This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3232342e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: rUJGtDbmSxR32hxjiSlSGvd0iXWw9kp2le4FNVG/DyI= Subject key identifier: A0:D1:0F:8F:93:33:32:1E:E9:FA:00:94:46:B5:06:17:75:70:56:D6 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0C9E23EAE142D8EF158291D7E78BFAA9BDC7C842 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:06:15 +0000 ROA not before: Mon 24 Nov 2025 17:01:15 +0000 ROA not after: Mon 23 Nov 2026 17:06:15 +0000 asID: 20473 IP address blocks: 147.125.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9e:23:ea:e1:42:d8:ef:15:82:91:d7:e7:8b:fa:a9:bd:c7:c8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:01:15 2025 GMT Not After : Nov 23 17:06:15 2026 GMT Subject: CN=A0D10F8F9333321EE9FA009446B50617757056D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:08:a5:1e:b9:06:f8:33:bb:bf:7a:06:e2:ee: 01:b2:cc:91:71:33:a2:80:34:93:3b:8c:64:02:f8: 51:8f:25:98:b5:35:fe:1b:98:b3:3f:0d:aa:ac:4e: 57:5a:5e:6f:61:b8:87:62:3f:67:cb:82:fe:da:de: f8:ab:a1:08:7e:16:7e:89:d7:9e:1c:1f:37:d3:52: 63:ab:67:22:2e:98:5d:14:0a:fd:01:93:26:c2:3c: c3:d0:eb:12:29:04:6c:77:46:fb:a1:f7:46:16:4e: 30:16:1b:58:03:7e:aa:74:ca:5a:5e:e8:19:c8:35: 7b:dd:fb:fc:87:cf:46:7b:46:62:20:4d:30:9f:2c: f3:1d:d7:8e:26:1d:84:b3:0c:86:b6:01:5e:97:76: 80:01:c8:98:59:a0:63:1c:a4:e2:08:59:09:cf:11: c4:c9:65:c9:f2:70:02:d5:6b:dc:21:39:00:19:d1: 1f:66:f3:0f:40:c3:c5:be:07:b6:9d:7a:b3:48:50: 8a:23:e5:87:bd:39:0f:c1:b8:b8:c8:df:9f:1a:38: 0e:5c:a8:bb:b6:fc:56:31:1d:e8:d1:b2:90:27:ca: 38:b9:ba:0b:96:a3:94:cc:c0:48:b2:50:67:c7:d4: 4f:98:1b:e0:60:2d:ea:64:82:b1:49:cb:4f:e8:2f: c4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D1:0F:8F:93:33:32:1E:E9:FA:00:94:46:B5:06:17:75:70:56:D6 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.224.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b0:8f:9e:fc:45:e2:4c:c4:fe:af:2b:5c:41:7b:aa:10:e8: 94:1a:a6:c4:7c:97:90:e8:c2:82:93:f2:7c:39:5d:dc:d6:62: d1:07:47:34:2e:28:7b:2d:f4:1a:b9:7b:98:90:db:b2:b0:e2: 93:43:ee:2e:e1:55:f4:72:bc:9a:27:2e:99:d6:79:1d:8d:79: 5e:40:e7:74:ff:8b:91:f1:c5:24:38:cc:03:7c:69:97:fd:6a: 7d:7a:f1:45:98:24:a9:54:5d:4e:1a:3e:d6:d2:45:9a:f4:80: 9f:9b:d4:9d:2d:2a:68:c3:1d:e7:82:2f:6e:17:6c:6c:97:c3: de:3c:ac:1c:e7:08:d4:5c:ac:f0:8c:7e:22:01:ce:0a:19:e8: 99:28:46:b8:bf:e6:7c:73:3f:34:1c:30:bc:8f:22:3e:1e:2f: 32:e0:19:64:ba:61:8c:8d:ca:ba:ce:7b:65:e1:3c:9d:64:45: 4d:1f:b1:a3:7f:9f:58:cc:48:77:94:4f:56:c6:c2:03:f3:c3: 89:3b:50:ed:bf:10:b5:e2:78:50:f4:34:21:ac:43:a3:66:6d: a9:29:d5:f3:9e:17:75:83:7e:3f:b5:ff:aa:55:25:14:66:bc: 02:4e:ab:66:31:a8:0d:b3:94:7f:74:44:0b:e7:55:66:73:38: e5:22:ce:2d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDJ4j6uFC2O8VgpHX54v6qb3HyEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAxMTVaFw0yNjExMjMxNzA2MTVaMDMxMTAvBgNV BAMTKEEwRDEwRjhGOTMzMzMyMUVFOUZBMDA5NDQ2QjUwNjE3NzU3MDU2RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCKUeuQb4M7u/egbi7gGyzJFx M6KANJM7jGQC+FGPJZi1Nf4bmLM/DaqsTldaXm9huIdiP2fLgv7a3viroQh+Fn6J 154cHzfTUmOrZyIumF0UCv0BkybCPMPQ6xIpBGx3Rvuh90YWTjAWG1gDfqp0ylpe 6BnINXvd+/yHz0Z7RmIgTTCfLPMd144mHYSzDIa2AV6XdoAByJhZoGMcpOIIWQnP EcTJZcnycALVa9whOQAZ0R9m8w9Aw8W+B7aderNIUIoj5Ye9OQ/BuLjI358aOA5c qLu2/FYxHejRspAnyji5uguWo5TMwEiyUGfH1E+YG+BgLepkgrFJy0/oL8RtAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUoNEPj5MzMh7p+gCURrUGF3VwVtYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfeAwDQYJKoZIhvcNAQELBQADggEBAEmwj578ReJMxP6vK1xBe6oQ6JQapsR8 l5DowoKT8nw5XdzWYtEHRzQuKHst9Bq5e5iQ27Kw4pND7i7hVfRyvJonLpnWeR2N eV5A53T/i5HxxSQ4zAN8aZf9an168UWYJKlUXU4aPtbSRZr0gJ+b1J0tKmjDHeeC L24XbGyXw948rBznCNRcrPCMfiIBzgoZ6JkoRri/5nxzPzQcMLyPIj4eLzLgGWS6 YYyNyrrOe2XhPJ1kRU0fsaN/n1jMSHeUT1bGwgPzw4k7UO2/ELXieFD0NCGsQ6Nm bakp1fOeF3WDfj+1/6pVJRRmvAJOq2YxqA2zlH90RAvnVWZzOOUizi0= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:43 2025 by rpki-client