This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3234302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: dR7eWrB9QttFWJ///ukyY1LRvFxmIzexZM32ZIUZWt4=
Subject key identifier: 11:69:48:4E:BC:CF:AB:57:FC:03:B5:23:4B:CE:F5:C3:D4:D5:E1:60
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 67AD4A87236EEF9B45EAB624A19901789359EFCF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:53:10 +0000
ROA not before: Mon 09 Feb 2026 07:48:10 +0000
ROA not after: Mon 08 Feb 2027 07:53:10 +0000
asID: 834
IP address blocks: 147.125.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ad:4a:87:23:6e:ef:9b:45:ea:b6:24:a1:99:01:78:93:59:ef:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:48:10 2026 GMT
Not After : Feb 8 07:53:10 2027 GMT
Subject: CN=1169484EBCCFAB57FC03B5234BCEF5C3D4D5E160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:b6:ea:0c:33:5a:ab:70:c9:30:28:e9:51:
01:be:91:c8:11:47:b2:77:16:35:34:d8:7f:8b:69:
01:fc:1e:25:16:a7:70:94:42:2c:57:2f:fd:ee:56:
b7:80:05:a1:e1:6b:5c:b0:aa:ef:db:89:34:76:0e:
bf:46:36:7e:89:83:7a:24:15:ee:a5:35:ed:c2:5f:
b1:45:97:f1:a3:92:52:ac:e0:29:de:0c:53:44:73:
82:af:05:40:ec:5e:e2:63:9b:e5:d6:f7:5f:d5:02:
84:d1:5e:ae:fd:81:95:bf:5e:67:97:ad:d3:73:14:
54:c5:95:5e:0d:5a:f9:a7:1b:84:5e:8b:6d:13:b7:
4c:55:7f:2e:ab:9c:15:54:2f:2f:60:3a:d2:53:95:
0c:df:61:b3:ef:09:91:69:46:78:58:63:ff:64:de:
48:76:e2:7e:ac:eb:6f:8c:a3:12:e6:d3:f4:d8:b8:
22:ae:4a:60:8e:36:43:29:85:8d:c6:15:b7:d7:8c:
75:00:2c:95:3b:97:c9:1d:98:b7:43:7a:db:23:fa:
5e:35:12:d4:41:f6:6e:12:d4:3a:3e:bb:61:ca:d8:
0d:70:09:6a:5d:06:42:05:7d:90:c5:02:4a:a8:f0:
33:63:82:9a:00:56:bd:d0:2b:11:26:39:6f:cb:48:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:69:48:4E:BC:CF:AB:57:FC:03:B5:23:4B:CE:F5:C3:D4:D5:E1:60
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.240.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b9:da:10:7f:75:55:e5:a6:af:2a:50:0a:18:86:93:a7:9b:
5e:ec:fa:ab:21:bf:14:32:fc:a6:94:90:fa:9d:1f:26:78:2f:
15:7c:31:ae:78:c9:c6:9f:ff:fc:53:c8:bb:44:76:ad:51:c1:
81:95:4b:69:30:e1:90:d9:c1:ed:1a:5a:52:cb:d2:74:4e:8e:
a0:21:78:4e:15:50:87:30:44:9e:74:19:56:9b:cd:cd:ab:a5:
0f:40:56:f3:64:a9:fa:50:5d:95:ce:1f:61:52:38:1a:67:3a:
c3:11:34:80:a3:4e:13:19:6a:a4:2d:57:4e:f1:22:ad:28:b7:
52:09:b4:a9:b0:e9:3c:2b:fa:58:87:20:b5:f7:27:45:93:42:
22:60:6d:34:ad:40:2b:17:98:ce:79:56:a9:fa:89:d7:6f:59:
40:91:40:3a:f0:65:5c:a2:c6:81:91:f4:9b:b3:e4:ed:e7:e6:
72:a4:5b:a9:af:7a:01:44:4c:7f:16:c2:dc:e2:a2:1d:92:89:
46:a1:eb:e2:fd:c7:e7:8f:7d:60:4c:23:70:f9:f0:1c:37:4f:
e7:07:b6:58:5a:ec:f1:b7:a9:77:60:c6:f6:9e:0e:a0:97:7b:
3a:50:f4:c6:46:97:9e:ee:8e:94:a2:92:11:f5:9f:04:c8:ec:
c3:e2:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:15 2026 by rpki-client