This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234362e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234362e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: qfVkkcrueyQxCcZDjyHbmSH7/ztuBbpLTwl/Sj1We20= Subject key identifier: 15:DE:5B:B5:B0:61:0E:D7:1B:BA:50:8F:B9:36:4C:B4:49:CD:EA:95 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2145BADD6BDF62E829F39E121663B7849A8B96C8 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234362e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:35 +0000 ROA not before: Thu 20 Nov 2025 10:52:35 +0000 ROA not after: Thu 19 Nov 2026 10:57:35 +0000 asID: 9304 IP address blocks: 147.125.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:45:ba:dd:6b:df:62:e8:29:f3:9e:12:16:63:b7:84:9a:8b:96:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:35 2025 GMT Not After : Nov 19 10:57:35 2026 GMT Subject: CN=15DE5BB5B0610ED71BBA508FB9364CB449CDEA95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:ae:0b:27:58:4e:c3:fc:81:b5:91:da:c2: fd:4b:71:f0:91:e6:95:78:b8:0a:42:86:3f:d2:64: 87:49:34:3b:0b:4b:97:5e:af:48:a5:bd:61:a8:6c: dd:91:d1:79:fd:c3:cf:2e:12:0e:37:62:ea:09:47: a6:18:29:65:a2:1d:1e:57:a6:01:3a:40:ee:f9:52: b9:cf:92:17:7f:d5:cb:64:11:85:c5:43:ab:98:66: b1:d8:b7:fe:b8:35:8d:1f:d2:fb:56:92:cc:33:30: 00:1e:ec:0d:4f:27:bd:2d:b5:c7:d1:fc:cf:7b:8b: 1d:13:e3:c1:c2:6d:2c:7f:20:7e:47:c2:f4:69:16: fc:ae:0a:05:4f:38:b2:fc:cf:01:f8:9f:a1:73:bd: 11:d6:bb:2c:f6:1a:24:88:c4:b2:00:f6:f4:73:cb: 37:13:c3:55:8e:d4:ed:9e:30:96:a4:ba:e8:6b:1d: eb:15:a3:59:76:a5:73:2e:79:52:05:17:44:1e:f7: 69:2d:b2:34:52:b9:7b:23:ec:65:01:2f:32:7b:bf: 9f:4b:8b:67:d2:84:49:f2:cb:dc:1e:5a:b2:4b:d2: c7:c5:69:7d:18:82:b4:b5:4c:8c:34:f1:65:e5:fb: 28:23:67:a0:52:54:25:1e:6d:39:d5:95:b5:23:14: d8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:5B:B5:B0:61:0E:D7:1B:BA:50:8F:B9:36:4C:B4:49:CD:EA:95 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234362e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.246.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:bf:af:c1:9a:a5:45:2e:b0:ba:ec:61:e0:c9:a4:b7:95:ea: 22:f0:fb:ed:30:04:9e:ed:d0:0f:6e:f2:e2:57:c7:78:bd:f4: 1e:6e:e7:76:67:d1:a1:2c:d4:80:da:9b:75:27:55:ba:ee:c4: 25:ac:72:41:a9:36:3c:1e:48:34:95:ac:b2:71:35:57:82:56: 12:ff:a7:c0:51:e3:b1:8a:22:6b:3d:14:85:20:96:6c:87:a7: bd:09:50:17:f7:58:9d:ce:39:35:e7:48:d2:e1:12:be:02:21: 50:ed:90:27:eb:d2:0e:48:c5:ee:01:78:1c:28:76:af:86:67: 61:36:85:8c:4d:71:61:91:c2:f7:f1:b8:e9:1f:3c:59:18:63: 3c:1d:47:db:ec:a6:65:dc:98:24:96:78:d3:41:de:f3:08:5f: 95:02:da:ab:2f:a5:b9:3b:3f:3e:d1:86:0a:56:e1:88:c4:68: 8c:2f:8e:7c:2b:3c:b8:31:21:c7:52:c7:cd:57:bd:2c:55:5c: 94:91:fe:2a:ed:fd:ec:0b:c7:26:ea:2e:83:95:2f:97:e2:6b: cb:f4:45:f2:2d:9e:b1:1b:f9:47:92:40:b3:09:db:c3:d6:82: a1:70:f3:18:68:74:bf:61:a3:9a:a8:72:6d:94:60:2d:f9:b4: 6d:9f:e0:cf -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIUW63WvfYugp854SFmO3hJqLlsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzVaFw0yNjExMTkxMDU3MzVaMDMxMTAvBgNV BAMTKDE1REU1QkI1QjA2MTBFRDcxQkJBNTA4RkI5MzY0Q0I0NDlDREVBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcC64LJ1hOw/yBtZHawv1LcfCR 5pV4uApChj/SZIdJNDsLS5der0ilvWGobN2R0Xn9w88uEg43YuoJR6YYKWWiHR5X pgE6QO75UrnPkhd/1ctkEYXFQ6uYZrHYt/64NY0f0vtWkswzMAAe7A1PJ70ttcfR /M97ix0T48HCbSx/IH5HwvRpFvyuCgVPOLL8zwH4n6FzvRHWuyz2GiSIxLIA9vRz yzcTw1WO1O2eMJakuuhrHesVo1l2pXMueVIFF0Qe92ktsjRSuXsj7GUBLzJ7v59L i2fShEnyy9weWrJL0sfFaX0YgrS1TIw08WXl+ygjZ6BSVCUebTnVlbUjFNidAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFd5btbBhDtcbulCPuTZMtEnN6pUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k332MA0GCSqGSIb3DQEBCwUAA4IBAQBNv6/BmqVFLrC67GHgyaS3leoi8PvtMASe 7dAPbvLiV8d4vfQebud2Z9GhLNSA2pt1J1W67sQlrHJBqTY8Hkg0layycTVXglYS /6fAUeOxiiJrPRSFIJZsh6e9CVAX91idzjk150jS4RK+AiFQ7ZAn69IOSMXuAXgc KHavhmdhNoWMTXFhkcL38bjpHzxZGGM8HUfb7KZl3JgklnjTQd7zCF+VAtqrL6W5 Oz8+0YYKVuGIxGiML458Kzy4MSHHUsfNV70sVVyUkf4q7f3sC8cm6i6DlS+X4mvL 9EXyLZ6xG/lHkkCzCdvD1oKhcPMYaHS/YaOaqHJtlGAt+bRtn+DP -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client