This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3234322e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: tOe4qnWyKKGT/M/Zq65or5/xf6bLbSBReEVDZ9ItFYQ= Subject key identifier: 69:C3:A5:29:9B:FE:9B:2E:FA:CB:EB:85:23:DE:09:78:9D:51:D9:66 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 351C274163C50A7E604B08FB59AF258CE7CD463A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:07:35 +0000 ROA not before: Mon 24 Nov 2025 17:02:35 +0000 ROA not after: Mon 23 Nov 2026 17:07:35 +0000 asID: 20473 IP address blocks: 147.125.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1c:27:41:63:c5:0a:7e:60:4b:08:fb:59:af:25:8c:e7:cd:46:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:02:35 2025 GMT Not After : Nov 23 17:07:35 2026 GMT Subject: CN=69C3A5299BFE9B2EFACBEB8523DE09789D51D966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:a1:02:ff:f4:9b:2a:2a:aa:33:73:69:ec: 4e:f8:fb:04:2b:b4:42:96:07:ba:1d:a3:16:30:69: 1c:52:c5:c6:fd:56:e7:dd:d6:3f:da:c9:81:d4:2a: e1:e0:6d:81:73:be:47:ea:6a:43:33:f5:b2:f6:7c: 3d:d5:0e:77:e5:0a:21:84:0f:0a:7f:fb:03:da:cb: 24:a0:bf:5e:ff:3e:4b:38:76:83:ad:fc:c3:10:dd: ce:bb:5b:8e:f6:20:2d:36:97:2d:cc:5b:3b:76:d1: 63:1a:e5:26:f4:82:bf:18:ab:e1:af:8d:0b:b4:b0: bc:43:d3:98:cd:a8:71:d1:87:3c:d2:cd:a4:09:95: 77:50:9d:e1:bb:fe:ff:7c:d1:49:9c:88:9e:a7:26: 02:93:49:ea:52:6d:c1:45:6b:02:ba:53:e9:2e:34: 73:bd:84:76:fe:d7:6b:fd:fc:e5:ae:14:22:5f:03: c0:8c:72:12:19:c0:5c:c5:ca:fe:d6:2a:e6:ee:9f: d9:c0:28:95:99:0f:57:b0:61:26:a3:fc:ec:38:41: 00:06:3f:ef:d7:08:e4:d8:50:a6:35:00:7f:0d:76: 0d:fa:3d:25:42:73:6a:71:3b:bd:ee:37:e5:ed:ea: 63:3b:2a:1e:0c:1a:e6:47:c7:d4:d0:1d:59:83:13: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C3:A5:29:9B:FE:9B:2E:FA:CB:EB:85:23:DE:09:78:9D:51:D9:66 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.242.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:49:5e:6d:09:8e:1a:23:7a:71:52:15:67:6b:ea:13:43:33: 33:68:3a:80:e6:a6:4f:89:8b:33:09:b4:fe:82:b7:c2:4c:c8: 92:32:d4:ff:93:83:b8:a1:0b:31:58:25:dc:a4:98:ea:f0:bd: e3:b7:37:a7:8e:c9:cc:26:b2:f6:4a:7a:7c:c1:7c:37:b5:53: b2:d9:d3:5d:82:23:b1:cc:b6:43:50:42:2c:be:2a:62:3f:b6: 57:25:4c:bf:80:cb:41:9e:a1:2e:f2:0d:c1:ee:2c:d1:de:f2: 17:06:27:0b:5f:4e:a3:81:30:94:fd:b1:dd:01:b3:0a:1b:7c: e8:ab:2a:12:50:76:a0:77:dc:5f:df:ed:66:d4:c2:cc:f4:53: d0:43:36:e2:3c:d3:c5:8f:be:87:ed:93:dc:fe:87:d3:32:bc: 42:c1:38:aa:3c:68:69:6c:cd:47:6f:1f:b9:7e:b2:f7:f1:34: 16:b6:29:dc:6b:1f:4d:22:e9:19:74:fc:7c:e2:bf:4c:a2:a4: 87:dc:f7:ce:d3:60:76:bb:bc:bb:66:17:8e:4f:b3:9a:8e:91: 34:51:12:1b:25:9f:a3:e6:55:65:9e:90:19:47:38:98:55:a0: 55:f8:d8:d1:fc:45:ac:7f:84:45:2c:81:f7:31:b3:1f:72:13: 5c:a3:50:21 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNRwnQWPFCn5gSwj7Wa8ljOfNRjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAyMzVaFw0yNjExMjMxNzA3MzVaMDMxMTAvBgNV BAMTKDY5QzNBNTI5OUJGRTlCMkVGQUNCRUI4NTIzREUwOTc4OUQ1MUQ5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLaEC//SbKiqqM3Np7E74+wQr tEKWB7odoxYwaRxSxcb9Vufd1j/ayYHUKuHgbYFzvkfqakMz9bL2fD3VDnflCiGE Dwp/+wPayySgv17/Pks4doOt/MMQ3c67W472IC02ly3MWzt20WMa5Sb0gr8Yq+Gv jQu0sLxD05jNqHHRhzzSzaQJlXdQneG7/v980UmciJ6nJgKTSepSbcFFawK6U+ku NHO9hHb+12v9/OWuFCJfA8CMchIZwFzFyv7WKubun9nAKJWZD1ewYSaj/Ow4QQAG P+/XCOTYUKY1AH8Ndg36PSVCc2pxO73uN+Xt6mM7Kh4MGuZHx9TQHVmDE5/lAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUacOlKZv+my76y+uFI94JeJ1R2WYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTffIwDQYJKoZIhvcNAQELBQADggEBAFpJXm0JjhojenFSFWdr6hNDMzNoOoDm pk+JizMJtP6Ct8JMyJIy1P+Tg7ihCzFYJdykmOrwveO3N6eOycwmsvZKenzBfDe1 U7LZ012CI7HMtkNQQiy+KmI/tlclTL+Ay0GeoS7yDcHuLNHe8hcGJwtfTqOBMJT9 sd0BswobfOirKhJQdqB33F/f7WbUwsz0U9BDNuI808WPvoftk9z+h9MyvELBOKo8 aGlszUdvH7l+svfxNBa2KdxrH00i6Rl0/Hziv0yipIfc987TYHa7vLtmF45Ps5qO kTRREhsln6PmVWWekBlHOJhVoFX42NH8Rax/hEUsgfcxsx9yE1yjUCE= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:44 2025 by rpki-client