This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234372e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234372e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: vwRvoD1FCN2P++Zc4tErXuBySBTyoxCCsbP/UO5vldQ= Subject key identifier: 10:6C:12:A1:A2:E0:B1:AB:0E:DC:DA:4B:80:C8:61:AD:6E:BB:27:79 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0FFF4709733E2FBA579EED73CA7472271F234F60 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234372e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:34 +0000 ROA not before: Thu 20 Nov 2025 10:52:34 +0000 ROA not after: Thu 19 Nov 2026 10:57:34 +0000 asID: 9304 IP address blocks: 147.125.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ff:47:09:73:3e:2f:ba:57:9e:ed:73:ca:74:72:27:1f:23:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:34 2025 GMT Not After : Nov 19 10:57:34 2026 GMT Subject: CN=106C12A1A2E0B1AB0EDCDA4B80C861AD6EBB2779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:0b:64:e1:bc:12:69:23:cb:8c:9b:f8:8d: 39:07:72:3f:6d:27:a6:b3:ac:98:d2:f7:a9:46:ef: 8b:09:73:e9:b3:90:ef:ac:0c:47:99:59:2b:dc:bc: 53:89:00:78:d6:10:a9:02:ac:95:b3:bf:4b:9d:1f: 0f:50:ef:fa:83:34:c1:f4:a8:dc:c0:d6:37:45:34: 1e:c9:3c:9c:23:4f:a8:1b:1d:f6:33:0d:d5:c6:2d: a0:4d:14:f2:3c:58:91:90:6f:b8:dd:03:37:e1:58: 6a:35:0d:cc:f1:da:f9:8c:d2:16:57:ae:98:13:fb: 31:e8:de:92:cd:2d:d8:18:b9:1c:ab:02:49:ae:22: 1c:ff:b4:33:1d:ca:d4:bb:22:f5:cf:1a:b4:5c:35: 20:a7:24:ce:ac:39:a1:9a:8c:5f:4b:02:ac:81:98: 65:05:a9:ca:24:1b:ef:05:99:96:f2:11:89:60:76: 59:a0:53:fb:7b:26:f6:b0:e7:00:96:aa:9a:5f:dd: 70:bd:7d:f0:bb:e1:dd:f6:d8:a8:ca:d9:c7:01:39: 3e:a7:dd:b6:cd:d9:3a:e2:2c:44:b8:d2:0d:75:93: 29:45:f7:af:d1:07:ab:0d:f1:08:67:c8:8c:1b:4a: c1:e4:24:43:ee:4b:a7:64:0d:50:b6:ff:df:77:42: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6C:12:A1:A2:E0:B1:AB:0E:DC:DA:4B:80:C8:61:AD:6E:BB:27:79 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234372e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.247.0/24 Signature Algorithm: sha256WithRSAEncryption 45:08:ea:46:5d:a4:94:5b:d2:f6:45:f4:8d:a0:d1:f1:12:34: 7f:f9:8c:4e:5b:e2:00:9a:55:96:b6:d0:31:ad:6d:35:6e:18: 71:37:35:79:35:92:6a:3c:d4:6f:b8:47:d4:2a:d7:cf:9e:d4: be:05:ce:db:20:3d:2c:dc:56:fe:16:ec:a2:ce:3d:c3:c7:f8: 6b:ef:39:33:c4:00:c8:3d:27:45:65:6f:4f:b5:58:c3:74:8f: 12:e1:c1:f8:3e:7d:1e:7e:bb:d9:85:76:45:d5:2c:ff:53:f7: 8c:a2:35:38:0d:99:df:fd:f2:21:64:76:b9:2c:ee:66:f9:d0: 5a:c0:80:00:74:45:9d:fd:de:4f:56:77:2c:eb:be:d1:b9:61: 8c:2a:49:82:f3:ad:15:ee:e3:92:ab:71:16:dd:e6:40:22:a3: ac:22:94:5c:e8:e6:a0:7e:04:ff:34:23:9a:04:7f:c7:89:ff: ef:4e:3e:53:ee:77:97:e9:c5:61:04:4d:76:ad:8c:2c:a2:6e: 8f:4e:fd:ed:a9:6b:f9:ed:ec:66:68:27:2b:6a:17:98:db:2d: 5b:b9:2f:72:d3:21:08:bc:77:24:94:6f:19:7f:d0:57:00:5d: 6c:ee:a1:72:c0:11:25:38:ed:ec:9f:e2:11:37:50:55:a7:60: 08:91:4e:6f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUD/9HCXM+L7pXnu1zynRyJx8jT2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzRaFw0yNjExMTkxMDU3MzRaMDMxMTAvBgNV BAMTKDEwNkMxMkExQTJFMEIxQUIwRURDREE0QjgwQzg2MUFENkVCQjI3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9gtk4bwSaSPLjJv4jTkHcj9t J6azrJjS96lG74sJc+mzkO+sDEeZWSvcvFOJAHjWEKkCrJWzv0udHw9Q7/qDNMH0 qNzA1jdFNB7JPJwjT6gbHfYzDdXGLaBNFPI8WJGQb7jdAzfhWGo1Dczx2vmM0hZX rpgT+zHo3pLNLdgYuRyrAkmuIhz/tDMdytS7IvXPGrRcNSCnJM6sOaGajF9LAqyB mGUFqcokG+8FmZbyEYlgdlmgU/t7Jvaw5wCWqppf3XC9ffC74d322KjK2ccBOT6n 3bbN2TriLES40g11kylF96/RB6sN8QhnyIwbSsHkJEPuS6dkDVC2/993Qi8NAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUEGwSoaLgsasO3NpLgMhhrW67J3kwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k333MA0GCSqGSIb3DQEBCwUAA4IBAQBFCOpGXaSUW9L2RfSNoNHxEjR/+YxOW+IA mlWWttAxrW01bhhxNzV5NZJqPNRvuEfUKtfPntS+Bc7bID0s3Fb+Fuyizj3Dx/hr 7zkzxADIPSdFZW9PtVjDdI8S4cH4Pn0efrvZhXZF1Sz/U/eMojU4DZnf/fIhZHa5 LO5m+dBawIAAdEWd/d5PVncs677RuWGMKkmC860V7uOSq3EW3eZAIqOsIpRc6Oag fgT/NCOaBH/Hif/vTj5T7neX6cVhBE12rYwsom6PTv3tqWv57exmaCcraheY2y1b uS9y0yEIvHcklG8Zf9BXAF1s7qFywBElOO3sn+IRN1BVp2AIkU5v -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client