This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3231332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Mtndn0qEcce0DbJfsrfDLQlkz9h0vOO9qF6YFvIy4KE= Subject key identifier: 98:51:4C:55:D3:FB:66:96:21:16:56:8C:DA:1D:B0:6F:DC:BD:47:89 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 197162FDB309689A104AB341D4A17DD893A7E131 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e20383334.roa Signing time: Sat 27 Dec 2025 12:05:36 +0000 ROA not before: Sat 27 Dec 2025 12:00:36 +0000 ROA not after: Sat 26 Dec 2026 12:05:36 +0000 asID: 834 IP address blocks: 147.125.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:71:62:fd:b3:09:68:9a:10:4a:b3:41:d4:a1:7d:d8:93:a7:e1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 27 12:00:36 2025 GMT Not After : Dec 26 12:05:36 2026 GMT Subject: CN=98514C55D3FB66962116568CDA1DB06FDCBD4789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:d8:db:50:7b:c9:8e:e1:57:b4:e7:d2:0c: 24:f0:3c:5c:b6:59:2c:78:f6:2b:37:d1:ae:32:06: 6e:d8:81:37:4b:10:4c:87:34:1f:cb:38:b9:c4:bf: 74:94:4f:c7:8b:c0:5f:04:f5:2d:f5:be:f5:f4:f4: 81:66:c6:1d:5e:87:bd:f1:04:af:25:78:04:89:16: e6:ea:b5:3b:8e:2d:af:38:8f:b4:6a:66:af:cc:ac: 17:65:03:63:42:b6:fc:ad:a3:93:bf:38:bf:ee:7a: b5:88:62:48:d0:1d:47:e6:ce:89:51:99:0e:ec:e0: e9:0f:41:00:16:41:13:63:e9:43:a8:be:6a:42:e6: 98:40:75:91:ab:12:d1:3f:49:8a:46:38:d6:13:10: 66:d3:9d:42:e4:9f:94:95:02:c3:68:32:05:fd:97: 10:78:29:0c:47:4f:7b:40:63:80:46:11:ac:d9:d3: fd:e4:dc:d3:25:ab:04:86:51:39:7d:30:dd:df:a4: cc:57:3e:05:7b:9d:68:7b:91:23:0d:bf:0b:65:a6: 35:4f:5d:6c:ad:2a:f1:90:b3:a4:ab:d4:7f:eb:fa: 6e:c8:76:09:0a:b0:0d:01:8b:4f:db:6f:6b:79:8a: bd:a9:39:87:f9:e9:6b:f7:4a:c6:39:0c:2d:33:6c: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:51:4C:55:D3:FB:66:96:21:16:56:8C:DA:1D:B0:6F:DC:BD:47:89 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.213.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:95:d1:00:73:76:7d:28:fc:45:f3:cb:3c:5e:15:1d:47:2c: 34:45:bc:b0:20:5c:b1:99:97:06:09:7f:32:94:43:37:67:c3: 09:d8:da:68:67:d2:f9:8f:5c:e7:69:64:95:71:c3:dd:f2:7d: c3:e1:bd:d0:64:42:eb:10:1b:38:f1:2d:b4:0f:08:41:14:5e: d6:33:b3:0e:f7:87:c1:20:6e:09:2b:21:2d:21:80:69:51:fc: 18:fd:28:3e:31:ed:76:b2:27:4e:bd:0f:dd:ea:f0:2c:a2:04: 2a:1c:6d:c7:bd:0b:c6:71:24:58:ad:81:e6:80:4b:66:96:44: ae:7c:04:f0:7c:14:a6:4c:c9:b4:8a:36:ee:0d:33:52:35:4c: a6:04:67:57:3b:ba:a2:48:97:5a:5b:ef:88:82:5d:bf:c5:a6: ad:52:f5:c3:f0:20:ba:85:7d:b3:f3:f0:ca:dc:c0:7c:a9:a5: 3c:ee:6b:32:1b:9a:25:ac:09:ee:78:25:4c:f4:43:87:60:97: 7f:f6:9f:af:3f:3c:ce:ee:25:2e:ab:13:a3:8d:83:97:6d:3b: 3c:47:5c:51:ca:27:42:a1:54:66:ca:6f:4b:5f:91:0c:37:90: 8c:b6:5d:2e:d2:58:47:d9:b8:8f:db:6a:19:3e:24:91:12:f9: 55:3f:9e:ef -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGXFi/bMJaJoQSrNB1KF92JOn4TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMjcxMjAwMzZaFw0yNjEyMjYxMjA1MzZaMDMxMTAvBgNV BAMTKDk4NTE0QzU1RDNGQjY2OTYyMTE2NTY4Q0RBMURCMDZGRENCRDQ3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VdjbUHvJjuFXtOfSDCTwPFy2 WSx49is30a4yBm7YgTdLEEyHNB/LOLnEv3SUT8eLwF8E9S31vvX09IFmxh1eh73x BK8leASJFubqtTuOLa84j7RqZq/MrBdlA2NCtvyto5O/OL/uerWIYkjQHUfmzolR mQ7s4OkPQQAWQRNj6UOovmpC5phAdZGrEtE/SYpGONYTEGbTnULkn5SVAsNoMgX9 lxB4KQxHT3tAY4BGEazZ0/3k3NMlqwSGUTl9MN3fpMxXPgV7nWh7kSMNvwtlpjVP XWytKvGQs6Sr1H/r+m7IdgkKsA0Bi0/bb2t5ir2pOYf56Wv3SsY5DC0zbE8hAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUmFFMVdP7ZpYhFlaM2h2wb9y9R4kwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 1TANBgkqhkiG9w0BAQsFAAOCAQEAa5XRAHN2fSj8RfPLPF4VHUcsNEW8sCBcsZmX Bgl/MpRDN2fDCdjaaGfS+Y9c52lklXHD3fJ9w+G90GRC6xAbOPEttA8IQRRe1jOz DveHwSBuCSshLSGAaVH8GP0oPjHtdrInTr0P3erwLKIEKhxtx70LxnEkWK2B5oBL ZpZErnwE8HwUpkzJtIo27g0zUjVMpgRnVzu6okiXWlvviIJdv8WmrVL1w/AguoV9 s/PwytzAfKmlPO5rMhuaJawJ7nglTPRDh2CXf/afrz88zu4lLqsTo42Dl207PEdc UconQqFUZspvS1+RDDeQjLZdLtJYR9m4j9tqGT4kkRL5VT+e7w== -----END CERTIFICATE-----Generated at Tue Dec 30 21:08:02 2025 by rpki-client