This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3230392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: nngonYkyxFzZC/97M5yg5zAziDGbHrTq9d+9YH2/6qo= Subject key identifier: 4B:FA:38:A9:11:F5:AF:B0:0E:F0:E0:AB:73:32:0B:72:6D:5D:70:9A Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 332455F83406C1213371AE6D9CD870617F683EDF Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20383334.roa Signing time: Tue 30 Dec 2025 02:32:30 +0000 ROA not before: Tue 30 Dec 2025 02:27:30 +0000 ROA not after: Tue 29 Dec 2026 02:32:30 +0000 asID: 834 IP address blocks: 147.125.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:24:55:f8:34:06:c1:21:33:71:ae:6d:9c:d8:70:61:7f:68:3e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 30 02:27:30 2025 GMT Not After : Dec 29 02:32:30 2026 GMT Subject: CN=4BFA38A911F5AFB00EF0E0AB73320B726D5D709A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:0e:53:f9:e4:0b:11:b6:91:76:5a:ce:64: f0:9d:db:c2:8f:10:3f:e5:f5:63:0e:e9:06:37:80: 2e:ec:b1:25:34:8a:a3:87:97:39:ef:99:f0:25:04: 89:30:54:33:86:27:6e:7d:9c:8c:42:01:ac:de:9d: 3b:6a:a9:29:84:b8:5c:c0:73:5d:f6:ab:6c:c1:67: 19:98:70:56:99:8a:fc:3c:7d:8d:79:ff:b4:c6:cd: 07:33:23:39:44:43:62:31:97:df:9d:b3:d0:c7:17: 0d:61:68:61:50:7e:31:f1:79:45:d4:6f:b9:9c:fc: c7:b1:8d:94:0e:37:c9:d0:e2:cd:19:f9:91:53:ab: e9:24:34:62:48:26:fa:b5:dd:41:99:d8:a2:e7:41: ad:67:e2:71:d2:f7:19:b5:a4:9b:90:f8:8c:07:5f: 68:6b:05:34:3c:19:c0:4f:d2:0d:8b:b5:ab:ac:95: 51:75:d0:44:3e:10:e3:dc:72:b3:2c:8d:a4:8e:07: 78:73:a3:e6:31:29:cd:56:e8:ee:6c:7e:ca:8c:ee: 0b:7d:38:1d:3b:74:96:05:b4:25:67:ae:9a:32:fc: 77:7e:cd:f5:70:68:00:be:c4:5d:d7:74:21:b8:f9: 93:d8:62:92:ec:69:d4:3a:02:f5:41:09:00:b4:09: 83:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:FA:38:A9:11:F5:AF:B0:0E:F0:E0:AB:73:32:0B:72:6D:5D:70:9A X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.209.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ef:f3:7f:f8:47:3a:7d:ad:65:0a:2e:6d:0f:20:ae:54:71: e2:da:2f:61:22:97:14:0f:60:7c:6d:8f:6d:fa:8f:f3:38:d7: 94:14:9b:d4:73:e4:1d:4b:ac:96:65:2a:a1:fd:71:45:26:1b: 94:19:5f:d2:cc:78:0b:78:4c:95:4a:18:2b:4c:81:7b:90:6e: 8f:6a:31:07:88:5f:c2:45:79:5b:9f:5d:d3:c7:e3:b7:75:d6: 36:2c:04:b2:b3:4f:ce:1e:2d:4a:39:1b:bd:6a:63:0d:65:ab: 1a:d3:33:6e:50:fe:17:6b:cd:3e:c2:13:46:15:e5:bb:6c:20: 36:86:0c:f0:bc:35:a2:0c:df:7f:a4:ce:79:57:8b:21:9e:c3: aa:e6:cc:90:32:ae:ba:cd:d5:65:a7:b4:ee:42:68:b1:05:46: f8:c8:3d:e5:05:fd:cf:89:e3:4f:f1:fd:7f:29:ca:f1:41:e3: bf:33:d5:dc:a9:db:f1:ab:40:3e:c2:3f:12:b7:b2:c4:99:30: 96:61:d0:17:b5:8b:09:23:ca:61:27:ea:3b:c7:a9:4d:5d:ac: 88:60:17:d2:6e:6d:72:2f:6c:15:f2:c2:02:fb:39:0b:1c:9d: 20:09:c8:9d:34:be:b3:e0:b3:ef:66:da:ac:72:d0:17:b8:db: fd:70:6c:d3 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMyRV+DQGwSEzca5tnNhwYX9oPt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMzAwMjI3MzBaFw0yNjEyMjkwMjMyMzBaMDMxMTAvBgNV BAMTKDRCRkEzOEE5MTFGNUFGQjAwRUYwRTBBQjczMzIwQjcyNkQ1RDcwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzg5T+eQLEbaRdlrOZPCd28KP ED/l9WMO6QY3gC7ssSU0iqOHlznvmfAlBIkwVDOGJ259nIxCAazenTtqqSmEuFzA c132q2zBZxmYcFaZivw8fY15/7TGzQczIzlEQ2Ixl9+ds9DHFw1haGFQfjHxeUXU b7mc/MexjZQON8nQ4s0Z+ZFTq+kkNGJIJvq13UGZ2KLnQa1n4nHS9xm1pJuQ+IwH X2hrBTQ8GcBP0g2LtauslVF10EQ+EOPccrMsjaSOB3hzo+YxKc1W6O5sfsqM7gt9 OB07dJYFtCVnrpoy/Hd+zfVwaAC+xF3XdCG4+ZPYYpLsadQ6AvVBCQC0CYM3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUS/o4qRH1r7AO8OCrczILcm1dcJowHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 0TANBgkqhkiG9w0BAQsFAAOCAQEAOu/zf/hHOn2tZQoubQ8grlRx4tovYSKXFA9g fG2PbfqP8zjXlBSb1HPkHUuslmUqof1xRSYblBlf0sx4C3hMlUoYK0yBe5Buj2ox B4hfwkV5W59d08fjt3XWNiwEsrNPzh4tSjkbvWpjDWWrGtMzblD+F2vNPsITRhXl u2wgNoYM8Lw1ogzff6TOeVeLIZ7DqubMkDKuus3VZae07kJosQVG+Mg95QX9z4nj T/H9fynK8UHjvzPV3Knb8atAPsI/EreyxJkwlmHQF7WLCSPKYSfqO8epTV2siGAX 0m5tci9sFfLCAvs5CxydIAnInTS+s+Cz72barHLQF7jb/XBs0w== -----END CERTIFICATE-----Generated at Tue Dec 30 21:07:16 2025 by rpki-client