This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3231302e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: isYmetPK9KlAcJACdPUjg1GawMQpJdnYkNR21Yqs9/8= Subject key identifier: C6:4E:9C:0D:AB:F2:6C:84:7C:74:FC:AF:E8:E6:A2:99:FC:C8:2F:99 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 346E0D2FC7A0EC257988E3B9F3724F42810CB02D Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e2039333034.roa Signing time: Fri 09 Jan 2026 08:11:32 +0000 ROA not before: Fri 09 Jan 2026 08:06:32 +0000 ROA not after: Fri 08 Jan 2027 08:11:32 +0000 asID: 9304 IP address blocks: 147.125.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6e:0d:2f:c7:a0:ec:25:79:88:e3:b9:f3:72:4f:42:81:0c:b0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:06:32 2026 GMT Not After : Jan 8 08:11:32 2027 GMT Subject: CN=C64E9C0DABF26C847C74FCAFE8E6A299FCC82F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:68:ff:f7:df:a6:0f:38:29:5c:32:97:df: a2:64:ad:47:f4:d9:bd:8f:c6:61:c1:71:5f:54:b3: c0:51:19:19:0d:b0:f9:da:d0:71:39:de:b7:b7:17: f5:cc:a1:ad:75:a3:5a:76:1b:82:35:68:49:b2:e0: 07:42:f3:e2:a0:c3:9b:47:2e:7f:30:1a:0e:f8:07: 7c:6b:03:96:09:fc:2b:72:e8:8e:0f:fa:9e:84:c1: 13:93:24:01:16:3e:7c:f0:56:7b:b8:c0:15:a6:78: e1:9d:c1:ca:95:72:dd:02:37:fd:6a:3c:c7:d1:b5: b9:6a:51:94:ef:db:ba:ea:5b:8e:7c:d8:ac:21:90: 45:b9:ef:26:36:d6:d0:92:3c:07:f6:b8:c0:7c:11: d8:e4:27:95:67:5a:ed:5a:9c:37:34:ea:ec:19:84: 78:0e:bc:90:1f:a3:99:34:e3:76:8d:fc:f1:6d:b5: 01:23:dd:eb:6b:ae:b9:a6:8d:01:9a:75:2d:5c:ed: f7:9f:fd:fd:38:97:22:e3:a6:8c:a6:d8:e6:c5:e1: d5:b1:7d:8e:4b:38:e8:2d:25:25:23:12:11:b3:1c: a4:c9:93:a9:f9:08:d3:a5:eb:44:f7:6a:cd:94:df: 7a:0f:7e:64:7a:75:3c:53:8c:89:07:b2:bd:61:9b: f9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4E:9C:0D:AB:F2:6C:84:7C:74:FC:AF:E8:E6:A2:99:FC:C8:2F:99 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.210.0/24 Signature Algorithm: sha256WithRSAEncryption 06:53:4b:b0:a2:90:71:db:64:9b:08:dc:a3:d0:4b:12:2e:16: f6:35:1b:8c:d8:a2:d8:b9:47:b9:f6:c7:e3:a7:cf:67:0d:54: df:26:30:7d:e6:38:e8:c7:73:f2:8a:9d:a4:20:0f:25:31:e3: c6:b8:20:19:cc:51:44:a4:83:6b:a2:97:e0:3f:95:79:ff:d7: fe:59:e9:42:33:29:30:4d:cc:14:8e:dd:b3:47:39:2a:eb:16: 30:f0:f1:b2:fb:ce:41:75:b3:0e:58:db:aa:0e:a4:c4:a7:56: c2:39:e6:51:8f:57:c2:65:5b:4f:7d:2c:7f:97:43:90:c4:ac: 7b:e0:ed:db:cd:16:6d:e7:a3:c6:9a:27:f1:0f:57:83:f4:18: 0e:11:a8:fa:f2:08:44:87:24:67:1f:d6:82:10:12:ac:dd:55: cc:b9:02:a0:cb:e2:2e:02:52:3d:a3:0a:9e:b5:9e:ef:9a:af: 50:89:37:8d:aa:25:e8:0a:77:3f:bb:d2:19:a5:61:fa:a8:d5: c8:f3:6a:66:2d:d3:a0:8f:68:a5:df:f4:87:3d:3c:16:7c:a1: ae:ac:97:7e:a6:74:46:48:ee:78:eb:26:37:c9:1a:66:dd:69: 48:77:c1:02:e3:97:af:92:04:05:07:65:98:bd:c3:4a:b7:17: fc:9e:ac:95 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNG4NL8eg7CV5iOO583JPQoEMsC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODA2MzJaFw0yNzAxMDgwODExMzJaMDMxMTAvBgNV BAMTKEM2NEU5QzBEQUJGMjZDODQ3Qzc0RkNBRkU4RTZBMjk5RkNDODJGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7r2j/99+mDzgpXDKX36JkrUf0 2b2PxmHBcV9Us8BRGRkNsPna0HE53re3F/XMoa11o1p2G4I1aEmy4AdC8+Kgw5tH Ln8wGg74B3xrA5YJ/Cty6I4P+p6EwROTJAEWPnzwVnu4wBWmeOGdwcqVct0CN/1q PMfRtblqUZTv27rqW4582KwhkEW57yY21tCSPAf2uMB8EdjkJ5VnWu1anDc06uwZ hHgOvJAfo5k043aN/PFttQEj3etrrrmmjQGadS1c7fef/f04lyLjpoym2ObF4dWx fY5LOOgtJSUjEhGzHKTJk6n5CNOl60T3as2U33oPfmR6dTxTjIkHsr1hm/kPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUxk6cDavybIR8dPyv6OaimfzIL5kwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k33SMA0GCSqGSIb3DQEBCwUAA4IBAQAGU0uwopBx22SbCNyj0EsSLhb2NRuM2KLY uUe59sfjp89nDVTfJjB95jjox3Pyip2kIA8lMePGuCAZzFFEpINropfgP5V5/9f+ WelCMykwTcwUjt2zRzkq6xYw8PGy+85BdbMOWNuqDqTEp1bCOeZRj1fCZVtPfSx/ l0OQxKx74O3bzRZt56PGmifxD1eD9BgOEaj68ghEhyRnH9aCEBKs3VXMuQKgy+Iu AlI9owqetZ7vmq9QiTeNqiXoCnc/u9IZpWH6qNXI82pmLdOgj2il3/SHPTwWfKGu rJd+pnRGSO546yY3yRpm3WlId8EC45evkgQFB2WYvcNKtxf8nqyV -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:54 2026 by rpki-client