This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e203330303538.roa File: 3134372e3132352e3231332e302f32342d3234203d3e203330303538.roa (raw, json) Hash identifier: owH0VEDdOVrUXaso98kEZH8Mubes+ZNt6rLujyBhRKw= Subject key identifier: 8C:DF:7B:F5:DF:7E:5F:20:10:71:F7:43:4B:A2:EC:6B:ED:33:BA:6C Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1256B8E67AF366BFA670CC0EAD14944E1C4EAB64 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e203330303538.roa Signing time: Wed 31 Dec 2025 19:00:50 +0000 ROA not before: Wed 31 Dec 2025 18:55:50 +0000 ROA not after: Wed 30 Dec 2026 19:00:50 +0000 asID: 30058 IP address blocks: 147.125.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:56:b8:e6:7a:f3:66:bf:a6:70:cc:0e:ad:14:94:4e:1c:4e:ab:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 31 18:55:50 2025 GMT Not After : Dec 30 19:00:50 2026 GMT Subject: CN=8CDF7BF5DF7E5F201071F7434BA2EC6BED33BA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ab:9a:76:e2:bc:54:1a:dc:a0:d1:4a:0c:ea: dc:73:2a:10:e2:d6:a5:39:d8:ec:16:1e:f0:25:9f: cc:92:52:66:e4:c4:96:be:ea:eb:e9:ee:d5:c9:90: ce:67:88:9e:8c:82:8c:65:32:b6:cd:40:9e:3b:6a: dd:3f:49:ab:cb:f2:04:c1:88:83:2a:92:92:08:aa: 89:8b:60:41:88:8c:6c:ea:85:1b:74:e6:62:39:2e: 56:05:69:4a:f3:4d:11:98:90:40:07:1d:5c:8d:bf: 24:d6:24:6d:5f:00:43:33:79:e5:5f:d8:c7:d7:30: f8:3a:1a:8c:71:48:7c:75:c8:1d:93:bf:27:72:c4: dc:d6:92:5e:bf:64:d0:ce:01:33:09:f3:7e:72:86: 13:74:72:01:dc:c5:cd:28:28:e0:c0:69:5d:58:dc: 7c:0e:19:4d:93:59:8a:bc:e0:fb:b9:57:aa:71:6a: ac:18:82:0d:4e:4d:26:15:4f:4b:81:04:5b:59:14: 1e:5b:7b:84:23:d1:0d:c0:bb:0b:47:37:9f:8c:e3: cd:f9:19:16:9d:3f:e9:af:cb:cd:4a:0d:f5:94:14: 4d:46:71:be:a1:05:68:58:41:fb:cc:cb:f6:0d:e3: c5:3e:be:0d:83:af:33:03:55:e9:8b:02:cb:b6:87: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DF:7B:F5:DF:7E:5F:20:10:71:F7:43:4B:A2:EC:6B:ED:33:BA:6C X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e203330303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.213.0/24 Signature Algorithm: sha256WithRSAEncryption 08:6b:8f:cd:fc:36:af:77:23:8a:bc:58:87:c0:aa:4f:0f:f9: 94:3d:b2:fe:bf:13:92:9f:03:d8:14:48:90:39:4f:d2:f2:ad: ba:9a:83:bb:f5:7f:ac:8f:a0:7a:8f:a5:7e:86:fc:62:e1:27: 52:38:f2:0b:9b:9a:a9:07:1f:15:cc:29:18:38:be:e2:7a:8f: 89:bd:c0:7b:92:a6:f0:ec:f1:c2:7f:7c:04:fe:52:65:46:d0: 24:b6:27:b5:4b:2e:1f:d4:96:13:03:34:f1:f2:d2:21:77:92: 56:4a:04:66:fb:c3:6b:9f:84:07:ad:24:2a:49:55:6e:2c:1b: a0:cf:7e:b8:6d:d1:7e:22:67:59:16:19:67:83:da:03:47:54: da:51:5f:29:c8:06:2f:66:73:9b:6c:f8:66:0f:00:b3:9d:0a: 71:70:a5:db:d1:8b:7f:8d:05:54:22:9d:20:b7:bb:b8:ff:47: 47:c7:72:6a:7a:f4:57:03:6e:7c:89:a7:57:b5:82:0a:b2:c0: 82:d2:2a:77:a2:f2:04:40:f3:cc:6d:a8:44:34:1d:85:fc:b5: 0a:65:b0:5c:eb:73:d3:e0:fd:c4:f6:8a:3d:2d:16:7b:e2:ea: 45:11:22:41:3e:9e:64:48:01:86:cd:b2:f9:8b:8c:f5:c4:ba: 62:c0:5d:14 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUEla45nrzZr+mcMwOrRSUThxOq2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMzExODU1NTBaFw0yNjEyMzAxOTAwNTBaMDMxMTAvBgNV BAMTKDhDREY3QkY1REY3RTVGMjAxMDcxRjc0MzRCQTJFQzZCRUQzM0JBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiq5p24rxUGtyg0UoM6txzKhDi 1qU52OwWHvAln8ySUmbkxJa+6uvp7tXJkM5niJ6MgoxlMrbNQJ47at0/SavL8gTB iIMqkpIIqomLYEGIjGzqhRt05mI5LlYFaUrzTRGYkEAHHVyNvyTWJG1fAEMzeeVf 2MfXMPg6GoxxSHx1yB2TvydyxNzWkl6/ZNDOATMJ835yhhN0cgHcxc0oKODAaV1Y 3HwOGU2TWYq84Pu5V6pxaqwYgg1OTSYVT0uBBFtZFB5be4Qj0Q3AuwtHN5+M4835 GRadP+mvy81KDfWUFE1Gcb6hBWhYQfvMy/YN48U+vg2DrzMDVemLAsu2h2NbAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjN979d9+XyAQcfdDS6Lsa+0zumwwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzAzMDM1Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfdUwDQYJKoZIhvcNAQELBQADggEBAAhrj838Nq93I4q8WIfAqk8P+ZQ9sv6/ E5KfA9gUSJA5T9Lyrbqag7v1f6yPoHqPpX6G/GLhJ1I48gubmqkHHxXMKRg4vuJ6 j4m9wHuSpvDs8cJ/fAT+UmVG0CS2J7VLLh/UlhMDNPHy0iF3klZKBGb7w2ufhAet JCpJVW4sG6DPfrht0X4iZ1kWGWeD2gNHVNpRXynIBi9mc5ts+GYPALOdCnFwpdvR i3+NBVQinSC3u7j/R0fHcmp69FcDbnyJp1e1ggqywILSKnei8gRA88xtqEQ0HYX8 tQplsFzrc9Pg/cT2ij0tFnvi6kURIkE+nmRIAYbNsvmLjPXEumLAXRQ= -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:02 2026 by rpki-client