This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3231342e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: Caos+mF62UKwvoFg3COVDCcKu0395URj4ybiuPzmfhw= Subject key identifier: 05:4D:36:E3:3D:9D:C3:1B:31:8A:0A:EA:3F:B2:60:88:B4:B1:95:AB Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1112EBB1063D44051D74E224B3BB0D05B73D5F09 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32342d3234203d3e203230343733.roa Signing time: Thu 20 Nov 2025 14:51:52 +0000 ROA not before: Thu 20 Nov 2025 14:46:52 +0000 ROA not after: Thu 19 Nov 2026 14:51:52 +0000 asID: 20473 IP address blocks: 147.125.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:12:eb:b1:06:3d:44:05:1d:74:e2:24:b3:bb:0d:05:b7:3d:5f:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 14:46:52 2025 GMT Not After : Nov 19 14:51:52 2026 GMT Subject: CN=054D36E33D9DC31B318A0AEA3FB26088B4B195AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0c:0d:d5:6e:38:87:7a:f7:87:ef:0b:78:8d: c6:65:74:50:4e:7f:97:71:4b:33:83:b3:10:5a:82: b7:71:48:01:eb:9c:42:c0:61:fc:1b:0a:01:52:1e: 29:75:1f:a7:68:83:da:fe:9f:6b:e4:d4:69:7f:80: d4:79:c4:34:35:7b:92:4c:ae:6c:aa:28:75:d5:1e: 10:92:62:5d:eb:29:9f:e7:c7:aa:91:c7:46:80:bc: 6c:67:92:52:f1:b1:7b:ec:ec:57:e4:94:6a:2c:8c: 0a:39:10:67:44:e2:b7:c7:1d:89:99:55:9c:df:1e: 1e:84:2b:65:1a:d7:df:d2:21:aa:b7:f6:f4:12:f7: 0f:6b:58:fd:64:1b:58:64:39:4e:d6:a7:65:ba:bd: 4c:70:be:08:8b:33:1b:57:f3:79:95:1d:0f:e9:78: e8:82:3c:7b:32:73:94:b0:9b:31:49:1d:62:b3:77: c8:ad:cb:e6:de:d1:62:18:07:8a:3b:3d:1e:76:d9: 72:a8:c7:86:d5:f6:c5:fe:2f:84:4d:8d:b8:f3:17: 64:eb:5e:aa:a1:a2:f1:33:bb:6b:95:7f:f9:f4:c5: 81:c3:b6:68:1b:22:05:69:b9:5a:9c:ea:a9:bd:0b: a8:e4:24:f8:64:dc:f0:91:cf:a2:8f:21:0c:0d:08: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:36:E3:3D:9D:C3:1B:31:8A:0A:EA:3F:B2:60:88:B4:B1:95:AB X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231342e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.214.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:da:67:2a:fc:74:12:11:54:be:b1:2f:fe:d0:fb:cd:00:1d: 64:27:48:29:4e:39:0a:ae:a4:9f:1e:2c:8c:ca:99:3f:8e:bf: 59:cb:67:83:bb:14:67:28:07:4b:c2:21:e1:8d:d7:50:7b:54: e7:fe:e7:4f:5d:30:cc:8e:c7:cd:8a:1a:b6:5a:ae:7d:dd:1f: da:e7:d5:27:89:be:49:25:ed:c4:82:5f:82:b4:d4:b4:a1:72: 70:a8:ba:65:46:4f:af:b1:b1:94:ca:c5:1d:bc:e7:58:cc:60: ea:6a:d2:57:35:26:d7:90:e2:87:2c:ab:4e:19:b3:81:c1:20: c4:2c:98:d5:dc:5c:97:f9:a2:af:13:f3:8d:e2:72:6c:9f:00: 00:2a:3b:4a:b8:16:0b:25:df:ff:5b:22:50:63:76:74:77:ef: c1:26:8c:ec:d4:e3:88:68:38:1c:a0:8f:eb:dc:e6:14:97:83: bb:0b:a7:24:70:a2:51:4a:39:9e:2b:5d:1e:85:18:c1:31:0a: 56:87:7e:9a:34:18:05:82:0d:04:c2:0b:d2:ea:68:8b:d3:3e: d5:85:a7:a8:ba:3c:9b:2f:87:af:58:a4:cf:5f:43:a1:f5:46: 38:4a:59:2a:5c:0a:8c:7d:fb:3d:28:df:23:a0:ea:e9:e9:35: 7e:05:bc:d8 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUERLrsQY9RAUddOIks7sNBbc9XwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxNDQ2NTJaFw0yNjExMTkxNDUxNTJaMDMxMTAvBgNV BAMTKDA1NEQzNkUzM0Q5REMzMUIzMThBMEFFQTNGQjI2MDg4QjRCMTk1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmDA3VbjiHeveH7wt4jcZldFBO f5dxSzODsxBagrdxSAHrnELAYfwbCgFSHil1H6dog9r+n2vk1Gl/gNR5xDQ1e5JM rmyqKHXVHhCSYl3rKZ/nx6qRx0aAvGxnklLxsXvs7FfklGosjAo5EGdE4rfHHYmZ VZzfHh6EK2Ua19/SIaq39vQS9w9rWP1kG1hkOU7Wp2W6vUxwvgiLMxtX83mVHQ/p eOiCPHsyc5SwmzFJHWKzd8ity+be0WIYB4o7PR522XKox4bV9sX+L4RNjbjzF2Tr XqqhovEzu2uVf/n0xYHDtmgbIgVpuVqc6qm9C6jkJPhk3PCRz6KPIQwNCCP5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUBU024z2dwxsxigrqP7JgiLSxlaswHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfdYwDQYJKoZIhvcNAQELBQADggEBAG/aZyr8dBIRVL6xL/7Q+80AHWQnSClO OQqupJ8eLIzKmT+Ov1nLZ4O7FGcoB0vCIeGN11B7VOf+509dMMyOx82KGrZarn3d H9rn1SeJvkkl7cSCX4K01LShcnCoumVGT6+xsZTKxR2851jMYOpq0lc1JteQ4ocs q04Zs4HBIMQsmNXcXJf5oq8T843icmyfAAAqO0q4Fgsl3/9bIlBjdnR378EmjOzU 44hoOBygj+vc5hSXg7sLpyRwolFKOZ4rXR6FGMExClaHfpo0GAWCDQTCC9LqaIvT PtWFp6i6PJsvh69YpM9fQ6H1RjhKWSpcCox9+z0o3yOg6unpNX4FvNg= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:41 2025 by rpki-client