This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3231322e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: yyOvmeeyOPckm1fUNR5+dvr+6ebvOEJuCCleNFODvnw= Subject key identifier: 51:69:06:54:4D:D7:F1:CB:D5:D6:28:7F:99:EA:F4:E8:C6:B7:EA:CE Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 61260901F3060B8909459CB277D971863F2C67B7 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e203230343733.roa Signing time: Thu 20 Nov 2025 14:52:15 +0000 ROA not before: Thu 20 Nov 2025 14:47:15 +0000 ROA not after: Thu 19 Nov 2026 14:52:15 +0000 asID: 20473 IP address blocks: 147.125.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:26:09:01:f3:06:0b:89:09:45:9c:b2:77:d9:71:86:3f:2c:67:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 14:47:15 2025 GMT Not After : Nov 19 14:52:15 2026 GMT Subject: CN=516906544DD7F1CBD5D6287F99EAF4E8C6B7EACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:db:0d:20:df:7f:7c:6f:d1:af:99:1c:d2:53: 30:c8:91:2f:f9:f0:34:71:68:f3:6c:f0:5e:52:fc: 74:f6:72:39:65:77:a0:dc:80:2e:f5:a1:af:b1:c2: c7:99:28:e6:17:d6:87:78:d3:1a:aa:5b:93:a9:04: 5e:88:3b:13:d9:cf:12:24:e5:40:9a:d7:86:fe:1a: ef:59:b7:42:aa:4f:39:16:7e:5a:f7:b5:a1:c6:eb: b2:54:23:6a:af:ce:50:a1:2a:db:bf:87:3b:b1:c9: bb:74:b9:e5:01:69:03:6c:2e:84:7d:c8:4d:71:f8: 09:42:44:03:61:dd:55:b9:d1:29:3a:37:c0:77:d8: 51:ad:82:66:18:fd:21:62:1e:48:86:b4:7e:da:2c: c0:a6:d7:5b:4e:69:ee:44:01:6b:d4:d2:5d:dd:49: 3c:27:00:5c:23:ef:76:36:25:93:cc:72:2e:8b:c7: b3:18:4b:31:b4:c6:cc:4f:14:99:6d:1b:c7:4c:c2: ff:a2:6a:6a:c4:fc:e4:eb:7e:73:e3:05:ab:22:66: e5:70:93:50:47:e7:a5:e7:86:8c:dd:55:8e:d5:90: 03:e1:bc:96:b4:e0:a8:ed:0e:f6:93:17:a4:b8:89: 95:a0:c0:cc:59:6b:cd:fc:41:50:a6:6b:e6:d4:54: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:06:54:4D:D7:F1:CB:D5:D6:28:7F:99:EA:F4:E8:C6:B7:EA:CE X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:58:b8:96:4d:c4:46:05:5b:98:75:2b:d3:80:f6:c9:ae:88: ed:20:3d:0f:b5:6f:f1:bc:4a:a5:5a:b1:52:76:ea:ae:2a:52: de:8a:b2:9b:1e:f1:c7:71:72:48:fe:cf:19:d5:a6:7b:81:e8: d2:40:42:f8:4e:19:dd:d3:39:9c:1e:1b:80:1b:2c:b9:6b:d0: 96:b9:e7:15:21:c6:53:40:c9:c5:ab:16:2d:fe:34:a6:b0:6a: 2d:97:bb:88:7e:6f:59:bd:90:70:c1:24:82:75:1d:16:ec:50: c0:51:85:b9:d1:d5:8e:99:24:96:24:94:3e:ea:72:05:99:70: 5a:12:55:ae:82:65:b6:4b:d9:0b:c5:eb:f0:4f:99:27:e0:9e: c6:d2:b4:f8:69:0b:ba:20:da:93:ba:80:56:70:d1:f4:39:a9: 00:f6:0f:9d:15:50:05:1a:ba:cd:13:fc:e2:3f:1c:7e:12:c8: fd:57:38:c3:e9:5d:c7:e0:d1:21:0b:a8:7d:dc:2f:be:63:4e: 1d:64:3a:ec:8e:32:de:60:5b:fb:c9:4d:36:bd:8a:0b:da:db: 8e:e5:dc:9c:32:17:7a:8d:81:a8:70:27:5f:e6:4c:f0:2b:b9: cb:e0:01:b6:cd:1f:67:a1:1c:3d:c1:2a:5f:95:eb:5d:cd:5a: 53:af:fd:71 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUYSYJAfMGC4kJRZyyd9lxhj8sZ7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxNDQ3MTVaFw0yNjExMTkxNDUyMTVaMDMxMTAvBgNV BAMTKDUxNjkwNjU0NEREN0YxQ0JENUQ2Mjg3Rjk5RUFGNEU4QzZCN0VBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2w0g3398b9GvmRzSUzDIkS/5 8DRxaPNs8F5S/HT2cjlld6DcgC71oa+xwseZKOYX1od40xqqW5OpBF6IOxPZzxIk 5UCa14b+Gu9Zt0KqTzkWflr3taHG67JUI2qvzlChKtu/hzuxybt0ueUBaQNsLoR9 yE1x+AlCRANh3VW50Sk6N8B32FGtgmYY/SFiHkiGtH7aLMCm11tOae5EAWvU0l3d STwnAFwj73Y2JZPMci6Lx7MYSzG0xsxPFJltG8dMwv+iamrE/OTrfnPjBasiZuVw k1BH56XnhozdVY7VkAPhvJa04KjtDvaTF6S4iZWgwMxZa838QVCma+bUVCj3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUUWkGVE3X8cvV1ih/mer06Ma36s4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfdQwDQYJKoZIhvcNAQELBQADggEBAEpYuJZNxEYFW5h1K9OA9smuiO0gPQ+1 b/G8SqVasVJ26q4qUt6Kspse8cdxckj+zxnVpnuB6NJAQvhOGd3TOZweG4AbLLlr 0Ja55xUhxlNAycWrFi3+NKawai2Xu4h+b1m9kHDBJIJ1HRbsUMBRhbnR1Y6ZJJYk lD7qcgWZcFoSVa6CZbZL2QvF6/BPmSfgnsbStPhpC7og2pO6gFZw0fQ5qQD2D50V UAUaus0T/OI/HH4SyP1XOMPpXcfg0SELqH3cL75jTh1kOuyOMt5gW/vJTTa9igva 247l3JwyF3qNgahwJ1/mTPArucvgAbbNH2ehHD3BKl+V613NWlOv/XE= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:44 2025 by rpki-client