This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3231302e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: MWNhgt5pLyS7/MDe4QRFTYFvhzhOWxwgVtDf1RocoYE= Subject key identifier: 1E:A9:82:72:13:9B:43:C7:66:27:E3:FE:B2:1B:90:3B:36:6C:CB:EA Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6D773C7D690C2823EA497B4AD3728BA443C32251 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32332d3234203d3e20383334.roa Signing time: Tue 30 Dec 2025 02:32:30 +0000 ROA not before: Tue 30 Dec 2025 02:27:30 +0000 ROA not after: Tue 29 Dec 2026 02:32:30 +0000 asID: 834 IP address blocks: 147.125.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:77:3c:7d:69:0c:28:23:ea:49:7b:4a:d3:72:8b:a4:43:c3:22:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 30 02:27:30 2025 GMT Not After : Dec 29 02:32:30 2026 GMT Subject: CN=1EA98272139B43C76627E3FEB21B903B366CCBEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:10:2d:4f:24:a0:af:3c:73:ed:07:69:9d: 9c:b9:49:f5:b4:91:00:ec:15:76:18:46:d3:10:42: 5f:6a:8e:f7:e4:37:76:0b:86:ac:df:5c:0d:84:b5: 67:fb:ea:c6:8f:f5:6a:bd:3e:f7:53:85:a2:ee:78: fd:cf:5f:b0:fa:2e:17:1c:30:49:4e:85:2c:a3:f4: d2:79:5f:c6:cf:60:06:32:0c:32:af:13:d9:77:76: 42:47:1d:6b:fa:cb:56:c7:57:5e:20:64:86:d9:a8: 8b:cc:fd:31:06:0f:e2:a3:f5:30:7e:38:ad:8e:8f: 92:f3:98:34:ea:f7:48:32:7b:d8:03:62:72:d3:02: 1a:3b:92:a8:f5:e5:4c:89:a7:3f:66:b6:9d:3b:60: a8:6e:10:e0:68:13:a7:5a:4d:05:be:db:13:22:89: 6c:72:0a:7e:e7:15:cf:10:32:5b:58:85:9e:67:c8: ad:65:9f:df:71:93:1e:c4:96:c9:e9:8c:7f:7b:82: 70:5f:d2:fa:ee:a0:35:74:d1:c5:49:36:1e:41:7c: 54:48:58:eb:70:ea:e4:09:01:1f:24:24:65:57:47: 9e:87:a3:e9:84:47:ab:9a:c8:b1:c6:9b:03:b3:da: 15:af:41:a4:8a:31:13:22:fc:25:11:a3:74:1e:84: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:82:72:13:9B:43:C7:66:27:E3:FE:B2:1B:90:3B:36:6C:CB:EA X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.210.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:27:db:f5:93:f6:11:46:0b:d8:64:32:89:7b:c3:e1:97:1f: 66:d2:f7:88:36:87:bb:93:22:29:ce:09:a9:26:6a:7b:fe:11: df:77:32:52:d4:a8:42:f1:00:fc:ff:bc:03:4c:4b:c3:e8:24: 5d:cb:f9:bf:1e:4b:2d:a6:ac:f2:17:7e:76:ba:35:4b:7b:37: 81:61:35:ac:66:44:1c:cb:3f:fa:3e:a6:c0:5b:0a:8c:8c:3f: 2a:e0:26:01:0c:f5:72:5d:f5:a3:b4:0e:a5:29:26:d3:77:da: 53:d0:14:ab:12:a2:3f:be:b0:99:e4:ce:44:10:79:d0:7a:11: 1c:4a:e6:ae:ea:fb:e4:aa:12:95:7f:89:22:94:30:06:a7:47: e4:a6:b5:85:ee:9d:73:80:68:61:6a:4c:2c:78:1e:2a:e4:4c: 21:c6:96:56:07:81:a2:6b:d5:d9:cd:56:67:3b:c7:a2:5c:cb: 39:28:ce:97:50:47:61:38:25:97:72:5c:04:23:f8:6c:7b:52: 95:55:cb:18:64:f5:de:40:fb:44:9b:8b:61:8e:b5:26:dc:85: ee:55:7b:8e:2e:b3:89:fd:3a:7a:40:e0:44:b6:71:c0:af:26: bc:14:00:59:12:6f:d0:44:c2:70:47:47:97:29:da:b6:25:eb: da:a0:9a:eb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbXc8fWkMKCPqSXtK03KLpEPDIlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMzAwMjI3MzBaFw0yNjEyMjkwMjMyMzBaMDMxMTAvBgNV BAMTKDFFQTk4MjcyMTM5QjQzQzc2NjI3RTNGRUIyMUI5MDNCMzY2Q0NCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLxAtTySgrzxz7QdpnZy5SfW0 kQDsFXYYRtMQQl9qjvfkN3YLhqzfXA2EtWf76saP9Wq9PvdThaLueP3PX7D6Lhcc MElOhSyj9NJ5X8bPYAYyDDKvE9l3dkJHHWv6y1bHV14gZIbZqIvM/TEGD+Kj9TB+ OK2Oj5LzmDTq90gye9gDYnLTAho7kqj15UyJpz9mtp07YKhuEOBoE6daTQW+2xMi iWxyCn7nFc8QMltYhZ5nyK1ln99xkx7ElsnpjH97gnBf0vruoDV00cVJNh5BfFRI WOtw6uQJAR8kJGVXR56Ho+mER6uayLHGmwOz2hWvQaSKMRMi/CURo3QehMyPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUHqmCchObQ8dmJ+P+shuQOzZsy+owHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 0jANBgkqhkiG9w0BAQsFAAOCAQEAPSfb9ZP2EUYL2GQyiXvD4ZcfZtL3iDaHu5Mi Kc4JqSZqe/4R33cyUtSoQvEA/P+8A0xLw+gkXcv5vx5LLaas8hd+dro1S3s3gWE1 rGZEHMs/+j6mwFsKjIw/KuAmAQz1cl31o7QOpSkm03faU9AUqxKiP76wmeTORBB5 0HoRHErmrur75KoSlX+JIpQwBqdH5Ka1he6dc4BoYWpMLHgeKuRMIcaWVgeBomvV 2c1WZzvHolzLOSjOl1BHYTgll3JcBCP4bHtSlVXLGGT13kD7RJuLYY61JtyF7lV7 ji6zif06ekDgRLZxwK8mvBQAWRJv0ETCcEdHlynatiXr2qCa6w== -----END CERTIFICATE-----Generated at Tue Dec 30 21:07:16 2025 by rpki-client