This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234302e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: rJ1hwR9wnNfZjBidqDtddKLdBfTlPAKTcgQJjrqncxA= Subject key identifier: 23:C8:7F:20:67:4A:E8:9E:F5:C5:67:D8:E5:41:94:FA:35:CE:71:82 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 76F8D6210DDFBE83D005BA30A75E7510296EDA4C Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e2039333034.roa Signing time: Fri 09 Jan 2026 08:11:27 +0000 ROA not before: Fri 09 Jan 2026 08:06:27 +0000 ROA not after: Fri 08 Jan 2027 08:11:27 +0000 asID: 9304 IP address blocks: 147.125.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f8:d6:21:0d:df:be:83:d0:05:ba:30:a7:5e:75:10:29:6e:da:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:06:27 2026 GMT Not After : Jan 8 08:11:27 2027 GMT Subject: CN=23C87F20674AE89EF5C567D8E54194FA35CE7182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:87:53:80:3a:95:76:c9:86:ba:89:a7:b4:f7: 5f:f2:56:87:69:d9:e4:53:bb:4f:ad:dd:9f:09:77: dc:6f:f8:6b:37:3a:c5:62:d2:2a:a1:dc:9a:9c:c2: e3:fc:42:24:89:43:38:97:50:c5:58:ad:97:06:e6: 4b:9a:d7:6a:e6:c1:49:c2:cb:32:c7:29:05:35:f5: 68:60:e6:63:39:50:82:2c:be:ac:7c:e6:7a:4e:86: b2:7a:b4:9c:e4:b7:c3:ef:2f:6d:50:fc:a0:98:d1: d8:04:a5:9b:67:ea:ec:d9:c0:15:b4:43:e8:ff:8b: 77:08:a6:74:94:56:d6:e1:a2:12:90:b3:da:ed:f3: b1:84:8e:59:21:47:25:b5:6e:6e:bc:5a:bb:38:a3: 3f:66:b2:f4:55:29:3b:fc:8e:ed:fb:c7:1c:cd:36: fd:58:4b:7c:c0:b3:f2:c4:a2:a7:30:3c:51:04:26: 84:e5:fd:ed:64:37:78:92:13:63:18:6b:dc:67:4d: 7c:be:87:05:db:ae:8f:99:b7:d1:7a:37:9a:68:11: 29:bb:30:b1:ff:2c:f5:f2:6a:15:f2:b1:de:6d:c5: dd:f5:e2:4e:d0:9c:36:68:5a:d2:41:d2:8a:57:14: 47:41:8b:20:bb:ec:10:4b:ee:92:10:b1:36:49:b5: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C8:7F:20:67:4A:E8:9E:F5:C5:67:D8:E5:41:94:FA:35:CE:71:82 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.240.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d0:f9:a1:e7:82:89:ee:9d:7c:63:48:46:9a:82:5a:49:d4: 6e:d4:76:cf:17:8c:83:3d:34:1e:8b:04:4b:dd:b2:e4:ad:38: 73:31:44:04:c8:f1:96:08:61:34:42:ff:07:50:a6:70:27:66: fc:6d:5a:5b:59:a7:4d:fa:a5:79:1e:e5:b2:fd:5f:7e:99:c9: 91:c8:e6:90:68:54:2d:07:16:a9:53:7c:de:0d:3b:8a:dd:33: a4:48:89:08:bc:4f:82:cc:e6:b5:03:92:6e:58:6c:96:45:01: 15:f3:bb:a9:a6:9d:26:f0:76:dd:13:ff:24:c4:e7:04:5a:ec: 55:70:3a:65:88:3b:89:89:23:a3:bb:83:41:ce:60:46:32:5a: 72:27:01:fe:e1:79:4c:4a:ad:9e:cb:6a:c3:93:13:84:a0:cd: 2b:1a:79:7d:fb:9a:c0:0c:51:65:e4:e9:0b:e0:e8:9a:f9:cd: cd:79:08:1a:70:b4:2f:3d:4c:db:c8:94:8a:50:b6:62:13:e4: 6b:a8:9c:f3:22:51:4c:27:cb:7b:b2:f3:bf:18:16:9f:bf:15: 7a:45:97:5f:bd:86:01:4e:88:fa:82:32:82:3e:61:18:41:43: 00:5a:11:d8:c0:f3:47:14:96:81:1a:86:6a:74:3a:23:c3:61: 97:e5:98:f0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdvjWIQ3fvoPQBbowp151EClu2kwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODA2MjdaFw0yNzAxMDgwODExMjdaMDMxMTAvBgNV BAMTKDIzQzg3RjIwNjc0QUU4OUVGNUM1NjdEOEU1NDE5NEZBMzVDRTcxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTh1OAOpV2yYa6iae091/yVodp 2eRTu0+t3Z8Jd9xv+Gs3OsVi0iqh3JqcwuP8QiSJQziXUMVYrZcG5kua12rmwUnC yzLHKQU19Whg5mM5UIIsvqx85npOhrJ6tJzkt8PvL21Q/KCY0dgEpZtn6uzZwBW0 Q+j/i3cIpnSUVtbhohKQs9rt87GEjlkhRyW1bm68Wrs4oz9msvRVKTv8ju37xxzN Nv1YS3zAs/LEoqcwPFEEJoTl/e1kN3iSE2MYa9xnTXy+hwXbro+Zt9F6N5poESm7 MLH/LPXyahXysd5txd314k7QnDZoWtJB0opXFEdBiyC77BBL7pIQsTZJtRzbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUI8h/IGdK6J71xWfY5UGU+jXOcYIwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k33wMA0GCSqGSIb3DQEBCwUAA4IBAQCc0Pmh54KJ7p18Y0hGmoJaSdRu1HbPF4yD PTQeiwRL3bLkrThzMUQEyPGWCGE0Qv8HUKZwJ2b8bVpbWadN+qV5HuWy/V9+mcmR yOaQaFQtBxapU3zeDTuK3TOkSIkIvE+CzOa1A5JuWGyWRQEV87uppp0m8HbdE/8k xOcEWuxVcDpliDuJiSOju4NBzmBGMlpyJwH+4XlMSq2ey2rDkxOEoM0rGnl9+5rA DFFl5OkL4Oia+c3NeQgacLQvPUzbyJSKULZiE+RrqJzzIlFMJ8t7svO/GBafvxV6 RZdfvYYBToj6gjKCPmEYQUMAWhHYwPNHFJaBGoZqdDojw2GX5Zjw -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:51 2026 by rpki-client