This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230362e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3230362e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: gynBOwWLp8JhFS6U9CkMUyRU/WTa4+ck3H6LFWJfbsM= Subject key identifier: 32:84:1B:38:4F:D5:BE:EA:85:FA:A4:B0:22:8D:9D:82:28:A9:8A:78 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 10A3BBC347998F2D2A1A1CB83740ED9827976A0E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230362e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:08:08 +0000 ROA not before: Mon 24 Nov 2025 17:03:08 +0000 ROA not after: Mon 23 Nov 2026 17:08:08 +0000 asID: 20473 IP address blocks: 147.125.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a3:bb:c3:47:99:8f:2d:2a:1a:1c:b8:37:40:ed:98:27:97:6a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:03:08 2025 GMT Not After : Nov 23 17:08:08 2026 GMT Subject: CN=32841B384FD5BEEA85FAA4B0228D9D8228A98A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:94:9c:2d:98:5a:07:4d:4b:53:b0:a7:66: af:c2:47:3e:00:07:dc:4d:f9:a4:93:7d:02:81:e1: 11:31:10:6d:af:7c:ea:9a:3b:7d:d3:77:97:de:23: d1:c0:38:91:65:9f:cf:cf:37:1f:38:28:83:5e:c6: b2:52:b4:8d:14:ae:91:6c:74:81:61:8c:b8:78:14: 62:56:da:31:5a:7f:ec:9b:5a:75:68:40:73:cf:1c: fd:23:3e:93:f6:30:a8:e9:4e:da:22:65:7a:1a:fd: 9c:b1:a3:bf:7d:b2:db:85:e2:ba:e4:d7:e8:b9:bd: fe:9a:86:c0:6f:97:b3:14:3b:cf:98:14:08:4b:78: 9d:d9:46:4e:c5:3e:33:d5:87:ea:e1:64:cf:9f:f2: 17:9e:69:10:80:d5:fa:d2:ac:ea:39:cc:ef:e0:26: 36:e3:24:f3:9d:03:80:9b:93:76:59:08:1c:95:fb: 36:83:ba:4f:fd:55:3f:da:0e:06:77:e3:f2:67:b3: 78:ac:e0:a1:e5:9f:de:e3:b8:0a:5f:14:7c:ca:70: eb:25:25:7f:7c:51:fc:50:7b:8b:12:d1:f0:5f:c4: 7e:52:e0:ed:36:ce:68:e9:8e:a1:05:f4:08:56:c7: 02:5c:1c:26:d6:43:e5:fa:25:af:07:48:4d:2a:40: 1c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:84:1B:38:4F:D5:BE:EA:85:FA:A4:B0:22:8D:9D:82:28:A9:8A:78 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230362e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.206.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:25:55:bf:ef:e4:e4:3e:9f:1f:49:0a:41:ee:87:6b:0b:10: 99:11:3e:43:74:84:09:aa:10:35:a6:8f:18:f3:20:90:cf:51: a6:4e:6e:9f:69:78:4b:7f:07:9e:bf:2f:65:1d:bb:78:aa:04: 34:6d:ae:1c:7e:6e:2b:5f:cf:b4:6c:d1:20:4b:bd:98:bc:8f: 12:fd:89:43:a5:f9:d4:3e:b3:4a:32:c2:93:97:3c:45:bb:68: d9:02:1a:5e:c5:35:4f:44:03:11:fc:24:ca:95:da:07:23:68: e6:64:44:7f:31:30:d6:81:17:92:a9:55:3f:c9:15:05:cd:8e: 5f:03:d2:c7:9c:77:e0:5d:1c:c4:7a:be:f8:1a:35:02:cd:22: 3b:b8:53:9a:38:7d:68:fc:01:74:03:f1:c1:70:2f:fb:ce:43: b3:66:ca:05:f5:57:59:e2:e5:f6:ce:5d:e8:fd:03:93:a6:2b: 72:9c:57:5e:a7:8b:0b:34:bd:a4:a7:d3:48:e3:7f:f5:1c:dd: ad:57:0c:f3:50:e9:09:04:b4:19:99:66:28:fe:03:60:e1:9a: ea:6b:a7:08:05:2d:ed:95:d8:5c:f2:cd:2d:a3:16:43:04:56: 38:ac:d5:25:dd:c8:3d:5b:ce:cf:b7:fb:19:70:a0:f4:e5:55: 69:23:5e:38 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEKO7w0eZjy0qGhy4N0DtmCeXag4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAzMDhaFw0yNjExMjMxNzA4MDhaMDMxMTAvBgNV BAMTKDMyODQxQjM4NEZENUJFRUE4NUZBQTRCMDIyOEQ5RDgyMjhBOThBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj7JScLZhaB01LU7CnZq/CRz4A B9xN+aSTfQKB4RExEG2vfOqaO33Td5feI9HAOJFln8/PNx84KINexrJStI0UrpFs dIFhjLh4FGJW2jFaf+ybWnVoQHPPHP0jPpP2MKjpTtoiZXoa/Zyxo799stuF4rrk 1+i5vf6ahsBvl7MUO8+YFAhLeJ3ZRk7FPjPVh+rhZM+f8heeaRCA1frSrOo5zO/g JjbjJPOdA4Cbk3ZZCByV+zaDuk/9VT/aDgZ34/Jns3is4KHln97juApfFHzKcOsl JX98UfxQe4sS0fBfxH5S4O02zmjpjqEF9AhWxwJcHCbWQ+X6Ja8HSE0qQBzJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUMoQbOE/VvuqF+qSwIo2dgiipingwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfc4wDQYJKoZIhvcNAQELBQADggEBAC4lVb/v5OQ+nx9JCkHuh2sLEJkRPkN0 hAmqEDWmjxjzIJDPUaZObp9peEt/B56/L2Udu3iqBDRtrhx+bitfz7Rs0SBLvZi8 jxL9iUOl+dQ+s0oywpOXPEW7aNkCGl7FNU9EAxH8JMqV2gcjaOZkRH8xMNaBF5Kp VT/JFQXNjl8D0secd+BdHMR6vvgaNQLNIju4U5o4fWj8AXQD8cFwL/vOQ7NmygX1 V1ni5fbOXej9A5OmK3KcV16niws0vaSn00jjf/Uc3a1XDPNQ6QkEtBmZZij+A2Dh muprpwgFLe2V2FzyzS2jFkMEVjis1SXdyD1bzs+3+xlwoPTlVWkjXjg= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:41 2025 by rpki-client