e:59:38:f8:07:7c: 04:a7:7a:1c:7d:bc:9e:35:e0:21:de:bc:24:b0:f7:39:f7:95: e9:af:60:9a:d2:3d:06:97:4f:ea:03:20:83:85:6e:85:56:d7: 78:36:c3:12:48:12:d4:f3:29:10:97:54:f8:9a:68:9c:a5:99: b8:f9:05:01:1b:58:83:88:01:17:64:6a:48:cd:36:f2:98:47: b1:40:ed:6b:3c:2c:93:05:32:ed:28:37:55:03:a7:29:ef:46: bd:0b:c8:a9:68:8b:e5:bb:9f:3d:14:77:42:2d:15:7a:3b:81: 59:f3:f0:88:32:e6:72:83:e3:fa:57:5a:2e:e9:7b:80:ce:bc: ce:58:f9:c9:de:a9:f9:b7:4d:1d:d3:1c:c9:03:16:b7:c6:ad: d7:52:d1:a7:31:f5:a6:64:18:10:09:d7:5d:5d:10:0f:a9:73: 44:12:d5:20:9c:37:f4:a6:9f:f4:ba:d9:41:16:e9:c3:fd:0e: 47:30:27:f7:18:f0:d3:06:49:3c:ac:84:73:ed:d8:a5:e5:60: b1:2f:31:18:d8:a2:4f:b8:50:79:a1:b1:40:66:63:44:75:57: b9:68:9f:73:52:2b:60:bf:e2:18:73:19:49:12:fb:57:7d:2e: c5:5e:d0:c4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUbj7QLgv3yXo5uaa5gumfqip4BGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDkxNjI4MjZaFw0yNjEyMDgxNjMzMjZaMDMxMTAvBgNV BAMTKDRCNUI2QzVBQUVBRDU5M0QzODcyNzk4OTE4ODI2QkM3QjI3Mzc4ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgS0hB5Ljp9su1vJgTzO3TNgJ6 zqp9cjsu/ktQxEz6wYfB9VQALevSfKYApfgBWwPYHvipHO6sdVkBaRSx/B9GQ2pd MgWfYp3xVu27nhWb09GVvwiXLdAGFtvNuGdeZuPtc+FB+ACHqbf1hXQWm9R4ckFX L7QAAzQtkMr5peTEfqIQpfBzARj1r5V54MjBTijiuedZhlD9RUjv8tmrw5hbHsfc PrqhMVarsXjWqS7VlhIIbwWNV9dSHSn/Cef56EAtBZq7trFlUWDvkVbt4JWb03vx qwmxglox+EMYf69IqyBPNU0SkiMwlHjikIvHJwwXLmYQc/5QcEXw6wbjsnLzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUS1tsWq6tWT04cnmJGIJrx7JzeIkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcYwDQYJKoZIhvcNAQELBQADggEBAA7w+SUjN6znKh9RWl5ZOPgHfASnehx9 vJ414CHevCSw9zn3lemvYJrSPQaXT+oDIIOFboVW13g2wxJIEtTzKRCXVPiaaJyl mbj5BQEbWIOIARdkakjNNvKYR7FA7Ws8LJMFMu0oN1UDpynvRr0LyKloi+W7nz0U d0ItFXo7gVnz8Igy5nKD4/pXWi7pe4DOvM5Y+cneqfm3TR3THMkDFrfGrddS0acx 9aZkGBAJ111dEA+pc0QS1SCcN/Smn/S62UEW6cP9DkcwJ/cY8NMGSTyshHPt2KXl YLEvMRjYok+4UHmhsUBmY0R1V7lon3NSK2C/4hhzGUkS+1d9LsVe0MQ= -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:02 2025 by rpki-client