This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232352e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3232352e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: Qk/rdzxdzhg/mF1pvAWQyZNl0pJgHq/sOyghgl4rs5M= Subject key identifier: 20:40:EB:15:CF:EA:2C:6E:F6:49:E5:1D:81:9A:76:8E:D6:C7:FF:9B Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6FF2B5BD97854FFDD5387DDBAFCF0F87B9F15FF6 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232352e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:06:29 +0000 ROA not before: Mon 24 Nov 2025 17:01:29 +0000 ROA not after: Mon 23 Nov 2026 17:06:29 +0000 asID: 20473 IP address blocks: 147.125.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f2:b5:bd:97:85:4f:fd:d5:38:7d:db:af:cf:0f:87:b9:f1:5f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:01:29 2025 GMT Not After : Nov 23 17:06:29 2026 GMT Subject: CN=2040EB15CFEA2C6EF649E51D819A768ED6C7FF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:0a:8a:f2:dd:cf:b9:20:e6:63:5b:e4:af: 48:88:5a:51:6d:97:b8:66:4d:8b:4b:6d:0a:52:e7: ec:5d:b2:36:0c:63:36:6c:e9:73:c7:72:ac:1a:e1: 00:52:07:af:02:82:0a:e1:f8:d8:9e:ae:92:cd:10: b1:1c:98:71:f1:f4:f8:a6:c3:3b:9e:26:a1:d7:2d: d1:3c:56:7e:0e:58:8c:33:74:55:6f:0c:03:b7:9a: 91:73:a0:38:08:d5:27:47:70:9f:15:72:ee:02:73: e0:77:43:fc:49:8a:9a:0e:0e:25:c6:40:d8:f4:58: 20:45:b2:54:8f:d1:90:72:4d:b7:91:1a:5b:d0:79: 40:8c:3e:ed:77:06:7d:7b:80:22:ce:d6:25:1a:98: e0:3d:fc:24:64:1b:0c:7d:87:ff:4f:8a:39:45:f5: 9c:e0:12:e9:32:e8:0e:cf:1b:2b:79:28:51:9c:31: 48:a7:16:ca:1f:51:dd:a7:2a:f8:0f:57:a2:ae:6e: 20:d5:8b:89:1b:21:e9:b8:de:77:20:4e:4f:e3:9c: a4:0b:d8:4a:e6:56:f4:82:13:e6:b9:c3:82:2f:2a: 53:a0:37:e7:2b:f6:66:20:c4:dc:10:a2:e1:ab:e6: bf:8b:bf:c8:6c:81:79:e9:41:61:b6:09:b4:f6:aa: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:EB:15:CF:EA:2C:6E:F6:49:E5:1D:81:9A:76:8E:D6:C7:FF:9B X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232352e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.225.0/24 Signature Algorithm: sha256WithRSAEncryption 30:20:49:76:7f:0a:71:f3:aa:5d:be:ba:03:10:02:57:65:60: ef:8d:3d:92:4e:59:48:64:f8:d9:b5:13:d0:ff:8c:e0:3d:03: 00:d3:42:6f:83:c9:e1:c4:81:67:33:1c:ec:5d:11:21:cc:fd: db:45:84:b6:67:28:46:b4:69:c0:51:48:f5:ce:b7:63:78:b5: 62:0e:d3:93:54:42:91:a2:f7:58:6a:56:1f:20:72:79:9c:d5: 42:0a:79:70:d8:ab:3e:bf:ba:39:bb:20:fe:1a:08:be:95:1d: 43:43:f2:32:fa:9d:3a:10:f5:72:1a:df:fa:57:63:02:4b:f9: d6:70:b3:e8:f4:6c:3f:03:01:f2:13:07:c5:49:53:90:70:4c: 35:32:21:57:42:68:4d:53:1b:d2:fd:81:b5:8a:a3:5c:1f:94: 07:fb:02:5d:f6:f0:a1:9b:46:27:ac:3d:b8:c9:1d:1f:33:26: 9b:68:9a:ea:07:b3:41:fc:b1:e7:c4:92:b6:6b:e8:a1:c4:16: a0:0e:21:52:a5:e0:cd:fc:9d:72:0f:88:8c:f7:6a:07:26:d5: 99:a5:c1:8d:b4:52:94:6f:c9:9e:1f:6a:8d:6b:36:93:9f:17: c2:b1:d5:f7:2a:5c:16:2f:1a:05:96:8b:71:90:1b:87:3a:b2: 32:dd:a8:5f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUb/K1vZeFT/3VOH3br88Ph7nxX/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAxMjlaFw0yNjExMjMxNzA2MjlaMDMxMTAvBgNV BAMTKDIwNDBFQjE1Q0ZFQTJDNkVGNjQ5RTUxRDgxOUE3NjhFRDZDN0ZGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7rAqK8t3PuSDmY1vkr0iIWlFt l7hmTYtLbQpS5+xdsjYMYzZs6XPHcqwa4QBSB68Cggrh+NierpLNELEcmHHx9Pim wzueJqHXLdE8Vn4OWIwzdFVvDAO3mpFzoDgI1SdHcJ8Vcu4Cc+B3Q/xJipoODiXG QNj0WCBFslSP0ZByTbeRGlvQeUCMPu13Bn17gCLO1iUamOA9/CRkGwx9h/9PijlF 9ZzgEuky6A7PGyt5KFGcMUinFsofUd2nKvgPV6KubiDVi4kbIem43ncgTk/jnKQL 2ErmVvSCE+a5w4IvKlOgN+cr9mYgxNwQouGr5r+Lv8hsgXnpQWG2CbT2qpBtAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUIEDrFc/qLG72SeUdgZp2jtbH/5swHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfeEwDQYJKoZIhvcNAQELBQADggEBADAgSXZ/CnHzql2+ugMQAldlYO+NPZJO WUhk+Nm1E9D/jOA9AwDTQm+DyeHEgWczHOxdESHM/dtFhLZnKEa0acBRSPXOt2N4 tWIO05NUQpGi91hqVh8gcnmc1UIKeXDYqz6/ujm7IP4aCL6VHUND8jL6nToQ9XIa 3/pXYwJL+dZws+j0bD8DAfITB8VJU5BwTDUyIVdCaE1TG9L9gbWKo1wflAf7Al32 8KGbRiesPbjJHR8zJptomuoHs0H8sefEkrZr6KHEFqAOIVKl4M38nXIPiIz3agcm 1ZmlwY20UpRvyZ4fao1rNpOfF8Kx1fcqXBYvGgWWi3GQG4c6sjLdqF8= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:43 2025 by rpki-client