This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234342e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: LPra4qc+8G9upUnUMLcF03Avz6/7R0z6kYF7LF45rCc= Subject key identifier: E1:88:1D:86:4B:2E:92:4E:90:AE:39:65:96:AF:F0:F4:D9:62:29:FB Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0B058DA0E1132ABA68DD912BBD70D174BF9C9024 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234342e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:36 +0000 ROA not before: Thu 20 Nov 2025 10:52:36 +0000 ROA not after: Thu 19 Nov 2026 10:57:36 +0000 asID: 9304 IP address blocks: 147.125.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:05:8d:a0:e1:13:2a:ba:68:dd:91:2b:bd:70:d1:74:bf:9c:90:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:36 2025 GMT Not After : Nov 19 10:57:36 2026 GMT Subject: CN=E1881D864B2E924E90AE396596AFF0F4D96229FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:45:fd:b3:a2:ff:40:54:b6:ea:31:c0:f5: ba:ca:a9:f6:be:ee:0f:cd:02:1d:b6:f5:de:4d:4a: ac:b5:eb:c0:9f:0b:54:15:3c:92:5d:d7:16:69:d5: aa:d9:45:c5:a9:1b:a6:c4:c5:ba:d1:4a:a8:a7:9c: 4b:0c:bf:f2:76:74:3c:f6:72:8b:f9:ce:a9:af:94: 7c:7c:51:be:c1:9d:0c:18:60:cb:db:98:31:33:d3: b7:86:67:a2:2b:e7:75:b6:ab:b4:7e:1e:a2:1e:d3: 5e:24:d6:c5:e0:75:12:06:e0:f6:54:95:2c:aa:4a: 8e:77:7e:de:fa:a5:43:8a:76:d7:4b:d1:51:fe:4e: b9:fb:32:ea:0f:71:c4:c1:7d:b5:bc:9f:04:85:56: 7f:18:71:40:44:a8:32:cd:fe:b1:fe:45:85:fd:18: 68:ef:59:5a:e0:fe:7b:66:4f:86:d3:02:94:bd:84: 4d:76:c7:9a:4b:30:30:62:27:67:54:ac:a9:5f:d0: 9f:52:8d:34:96:de:06:01:35:86:9f:fe:6c:0d:1f: 5b:6b:db:73:fd:ea:ae:ae:0d:06:e3:7f:97:0e:0c: 9e:b4:4e:09:b8:09:4f:62:28:ff:66:29:9c:fd:b9: d7:a0:34:36:2a:bc:f8:2b:13:fe:d2:d5:cc:a2:80: 99:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:88:1D:86:4B:2E:92:4E:90:AE:39:65:96:AF:F0:F4:D9:62:29:FB X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.244.0/24 Signature Algorithm: sha256WithRSAEncryption 40:21:34:49:61:af:ea:b3:9b:00:47:87:c5:74:f6:cf:ea:24: 73:a6:ad:93:49:2e:11:aa:68:e3:24:36:8e:fd:1c:ae:b7:a3: 9e:6a:7a:08:e7:c0:74:b0:af:4e:f1:bb:96:c3:84:dc:43:81: 38:e5:47:5e:93:8b:92:8b:a9:20:bc:ac:a7:72:05:3d:bf:6c: c6:08:ff:20:53:ba:d3:26:27:f9:a9:b5:6d:94:ef:5f:57:4d: 67:9c:db:4e:50:81:dd:b3:19:06:32:99:32:2a:43:4c:c8:a0: e6:d8:6f:2e:ba:d3:06:1e:ca:68:2e:a5:54:3a:3f:c6:f0:f7: 53:9f:17:a9:86:e3:19:31:90:d4:4f:96:13:ce:a8:0f:3d:17: 8a:f8:5f:94:bb:9b:42:cc:5d:6b:67:ee:37:c2:0a:0a:f9:95: 23:29:c6:45:e3:21:cb:64:3e:2d:11:d5:ad:19:26:70:ae:ef: 4d:fa:fa:44:b7:ed:8e:7a:24:41:34:24:6b:ca:84:06:4f:63: 8e:3b:78:bd:4e:5a:ba:dc:27:c0:56:be:59:de:7f:6f:8d:16: 94:e4:fe:fb:80:a3:52:3f:94:38:4d:12:e9:92:c8:f8:5d:21: a4:05:d4:a9:71:5b:a6:b7:00:a9:74:a0:c0:f5:4c:8f:95:a2: 68:7a:3e:7e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCwWNoOETKrpo3ZErvXDRdL+ckCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzZaFw0yNjExMTkxMDU3MzZaMDMxMTAvBgNV BAMTKEUxODgxRDg2NEIyRTkyNEU5MEFFMzk2NTk2QUZGMEY0RDk2MjI5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOnkX9s6L/QFS26jHA9brKqfa+ 7g/NAh229d5NSqy168CfC1QVPJJd1xZp1arZRcWpG6bExbrRSqinnEsMv/J2dDz2 cov5zqmvlHx8Ub7BnQwYYMvbmDEz07eGZ6Ir53W2q7R+HqIe014k1sXgdRIG4PZU lSyqSo53ft76pUOKdtdL0VH+Trn7MuoPccTBfbW8nwSFVn8YcUBEqDLN/rH+RYX9 GGjvWVrg/ntmT4bTApS9hE12x5pLMDBiJ2dUrKlf0J9SjTSW3gYBNYaf/mwNH1tr 23P96q6uDQbjf5cODJ60Tgm4CU9iKP9mKZz9udegNDYqvPgrE/7S1cyigJlrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4Ygdhksukk6Qrjlllq/w9NliKfswHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k330MA0GCSqGSIb3DQEBCwUAA4IBAQBAITRJYa/qs5sAR4fFdPbP6iRzpq2TSS4R qmjjJDaO/Ryut6OeanoI58B0sK9O8buWw4TcQ4E45Udek4uSi6kgvKyncgU9v2zG CP8gU7rTJif5qbVtlO9fV01nnNtOUIHdsxkGMpkyKkNMyKDm2G8uutMGHspoLqVU Oj/G8PdTnxephuMZMZDUT5YTzqgPPReK+F+Uu5tCzF1rZ+43wgoK+ZUjKcZF4yHL ZD4tEdWtGSZwru9N+vpEt+2OeiRBNCRryoQGT2OOO3i9Tlq63CfAVr5Z3n9vjRaU 5P77gKNSP5Q4TRLpksj4XSGkBdSpcVumtwCpdKDA9UyPlaJoej5+ -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:33 2025 by rpki-client