This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231352e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3231352e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: 69eA6bZNEllehdZRG3hrIyfWZ8RzY+EeQ4RpGWTVC9k= Subject key identifier: C2:B5:9A:F7:20:72:B1:6F:59:A4:A5:AC:8B:08:B1:2A:F9:F6:5C:18 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 520D735D1D7C3B6D229F733D6A3728D2647B22D0 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231352e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:05:54 +0000 ROA not before: Mon 24 Nov 2025 17:00:54 +0000 ROA not after: Mon 23 Nov 2026 17:05:54 +0000 asID: 20473 IP address blocks: 147.125.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0d:73:5d:1d:7c:3b:6d:22:9f:73:3d:6a:37:28:d2:64:7b:22:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:00:54 2025 GMT Not After : Nov 23 17:05:54 2026 GMT Subject: CN=C2B59AF72072B16F59A4A5AC8B08B12AF9F65C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:48:b9:8c:57:38:80:ac:b1:50:41:2d:c7: 0c:58:46:62:99:04:2e:8d:1c:fa:62:79:f1:03:5d: 3c:2d:8e:d1:7c:c7:ed:3c:ed:a4:91:c2:46:6d:cf: 3d:bf:c7:6e:95:db:ac:98:dd:7d:6d:bb:5d:ae:52: 25:43:34:6f:8a:c2:47:b8:c3:80:0f:9a:ce:39:86: 0f:52:a1:1d:1e:d3:08:e3:35:31:fa:51:2e:15:79: 78:03:d4:50:77:e7:90:60:a8:49:37:30:7b:b4:9f: 43:b2:8a:e0:03:48:0f:02:2a:6e:35:76:48:8e:bf: 30:53:65:4e:08:ad:43:fc:18:8d:4c:fc:ff:e3:7e: 21:33:0f:f5:b7:6b:52:a7:40:10:50:a9:30:ef:2f: 99:44:0a:0b:c7:b9:b8:ba:b9:58:ae:71:ed:c3:a9: 95:78:3a:6a:f1:f0:11:75:ce:2c:10:2f:a5:22:d5: e6:5b:21:2e:4b:a0:76:bb:28:47:a6:83:29:34:c3: 26:60:67:da:09:dc:b4:ac:3b:ed:59:38:03:3f:67: 4b:3b:bc:03:9d:05:e7:24:c5:80:a0:78:f6:17:b9: 1b:54:d6:2e:4b:c1:2f:9b:e7:b7:c8:34:17:a4:aa: 68:57:ae:67:91:f5:09:1a:76:03:37:2f:5a:79:2b: a8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B5:9A:F7:20:72:B1:6F:59:A4:A5:AC:8B:08:B1:2A:F9:F6:5C:18 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231352e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.215.0/24 Signature Algorithm: sha256WithRSAEncryption 14:7e:7a:22:fd:22:60:92:05:7c:79:09:79:a4:83:8a:f1:7b: ab:d6:be:48:cf:d2:c7:02:09:4c:ef:d4:a7:0e:60:b1:4f:a2: 34:a0:40:b2:88:74:60:8e:53:87:9b:11:a0:eb:1c:07:bf:80: b4:3f:68:56:b4:1b:3d:a9:0c:8d:2b:05:42:ad:01:0c:92:db: 4e:3f:6f:0b:9c:41:d6:e9:e8:84:cd:ff:61:09:88:16:01:51: ed:2e:45:01:9a:13:d9:20:b6:81:11:d9:9e:24:58:1c:df:e1: 61:8f:9d:ea:ef:25:bb:38:a4:af:c4:20:75:34:ea:2b:cb:e5: 73:32:43:87:91:e2:b0:8a:c5:e0:b6:43:a6:d9:a3:57:b3:c8: d6:8c:6c:81:ac:a6:48:3f:33:98:2e:83:67:bb:b4:54:6a:02: e4:c1:16:9f:34:73:6b:ee:ed:86:f7:fa:25:3c:72:0d:35:ba: 2e:26:08:c0:30:25:48:5e:76:17:7c:6f:07:87:af:8a:0a:92: ea:99:50:c4:ef:11:87:a5:1e:f2:4b:11:6b:b6:03:e1:23:08: 3a:bd:55:5d:3a:de:22:ab:38:e3:ed:47:2c:b2:4a:e4:d5:f8: a2:91:1c:0e:37:d2:91:a9:bf:6c:ec:90:56:57:e9:ba:e1:5c: a8:c2:36:65 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUUg1zXR18O20in3M9ajco0mR7ItAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAwNTRaFw0yNjExMjMxNzA1NTRaMDMxMTAvBgNV BAMTKEMyQjU5QUY3MjA3MkIxNkY1OUE0QTVBQzhCMDhCMTJBRjlGNjVDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU80i5jFc4gKyxUEEtxwxYRmKZ BC6NHPpiefEDXTwtjtF8x+087aSRwkZtzz2/x26V26yY3X1tu12uUiVDNG+Kwke4 w4APms45hg9SoR0e0wjjNTH6US4VeXgD1FB355BgqEk3MHu0n0OyiuADSA8CKm41 dkiOvzBTZU4IrUP8GI1M/P/jfiEzD/W3a1KnQBBQqTDvL5lECgvHubi6uViuce3D qZV4Omrx8BF1ziwQL6Ui1eZbIS5LoHa7KEemgyk0wyZgZ9oJ3LSsO+1ZOAM/Z0s7 vAOdBeckxYCgePYXuRtU1i5LwS+b57fINBekqmhXrmeR9QkadgM3L1p5K6hnAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUwrWa9yBysW9ZpKWsiwixKvn2XBgwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfdcwDQYJKoZIhvcNAQELBQADggEBABR+eiL9ImCSBXx5CXmkg4rxe6vWvkjP 0scCCUzv1KcOYLFPojSgQLKIdGCOU4ebEaDrHAe/gLQ/aFa0Gz2pDI0rBUKtAQyS 204/bwucQdbp6ITN/2EJiBYBUe0uRQGaE9kgtoER2Z4kWBzf4WGPnervJbs4pK/E IHU06ivL5XMyQ4eR4rCKxeC2Q6bZo1ezyNaMbIGspkg/M5gug2e7tFRqAuTBFp80 c2vu7Yb3+iU8cg01ui4mCMAwJUhedhd8bweHr4oKkuqZUMTvEYelHvJLEWu2A+Ej CDq9VV063iKrOOPtRyyySuTV+KKRHA430pGpv2zskFZX6brhXKjCNmU= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:42 2025 by rpki-client