This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3231332e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: DJ1zGi/zbmk1GsocaEllmt8e9K+GGElwcTBmeR108LI= Subject key identifier: 82:2C:1B:2A:66:16:5C:35:EE:A4:4C:01:F3:38:95:D7:7B:6D:0B:0E Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 468641CAA200CF3FBE3572CEE9926F982202CE6B Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e203230343733.roa Signing time: Thu 20 Nov 2025 14:52:04 +0000 ROA not before: Thu 20 Nov 2025 14:47:04 +0000 ROA not after: Thu 19 Nov 2026 14:52:04 +0000 asID: 20473 IP address blocks: 147.125.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:86:41:ca:a2:00:cf:3f:be:35:72:ce:e9:92:6f:98:22:02:ce:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 14:47:04 2025 GMT Not After : Nov 19 14:52:04 2026 GMT Subject: CN=822C1B2A66165C35EEA44C01F33895D77B6D0B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:b0:37:95:45:db:62:e5:2c:22:63:34:a0: 65:42:5e:65:59:f9:17:ef:56:f9:82:98:97:f3:88: a2:ff:21:25:64:c4:6b:32:08:8e:2b:28:9d:62:f0: fa:e5:b7:68:4e:f9:93:ff:41:bc:89:2c:53:9d:0f: ae:28:d9:d9:48:44:27:2b:63:a9:1b:f6:a0:16:bb: a0:62:62:f3:b9:c1:5c:08:20:39:b3:f7:fe:d4:4a: 28:35:e1:cd:10:05:54:26:09:1c:25:e0:6e:3d:c7: 08:9b:c9:cb:68:db:ca:c3:ef:1f:6f:38:ca:ee:3d: 53:65:80:e4:ab:9c:97:3c:54:b7:d2:a9:d3:84:76: 7e:90:2e:69:16:cd:ed:9e:69:9c:ed:8a:c2:e6:97: 4a:1b:93:7e:e3:05:8a:0d:a8:a7:3e:f1:f1:27:cb: 49:fd:91:3e:48:26:04:ee:b4:a5:e5:62:e6:4f:09: 31:6d:7e:7a:a6:79:6a:6c:6c:0e:e7:fe:57:a0:55: f6:48:a7:3d:26:84:c0:76:b7:04:43:5b:09:8f:9e: d0:b4:15:96:ad:1d:0f:e6:5c:12:5e:7a:88:d5:b9: fa:04:0c:13:8d:c6:c0:22:17:41:e3:9e:be:f0:e1: 4c:52:b8:c4:96:b7:56:99:b5:b3:7e:25:83:52:bb: da:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2C:1B:2A:66:16:5C:35:EE:A4:4C:01:F3:38:95:D7:7B:6D:0B:0E X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.213.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:90:ab:b6:e2:27:ad:4b:45:fd:aa:4e:71:55:e8:44:6b:47: 68:68:d9:84:8c:33:d9:c5:10:e8:23:31:33:72:2d:78:b0:ec: ae:4e:31:fe:38:4f:7f:aa:67:77:b8:81:91:51:0e:d3:25:73: 06:0a:9c:8c:ec:7c:3c:ce:e8:c6:58:35:2b:c7:42:1e:06:ed: 67:16:3a:d4:57:4c:68:2b:76:ad:11:6d:f8:cd:7f:86:c9:ac: ab:77:7d:3e:b8:6a:45:1b:ed:c5:53:95:09:ef:c5:b2:8d:0c: 18:f7:3c:21:f7:2a:31:8b:5e:41:a5:77:5d:e0:e4:aa:7b:48: 6d:dc:12:a5:87:a7:5a:4d:f4:b1:48:ce:e5:47:7c:9c:33:36: b5:6f:11:71:d3:c4:12:5c:f9:3c:83:69:6a:b0:ac:d2:6e:b0: 57:23:02:75:81:d1:de:13:ea:fa:6f:5e:9b:ed:ff:f3:0f:59: 1c:a6:de:a1:15:56:0d:ec:2e:60:67:55:53:67:0c:65:bf:4c: 50:56:8d:39:dd:9b:65:e7:57:a1:09:79:53:5c:72:62:e7:fc: aa:b0:8b:07:31:43:7b:52:e6:dc:07:34:c9:77:19:fe:0b:52: fd:d4:10:73:9f:54:9e:16:fa:e1:7a:75:8e:76:86:4e:76:e9: a3:ee:92:d8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIURoZByqIAzz++NXLO6ZJvmCICzmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxNDQ3MDRaFw0yNjExMTkxNDUyMDRaMDMxMTAvBgNV BAMTKDgyMkMxQjJBNjYxNjVDMzVFRUE0NEMwMUYzMzg5NUQ3N0I2RDBCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47LA3lUXbYuUsImM0oGVCXmVZ +RfvVvmCmJfziKL/ISVkxGsyCI4rKJ1i8Prlt2hO+ZP/QbyJLFOdD64o2dlIRCcr Y6kb9qAWu6BiYvO5wVwIIDmz9/7USig14c0QBVQmCRwl4G49xwibycto28rD7x9v OMruPVNlgOSrnJc8VLfSqdOEdn6QLmkWze2eaZztisLml0obk37jBYoNqKc+8fEn y0n9kT5IJgTutKXlYuZPCTFtfnqmeWpsbA7n/legVfZIpz0mhMB2twRDWwmPntC0 FZatHQ/mXBJeeojVufoEDBONxsAiF0Hjnr7w4UxSuMSWt1aZtbN+JYNSu9qTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUgiwbKmYWXDXupEwB8ziV13ttCw4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfdUwDQYJKoZIhvcNAQELBQADggEBAByQq7biJ61LRf2qTnFV6ERrR2ho2YSM M9nFEOgjMTNyLXiw7K5OMf44T3+qZ3e4gZFRDtMlcwYKnIzsfDzO6MZYNSvHQh4G 7WcWOtRXTGgrdq0RbfjNf4bJrKt3fT64akUb7cVTlQnvxbKNDBj3PCH3KjGLXkGl d13g5Kp7SG3cEqWHp1pN9LFIzuVHfJwzNrVvEXHTxBJc+TyDaWqwrNJusFcjAnWB 0d4T6vpvXpvt//MPWRym3qEVVg3sLmBnVVNnDGW/TFBWjTndm2XnV6EJeVNccmLn /KqwiwcxQ3tS5twHNMl3Gf4LUv3UEHOfVJ4W+uF6dY52hk526aPuktg= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:43 2025 by rpki-client