This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3234302e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: L5In+WLVZ4lA1ZHBC4tvgiTfoxSze4j9mngUA54C7fA= Subject key identifier: 6E:17:92:CF:F7:A7:5E:09:03:80:EF:C2:24:98:90:0B:65:4F:8E:A3 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2AF64B9BFD5AF85B674F36D1FD41797C4D3DD9BC Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:07:11 +0000 ROA not before: Mon 24 Nov 2025 17:02:11 +0000 ROA not after: Mon 23 Nov 2026 17:07:11 +0000 asID: 20473 IP address blocks: 147.125.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f6:4b:9b:fd:5a:f8:5b:67:4f:36:d1:fd:41:79:7c:4d:3d:d9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:02:11 2025 GMT Not After : Nov 23 17:07:11 2026 GMT Subject: CN=6E1792CFF7A75E090380EFC22498900B654F8EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:84:32:8b:69:21:67:a6:3a:9c:c8:2a:b2: 45:b1:cc:5b:84:73:1d:ad:ac:78:34:65:e6:4d:a7: 63:7b:4f:d8:ce:4d:c8:d7:06:c3:d0:09:48:15:3b: dc:e0:0b:ed:d4:c3:82:9c:64:41:e7:6e:53:1a:f4: d6:94:55:e2:3e:37:d7:72:19:3e:82:c8:05:6a:34: 27:7a:1d:44:38:7b:15:75:b7:f5:4e:e3:c8:33:d8: d5:6b:f0:ea:d0:68:da:01:3d:35:f4:ef:17:99:8e: 19:30:7e:7f:0f:8f:f9:86:d6:f5:11:bc:a4:fa:9e: 4d:49:6f:14:0b:0c:b9:a7:40:52:fc:9a:52:fa:31: 90:98:f6:cd:4a:27:a6:2e:87:0d:84:0e:2c:08:05: d7:23:13:50:b9:be:25:ff:10:5a:e0:24:28:e6:49: a7:40:8f:58:af:c2:c3:49:b0:50:5d:8c:5b:41:95: f5:8f:ed:ab:eb:88:cc:9a:93:86:eb:2b:75:62:a7: d3:a3:fd:3e:2c:c1:77:29:c7:e8:e4:74:e8:65:33: bb:3d:dd:91:9e:7b:62:4a:dc:68:86:9e:ff:c4:e2: 08:b0:2e:8a:a9:91:f6:cf:e0:ee:58:45:27:52:a5: 21:40:79:f6:4c:2c:4c:aa:7b:1c:f5:1c:ee:92:42: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:92:CF:F7:A7:5E:09:03:80:EF:C2:24:98:90:0B:65:4F:8E:A3 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:50:a4:d0:6f:d2:f8:49:39:8f:8c:29:f6:02:2a:96:d9:65: 56:cf:09:b9:10:1c:de:89:a4:7e:ad:ca:11:1d:03:97:be:d6: da:ff:f7:54:86:2c:e1:81:aa:95:29:70:a6:68:56:0e:1e:32: e9:2c:15:49:45:3f:d6:ea:ea:bc:92:a8:e4:c7:39:a8:96:1c: ff:aa:f4:14:6f:f7:ec:c4:6c:ae:f3:58:fb:35:e2:2f:30:ae: 7f:2d:7a:0d:ec:3c:41:64:bf:68:13:90:9d:a9:92:cb:44:79: f8:21:37:a4:b0:b4:18:22:39:d6:aa:42:30:23:4b:b6:80:d0: 82:ed:77:cb:9d:ab:0a:ee:90:8b:dc:87:6c:45:9a:e3:28:25: 1d:e0:87:6a:2e:72:fc:cb:96:01:d9:34:43:97:a6:c0:ef:d9: 99:ba:6d:ce:4d:3d:1b:10:02:1b:7b:39:0c:f0:4c:18:a5:1a: 4f:b5:6b:e9:dd:ac:39:25:b0:ef:94:f2:1c:3b:d5:67:d2:4d: 44:c2:bb:76:7c:a5:33:62:e9:70:72:b8:06:09:7a:60:60:45: c2:9b:af:0f:3a:f3:6b:d2:cb:e8:55:de:7f:b9:34:1a:2a:bb: d2:7d:40:75:03:64:69:35:65:f8:17:0e:5b:55:0d:77:ac:ce: 4c:64:af:01 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKvZLm/1a+FtnTzbR/UF5fE092bwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAyMTFaFw0yNjExMjMxNzA3MTFaMDMxMTAvBgNV BAMTKDZFMTc5MkNGRjdBNzVFMDkwMzgwRUZDMjI0OTg5MDBCNjU0RjhFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoyoQyi2khZ6Y6nMgqskWxzFuE cx2trHg0ZeZNp2N7T9jOTcjXBsPQCUgVO9zgC+3Uw4KcZEHnblMa9NaUVeI+N9dy GT6CyAVqNCd6HUQ4exV1t/VO48gz2NVr8OrQaNoBPTX07xeZjhkwfn8Pj/mG1vUR vKT6nk1JbxQLDLmnQFL8mlL6MZCY9s1KJ6Yuhw2EDiwIBdcjE1C5viX/EFrgJCjm SadAj1ivwsNJsFBdjFtBlfWP7avriMyak4brK3Vip9Oj/T4swXcpx+jkdOhlM7s9 3ZGee2JK3GiGnv/E4giwLoqpkfbP4O5YRSdSpSFAefZMLEyqexz1HO6SQmKnAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUbheSz/enXgkDgO/CJJiQC2VPjqMwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTffAwDQYJKoZIhvcNAQELBQADggEBAF5QpNBv0vhJOY+MKfYCKpbZZVbPCbkQ HN6JpH6tyhEdA5e+1tr/91SGLOGBqpUpcKZoVg4eMuksFUlFP9bq6rySqOTHOaiW HP+q9BRv9+zEbK7zWPs14i8wrn8teg3sPEFkv2gTkJ2pkstEefghN6SwtBgiOdaq QjAjS7aA0ILtd8udqwrukIvch2xFmuMoJR3gh2oucvzLlgHZNEOXpsDv2Zm6bc5N PRsQAht7OQzwTBilGk+1a+ndrDklsO+U8hw71WfSTUTCu3Z8pTNi6XByuAYJemBg RcKbrw8682vSy+hV3n+5NBoqu9J9QHUDZGk1ZfgXDltVDXeszkxkrwE= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:42 2025 by rpki-client