This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa File: 3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa (raw, json) Hash identifier: qkOqNd0iG+3YUipQRPxBLc4Z29sEiUxBGex/4L3cGqc= Subject key identifier: 2D:02:45:1E:EE:5C:9D:D8:06:5E:D5:5E:6C:90:0B:63:89:4E:BB:87 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 3372C3F702D6D99DF8503FC02E6FACF6ED373DEA Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa Signing time: Mon 10 Nov 2025 13:55:35 +0000 ROA not before: Mon 10 Nov 2025 13:50:35 +0000 ROA not after: Mon 09 Nov 2026 13:55:35 +0000 asID: 39855 IP address blocks: 147.125.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:72:c3:f7:02:d6:d9:9d:f8:50:3f:c0:2e:6f:ac:f6:ed:37:3d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 10 13:50:35 2025 GMT Not After : Nov 9 13:55:35 2026 GMT Subject: CN=2D02451EEE5C9DD8065ED55E6C900B63894EBB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:23:89:99:96:21:6f:07:f1:de:bb:8b:ff: da:0a:9b:e8:78:73:87:3d:de:5d:76:25:6b:9d:07: 7d:90:4c:23:ee:ab:f6:55:e0:89:db:0e:4e:51:33: 09:3c:2c:9b:5f:ac:00:e4:e9:57:32:fb:92:5b:3b: c0:01:0f:a3:f5:6f:e0:c7:65:70:4f:bb:1e:04:1c: 30:a2:10:c5:fd:5a:15:df:83:50:45:c0:7e:c3:73: d9:3b:12:12:a2:7d:80:59:7a:13:11:9a:50:f2:fe: 9e:e9:69:e6:16:65:51:65:5c:a7:15:14:e4:65:63: d4:80:f9:ae:1d:7b:77:ee:d5:95:7f:1e:e9:13:00: 77:e1:bc:26:8b:58:64:36:dc:fc:1b:d4:c8:82:f7: 97:80:b4:3a:a0:b5:59:04:99:67:5d:a2:9a:8d:48: 09:6e:ed:8d:31:54:ba:ba:48:8a:fa:a9:fc:3e:56: 24:df:e5:a9:89:1a:e7:51:16:5e:34:4b:95:8b:70: 88:64:b5:01:52:c1:23:a4:a3:05:20:0e:99:4b:37: 50:a6:3f:77:d7:fa:f0:0d:93:cb:61:09:26:64:1b: 85:a4:9b:c7:d6:10:14:45:4c:18:a9:af:44:2c:e2: 9e:3f:ae:15:63:54:28:37:cf:86:df:08:48:50:c5: 4b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:02:45:1E:EE:5C:9D:D8:06:5E:D5:5E:6C:90:0B:63:89:4E:BB:87 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230302e302f32342d3234203d3e203339383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.200.0/24 Signature Algorithm: sha256WithRSAEncryption a6:3f:26:89:b9:90:81:2d:6e:e4:32:9e:0a:a9:4e:58:86:7f: d8:ab:c0:b3:19:54:4f:78:85:a2:b4:94:10:88:3b:9a:fb:f3: 76:7b:3a:69:f7:b0:53:46:23:70:85:d6:21:69:64:64:17:87: ce:bd:1a:3f:42:fb:7e:91:91:57:ed:00:69:37:43:17:17:c7: 48:f1:dc:59:15:58:27:60:0e:45:0c:6b:a0:ec:02:65:a9:56: 22:3a:3c:53:d1:37:73:f8:82:f1:b7:a0:65:ac:b2:2b:46:34: 1e:ec:3f:96:05:77:b2:2d:35:3f:ac:fd:35:d0:99:b4:c7:5e: d5:b2:93:81:ae:da:ae:81:ef:99:80:a4:be:3e:a3:e6:2a:3b: ea:b1:3e:c3:c3:f1:8e:78:58:02:fd:04:d4:8e:cd:a9:16:24: f7:ea:74:55:62:dc:e9:07:55:85:72:b0:f8:79:51:5d:d4:40: 36:37:6b:87:c0:a8:f5:ae:a1:cd:b1:c3:3f:0f:79:fc:7e:45: de:0e:5a:02:3f:1f:75:cd:aa:ad:cc:33:f4:5b:d3:25:4f:29: 28:e6:99:b9:3b:f4:57:49:0a:9b:c2:bf:af:20:ba:58:1c:49: 49:fe:34:ec:90:39:92:aa:f2:3e:36:11:77:ce:b0:a1:05:ea: 9f:84:77:4a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUM3LD9wLW2Z34UD/ALm+s9u03PeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTAxMzUwMzVaFw0yNjExMDkxMzU1MzVaMDMxMTAvBgNV BAMTKDJEMDI0NTFFRUU1QzlERDgwNjVFRDU1RTZDOTAwQjYzODk0RUJCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KiOJmZYhbwfx3ruL/9oKm+h4 c4c93l12JWudB32QTCPuq/ZV4InbDk5RMwk8LJtfrADk6Vcy+5JbO8ABD6P1b+DH ZXBPux4EHDCiEMX9WhXfg1BFwH7Dc9k7EhKifYBZehMRmlDy/p7paeYWZVFlXKcV FORlY9SA+a4de3fu1ZV/HukTAHfhvCaLWGQ23Pwb1MiC95eAtDqgtVkEmWddopqN SAlu7Y0xVLq6SIr6qfw+ViTf5amJGudRFl40S5WLcIhktQFSwSOkowUgDplLN1Cm P3fX+vANk8thCSZkG4Wkm8fWEBRFTBipr0Qs4p4/rhVjVCg3z4bfCEhQxUvdAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQULQJFHu5cndgGXtVebJALY4lOu4cwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcgwDQYJKoZIhvcNAQELBQADggEBAKY/Jom5kIEtbuQyngqpTliGf9irwLMZ VE94haK0lBCIO5r783Z7Omn3sFNGI3CF1iFpZGQXh869Gj9C+36RkVftAGk3QxcX x0jx3FkVWCdgDkUMa6DsAmWpViI6PFPRN3P4gvG3oGWssitGNB7sP5YFd7ItNT+s /TXQmbTHXtWyk4Gu2q6B75mApL4+o+YqO+qxPsPD8Y54WAL9BNSOzakWJPfqdFVi 3OkHVYVysPh5UV3UQDY3a4fAqPWuoc2xwz8Pefx+Rd4OWgI/H3XNqq3MM/Rb0yVP KSjmmbk79FdJCpvCv68gulgcSUn+NOyQOZKq8j42EXfOsKEF6p+Ed0o= -----END CERTIFICATE-----Generated at Fri Dec 5 15:20:36 2025 by rpki-client