This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20323135313532.roa File: 3134372e3132352e3230342e302f32342d3234203d3e20323135313532.roa (raw, json) Hash identifier: 1LbBkLCPW9ziSWpj3D+g/qX9KnbqKQp5aPJu9odSutQ= Subject key identifier: 26:AB:F4:25:5A:05:FC:E1:88:E4:06:1E:44:A5:26:B1:C7:99:03:5C Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 35A0A303A3B68B46B7CBEBCF4E2EFE254B491F79 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20323135313532.roa Signing time: Mon 05 Jan 2026 03:42:11 +0000 ROA not before: Mon 05 Jan 2026 03:37:11 +0000 ROA not after: Mon 04 Jan 2027 03:42:11 +0000 asID: 215152 IP address blocks: 147.125.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a0:a3:03:a3:b6:8b:46:b7:cb:eb:cf:4e:2e:fe:25:4b:49:1f:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 5 03:37:11 2026 GMT Not After : Jan 4 03:42:11 2027 GMT Subject: CN=26ABF4255A05FCE188E4061E44A526B1C799035C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1c:75:a7:4b:de:6d:6b:f1:1a:00:5a:df:24: c8:f1:01:f1:4e:9d:fe:de:62:c3:24:3c:56:18:52: cd:9b:a8:fb:75:8c:72:68:5f:2f:76:c0:e6:f2:ef: 99:a1:07:2a:73:11:72:a8:b2:96:6b:9e:d3:38:3e: d2:72:86:aa:87:98:1d:3f:a6:2c:c9:5c:dd:53:4a: 11:95:cc:f3:a8:23:d4:76:70:9d:9b:38:66:19:96: a8:02:76:f3:86:bd:80:fe:76:87:76:5c:fe:b9:df: 75:62:36:5e:25:c3:9e:b5:22:6a:2f:b1:65:83:88: 6e:da:4a:09:64:d6:72:bc:23:af:a2:07:10:bd:6b: d8:e1:1e:b9:76:1a:e7:61:23:8a:46:75:9e:15:57: 63:62:d3:6b:bc:18:8c:b8:4d:0b:d0:45:8d:9e:bb: 8f:70:48:b1:c7:5f:fd:fd:a9:a6:f2:b0:3d:72:dc: 15:0f:74:f8:80:33:1e:07:ee:52:c4:fb:4b:69:99: 2c:78:50:59:a8:f6:85:82:1a:b3:52:19:75:79:e1: 96:0f:0b:2f:bc:60:02:55:24:98:83:18:cc:5b:8b: 9b:85:08:31:97:1d:08:1b:3a:82:66:10:be:4f:74: d5:0e:5c:66:0e:6d:d9:88:5a:1f:d1:7d:0d:7f:09: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AB:F4:25:5A:05:FC:E1:88:E4:06:1E:44:A5:26:B1:C7:99:03:5C X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20323135313532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.204.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:06:76:03:55:d3:f4:c0:22:44:1f:d0:e8:5c:ba:d1:00:b2: c6:2e:b3:6d:39:35:ae:3f:1f:6b:e6:36:44:3c:f3:6c:80:4e: 37:5f:68:d6:12:77:34:4a:33:a4:34:a5:d6:94:10:26:99:2e: 10:20:32:ab:0c:88:ae:b4:b5:21:94:78:b3:5c:1e:08:a1:6b: 53:f3:de:77:35:8a:d5:37:bd:bf:c7:43:d7:79:dd:da:8f:2d: 95:41:37:41:fd:72:f2:aa:38:ca:ab:9b:ae:17:3c:16:b8:c4: ac:f7:16:e6:02:59:1a:8c:bc:b7:d3:59:38:8c:08:9f:b0:e5: 6b:de:96:8a:a9:33:4b:24:e7:3c:b9:c8:eb:13:39:74:ce:bf: 63:c9:e7:6d:69:b4:c0:99:57:84:1e:82:e1:a4:f5:5a:8d:88: 45:42:b8:cb:da:2b:8c:39:90:8c:ce:5f:f0:1b:c5:e2:f0:23: 51:81:ff:e3:60:25:3e:e0:f0:60:28:0a:ef:f0:89:d6:3b:8e: 91:8f:01:2a:f7:53:c1:1a:ee:70:21:14:ad:a5:fe:0e:d5:e4: c6:5e:ee:0c:fc:0b:e7:a6:ff:f3:a7:7e:0f:bf:f8:df:10:2a: b0:b2:45:d4:3c:36:a3:c3:b1:88:ca:7e:ae:02:18:c8:fb:ed: bb:fe:88:cb -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUNaCjA6O2i0a3y+vPTi7+JUtJH3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDUwMzM3MTFaFw0yNzAxMDQwMzQyMTFaMDMxMTAvBgNV BAMTKDI2QUJGNDI1NUEwNUZDRTE4OEU0MDYxRTQ0QTUyNkIxQzc5OTAzNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHHWnS95ta/EaAFrfJMjxAfFO nf7eYsMkPFYYUs2bqPt1jHJoXy92wOby75mhBypzEXKospZrntM4PtJyhqqHmB0/ pizJXN1TShGVzPOoI9R2cJ2bOGYZlqgCdvOGvYD+dod2XP6533ViNl4lw561Imov sWWDiG7aSglk1nK8I6+iBxC9a9jhHrl2GudhI4pGdZ4VV2Ni02u8GIy4TQvQRY2e u49wSLHHX/39qabysD1y3BUPdPiAMx4H7lLE+0tpmSx4UFmo9oWCGrNSGXV54ZYP Cy+8YAJVJJiDGMxbi5uFCDGXHQgbOoJmEL5PdNUOXGYObdmIWh/RfQ1/CeBLAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUJqv0JVoF/OGI5AYeRKUmsceZA1wwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTMxMzUzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9zDANBgkqhkiG9w0BAQsFAAOCAQEAXgZ2A1XT9MAiRB/Q6Fy60QCyxi6z bTk1rj8fa+Y2RDzzbIBON19o1hJ3NEozpDSl1pQQJpkuECAyqwyIrrS1IZR4s1we CKFrU/PedzWK1Te9v8dD13nd2o8tlUE3Qf1y8qo4yqubrhc8FrjErPcW5gJZGoy8 t9NZOIwIn7Dla96WiqkzSyTnPLnI6xM5dM6/Y8nnbWm0wJlXhB6C4aT1Wo2IRUK4 y9orjDmQjM5f8BvF4vAjUYH/42AlPuDwYCgK7/CJ1juOkY8BKvdTwRrucCEUraX+ DtXkxl7uDPwL56b/86d+D7/43xAqsLJF1Dw2o8OxiMp+rgIYyPvtu/6Iyw== -----END CERTIFICATE-----Generated at Sat Jan 10 22:51:28 2026 by rpki-client