This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3230342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: ZobBwzj7Hx9bCEX30G5NYO3GMV/lhwGB0eO5EW/yq3A= Subject key identifier: 58:97:5F:EE:F2:42:22:E2:AD:D5:98:09:5E:67:F7:2E:E2:B6:EC:6E Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 3C4376CB5A08F13A7A44E90C939B3807997BCDFC Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20383334.roa Signing time: Tue 09 Dec 2025 08:54:27 +0000 ROA not before: Tue 09 Dec 2025 08:49:27 +0000 ROA not after: Tue 08 Dec 2026 08:54:27 +0000 asID: 834 IP address blocks: 147.125.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:43:76:cb:5a:08:f1:3a:7a:44:e9:0c:93:9b:38:07:99:7b:cd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 9 08:49:27 2025 GMT Not After : Dec 8 08:54:27 2026 GMT Subject: CN=58975FEEF24222E2ADD598095E67F72EE2B6EC6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:35:d2:fd:f2:ff:73:82:e1:75:51:20:4e: f1:85:9a:64:37:93:d3:92:e8:47:05:71:1b:30:3d: 76:6f:36:69:f2:7b:a2:13:72:d0:a3:45:3b:cd:40: fb:a3:80:af:28:71:5d:03:8c:ba:a0:d1:7c:f3:5e: 97:39:ed:9a:f6:bf:f1:d8:e2:af:f0:d1:c4:16:c1: 3a:5c:3d:1d:59:1c:e5:e9:db:2e:75:11:15:5c:35: 64:51:ad:4f:91:4d:9f:e4:45:54:91:b2:07:a2:a4: bd:73:e7:b3:ec:d5:f1:ca:6c:fd:1e:47:2b:cf:a2: d4:2f:aa:42:93:b7:5e:fa:8e:54:3d:9c:67:27:02: 19:83:2c:86:70:3c:c4:f3:fb:0b:a5:08:97:ff:e8: df:ab:cd:72:5e:9a:7d:48:ad:4d:c9:3e:51:ed:04: 8d:4d:38:1b:fb:65:f8:1a:dd:46:ff:c8:19:f1:b0: bc:f6:0b:54:c3:ba:e4:c7:60:a0:fa:92:4d:3c:42: 68:ab:a2:0e:a0:b8:d4:e8:a0:9f:fa:1b:08:c6:7e: 6e:3d:4e:6b:de:ad:cc:fe:bc:9a:14:b4:55:23:21: 7e:32:3e:45:7f:db:e0:14:2b:11:60:74:14:58:51: 2d:82:ed:df:45:d4:7f:f6:97:d1:fd:dd:a0:ae:be: bc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:97:5F:EE:F2:42:22:E2:AD:D5:98:09:5E:67:F7:2E:E2:B6:EC:6E X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.204.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:80:7b:68:0a:2c:4c:9e:a6:8b:ae:d4:0d:99:02:67:27:52: 9a:37:be:a4:98:e1:72:9a:6f:25:f0:8f:6e:39:0d:a7:54:c2: 53:fe:6b:d7:fa:41:c4:74:22:d4:ea:85:88:73:b7:f7:ca:72: f8:59:40:af:d6:bf:21:f4:2a:8c:f8:56:fd:68:a1:87:d0:dc: 21:c8:7c:cc:93:3b:34:60:c7:4e:d6:61:2f:1f:9d:d9:87:c0: 88:c2:29:5f:2c:03:2f:84:7f:3a:79:9e:71:06:1e:e8:44:70: 83:bb:c4:61:58:b0:56:e5:f8:e9:9a:33:61:ac:ec:18:87:6a: ce:04:f4:13:37:83:b2:1c:0a:23:c4:58:e6:82:2f:dc:f7:db: 88:9c:c3:05:e8:50:1e:51:7d:6d:67:89:ab:ae:ef:3b:ce:cf: 57:9d:b4:fd:a3:2c:29:99:2d:59:32:ba:7f:54:a7:26:80:3e: c8:ac:07:05:80:54:a4:70:e7:da:09:8a:fb:af:cc:0a:cf:af: 64:df:b0:8d:28:6a:9f:d8:59:98:85:a1:f9:d8:f3:4a:2c:c1: 4c:fa:5b:33:cb:be:52:69:00:e0:f4:0b:a6:c6:59:c9:e2:0f: bf:70:6f:59:b8:d7:85:ec:64:fa:af:53:d8:3f:f1:31:75:74: 7d:88:40:f9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPEN2y1oI8Tp6ROkMk5s4B5l7zfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDkwODQ5MjdaFw0yNjEyMDgwODU0MjdaMDMxMTAvBgNV BAMTKDU4OTc1RkVFRjI0MjIyRTJBREQ1OTgwOTVFNjdGNzJFRTJCNkVDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwDXS/fL/c4LhdVEgTvGFmmQ3 k9OS6EcFcRswPXZvNmnye6ITctCjRTvNQPujgK8ocV0DjLqg0XzzXpc57Zr2v/HY 4q/w0cQWwTpcPR1ZHOXp2y51ERVcNWRRrU+RTZ/kRVSRsgeipL1z57Ps1fHKbP0e RyvPotQvqkKTt176jlQ9nGcnAhmDLIZwPMTz+wulCJf/6N+rzXJemn1IrU3JPlHt BI1NOBv7Zfga3Ub/yBnxsLz2C1TDuuTHYKD6kk08Qmirog6guNTooJ/6GwjGfm49 Tmvercz+vJoUtFUjIX4yPkV/2+AUKxFgdBRYUS2C7d9F1H/2l9H93aCuvrwHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUWJdf7vJCIuKt1ZgJXmf3LuK27G4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 zDANBgkqhkiG9w0BAQsFAAOCAQEAjoB7aAosTJ6mi67UDZkCZydSmje+pJjhcppv JfCPbjkNp1TCU/5r1/pBxHQi1OqFiHO398py+FlAr9a/IfQqjPhW/Wihh9DcIch8 zJM7NGDHTtZhLx+d2YfAiMIpXywDL4R/OnmecQYe6ERwg7vEYViwVuX46ZozYazs GIdqzgT0EzeDshwKI8RY5oIv3PfbiJzDBehQHlF9bWeJq67vO87PV520/aMsKZkt WTK6f1SnJoA+yKwHBYBUpHDn2gmK+6/MCs+vZN+wjShqn9hZmIWh+djzSizBTPpb M8u+UmkA4PQLpsZZyeIPv3BvWbjXhexk+q9T2D/xMXV0fYhA+Q== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:09 2025 by rpki-client