This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232372e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3232372e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: pG3633ETRc33Z9thbklfD90Wxey3kkIYrxlPb/4e1sk= Subject key identifier: 3C:32:5B:42:04:82:96:CA:E3:95:EF:23:D6:54:8D:CA:F2:EF:E2:9C Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 458034E98EAE51851BFD5D18CC8F668C107F57E9 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232372e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:06:58 +0000 ROA not before: Mon 24 Nov 2025 17:01:58 +0000 ROA not after: Mon 23 Nov 2026 17:06:58 +0000 asID: 20473 IP address blocks: 147.125.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:80:34:e9:8e:ae:51:85:1b:fd:5d:18:cc:8f:66:8c:10:7f:57:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:01:58 2025 GMT Not After : Nov 23 17:06:58 2026 GMT Subject: CN=3C325B42048296CAE395EF23D6548DCAF2EFE29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:3f:9a:8e:dd:99:0b:12:8e:e7:c3:87:33: 19:6f:ce:b9:60:9e:92:45:7a:7a:f8:8e:cf:ae:94: c8:95:10:7b:c8:3e:a3:6d:c4:fc:eb:2f:45:53:5d: 59:23:6a:d0:d8:82:87:3d:c3:f5:03:7d:32:19:1f: b0:c8:32:5e:a4:b2:3d:44:ff:1a:09:bf:ac:a0:4d: 8e:c3:67:ba:1c:b2:0b:61:44:6e:62:4f:a2:0d:f1: 3f:76:5e:16:6b:0e:f1:4e:af:b3:c3:a3:e8:d3:54: 4e:cd:da:9d:2b:23:0d:cd:12:ee:4b:81:1d:f6:e0: 9a:87:13:d9:5d:c5:0b:4d:40:20:8f:c0:2a:38:d5: 2b:75:65:d5:a1:7b:be:c7:9f:7f:06:d1:0e:a2:51: 12:ba:f7:96:fa:95:bf:6b:de:ae:4c:f4:28:d8:ab: ee:95:32:bb:2e:9d:95:39:2e:ef:7e:59:f6:2b:e0: d9:a7:d9:8b:32:79:65:2c:da:00:61:c5:92:9c:0a: a3:a0:ab:c7:a3:09:79:f5:0c:85:de:88:58:e3:84: f8:4d:62:35:c0:56:99:17:b3:ad:b0:24:38:a8:5b: 4c:4a:8f:58:51:a7:f6:e5:63:0d:26:5a:9f:3f:b9: b1:ca:a0:8c:97:c5:8b:58:9e:75:9f:30:29:71:7a: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:5B:42:04:82:96:CA:E3:95:EF:23:D6:54:8D:CA:F2:EF:E2:9C X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232372e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.227.0/24 Signature Algorithm: sha256WithRSAEncryption 30:37:8c:25:f4:e4:c0:c9:ce:47:f2:1f:5f:ff:7e:04:e0:ca: 49:f9:ac:9e:4a:78:60:f1:c4:b5:8f:29:70:53:40:4e:17:b1: 7a:fc:30:36:20:27:05:62:dd:fa:c2:45:ca:8d:ce:08:1a:97: 7a:30:15:61:55:e3:c2:23:50:8c:ee:4f:df:5c:5d:76:cb:26: 28:12:1f:24:b0:d5:3d:ba:43:ce:78:2c:81:10:9d:6c:8c:02: b3:05:60:8d:cb:ef:c2:df:99:6b:eb:19:02:7a:a1:89:52:58: 5b:a3:7a:eb:85:07:76:d3:e5:28:19:28:59:7d:a3:f6:4b:2d: 41:88:7f:e0:6d:64:d7:d4:c5:29:d6:da:76:c0:05:30:7b:7c: 99:17:52:b9:f9:cd:5c:08:9e:32:38:1c:12:83:e3:a3:3d:aa: ec:c4:36:29:9e:0e:2b:87:16:ae:59:be:39:ab:8d:0d:40:99: f5:d0:f7:0b:7c:a9:31:b5:f8:1d:2f:cd:ad:14:49:83:7c:d0: 2c:a6:ac:86:c5:b1:5d:03:d6:e3:68:33:d0:d3:38:1f:83:1f: 52:9d:d8:a4:6f:90:35:f0:85:81:58:1b:94:c2:a1:b6:4e:51: 37:6b:7d:e0:00:51:a9:4b:6a:39:6a:e5:04:51:83:fc:1f:2e: 0d:01:5d:bc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIURYA06Y6uUYUb/V0YzI9mjBB/V+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAxNThaFw0yNjExMjMxNzA2NThaMDMxMTAvBgNV BAMTKDNDMzI1QjQyMDQ4Mjk2Q0FFMzk1RUYyM0Q2NTQ4RENBRjJFRkUyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQHT+ajt2ZCxKO58OHMxlvzrlg npJFenr4js+ulMiVEHvIPqNtxPzrL0VTXVkjatDYgoc9w/UDfTIZH7DIMl6ksj1E /xoJv6ygTY7DZ7ocsgthRG5iT6IN8T92XhZrDvFOr7PDo+jTVE7N2p0rIw3NEu5L gR324JqHE9ldxQtNQCCPwCo41St1ZdWhe77Hn38G0Q6iURK695b6lb9r3q5M9CjY q+6VMrsunZU5Lu9+WfYr4Nmn2YsyeWUs2gBhxZKcCqOgq8ejCXn1DIXeiFjjhPhN YjXAVpkXs62wJDioW0xKj1hRp/blYw0mWp8/ubHKoIyXxYtYnnWfMClxejCDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUPDJbQgSClsrjle8j1lSNyvLv4pwwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfeMwDQYJKoZIhvcNAQELBQADggEBADA3jCX05MDJzkfyH1//fgTgykn5rJ5K eGDxxLWPKXBTQE4XsXr8MDYgJwVi3frCRcqNzggal3owFWFV48IjUIzuT99cXXbL JigSHySw1T26Q854LIEQnWyMArMFYI3L78LfmWvrGQJ6oYlSWFujeuuFB3bT5SgZ KFl9o/ZLLUGIf+BtZNfUxSnW2nbABTB7fJkXUrn5zVwInjI4HBKD46M9quzENime DiuHFq5ZvjmrjQ1AmfXQ9wt8qTG1+B0vza0USYN80CymrIbFsV0D1uNoM9DTOB+D H1Kd2KRvkDXwhYFYG5TCobZOUTdrfeAAUalLajlq5QRRg/wfLg0BXbw= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:21 2025 by rpki-client