This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3231322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: dCBam80AFrOzsiSWQrWPoEs5IhGEEBqPjB+w6wiQVeQ= Subject key identifier: 36:86:EC:96:AF:63:2D:5D:5E:B5:61:A2:B4:45:40:19:D3:CF:8E:1D Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 521C532344B918A2DB8FF7B5ECC839C0F3FAE9B3 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e20383334.roa Signing time: Tue 27 Jan 2026 11:57:22 +0000 ROA not before: Tue 27 Jan 2026 11:52:22 +0000 ROA not after: Tue 26 Jan 2027 11:57:22 +0000 asID: 834 IP address blocks: 147.125.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 19:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:1c:53:23:44:b9:18:a2:db:8f:f7:b5:ec:c8:39:c0:f3:fa:e9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 27 11:52:22 2026 GMT Not After : Jan 26 11:57:22 2027 GMT Subject: CN=3686EC96AF632D5D5EB561A2B4454019D3CF8E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:92:91:8a:33:ca:ad:bc:58:86:52:13:01: e9:f4:0d:0f:84:90:b0:b9:6c:e0:a4:9f:fc:f2:13: b7:81:3b:3b:fd:17:d2:6b:d5:1a:80:30:55:34:17: 01:70:b3:e3:dd:0e:39:46:3e:c3:f4:ec:04:aa:b1: 96:70:92:7a:7d:23:d0:13:e3:10:97:44:3d:fb:89: c2:c4:ac:33:ce:07:61:05:78:43:5d:40:d5:e1:19: 27:55:70:07:c6:dc:75:8c:34:91:76:51:5a:79:8a: 69:db:72:88:d4:72:6e:43:59:fb:90:fe:8a:f2:f5: 17:64:70:62:e5:34:e3:35:a1:36:a1:9a:4f:2b:82: 66:b0:cb:03:b5:dd:32:77:77:4d:f3:4c:82:9a:69: 29:1c:af:0b:e2:3f:a3:3a:54:f7:dc:d2:ce:49:32: 4b:d4:0a:84:c0:3c:6e:03:64:5b:a8:ab:ec:f2:53: 76:d9:91:98:90:5e:82:1b:3b:f0:32:1d:62:e2:0b: 6d:40:12:6f:3a:40:b0:a7:e2:d6:30:8b:d8:eb:35: 20:ef:ca:ea:1a:17:72:0d:cf:77:af:68:ee:77:bf: cd:d1:ba:3c:a8:29:68:38:80:8e:40:85:bb:76:0c: 58:53:5c:11:20:c7:2a:73:cf:26:da:3a:14:96:4e: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:EC:96:AF:63:2D:5D:5E:B5:61:A2:B4:45:40:19:D3:CF:8E:1D X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.212.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f0:63:5d:ec:16:d4:38:1e:43:8e:97:01:07:ff:f7:66:8b: c5:66:e6:f6:ee:6d:a3:15:1a:ea:42:8e:1c:9c:8f:3c:4f:96: 5d:e2:5b:00:49:ba:94:fc:d3:c4:c9:6b:99:3f:ea:1f:f8:00: 4d:a6:68:c7:9e:df:c2:da:bb:52:82:ef:57:89:62:8f:aa:f3: ed:88:45:f5:e6:b1:49:91:b8:a6:cd:84:8a:b7:aa:04:02:66: d2:ef:34:52:d1:b7:20:37:52:03:35:53:36:36:bb:d9:8c:0f: 94:3d:d9:b5:3d:48:1a:f0:f1:4b:9d:fb:0d:35:8c:98:1f:fb: f0:a4:fc:aa:e8:cf:86:55:91:48:b7:35:d4:02:e4:e1:05:37: b3:80:3d:33:a1:39:06:c9:82:00:87:bb:69:c9:df:33:76:45: ff:44:c0:dc:2b:53:2f:29:5c:92:47:26:2d:91:09:24:0f:f9: 37:93:94:48:65:8f:80:5f:e1:db:9b:66:41:0b:fc:c8:43:85: 5c:3a:3d:d7:c8:54:c5:de:98:35:a2:08:ea:39:ff:3f:3f:d4: 4f:09:b8:92:18:8b:c1:08:98:1a:51:43:47:7c:ea:2d:ec:ab: a5:c2:a8:19:a9:32:aa:fb:76:04:06:64:f6:52:76:73:d6:58: e0:6b:c5:10 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUhxTI0S5GKLbj/e17Mg5wPP66bMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMjcxMTUyMjJaFw0yNzAxMjYxMTU3MjJaMDMxMTAvBgNV BAMTKDM2ODZFQzk2QUY2MzJENUQ1RUI1NjFBMkI0NDU0MDE5RDNDRjhFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzZKRijPKrbxYhlITAen0DQ+E kLC5bOCkn/zyE7eBOzv9F9Jr1RqAMFU0FwFws+PdDjlGPsP07ASqsZZwknp9I9AT 4xCXRD37icLErDPOB2EFeENdQNXhGSdVcAfG3HWMNJF2UVp5imnbcojUcm5DWfuQ /ory9RdkcGLlNOM1oTahmk8rgmawywO13TJ3d03zTIKaaSkcrwviP6M6VPfc0s5J MkvUCoTAPG4DZFuoq+zyU3bZkZiQXoIbO/AyHWLiC21AEm86QLCn4tYwi9jrNSDv yuoaF3INz3evaO53v83RujyoKWg4gI5Ahbt2DFhTXBEgxypzzybaOhSWTk7FAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUNobslq9jLV1etWGitEVAGdPPjh0wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 1DANBgkqhkiG9w0BAQsFAAOCAQEAB/BjXewW1DgeQ46XAQf/92aLxWbm9u5toxUa 6kKOHJyPPE+WXeJbAEm6lPzTxMlrmT/qH/gATaZox57fwtq7UoLvV4lij6rz7YhF 9eaxSZG4ps2EireqBAJm0u80UtG3IDdSAzVTNja72YwPlD3ZtT1IGvDxS537DTWM mB/78KT8qujPhlWRSLc11ALk4QU3s4A9M6E5BsmCAIe7acnfM3ZF/0TA3CtTLylc kkcmLZEJJA/5N5OUSGWPgF/h25tmQQv8yEOFXDo918hUxd6YNaII6jn/Pz/UTwm4 khiLwQiYGlFDR3zqLeyrpcKoGakyqvt2BAZk9lJ2c9ZY4GvFEA== -----END CERTIFICATE-----Generated at Sat Jan 31 11:52:34 2026 by rpki-client