This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3139392e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: y/hwZ6AeDSsmTAbq1/OVd0406Ux/UqUKHX8gEYDoZz0= Subject key identifier: DE:2B:24:7C:7F:FD:6E:E5:75:A5:41:61:8E:9D:74:7A:A6:E9:64:C4 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1CD96093CCD68C82771E88F855E3E825F0467AAA Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:09:10 +0000 ROA not before: Mon 24 Nov 2025 17:04:10 +0000 ROA not after: Mon 23 Nov 2026 17:09:10 +0000 asID: 20473 IP address blocks: 147.125.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d9:60:93:cc:d6:8c:82:77:1e:88:f8:55:e3:e8:25:f0:46:7a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:04:10 2025 GMT Not After : Nov 23 17:09:10 2026 GMT Subject: CN=DE2B247C7FFD6EE575A541618E9D747AA6E964C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:d4:af:df:2f:24:5d:5a:19:51:3d:ce:45: 13:a9:6d:e7:7c:85:45:c7:38:51:22:64:f3:7f:3f: f0:1b:da:01:25:11:47:b0:19:20:e9:04:b2:2d:b3: f7:ad:83:e6:64:12:e4:5a:da:33:33:45:c3:44:b4: 0c:fe:44:96:ad:e3:27:8b:e3:79:06:0e:43:7d:9f: 31:6f:a8:63:eb:57:94:23:5d:ed:a2:25:b6:1e:fd: 3e:30:0e:44:e1:e6:e1:de:ad:cb:ce:93:62:b9:63: d2:ed:be:eb:2c:7d:d7:c3:96:2f:ed:09:06:50:be: 8c:b1:9d:47:e7:e0:2c:a0:ed:1b:01:d8:ed:f2:26: d5:cf:61:15:8b:b0:bf:40:fe:dd:6d:7c:95:74:bd: 32:4f:8e:a5:93:cc:56:dd:55:c1:fe:48:37:0c:f8: 41:2d:f8:ce:ce:ba:d4:62:21:bd:9c:31:a9:78:ed: d9:b3:fc:76:52:00:25:fa:31:fe:cf:e2:61:27:ce: 1a:3c:c0:fa:b9:75:d9:79:e5:dd:c8:e7:08:b8:3a: f0:66:a8:94:96:94:9e:46:03:07:3e:c1:5f:26:fa: b5:16:67:0a:bb:54:67:f0:3e:72:65:91:5c:05:0d: 6a:22:4d:e9:fd:49:45:09:82:06:d5:97:a9:1c:82: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2B:24:7C:7F:FD:6E:E5:75:A5:41:61:8E:9D:74:7A:A6:E9:64:C4 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.199.0/24 Signature Algorithm: sha256WithRSAEncryption 34:89:b3:7a:0f:66:c6:30:20:51:6c:ec:5f:cf:6e:97:66:8c: ff:fb:90:bd:c8:b8:1b:7a:bb:70:83:43:4b:63:d5:e8:2c:dc: 0a:37:e0:a3:64:ab:62:28:be:d8:c2:46:f8:89:8c:ad:8b:90: d6:bc:d4:70:3a:e5:2b:08:0f:31:06:3a:16:19:99:13:5f:13: ae:60:21:a2:96:a8:cb:91:25:21:0a:c6:2b:36:98:d1:95:39: d8:93:19:b3:de:64:5d:97:d0:8d:11:b6:05:9a:58:cf:95:27: 97:2d:c8:10:7d:2f:94:f1:4a:67:f1:b6:2b:ec:a8:68:11:29: f5:29:a6:a4:bd:9c:22:5e:61:3c:72:3a:ec:d0:98:34:d8:eb: 74:f2:fd:47:71:44:7b:e5:25:1e:2b:7e:57:e3:3a:90:60:15: 9d:25:ea:e3:06:c8:e1:76:db:a0:68:64:95:5b:06:a1:5a:9f: 4c:88:33:85:43:58:08:49:89:12:9f:3f:09:19:6d:6b:64:d6: a3:79:c0:7c:c4:21:16:87:12:f1:ce:ed:52:97:72:c8:9d:9d: 9c:08:69:43:8c:63:52:be:35:d2:51:9f:13:1b:35:ed:eb:a0: f1:b2:80:b7:08:08:20:4c:58:69:67:33:95:08:72:25:17:0f: a8:9f:db:aa -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUHNlgk8zWjIJ3Hoj4VePoJfBGeqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzA0MTBaFw0yNjExMjMxNzA5MTBaMDMxMTAvBgNV BAMTKERFMkIyNDdDN0ZGRDZFRTU3NUE1NDE2MThFOUQ3NDdBQTZFOTY0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYtSv3y8kXVoZUT3ORROpbed8 hUXHOFEiZPN/P/Ab2gElEUewGSDpBLIts/etg+ZkEuRa2jMzRcNEtAz+RJat4yeL 43kGDkN9nzFvqGPrV5QjXe2iJbYe/T4wDkTh5uHercvOk2K5Y9LtvussfdfDli/t CQZQvoyxnUfn4Cyg7RsB2O3yJtXPYRWLsL9A/t1tfJV0vTJPjqWTzFbdVcH+SDcM +EEt+M7OutRiIb2cMal47dmz/HZSACX6Mf7P4mEnzho8wPq5ddl55d3I5wi4OvBm qJSWlJ5GAwc+wV8m+rUWZwq7VGfwPnJlkVwFDWoiTen9SUUJggbVl6kcgmbhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU3iskfH/9buV1pUFhjp10eqbpZMQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfccwDQYJKoZIhvcNAQELBQADggEBADSJs3oPZsYwIFFs7F/PbpdmjP/7kL3I uBt6u3CDQ0tj1egs3Ao34KNkq2IovtjCRviJjK2LkNa81HA65SsIDzEGOhYZmRNf E65gIaKWqMuRJSEKxis2mNGVOdiTGbPeZF2X0I0RtgWaWM+VJ5ctyBB9L5TxSmfx tivsqGgRKfUppqS9nCJeYTxyOuzQmDTY63Ty/UdxRHvlJR4rflfjOpBgFZ0l6uMG yOF226BoZJVbBqFan0yIM4VDWAhJiRKfPwkZbWtk1qN5wHzEIRaHEvHO7VKXcsid nZwIaUOMY1K+NdJRnxMbNe3roPGygLcICCBMWGlnM5UIciUXD6if26o= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:41 2025 by rpki-client