This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232362e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3232362e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: i79FHSzc0RVAbET6WqxBfyBMO4PiAFSVjvhdJmXtzqk= Subject key identifier: 6C:66:EA:85:84:61:7F:63:C1:79:8D:9D:71:75:12:E4:53:67:71:71 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1D0CB3A2DC945AC05D9676DD96091763CE520458 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232362e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:06:41 +0000 ROA not before: Mon 24 Nov 2025 17:01:41 +0000 ROA not after: Mon 23 Nov 2026 17:06:41 +0000 asID: 20473 IP address blocks: 147.125.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:0c:b3:a2:dc:94:5a:c0:5d:96:76:dd:96:09:17:63:ce:52:04:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:01:41 2025 GMT Not After : Nov 23 17:06:41 2026 GMT Subject: CN=6C66EA8584617F63C1798D9D717512E453677171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4e:7a:e3:c6:cd:ce:d0:32:94:3c:12:e2:67: 81:ba:34:53:35:10:80:d4:66:a2:13:30:51:9a:b2: ee:c1:87:59:35:a0:99:38:f4:9c:92:6b:4c:27:13: 82:ad:b2:62:10:6d:3c:44:85:b0:89:3f:69:00:b8: 3e:26:64:fa:2a:58:37:7b:c1:31:05:ad:da:0c:6f: 60:eb:48:2f:5e:b1:d3:04:ff:68:42:18:db:6b:52: 33:dd:3d:b7:a9:1f:eb:ec:5d:b8:67:a7:d4:28:4f: cd:f9:25:82:c0:d8:9b:7d:56:d1:b3:3c:80:41:ee: 6e:cf:db:13:1d:49:7b:6d:9b:07:5a:70:95:1c:7e: 1f:54:74:38:37:67:ac:b8:70:b4:72:5e:92:89:da: 84:85:65:6d:49:a0:5d:42:82:ea:4a:ae:d2:ed:ef: 60:58:99:b5:2d:64:44:6f:16:a8:d3:23:99:d0:d5: 3d:95:9e:3f:f0:f0:5c:f2:65:b6:95:84:24:c3:92: 3f:fc:ce:7b:96:33:94:f2:37:d0:20:6d:8e:a8:f1: dd:58:b4:28:0b:3c:da:dd:e9:0c:e8:de:ad:ab:16: ef:58:52:cd:05:9f:19:f9:8e:92:1b:99:72:fe:22: cf:72:24:04:21:29:3c:c8:71:41:e3:f8:44:a6:e8: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:66:EA:85:84:61:7F:63:C1:79:8D:9D:71:75:12:E4:53:67:71:71 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232362e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.226.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:db:c1:ff:36:b1:bd:9c:27:f1:1a:a3:7f:ba:c9:19:06:63: 5c:aa:a8:ea:6e:11:33:1b:7a:fd:46:9d:bf:3e:23:27:fe:70: 36:f5:3f:e3:96:78:34:da:34:ff:51:cd:75:76:23:3d:c4:78: 6c:f9:4b:a8:10:96:bc:b9:bf:a0:97:e3:18:e5:82:53:1a:9f: 08:42:4e:d5:80:3c:0c:f0:bc:f7:d8:5c:4b:e0:ff:0b:91:68: c5:3f:e5:04:13:3c:ed:91:0f:44:a6:4f:b4:35:25:45:2f:58: 47:e9:7c:50:38:5b:c9:55:9f:ee:5d:14:2e:01:22:a8:9d:db: 97:60:0e:55:e0:d8:d5:29:d7:9f:4a:ff:4e:d8:08:33:be:7a: 90:e6:6c:23:0f:3e:e2:ca:78:e6:91:08:26:c5:84:6f:f6:be: 4a:f4:fc:74:5a:79:14:07:1b:52:f9:81:f9:4d:94:93:11:f8: 2c:4c:d9:e4:74:90:99:52:fe:7a:27:28:51:07:9e:15:1e:cd: c1:64:61:cd:4f:5d:9e:be:9e:c0:d9:02:af:b6:52:a7:8c:e1: 9b:71:66:d2:18:3c:e6:5b:41:2f:73:1f:6c:02:6e:ce:bd:82: 4e:db:7f:65:2e:6e:3d:23:5e:cf:b2:f5:be:2a:cd:a6:1d:f4: d5:47:d9:d0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUHQyzotyUWsBdlnbdlgkXY85SBFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAxNDFaFw0yNjExMjMxNzA2NDFaMDMxMTAvBgNV BAMTKDZDNjZFQTg1ODQ2MTdGNjNDMTc5OEQ5RDcxNzUxMkU0NTM2NzcxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTnrjxs3O0DKUPBLiZ4G6NFM1 EIDUZqITMFGasu7Bh1k1oJk49JySa0wnE4KtsmIQbTxEhbCJP2kAuD4mZPoqWDd7 wTEFrdoMb2DrSC9esdME/2hCGNtrUjPdPbepH+vsXbhnp9QoT835JYLA2Jt9VtGz PIBB7m7P2xMdSXttmwdacJUcfh9UdDg3Z6y4cLRyXpKJ2oSFZW1JoF1CgupKrtLt 72BYmbUtZERvFqjTI5nQ1T2Vnj/w8FzyZbaVhCTDkj/8znuWM5TyN9AgbY6o8d1Y tCgLPNrd6Qzo3q2rFu9YUs0Fnxn5jpIbmXL+Is9yJAQhKTzIcUHj+ESm6NyjAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUbGbqhYRhf2PBeY2dcXUS5FNncXEwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfeIwDQYJKoZIhvcNAQELBQADggEBADrbwf82sb2cJ/Eao3+6yRkGY1yqqOpu ETMbev1Gnb8+Iyf+cDb1P+OWeDTaNP9RzXV2Iz3EeGz5S6gQlry5v6CX4xjlglMa nwhCTtWAPAzwvPfYXEvg/wuRaMU/5QQTPO2RD0SmT7Q1JUUvWEfpfFA4W8lVn+5d FC4BIqid25dgDlXg2NUp159K/07YCDO+epDmbCMPPuLKeOaRCCbFhG/2vkr0/HRa eRQHG1L5gflNlJMR+CxM2eR0kJlS/nonKFEHnhUezcFkYc1PXZ6+nsDZAq+2UqeM 4ZtxZtIYPOZbQS9zH2wCbs69gk7bf2Uubj0jXs+y9b4qzaYd9NVH2dA= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:20 2025 by rpki-client