This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3230342e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: nfqVw47piuuTs3plAaA33XEfty7eF7pgpATq3M7VT7w= Subject key identifier: 61:58:3A:86:2F:15:EB:31:B2:FA:44:EA:49:BC:C4:E2:00:EE:3F:E1 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 770C996BC809669C1CB835E1B1787B4AE652E54A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:08:29 +0000 ROA not before: Mon 24 Nov 2025 17:03:29 +0000 ROA not after: Mon 23 Nov 2026 17:08:29 +0000 asID: 20473 IP address blocks: 147.125.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0c:99:6b:c8:09:66:9c:1c:b8:35:e1:b1:78:7b:4a:e6:52:e5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:03:29 2025 GMT Not After : Nov 23 17:08:29 2026 GMT Subject: CN=61583A862F15EB31B2FA44EA49BCC4E200EE3FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:38:40:ef:3f:b6:11:be:d5:25:10:fa:17: 1a:e7:62:97:54:cc:d7:fb:a0:7e:4e:a6:0c:41:f7: da:64:69:03:bc:a7:65:fc:1f:47:17:dd:90:15:69: 7c:7e:06:93:3f:68:98:ed:40:d1:6f:b1:77:4f:3a: 3a:39:47:38:70:09:34:43:54:ac:ab:aa:28:6c:ce: 0e:c2:5f:ab:5f:e3:e8:32:e0:32:cd:cf:b8:28:26: 9e:83:ef:b6:e8:74:6d:32:00:2c:c2:a7:76:49:e9: be:2b:03:81:1f:57:ef:80:b6:ec:b3:51:3b:6b:c3: 15:aa:51:a4:79:7c:53:10:e7:f3:70:f7:48:90:70: b7:60:21:92:17:16:dc:35:38:e6:1c:f1:ca:3f:12: d4:17:53:ca:b0:b6:3e:43:58:60:15:0d:23:c6:a7: ac:38:b3:d0:de:a7:fd:20:56:99:74:60:7c:22:78: a6:3e:3a:52:08:88:00:4a:c9:21:e0:ae:a9:e8:ee: 57:d4:e6:25:15:7b:3a:59:26:fc:01:ed:3c:70:b6: 41:89:11:09:27:fe:1f:5d:ba:f0:dc:99:30:bb:58: b7:83:d4:e0:5f:73:db:56:c1:3e:1e:20:17:be:3a: a6:55:d8:80:6f:3f:fc:8c:47:68:52:88:6f:b8:3e: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:3A:86:2F:15:EB:31:B2:FA:44:EA:49:BC:C4:E2:00:EE:3F:E1 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.204.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c2:95:d2:19:e8:e9:6e:63:13:a1:c1:a1:23:5a:cb:75:57: a1:a7:cd:ee:7a:16:8e:09:b4:e0:a2:64:d0:f6:3a:1b:60:d7: cb:f6:39:f0:63:49:28:0b:be:93:de:e6:72:3f:c1:c0:e3:99: 2d:38:8a:ee:6d:9d:2b:8a:1d:2d:68:cf:11:f4:33:4c:a6:9a: 7e:36:d5:89:73:40:c8:f2:d7:b9:ce:e6:1d:ef:dd:f2:94:9a: 5a:e2:7b:eb:4b:61:0a:ea:79:99:a2:45:cc:dd:8d:47:ba:ce: 60:cb:9a:52:24:49:a9:88:45:cb:30:3e:6b:a2:c7:c5:54:5a: d7:6e:6f:6a:35:cc:2e:7c:32:23:e0:d5:ae:d0:f4:95:11:d5: 3a:f0:17:af:14:58:bd:1c:20:68:26:7b:0f:b4:19:db:0c:1d: 8c:d3:f9:b1:24:d4:43:51:38:c1:90:37:0f:c8:fe:6f:36:f0: f3:9f:a9:63:14:03:b8:bc:21:ae:66:22:cb:c5:27:1d:05:e3: 82:53:91:fd:13:08:af:6e:0a:8c:bc:45:9d:aa:e4:45:2c:95: 00:99:10:f7:d8:05:26:f3:8c:b7:65:f2:5b:20:a9:92:27:6c: f6:55:79:a7:16:11:23:12:fc:c1:4f:32:ef:da:39:cf:03:3e: 01:94:74:73 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdwyZa8gJZpwcuDXhsXh7SuZS5UowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAzMjlaFw0yNjExMjMxNzA4MjlaMDMxMTAvBgNV BAMTKDYxNTgzQTg2MkYxNUVCMzFCMkZBNDRFQTQ5QkNDNEUyMDBFRTNGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NzhA7z+2Eb7VJRD6FxrnYpdU zNf7oH5OpgxB99pkaQO8p2X8H0cX3ZAVaXx+BpM/aJjtQNFvsXdPOjo5RzhwCTRD VKyrqihszg7CX6tf4+gy4DLNz7goJp6D77bodG0yACzCp3ZJ6b4rA4EfV++Atuyz UTtrwxWqUaR5fFMQ5/Nw90iQcLdgIZIXFtw1OOYc8co/EtQXU8qwtj5DWGAVDSPG p6w4s9Dep/0gVpl0YHwieKY+OlIIiABKySHgrqno7lfU5iUVezpZJvwB7TxwtkGJ EQkn/h9duvDcmTC7WLeD1OBfc9tWwT4eIBe+OqZV2IBvP/yMR2hSiG+4PuqbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUYVg6hi8V6zGy+kTqSbzE4gDuP+EwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcwwDQYJKoZIhvcNAQELBQADggEBAFfCldIZ6OluYxOhwaEjWst1V6Gnze56 Fo4JtOCiZND2Ohtg18v2OfBjSSgLvpPe5nI/wcDjmS04iu5tnSuKHS1ozxH0M0ym mn421YlzQMjy17nO5h3v3fKUmlrie+tLYQrqeZmiRczdjUe6zmDLmlIkSamIRcsw Pmuix8VUWtdub2o1zC58MiPg1a7Q9JUR1TrwF68UWL0cIGgmew+0GdsMHYzT+bEk 1ENROMGQNw/I/m828POfqWMUA7i8Ia5mIsvFJx0F44JTkf0TCK9uCoy8RZ2q5EUs lQCZEPfYBSbzjLdl8lsgqZInbPZVeacWESMS/MFPMu/aOc8DPgGUdHM= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:43 2025 by rpki-client