This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3231342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: zeVxFOmqdIL2Ds3pVX7DlJ5Vlra1Z224qvXlWZ63Va0= Subject key identifier: 3F:A7:73:D0:40:93:08:F4:3C:72:FE:7F:CE:DE:01:F4:AC:16:8A:E5 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0BDEF2D7D5F0AC695C549AFBA0E97AAB255BA595 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32332d3234203d3e20383334.roa Signing time: Sat 27 Dec 2025 12:05:36 +0000 ROA not before: Sat 27 Dec 2025 12:00:36 +0000 ROA not after: Sat 26 Dec 2026 12:05:36 +0000 asID: 834 IP address blocks: 147.125.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:de:f2:d7:d5:f0:ac:69:5c:54:9a:fb:a0:e9:7a:ab:25:5b:a5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 27 12:00:36 2025 GMT Not After : Dec 26 12:05:36 2026 GMT Subject: CN=3FA773D0409308F43C72FE7FCEDE01F4AC168AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:51:b5:f9:ab:6f:7c:fb:10:ed:39:4e:50: 01:c2:74:99:d4:1e:b5:a0:01:eb:79:5f:8b:5b:c6: db:63:63:19:34:99:47:d1:61:a7:6a:af:51:86:8d: cd:40:90:f2:66:d9:f1:cf:9f:8e:28:d0:55:a1:31: bf:2a:39:37:f8:06:f6:23:8e:52:75:d8:aa:5e:fe: 55:cf:35:ca:ea:39:01:de:e3:f6:7d:fc:35:25:23: ff:ce:b1:38:01:87:3b:83:3f:cd:8c:5c:97:64:6c: 5b:eb:53:94:4e:45:e7:07:d8:ea:18:cf:4c:28:a1: 93:fe:eb:08:5d:9f:66:86:c9:5d:53:59:50:cc:16: 4f:c6:f7:1b:77:41:5f:b8:5a:f3:f9:4e:05:ed:1a: 18:e1:a1:56:56:75:28:bf:42:78:54:af:7b:e3:f1: a7:35:60:f9:bb:25:0c:b2:44:72:10:90:e5:6f:d5: f6:85:a5:5e:f4:41:c9:87:3a:6b:1b:92:a4:56:f4: c2:82:c9:ca:ea:f5:7e:13:e7:bf:66:b8:81:08:43: 73:86:79:f6:fd:39:1e:df:93:fd:f7:68:e9:17:1f: 8c:fc:07:da:fe:35:fb:1e:eb:5d:9d:9c:47:67:df: 87:d7:d6:cc:b5:b3:1e:58:e2:d1:c5:0e:11:02:e8: 41:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:73:D0:40:93:08:F4:3C:72:FE:7F:CE:DE:01:F4:AC:16:8A:E5 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.214.0/23 Signature Algorithm: sha256WithRSAEncryption 77:28:6c:1e:0e:ff:43:6c:11:cb:a9:e3:5d:45:62:43:af:51: 1a:1f:d3:cf:b9:27:c3:e3:3a:ca:7e:fc:70:2d:55:b6:17:99: 79:eb:54:a3:08:50:bf:8f:be:fc:b3:b0:b8:ce:ab:43:02:fd: 3f:92:3f:d6:5f:02:e7:25:57:8c:6c:92:c1:13:d3:b5:ce:b3: 6f:84:65:d2:89:89:22:c1:15:e5:01:7f:d2:91:06:91:26:40: 20:44:14:0f:66:ba:1a:22:5a:e1:1a:53:ff:f1:1b:4e:8d:8e: d5:92:26:d9:40:60:4d:ba:a5:e3:eb:65:c3:ca:26:f6:01:de: b3:06:cb:b2:e4:44:0d:97:67:d8:2b:e9:1a:df:bc:74:54:91: 4c:6d:74:8b:55:0a:24:af:93:f2:78:90:be:aa:84:65:bb:5c: 04:d3:93:41:8f:be:88:33:f1:65:3b:54:22:ff:5c:05:6e:0c: c7:78:f2:c1:67:86:52:af:55:08:1c:41:5e:54:d0:b0:72:0e: 60:34:e0:07:2d:06:40:c4:68:9f:b2:3b:2f:24:93:f4:e8:96: 76:1d:6d:e3:0d:eb:2f:ea:ee:5a:29:06:72:ab:0d:06:02:75: ab:6b:68:fa:d8:ed:57:14:6b:2b:df:12:b1:d7:54:ec:76:c1: 92:7e:4b:5a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUC97y19XwrGlcVJr7oOl6qyVbpZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMjcxMjAwMzZaFw0yNjEyMjYxMjA1MzZaMDMxMTAvBgNV BAMTKDNGQTc3M0QwNDA5MzA4RjQzQzcyRkU3RkNFREUwMUY0QUMxNjhBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+1G1+atvfPsQ7TlOUAHCdJnU HrWgAet5X4tbxttjYxk0mUfRYadqr1GGjc1AkPJm2fHPn44o0FWhMb8qOTf4BvYj jlJ12Kpe/lXPNcrqOQHe4/Z9/DUlI//OsTgBhzuDP82MXJdkbFvrU5RORecH2OoY z0wooZP+6whdn2aGyV1TWVDMFk/G9xt3QV+4WvP5TgXtGhjhoVZWdSi/QnhUr3vj 8ac1YPm7JQyyRHIQkOVv1faFpV70QcmHOmsbkqRW9MKCycrq9X4T579muIEIQ3OG efb9OR7fk/33aOkXH4z8B9r+Nfse612dnEdn34fX1sy1sx5Y4tHFDhEC6EHlAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUP6dz0ECTCPQ8cv5/zt4B9KwWiuUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 1jANBgkqhkiG9w0BAQsFAAOCAQEAdyhsHg7/Q2wRy6njXUViQ69RGh/Tz7knw+M6 yn78cC1VtheZeetUowhQv4++/LOwuM6rQwL9P5I/1l8C5yVXjGySwRPTtc6zb4Rl 0omJIsEV5QF/0pEGkSZAIEQUD2a6GiJa4RpT//EbTo2O1ZIm2UBgTbql4+tlw8om 9gHeswbLsuREDZdn2CvpGt+8dFSRTG10i1UKJK+T8niQvqqEZbtcBNOTQY++iDPx ZTtUIv9cBW4Mx3jywWeGUq9VCBxBXlTQsHIOYDTgBy0GQMRon7I7LyST9OiWdh1t 4w3rL+ruWikGcqsNBgJ1q2to+tjtVxRrK98SsddU7HbBkn5LWg== -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:59 2025 by rpki-client