This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3139382e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: n4nElgez7cCfnS/8fXbrBVem1x/LirobPIsdiJkkqyQ= Subject key identifier: F2:28:3B:D0:4F:2E:13:17:1A:51:4F:44:51:4C:DA:1B:A3:A3:81:E7 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1E0D0C881ABBF836368B6F3D7271C4053E67546E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:09:22 +0000 ROA not before: Mon 24 Nov 2025 17:04:22 +0000 ROA not after: Mon 23 Nov 2026 17:09:22 +0000 asID: 20473 IP address blocks: 147.125.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:0d:0c:88:1a:bb:f8:36:36:8b:6f:3d:72:71:c4:05:3e:67:54:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:04:22 2025 GMT Not After : Nov 23 17:09:22 2026 GMT Subject: CN=F2283BD04F2E13171A514F44514CDA1BA3A381E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:c3:87:14:51:61:48:ed:90:1c:ae:af:f9: 14:a2:d5:e4:65:1d:79:6d:d1:f8:f7:0b:5d:b0:24: 7d:4a:fc:00:23:80:81:8a:f4:b6:af:5d:c0:0a:f4: 85:c7:27:ea:70:7f:4e:35:74:e7:4b:f1:20:a0:e3: 6a:11:ef:55:50:50:e0:c1:aa:0a:07:5f:3c:66:5c: 13:6d:8c:68:74:4b:90:f9:13:f1:19:67:72:89:86: 80:70:7d:ad:d0:40:a6:87:a5:8d:40:42:67:f1:fa: b8:41:8a:67:7f:14:20:59:7e:45:9a:fd:6a:d8:a1: 7e:ef:20:60:59:9b:05:82:61:de:16:09:c5:b2:05: 8d:9e:bb:f9:90:87:d5:2b:aa:f8:e0:40:27:dd:97: 61:9d:48:98:0b:a4:0a:07:f3:54:13:af:45:17:30: 8f:e1:8a:64:cc:02:6c:73:96:fb:8d:5d:f9:2f:d4: f6:b1:cc:83:aa:33:e0:be:5c:79:0e:d4:e3:12:bd: f5:ce:ee:6d:9c:de:fe:00:69:ab:ca:43:e9:f5:fe: 15:43:f9:78:24:0b:40:14:7d:40:d0:5e:ee:b8:51: 98:50:1a:18:c7:4c:76:1a:38:b5:eb:d6:90:ba:c6: 94:0b:bc:b5:6b:15:e5:72:6a:51:ab:de:d8:1e:92: 32:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:28:3B:D0:4F:2E:13:17:1A:51:4F:44:51:4C:DA:1B:A3:A3:81:E7 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139382e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.198.0/24 Signature Algorithm: sha256WithRSAEncryption 43:c7:bc:f6:ce:92:67:4c:9c:9c:96:43:4e:0d:86:04:7a:3a: 27:e8:0d:18:f9:21:07:43:fe:e2:9c:c1:49:27:86:09:e1:c0: cb:ee:65:2e:51:10:c2:00:02:5b:d9:1c:fc:e7:c0:86:3d:39: cb:87:92:25:16:de:13:3c:a4:25:f5:65:4e:78:ae:cb:16:e8: e2:4f:51:5e:19:b7:3c:f5:ca:23:cd:ad:96:4d:fd:d8:55:a1: 16:ed:75:e8:48:f2:51:66:3f:5d:b3:d1:1e:2a:2c:e3:a4:fe: 92:24:61:a7:c8:11:93:5e:db:05:82:ff:a3:40:f0:b9:aa:e2: 64:67:54:bb:91:dc:6f:f2:70:0b:db:2f:7a:44:af:9e:24:fe: 8f:09:39:0c:f4:20:c0:c0:b0:5b:3b:27:e3:d8:e4:9a:cb:2f: fa:dc:06:4f:da:65:26:de:f2:52:93:be:bb:aa:af:b8:88:95: 03:85:6a:a1:26:a1:58:99:f3:e4:6b:43:c6:21:f3:fa:a7:d2: 9e:55:f2:35:61:ba:0d:7b:76:91:63:91:cd:74:66:67:e7:79: 0f:df:02:c6:35:27:ed:d5:4a:7a:46:3c:da:d6:55:2a:74:15: 32:57:fd:46:f1:98:f3:df:fc:20:79:4a:55:3f:8a:84:30:41: 5b:fd:21:19 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUHg0MiBq7+DY2i289cnHEBT5nVG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzA0MjJaFw0yNjExMjMxNzA5MjJaMDMxMTAvBgNV BAMTKEYyMjgzQkQwNEYyRTEzMTcxQTUxNEY0NDUxNENEQTFCQTNBMzgxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSd8OHFFFhSO2QHK6v+RSi1eRl HXlt0fj3C12wJH1K/AAjgIGK9LavXcAK9IXHJ+pwf041dOdL8SCg42oR71VQUODB qgoHXzxmXBNtjGh0S5D5E/EZZ3KJhoBwfa3QQKaHpY1AQmfx+rhBimd/FCBZfkWa /WrYoX7vIGBZmwWCYd4WCcWyBY2eu/mQh9UrqvjgQCfdl2GdSJgLpAoH81QTr0UX MI/himTMAmxzlvuNXfkv1PaxzIOqM+C+XHkO1OMSvfXO7m2c3v4AaavKQ+n1/hVD +XgkC0AUfUDQXu64UZhQGhjHTHYaOLXr1pC6xpQLvLVrFeVyalGr3tgekjKvAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU8ig70E8uExcaUU9EUUzaG6OjgecwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcYwDQYJKoZIhvcNAQELBQADggEBAEPHvPbOkmdMnJyWQ04NhgR6OifoDRj5 IQdD/uKcwUknhgnhwMvuZS5REMIAAlvZHPznwIY9OcuHkiUW3hM8pCX1ZU54rssW 6OJPUV4Ztzz1yiPNrZZN/dhVoRbtdehI8lFmP12z0R4qLOOk/pIkYafIEZNe2wWC /6NA8Lmq4mRnVLuR3G/ycAvbL3pEr54k/o8JOQz0IMDAsFs7J+PY5JrLL/rcBk/a ZSbe8lKTvruqr7iIlQOFaqEmoViZ8+RrQ8Yh8/qn0p5V8jVhug17dpFjkc10Zmfn eQ/fAsY1J+3VSnpGPNrWVSp0FTJX/UbxmPPf/CB5SlU/ioQwQVv9IRk= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:41 2025 by rpki-client