This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3231302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: pCxamjf9cZlhBDkV/cT0dSKlhAJDqDwFY049jyd4KDU=
Subject key identifier: ED:AB:81:D4:90:92:A3:98:DF:04:66:9D:49:1B:11:8B:9D:D1:6C:B7
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 177642F959107C5EC6ADF2ECE3F8D0B723E0DA0C
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32332d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:53:10 +0000
ROA not before: Mon 09 Feb 2026 07:48:10 +0000
ROA not after: Mon 08 Feb 2027 07:53:10 +0000
asID: 834
IP address blocks: 147.125.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:76:42:f9:59:10:7c:5e:c6:ad:f2:ec:e3:f8:d0:b7:23:e0:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:48:10 2026 GMT
Not After : Feb 8 07:53:10 2027 GMT
Subject: CN=EDAB81D49092A398DF04669D491B118B9DD16CB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bf:8c:17:bd:8c:e3:40:a4:35:a5:7c:80:67:
66:0e:93:4f:5e:c2:48:74:39:a1:0c:a8:c7:80:e4:
11:3d:2b:94:49:fe:35:ea:fb:d3:88:bc:de:7d:c9:
5a:47:26:bb:0e:1d:d8:37:8e:d0:cf:4c:ec:ac:73:
79:8e:c3:3b:8c:79:34:17:32:8a:13:75:a7:81:2f:
3e:2d:e3:48:c5:13:b6:a8:31:31:c2:96:d8:23:aa:
cd:e2:93:e8:9d:0e:72:28:72:21:08:ca:ff:d0:8a:
66:f3:71:45:26:e0:e6:e5:87:5b:f2:46:b7:5c:08:
c0:02:81:65:e3:58:35:8e:23:ea:eb:26:61:4d:df:
92:47:fa:ba:f3:ce:ad:c8:63:59:3b:05:af:9a:43:
d5:f6:ed:69:14:e6:3c:cb:6c:77:40:23:06:78:0d:
f1:a5:47:a4:54:70:91:7a:08:1e:4e:2e:f0:eb:fa:
0b:2e:02:60:65:d6:b4:aa:6f:86:ff:c1:93:e1:0f:
14:5f:b2:e4:71:49:05:3d:43:56:6e:87:e8:74:62:
30:8e:fe:fa:a3:bf:be:a8:59:ce:90:c8:24:8d:28:
10:26:f9:6c:ae:42:55:82:39:78:da:b5:b6:ae:77:
12:ef:3e:ad:7d:58:52:3a:c7:1e:72:21:c8:27:3b:
e7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:81:D4:90:92:A3:98:DF:04:66:9D:49:1B:11:8B:9D:D1:6C:B7
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.210.0/23
Signature Algorithm: sha256WithRSAEncryption
93:5b:f4:99:ab:40:cb:36:c9:67:40:8a:5d:03:b9:07:4a:2d:
b1:2e:f3:91:e6:21:5c:9b:59:28:65:25:ee:f8:bb:7b:6a:4b:
d4:fc:8a:e0:84:3f:b2:16:50:48:2d:32:cd:e3:7a:ce:37:c0:
6f:ab:8d:55:38:8a:24:f9:a8:4e:8a:44:09:9f:7c:07:bd:4c:
91:13:b5:e9:34:5a:8f:2d:8e:19:43:a9:95:3d:82:2b:b6:41:
1f:35:be:7d:cc:42:81:b6:4a:61:e3:83:02:f9:e0:b1:0f:c3:
31:95:69:21:12:00:5f:c7:31:24:ce:0a:5e:f7:06:70:a6:d9:
84:4b:08:20:56:f1:73:db:62:a2:87:8e:88:d0:59:e5:10:82:
e7:35:ad:d4:86:2d:dc:8a:77:7a:e3:8d:19:1f:60:85:da:b6:
22:2c:0f:c1:0b:27:eb:db:db:59:e5:53:dd:d9:8a:95:02:b8:
5b:7f:56:76:ba:b4:08:73:a1:18:32:a0:09:ae:59:5e:02:f0:
2b:95:54:b9:db:67:53:25:d0:3f:81:38:15:82:56:c8:e8:ae:
3e:82:1f:1a:a9:70:f0:c1:ce:ad:19:fa:34:7b:ca:d0:d4:97:
f1:50:aa:a3:fa:51:84:21:30:1e:c8:37:00:cc:aa:9c:1f:2f:
6f:6c:51:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:17 2026 by rpki-client