This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234312e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3234312e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: PdYHq4BJj0dNnD8X/zdT1VqirhpjslmnGyzd16xvvHE= Subject key identifier: 91:EC:D4:CD:45:E6:3B:41:E4:92:03:95:07:B0:8B:34:98:AC:E3:41 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 48D704FE54DF9A7CEF37BA3C3A00935B6736FCB5 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234312e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:07:24 +0000 ROA not before: Mon 24 Nov 2025 17:02:24 +0000 ROA not after: Mon 23 Nov 2026 17:07:24 +0000 asID: 20473 IP address blocks: 147.125.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d7:04:fe:54:df:9a:7c:ef:37:ba:3c:3a:00:93:5b:67:36:fc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:02:24 2025 GMT Not After : Nov 23 17:07:24 2026 GMT Subject: CN=91ECD4CD45E63B41E492039507B08B3498ACE341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:1d:0c:7f:95:d8:3a:ed:cb:2d:c3:d6:3d: 35:c0:42:26:99:26:34:87:99:d5:e8:49:69:3b:9b: b6:20:fc:1b:4f:6d:ec:cd:a9:44:9d:dc:80:46:74: fd:f1:3c:80:62:84:34:51:34:1a:fc:c4:72:a8:6a: 04:66:f4:37:fd:60:d2:f5:39:6f:fc:2a:d1:5c:d3: d3:8c:f6:56:79:33:3e:59:02:7e:8c:ce:4d:68:7b: df:17:23:52:84:b6:88:d8:fb:5b:c8:4e:9c:d4:8e: b5:ed:6c:c8:b5:c3:f6:a9:d9:66:fe:60:3f:12:ed: 67:91:ad:a1:3b:1f:34:20:2b:fd:ed:29:90:24:63: 8d:f3:de:9b:5f:85:d6:41:5c:d6:4b:14:a1:c4:5d: 43:ea:55:b1:37:a3:70:de:66:83:da:33:87:4c:81: b1:df:fd:cc:0b:6f:0e:ca:d0:ce:97:d7:a4:42:40: 4e:ab:eb:ee:d2:30:fb:73:0e:ea:13:a1:31:cb:2f: 3d:53:1b:76:86:9a:83:a9:8d:bf:88:58:97:27:d4: 41:19:c6:7b:b3:5a:c4:aa:72:37:4a:4d:d4:27:26: d3:56:f4:b4:6b:80:e6:f2:28:51:66:2e:95:92:7a: 99:7f:bd:69:79:11:dc:50:b7:a3:92:b2:73:8c:37: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:EC:D4:CD:45:E6:3B:41:E4:92:03:95:07:B0:8B:34:98:AC:E3:41 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234312e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.241.0/24 Signature Algorithm: sha256WithRSAEncryption 72:27:8d:60:8f:7b:3a:8e:ba:3f:98:69:01:20:14:a0:e6:af: df:58:2b:74:d7:cc:de:da:6a:4f:e7:1d:c1:8a:ac:c9:11:79: 54:9d:46:aa:94:78:18:a2:50:42:d3:4a:29:d5:a3:37:3b:68: 3b:ed:8e:92:42:d8:ca:38:3a:31:77:e2:4c:f5:f1:e8:49:77: ae:8c:fd:76:1b:a9:a0:9a:6d:82:fd:7e:a8:8c:4f:47:41:b7: e1:e2:5e:76:0b:96:c8:e5:b8:39:27:58:d0:49:52:8a:0d:53: 10:c2:d1:4d:6a:5d:6a:8d:63:a2:46:aa:32:3d:c3:b7:ce:bf: 8b:b9:3e:15:65:68:c4:17:88:bb:b7:29:96:80:17:d2:03:4f: 5c:48:3f:89:2b:68:7a:f4:1a:0a:5e:b5:90:13:e4:cd:50:fa: f5:c3:3a:5e:68:e9:76:f6:85:bb:d2:3f:25:26:c5:48:84:f0: d4:9b:55:fe:69:1f:a4:b7:1c:d1:17:64:42:e1:ae:72:89:05: d8:b6:83:5f:d0:39:98:bd:5d:11:df:08:f9:e7:b9:b7:17:58: 71:3a:ea:1d:54:28:54:89:34:b6:3b:48:9a:16:16:c2:e7:67: 64:ac:51:f6:c2:25:60:f0:b9:77:55:2d:9a:45:53:8a:a4:fb: e6:6b:e9:51 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUSNcE/lTfmnzvN7o8OgCTW2c2/LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAyMjRaFw0yNjExMjMxNzA3MjRaMDMxMTAvBgNV BAMTKDkxRUNENENENDVFNjNCNDFFNDkyMDM5NTA3QjA4QjM0OThBQ0UzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzBx0Mf5XYOu3LLcPWPTXAQiaZ JjSHmdXoSWk7m7Yg/BtPbezNqUSd3IBGdP3xPIBihDRRNBr8xHKoagRm9Df9YNL1 OW/8KtFc09OM9lZ5Mz5ZAn6Mzk1oe98XI1KEtojY+1vITpzUjrXtbMi1w/ap2Wb+ YD8S7WeRraE7HzQgK/3tKZAkY43z3ptfhdZBXNZLFKHEXUPqVbE3o3DeZoPaM4dM gbHf/cwLbw7K0M6X16RCQE6r6+7SMPtzDuoToTHLLz1TG3aGmoOpjb+IWJcn1EEZ xnuzWsSqcjdKTdQnJtNW9LRrgObyKFFmLpWSepl/vWl5EdxQt6OSsnOMNzSFAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUkezUzUXmO0HkkgOVB7CLNJis40EwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTffEwDQYJKoZIhvcNAQELBQADggEBAHInjWCPezqOuj+YaQEgFKDmr99YK3TX zN7aak/nHcGKrMkReVSdRqqUeBiiUELTSinVozc7aDvtjpJC2Mo4OjF34kz18ehJ d66M/XYbqaCabYL9fqiMT0dBt+HiXnYLlsjluDknWNBJUooNUxDC0U1qXWqNY6JG qjI9w7fOv4u5PhVlaMQXiLu3KZaAF9IDT1xIP4kraHr0GgpetZAT5M1Q+vXDOl5o 6Xb2hbvSPyUmxUiE8NSbVf5pH6S3HNEXZELhrnKJBdi2g1/QOZi9XRHfCPnnubcX WHE66h1UKFSJNLY7SJoWFsLnZ2SsUfbCJWDwuXdVLZpFU4qk++Zr6VE= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:21 2025 by rpki-client