This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234332e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: xGnAshOv7nhrCrfq4p9pbR+uzDlV9LB2caQA8C1bSnk= Subject key identifier: CB:5D:E8:F3:73:D9:8B:62:2F:AD:64:F6:93:33:84:E0:35:12:78:0A Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1413A42AFCCB7D990975DAF39012D7470AB1E780 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:37 +0000 ROA not before: Thu 20 Nov 2025 10:52:37 +0000 ROA not after: Thu 19 Nov 2026 10:57:37 +0000 asID: 9304 IP address blocks: 147.125.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:13:a4:2a:fc:cb:7d:99:09:75:da:f3:90:12:d7:47:0a:b1:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:37 2025 GMT Not After : Nov 19 10:57:37 2026 GMT Subject: CN=CB5DE8F373D98B622FAD64F6933384E03512780A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:ba:25:bc:19:fe:f5:d7:30:7c:f8:39:18: 52:95:bb:fe:12:1f:3c:ed:de:b5:f9:ef:fa:c1:ab: 08:0d:2c:f5:e6:dc:d7:d8:03:48:3b:27:33:1b:32: e7:d1:46:1d:b1:d9:51:b5:f4:cf:f7:dd:64:09:5d: a3:31:e0:ff:a6:b6:21:80:91:44:b4:4a:07:92:ae: 8e:4d:a8:ec:ff:0f:21:50:d3:74:61:1a:3f:50:5f: 52:87:18:fb:22:27:0c:4a:0a:d1:92:e7:e2:bc:ba: 30:48:d2:f3:d9:b7:14:1c:86:80:05:40:2c:1f:f9: 41:48:fe:8e:da:20:41:5c:46:fd:ea:1e:be:bb:d7: 33:ca:ff:9e:27:63:3f:bb:02:46:47:62:ac:02:b9: bd:1d:07:44:64:3e:28:28:46:a7:66:92:b0:d3:e4: c2:57:a5:9e:da:de:c0:25:83:af:ae:49:0a:ac:91: 69:fb:75:0f:3c:68:1f:1b:a2:69:c7:c5:c6:fb:1c: ef:88:de:46:88:a0:1f:59:7c:27:54:c7:0c:5a:af: 84:08:ab:ef:91:a1:79:11:44:f1:4d:ee:01:d2:98: 54:19:56:84:70:2f:95:a0:0c:10:32:d9:00:f2:70: d0:7d:73:b2:73:99:4a:60:81:7f:ed:96:0a:60:af: 2b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:E8:F3:73:D9:8B:62:2F:AD:64:F6:93:33:84:E0:35:12:78:0A X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.243.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:6a:df:d9:6e:12:22:8f:b9:88:b2:43:12:d1:af:e5:90:9f: 97:92:18:86:dc:10:56:8a:96:c4:0b:d0:ab:15:dd:8e:3d:8a: b8:34:cb:cc:65:b5:44:ee:24:b9:52:23:14:9a:96:1a:b2:71: 09:68:98:38:f3:62:26:6b:5d:6d:5d:86:76:35:0c:60:9d:8c: a7:02:cf:82:d4:21:6d:36:75:9c:1f:4a:17:ff:12:2b:f5:ab: 39:f5:16:c8:3d:b7:99:9f:e5:06:47:63:a0:f0:4e:ae:85:21: 00:fe:a0:d1:f6:74:1c:d0:6b:e8:37:e7:b6:62:51:8b:2a:ac: ca:3b:d4:81:36:10:d1:2e:2f:64:a5:ff:1f:f7:10:03:40:1c: f5:e7:28:0d:c2:3c:9b:5f:8a:39:1c:4c:fe:e0:3e:37:74:1e: 86:c5:f4:61:f8:b3:07:af:be:a6:42:58:25:7c:e3:23:be:9c: 29:fe:d8:ad:51:a1:d8:51:df:33:d4:96:2e:18:d8:1c:e8:a8: e9:85:19:ee:c1:e2:9b:81:44:ca:84:b2:e2:58:b1:2e:61:42: f4:58:75:b5:88:ee:06:06:85:c6:b6:a6:bd:fd:d2:4f:0d:41: a8:75:d6:0e:85:f6:80:9e:6a:31:2f:e7:a6:d6:34:c8:da:3a: 61:c6:42:67 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFBOkKvzLfZkJddrzkBLXRwqx54AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzdaFw0yNjExMTkxMDU3MzdaMDMxMTAvBgNV BAMTKENCNURFOEYzNzNEOThCNjIyRkFENjRGNjkzMzM4NEUwMzUxMjc4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01rolvBn+9dcwfPg5GFKVu/4S Hzzt3rX57/rBqwgNLPXm3NfYA0g7JzMbMufRRh2x2VG19M/33WQJXaMx4P+mtiGA kUS0SgeSro5NqOz/DyFQ03RhGj9QX1KHGPsiJwxKCtGS5+K8ujBI0vPZtxQchoAF QCwf+UFI/o7aIEFcRv3qHr671zPK/54nYz+7AkZHYqwCub0dB0RkPigoRqdmkrDT 5MJXpZ7a3sAlg6+uSQqskWn7dQ88aB8bomnHxcb7HO+I3kaIoB9ZfCdUxwxar4QI q++RoXkRRPFN7gHSmFQZVoRwL5WgDBAy2QDycNB9c7JzmUpggX/tlgpgryt/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUy13o83PZi2IvrWT2kzOE4DUSeAowHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k33zMA0GCSqGSIb3DQEBCwUAA4IBAQBqat/ZbhIij7mIskMS0a/lkJ+XkhiG3BBW ipbEC9CrFd2OPYq4NMvMZbVE7iS5UiMUmpYasnEJaJg482Ima11tXYZ2NQxgnYyn As+C1CFtNnWcH0oX/xIr9as59RbIPbeZn+UGR2Og8E6uhSEA/qDR9nQc0GvoN+e2 YlGLKqzKO9SBNhDRLi9kpf8f9xADQBz15ygNwjybX4o5HEz+4D43dB6GxfRh+LMH r76mQlglfOMjvpwp/titUaHYUd8z1JYuGNgc6KjphRnuweKbgUTKhLLiWLEuYUL0 WHW1iO4GBoXGtqa9/dJPDUGoddYOhfaAnmoxL+em1jTI2jphxkJn -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client