This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234352e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: TcAdmpbJHxibatV7y18OqVhlwbSqtiXODN++vrrMAbg= Subject key identifier: 47:4C:84:8D:E5:84:A1:70:2C:F9:19:27:C1:3C:BE:08:2D:40:91:23 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0C6737E813B3367B5C4A7EFD447EAD560F6B85F7 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234352e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:35 +0000 ROA not before: Thu 20 Nov 2025 10:52:35 +0000 ROA not after: Thu 19 Nov 2026 10:57:35 +0000 asID: 9304 IP address blocks: 147.125.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:67:37:e8:13:b3:36:7b:5c:4a:7e:fd:44:7e:ad:56:0f:6b:85:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:35 2025 GMT Not After : Nov 19 10:57:35 2026 GMT Subject: CN=474C848DE584A1702CF91927C13CBE082D409123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:c4:47:80:d0:2c:b5:ed:9f:bc:53:4a:77: f2:74:3b:6f:5e:03:c2:d2:b8:33:e5:d0:c8:d9:cb: 52:fd:c6:cf:a8:a2:a1:7c:8c:f8:9e:de:f7:56:26: 11:27:d5:e9:cd:19:49:b6:4e:46:f0:5e:f2:d6:0d: c2:a0:55:da:33:64:51:14:f5:c9:dd:75:9b:3c:8d: c1:b5:18:ee:2d:95:07:1b:98:55:d4:3a:4f:48:64: 62:de:15:57:97:44:01:b1:5a:75:4d:60:bb:0e:fb: a2:30:8c:e3:f6:81:6c:b6:7e:3a:b1:21:75:b2:07: 79:61:b5:cb:35:ef:05:0e:71:aa:4f:ba:47:f4:57: 75:fd:1f:ed:dd:c3:0e:4d:49:ef:7c:37:c5:5d:7c: 76:c4:e3:58:36:8e:96:b2:07:ec:64:e4:7a:10:42: b7:52:5f:40:d0:6f:61:bb:59:a9:fc:88:ee:9d:fc: 50:cc:2e:c0:e2:8a:3e:6b:2b:cf:7b:5d:ac:44:53: 7e:eb:32:f2:96:4c:f4:3e:e5:0c:0d:f3:9f:5e:43: eb:b1:a6:47:8d:07:d6:c8:e4:22:4c:a0:86:5d:19: 03:b4:97:d3:46:c9:11:e5:dc:b4:cb:17:49:4c:ca: 9a:66:c8:7b:69:50:34:65:e2:93:16:c3:03:fc:a1: 96:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4C:84:8D:E5:84:A1:70:2C:F9:19:27:C1:3C:BE:08:2D:40:91:23 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:cd:cd:35:22:04:f2:df:2b:09:1c:54:53:c6:7c:ab:39:f4: c3:69:94:f9:ae:67:dd:8b:a1:43:82:3d:00:70:d1:26:4e:06: fc:0d:bd:d3:96:95:1b:85:0f:06:70:cf:81:15:59:20:47:d7: 5f:74:b5:28:b1:36:46:15:4f:38:7e:72:22:c6:4d:f8:ff:5e: 4b:ee:3d:5a:8b:c8:54:6a:fd:76:c3:11:60:63:78:15:d3:16: 03:2d:77:9b:ec:03:96:04:a5:d2:9f:0e:0a:6c:4f:df:a4:19: 6f:7a:ad:ae:6f:0b:a4:65:f7:4a:2d:c2:38:eb:c8:c6:63:db: f7:9a:d6:cb:12:f3:d1:83:89:ed:a4:dc:d5:9a:2c:7e:88:f5: fa:13:72:58:2d:40:60:32:ea:a3:9b:e9:e7:21:b6:ac:c1:aa: 79:b8:67:77:f0:36:fe:7d:1b:e0:ce:dc:19:2d:92:00:bc:da: b6:a9:f9:7e:11:3b:00:ab:74:1a:d6:d8:6f:66:de:07:cc:10: 47:8d:6c:d3:ae:67:ac:2a:62:49:0d:27:01:4a:f0:f0:3f:4b: 6d:dc:b5:78:c1:62:c0:61:a2:29:2e:72:2c:67:72:73:e9:84: d4:0a:d2:f9:11:96:a9:d7:f1:da:39:69:f8:22:46:a5:73:23: 57:85:94:2e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDGc36BOzNntcSn79RH6tVg9rhfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzVaFw0yNjExMTkxMDU3MzVaMDMxMTAvBgNV BAMTKDQ3NEM4NDhERTU4NEExNzAyQ0Y5MTkyN0MxM0NCRTA4MkQ0MDkxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWt8RHgNAste2fvFNKd/J0O29e A8LSuDPl0MjZy1L9xs+ooqF8jPie3vdWJhEn1enNGUm2TkbwXvLWDcKgVdozZFEU 9cnddZs8jcG1GO4tlQcbmFXUOk9IZGLeFVeXRAGxWnVNYLsO+6IwjOP2gWy2fjqx IXWyB3lhtcs17wUOcapPukf0V3X9H+3dww5NSe98N8VdfHbE41g2jpayB+xk5HoQ QrdSX0DQb2G7Wan8iO6d/FDMLsDiij5rK897XaxEU37rMvKWTPQ+5QwN859eQ+ux pkeNB9bI5CJMoIZdGQO0l9NGyRHl3LTLF0lMyppmyHtpUDRl4pMWwwP8oZaFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUR0yEjeWEoXAs+RknwTy+CC1AkSMwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k331MA0GCSqGSIb3DQEBCwUAA4IBAQA6zc01IgTy3ysJHFRTxnyrOfTDaZT5rmfd i6FDgj0AcNEmTgb8Db3TlpUbhQ8GcM+BFVkgR9dfdLUosTZGFU84fnIixk34/15L 7j1ai8hUav12wxFgY3gV0xYDLXeb7AOWBKXSnw4KbE/fpBlveq2ubwukZfdKLcI4 68jGY9v3mtbLEvPRg4ntpNzVmix+iPX6E3JYLUBgMuqjm+nnIbaswap5uGd38Db+ fRvgztwZLZIAvNq2qfl+ETsAq3Qa1thvZt4HzBBHjWzTrmesKmJJDScBSvDwP0tt 3LV4wWLAYaIpLnIsZ3Jz6YTUCtL5EZap1/HaOWn4IkalcyNXhZQu -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:31 2025 by rpki-client