This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230352e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3230352e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: WuzY9wgRaNMEjXFZlbZIErprNy8ufOjJlTtrm/602kU= Subject key identifier: D5:F0:7D:D8:89:D1:69:2D:60:DC:73:63:ED:92:E0:B3:0E:E3:5F:3B Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 434372241AC879F62D4A5FAE00CA2004D240695F Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230352e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:08:18 +0000 ROA not before: Mon 24 Nov 2025 17:03:18 +0000 ROA not after: Mon 23 Nov 2026 17:08:18 +0000 asID: 20473 IP address blocks: 147.125.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:43:72:24:1a:c8:79:f6:2d:4a:5f:ae:00:ca:20:04:d2:40:69:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:03:18 2025 GMT Not After : Nov 23 17:08:18 2026 GMT Subject: CN=D5F07DD889D1692D60DC7363ED92E0B30EE35F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7e:46:7b:1b:a4:fc:43:a6:11:97:85:e3:3c: 3e:64:98:05:52:02:13:f1:1c:96:d3:31:6b:86:62: cf:c8:1e:dc:9b:4d:49:7b:86:8d:fd:21:22:ab:c6: d0:81:d8:49:22:40:f2:58:9e:5e:7f:42:4e:ef:3f: 88:9a:ef:7f:5f:12:05:c2:df:81:0f:db:77:4d:56: 89:4d:81:45:63:c5:50:b2:9d:46:cd:eb:65:3d:a7: 13:3d:3f:a7:81:36:e0:6d:48:7e:81:f6:b6:24:f5: bf:6a:19:29:48:7b:27:86:6c:30:a4:53:96:8b:94: 02:ae:62:32:71:3d:66:ea:53:71:4f:6a:11:8f:84: 35:fc:ac:9a:2e:df:cb:f9:35:98:32:ca:a6:0d:89: 05:9a:d4:f4:a7:bd:a7:8f:c0:67:6d:dc:33:fd:ca: ac:89:b4:06:7f:e8:d3:7d:27:56:62:62:87:7d:d1: a5:02:e2:6f:a5:f9:7a:93:1a:e1:9e:a3:55:a7:a4: d8:e6:22:2b:0a:43:74:14:84:06:74:f7:60:57:be: 80:89:0c:cd:cd:f3:48:a6:f2:df:d4:e1:f6:37:b5: 40:ec:3c:3a:0d:b3:3e:96:99:bf:54:6f:a8:8b:a0: cd:bc:2b:07:6a:b7:14:40:0e:82:8f:4c:6f:65:8a: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F0:7D:D8:89:D1:69:2D:60:DC:73:63:ED:92:E0:B3:0E:E3:5F:3B X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230352e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.205.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ef:8c:b8:5a:0e:6b:bd:7e:6e:b7:cb:64:7e:00:10:95:3b: 2c:e9:f5:08:f4:d0:86:25:72:07:94:91:ff:75:9f:ac:25:8d: af:be:b5:85:7b:a3:6e:ee:90:f4:39:2a:fd:db:91:09:7f:db: 51:a0:52:90:bf:97:11:55:22:a0:f2:45:11:be:52:5c:7e:3f: a0:ff:6d:e0:f9:ef:59:0d:37:5e:73:9a:3d:2c:38:58:49:bb: a0:ae:8c:bf:c6:86:7e:86:5e:38:f5:bc:bf:07:d2:fe:75:18: 55:0e:9f:9d:a5:02:93:b4:bc:83:fb:84:2b:40:fb:2d:41:c6: d8:a1:78:e8:73:0c:02:41:ad:69:cd:70:2e:d2:de:12:32:e6: af:0f:06:3f:17:be:b9:4c:58:f2:69:24:1a:70:09:a3:1e:9f: 91:08:b6:03:a8:02:35:56:a0:4d:19:96:c6:f4:50:fd:95:4c: 95:44:07:3a:5b:16:62:60:0c:0e:80:9e:c5:33:62:70:88:c9: 7f:7f:ca:04:4f:15:7c:af:91:29:53:06:07:5c:44:54:c5:e8: b4:98:c4:98:fe:65:ee:67:09:8f:ab:00:d9:f0:e6:42:1e:0e: 89:f3:ff:d4:1a:1d:69:af:77:c4:12:5c:99:c6:60:8c:16:9a: 7d:9b:96:11 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQ0NyJBrIefYtSl+uAMogBNJAaV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAzMThaFw0yNjExMjMxNzA4MThaMDMxMTAvBgNV BAMTKEQ1RjA3REQ4ODlEMTY5MkQ2MERDNzM2M0VEOTJFMEIzMEVFMzVGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJfkZ7G6T8Q6YRl4XjPD5kmAVS AhPxHJbTMWuGYs/IHtybTUl7ho39ISKrxtCB2EkiQPJYnl5/Qk7vP4ia739fEgXC 34EP23dNVolNgUVjxVCynUbN62U9pxM9P6eBNuBtSH6B9rYk9b9qGSlIeyeGbDCk U5aLlAKuYjJxPWbqU3FPahGPhDX8rJou38v5NZgyyqYNiQWa1PSnvaePwGdt3DP9 yqyJtAZ/6NN9J1ZiYod90aUC4m+l+XqTGuGeo1WnpNjmIisKQ3QUhAZ092BXvoCJ DM3N80im8t/U4fY3tUDsPDoNsz6Wmb9Ub6iLoM28KwdqtxRADoKPTG9linrJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU1fB92InRaS1g3HNj7ZLgsw7jXzswHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfc0wDQYJKoZIhvcNAQELBQADggEBABHvjLhaDmu9fm63y2R+ABCVOyzp9Qj0 0IYlcgeUkf91n6wlja++tYV7o27ukPQ5Kv3bkQl/21GgUpC/lxFVIqDyRRG+Ulx+ P6D/beD571kNN15zmj0sOFhJu6CujL/Ghn6GXjj1vL8H0v51GFUOn52lApO0vIP7 hCtA+y1BxtiheOhzDAJBrWnNcC7S3hIy5q8PBj8XvrlMWPJpJBpwCaMen5EItgOo AjVWoE0Zlsb0UP2VTJVEBzpbFmJgDA6AnsUzYnCIyX9/ygRPFXyvkSlTBgdcRFTF 6LSYxJj+Ze5nCY+rANnw5kIeDonz/9QaHWmvd8QSXJnGYIwWmn2blhE= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:40 2025 by rpki-client