This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa File: 3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa (raw, json) Hash identifier: zN3mPZ0x89lgwVOuxkcs6xoWmX1eOVA8AJNKlYRYZPA= Subject key identifier: 9D:D1:7E:44:5C:CE:E6:19:2E:16:F2:7E:AC:75:B6:5C:A4:0E:76:52 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 79358041E0CE5C90449EDF8D37139E419D7A7680 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa Signing time: Mon 10 Nov 2025 13:55:37 +0000 ROA not before: Mon 10 Nov 2025 13:50:37 +0000 ROA not after: Mon 09 Nov 2026 13:55:37 +0000 asID: 39855 IP address blocks: 147.125.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:35:80:41:e0:ce:5c:90:44:9e:df:8d:37:13:9e:41:9d:7a:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 10 13:50:37 2025 GMT Not After : Nov 9 13:55:37 2026 GMT Subject: CN=9DD17E445CCEE6192E16F27EAC75B65CA40E7652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:8f:eb:dc:62:f8:31:4f:22:0b:e1:68:e5: 8d:60:b9:3e:c4:c3:96:ed:c7:b5:bc:d7:ff:fd:de: 51:b2:be:30:19:b4:a9:08:d4:4b:00:03:38:4e:1a: 8e:34:4a:ab:b3:04:2f:23:2c:2c:28:e7:f6:ce:0e: 62:4f:f5:8a:bd:bb:e2:b3:f5:7c:a6:f8:86:d3:d0: 34:21:51:37:2a:59:07:61:d2:36:c9:c3:d2:cc:e6: 5e:7c:64:8e:fd:46:ec:77:50:49:0e:2b:c5:af:85: a1:6c:b6:53:58:0d:41:7a:d3:a2:3d:22:ef:92:c1: 41:9d:ff:30:6b:56:7f:00:0b:c1:1e:73:b7:b0:c7: 50:06:20:28:0d:fc:98:97:24:62:26:96:ca:38:82: 90:b1:05:c7:fe:32:bb:73:a5:31:e7:ed:0a:b7:dd: 2d:d0:77:81:da:0f:3c:3d:81:83:66:85:e3:31:92: 7d:c7:51:e7:19:e0:79:01:2c:df:ca:ad:f0:32:c4: 4c:55:f0:be:19:80:6e:b8:40:e5:9c:c2:d1:83:e7: d2:90:9a:d1:90:a1:5b:81:eb:74:23:69:e6:50:40: c5:ee:92:47:1e:e5:d3:d6:43:8f:0e:86:5a:70:ce: 5f:6b:27:64:4b:48:a1:34:73:28:a9:25:47:7f:d8: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:7E:44:5C:CE:E6:19:2E:16:F2:7E:AC:75:B6:5C:A4:0E:76:52 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230322e302f32342d3234203d3e203339383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.202.0/24 Signature Algorithm: sha256WithRSAEncryption 34:91:74:68:dd:fb:9d:b7:81:46:54:ef:3e:95:d6:03:3a:d4: 53:16:16:92:53:12:fb:e2:d8:a0:00:64:38:bf:fe:45:96:c8: ad:ec:c9:0e:56:66:c1:c9:07:33:db:a3:61:d1:7d:98:c8:e5: 9e:65:93:91:e0:3f:8c:d9:27:57:64:9c:a6:35:35:57:a2:32: 31:f4:03:93:d5:a8:7f:d1:12:a0:ae:3e:ed:02:78:47:bd:65: 01:05:f4:36:33:f7:b3:4a:7f:15:89:fe:82:a6:82:a0:0e:0c: 97:25:cc:00:08:fa:8c:5e:62:8f:70:91:22:41:68:2f:2e:4d: 2f:db:c5:d7:53:88:22:f5:73:55:cd:9e:61:99:c6:f3:c2:40: 97:e5:15:a1:4d:2f:bb:d8:96:9d:82:80:5d:0a:1f:ac:7c:2e: 66:94:e3:94:ec:65:a9:36:7c:ff:94:a7:e9:ef:a5:e2:b2:2e: 53:71:1d:d3:68:2f:96:02:aa:89:3f:d1:b7:6f:d7:7c:e2:37: 24:bc:ec:23:c9:ab:4e:c1:be:cd:cc:74:3a:9b:b3:05:b8:2d: 94:22:ec:5e:3c:d5:45:ff:8b:c5:9d:dd:43:45:ed:5c:89:53: 10:06:d1:27:34:45:7d:1f:15:32:0f:94:12:0f:76:b4:47:89: 59:39:9a:c8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUeTWAQeDOXJBEnt+NNxOeQZ16doAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTAxMzUwMzdaFw0yNjExMDkxMzU1MzdaMDMxMTAvBgNV BAMTKDlERDE3RTQ0NUNDRUU2MTkyRTE2RjI3RUFDNzVCNjVDQTQwRTc2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D4/r3GL4MU8iC+Fo5Y1guT7E w5btx7W81//93lGyvjAZtKkI1EsAAzhOGo40SquzBC8jLCwo5/bODmJP9Yq9u+Kz 9Xym+IbT0DQhUTcqWQdh0jbJw9LM5l58ZI79Rux3UEkOK8WvhaFstlNYDUF606I9 Iu+SwUGd/zBrVn8AC8Eec7ewx1AGICgN/JiXJGImlso4gpCxBcf+MrtzpTHn7Qq3 3S3Qd4HaDzw9gYNmheMxkn3HUecZ4HkBLN/KrfAyxExV8L4ZgG64QOWcwtGD59KQ mtGQoVuB63QjaeZQQMXukkce5dPWQ48Ohlpwzl9rJ2RLSKE0cyipJUd/2BgzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUndF+RFzO5hkuFvJ+rHW2XKQOdlIwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzODM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcowDQYJKoZIhvcNAQELBQADggEBADSRdGjd+523gUZU7z6V1gM61FMWFpJT Evvi2KAAZDi//kWWyK3syQ5WZsHJBzPbo2HRfZjI5Z5lk5HgP4zZJ1dknKY1NVei MjH0A5PVqH/REqCuPu0CeEe9ZQEF9DYz97NKfxWJ/oKmgqAODJclzAAI+oxeYo9w kSJBaC8uTS/bxddTiCL1c1XNnmGZxvPCQJflFaFNL7vYlp2CgF0KH6x8LmaU45Ts Zak2fP+Up+nvpeKyLlNxHdNoL5YCqok/0bdv13ziNyS87CPJq07Bvs3MdDqbswW4 LZQi7F481UX/i8Wd3UNF7VyJUxAG0Sc0RX0fFTIPlBIPdrRHiVk5msg= -----END CERTIFICATE-----Generated at Fri Dec 5 15:20:25 2025 by rpki-client