This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230312e302f32342d3234203d3e203339383535.roa File: 3134372e3132352e3230312e302f32342d3234203d3e203339383535.roa (raw, json) Hash identifier: 5/0eweWOOYPZ57VoEqueDKnzBEGBBuPykXwTmGOaCTg= Subject key identifier: F6:47:92:A9:C2:76:09:27:EA:D3:78:78:14:8F:84:50:91:1C:84:C9 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2CD49276AA210C03C89FDEA16489E4511A68D544 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230312e302f32342d3234203d3e203339383535.roa Signing time: Mon 10 Nov 2025 13:55:37 +0000 ROA not before: Mon 10 Nov 2025 13:50:37 +0000 ROA not after: Mon 09 Nov 2026 13:55:37 +0000 asID: 39855 IP address blocks: 147.125.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d4:92:76:aa:21:0c:03:c8:9f:de:a1:64:89:e4:51:1a:68:d5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 10 13:50:37 2025 GMT Not After : Nov 9 13:55:37 2026 GMT Subject: CN=F64792A9C2760927EAD37878148F8450911C84C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:aa:a6:9a:0b:da:02:bc:5f:03:cb:7b:a4: a5:f6:62:97:e5:8f:8e:ee:4d:a1:4f:6b:ba:cd:d5: 07:3d:67:a3:f0:8b:24:94:0d:e3:c2:bf:bf:14:ad: 4c:48:98:25:35:18:df:62:78:2a:f5:ac:69:33:10: 73:3e:b9:90:36:c9:77:a6:12:93:cd:b8:b2:4a:00: 32:2f:d7:80:cb:94:48:27:36:0d:74:bf:39:3a:c3: 29:f8:8d:c7:a4:f9:b5:88:c5:ff:25:db:d5:e7:4f: c5:64:ad:e7:e1:5c:7d:b3:9d:1f:16:32:a4:33:47: 97:a7:af:5b:40:8d:53:33:30:1c:e2:69:b3:11:c2: 2e:b8:6f:dc:f7:c2:71:47:eb:d8:cc:13:2d:2a:d0: 80:af:2a:c5:b6:a7:37:5c:f5:58:41:d0:35:40:c2: 26:8a:3a:0d:24:2c:62:ca:8b:fe:bc:0c:01:91:10: 08:94:c9:79:6d:26:f8:f0:20:10:0f:ff:85:77:4a: 63:ad:4e:f2:4d:c9:68:34:c3:2b:5a:94:49:a0:1a: 61:f1:9b:da:87:c6:ee:e2:4f:a0:82:82:41:1d:93: 92:9a:fa:32:77:93:17:89:ec:99:b7:35:65:7a:06: d0:bf:ec:e4:40:10:71:98:e1:9f:be:25:2d:e9:13: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:47:92:A9:C2:76:09:27:EA:D3:78:78:14:8F:84:50:91:1C:84:C9 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230312e302f32342d3234203d3e203339383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.201.0/24 Signature Algorithm: sha256WithRSAEncryption 11:2e:9f:7d:6f:d7:c0:79:af:9c:0e:d8:75:1a:47:47:b2:36: 62:f2:01:8c:a9:01:87:4c:ec:1f:1e:88:10:6c:48:9d:c0:7c: e0:14:0c:1e:61:6c:9e:12:8e:34:54:53:3b:ad:7a:03:dd:9e: 39:cc:90:93:90:a8:27:38:35:70:69:8a:84:9a:fa:46:35:59: fd:c2:0b:ce:a2:b7:e0:3c:b7:1d:39:ee:80:83:fa:4f:d7:c3: 7b:94:71:a7:ff:d5:6c:62:94:dc:9f:c6:19:a6:72:32:2e:16: 02:53:e8:89:2c:3b:be:a0:ae:a8:11:13:df:cb:87:ea:ee:14: 63:19:81:05:6d:7c:b9:98:a6:ce:47:27:ca:aa:da:79:db:c6: aa:95:e0:a2:e1:99:3b:d6:e5:17:09:cd:bf:08:aa:e5:e5:b3: 74:a9:af:00:cf:7b:d3:19:42:e1:0f:48:31:23:2e:12:a3:ed: 96:7b:bf:16:27:77:65:95:ab:94:c4:5e:67:98:cc:3a:a4:a5: ff:aa:d0:d5:90:ea:e1:c9:eb:9a:a7:f2:73:1c:f4:6b:c6:28: 6e:2b:4b:eb:8f:06:d7:9f:e7:5d:2b:ce:8b:57:fc:b3:bb:12: 84:dd:88:a1:93:14:ac:f1:f0:21:4b:52:7b:54:c4:e0:7e:e1: 2c:21:91:4f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIULNSSdqohDAPIn96hZInkURpo1UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTAxMzUwMzdaFw0yNjExMDkxMzU1MzdaMDMxMTAvBgNV BAMTKEY2NDc5MkE5QzI3NjA5MjdFQUQzNzg3ODE0OEY4NDUwOTExQzg0QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JqqmmgvaArxfA8t7pKX2Ypfl j47uTaFPa7rN1Qc9Z6PwiySUDePCv78UrUxImCU1GN9ieCr1rGkzEHM+uZA2yXem EpPNuLJKADIv14DLlEgnNg10vzk6wyn4jcek+bWIxf8l29XnT8VkrefhXH2znR8W MqQzR5enr1tAjVMzMBziabMRwi64b9z3wnFH69jMEy0q0ICvKsW2pzdc9VhB0DVA wiaKOg0kLGLKi/68DAGREAiUyXltJvjwIBAP/4V3SmOtTvJNyWg0wytalEmgGmHx m9qHxu7iT6CCgkEdk5Ka+jJ3kxeJ7Jm3NWV6BtC/7ORAEHGY4Z++JS3pE9lHAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU9keSqcJ2CSfq03h4FI+EUJEchMkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfckwDQYJKoZIhvcNAQELBQADggEBABEun31v18B5r5wO2HUaR0eyNmLyAYyp AYdM7B8eiBBsSJ3AfOAUDB5hbJ4SjjRUUzutegPdnjnMkJOQqCc4NXBpioSa+kY1 Wf3CC86it+A8tx057oCD+k/Xw3uUcaf/1WxilNyfxhmmcjIuFgJT6IksO76grqgR E9/Lh+ruFGMZgQVtfLmYps5HJ8qq2nnbxqqV4KLhmTvW5RcJzb8IquXls3SprwDP e9MZQuEPSDEjLhKj7ZZ7vxYnd2WVq5TEXmeYzDqkpf+q0NWQ6uHJ65qn8nMc9GvG KG4rS+uPBtef510rzotX/LO7EoTdiKGTFKzx8CFLUntUxOB+4SwhkU8= -----END CERTIFICATE-----Generated at Fri Dec 5 15:20:25 2025 by rpki-client