This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234382e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234382e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: u7umyHPBwMUnFZ/5iKZhbmexqkH2W6sycPiAabqRhGE= Subject key identifier: CF:C2:5C:81:F7:FD:18:8D:06:B3:4F:F4:21:18:62:12:9A:6E:87:A4 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 42BF65EE18FE0DBF5DAEE34FA0B65224B89F1BB0 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234382e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:32 +0000 ROA not before: Thu 20 Nov 2025 10:52:32 +0000 ROA not after: Thu 19 Nov 2026 10:57:32 +0000 asID: 9304 IP address blocks: 147.125.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:bf:65:ee:18:fe:0d:bf:5d:ae:e3:4f:a0:b6:52:24:b8:9f:1b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:32 2025 GMT Not After : Nov 19 10:57:32 2026 GMT Subject: CN=CFC25C81F7FD188D06B34FF4211862129A6E87A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:89:1c:7b:ee:47:60:fc:ef:0f:76:db:47: e6:ee:b5:14:90:5d:40:11:f1:fa:d0:ad:2c:cf:b4: 3f:97:47:b5:c5:11:42:2a:ac:b9:af:91:06:b3:04: fc:d0:40:7a:f8:e1:f8:72:7e:ec:c1:14:1b:1a:24: b7:f9:2f:44:06:f2:63:ce:ab:fc:ba:25:db:35:53: 45:19:a0:e4:aa:bb:66:f9:17:ef:a3:13:ef:a8:a3: 44:43:a2:f6:f0:d4:6f:97:6e:ae:08:dd:b2:3a:44: cb:ef:f8:12:66:61:ea:9a:e9:0a:d3:e6:76:73:51: ae:60:a8:5e:c8:6e:f5:de:fe:2a:21:94:e2:75:ee: 55:55:c0:f1:8d:96:24:ec:1e:57:95:e7:0d:72:99: c6:da:a4:46:25:9f:73:a8:ca:25:e2:28:e5:e7:69: 72:9b:b5:6c:eb:d6:aa:46:36:de:36:5c:a7:7c:36: b0:11:9e:2a:43:27:3c:60:fe:45:ef:d7:ed:c1:ee: c8:7c:83:cd:8e:02:40:90:33:25:55:7b:26:85:43: 26:05:9e:0e:5d:c1:84:29:ff:0a:89:22:3f:1b:d2: 9e:4c:29:0e:6c:c2:91:06:b5:fd:31:38:c1:58:b7: 36:29:64:1e:82:eb:cf:2f:9e:e8:5c:ec:c3:be:69: 6b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C2:5C:81:F7:FD:18:8D:06:B3:4F:F4:21:18:62:12:9A:6E:87:A4 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234382e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.248.0/24 Signature Algorithm: sha256WithRSAEncryption 33:2e:37:42:56:ab:61:4d:f0:83:75:0c:e1:26:1a:74:55:d1: d3:8c:1c:70:da:aa:31:6b:34:62:08:83:29:d7:a0:43:d7:f6: 33:81:eb:7a:60:f0:41:a9:07:25:5d:f1:e8:b0:d5:9a:8e:76: da:e4:a1:6e:48:8e:b4:69:e8:6c:fe:10:f1:d5:01:bd:88:4b: 8b:43:10:87:42:8d:df:2c:22:36:21:31:40:2c:db:fa:df:cd: 42:01:aa:f3:80:c1:cb:cd:87:53:94:43:58:fb:1b:1b:46:60: 4c:8c:f8:66:96:82:5d:59:d5:f6:70:09:b8:f5:14:fa:9e:5f: 43:06:92:1b:24:06:87:31:36:55:93:15:05:20:87:bf:74:6e: 20:b3:b4:53:95:f2:c3:a2:49:29:56:54:74:29:d7:63:16:26: 97:f4:96:19:1d:a1:2d:a2:7f:f9:e8:ea:bd:8f:16:78:19:be: 8d:82:0f:09:22:01:e4:05:a1:65:ee:22:50:6a:f2:2c:84:69: 8c:af:50:1e:51:76:aa:21:d3:65:3f:04:67:71:4b:56:b7:e7: 22:c8:a1:52:5e:50:d2:89:a3:2d:25:4a:8a:e8:47:f6:35:39: 1f:46:6e:25:ff:7b:f2:c7:3c:f7:8e:0c:43:12:16:d4:35:32: 2b:d0:62:0c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQr9l7hj+Db9druNPoLZSJLifG7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzJaFw0yNjExMTkxMDU3MzJaMDMxMTAvBgNV BAMTKENGQzI1QzgxRjdGRDE4OEQwNkIzNEZGNDIxMTg2MjEyOUE2RTg3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzYkce+5HYPzvD3bbR+butRSQ XUAR8frQrSzPtD+XR7XFEUIqrLmvkQazBPzQQHr44fhyfuzBFBsaJLf5L0QG8mPO q/y6Jds1U0UZoOSqu2b5F++jE++oo0RDovbw1G+Xbq4I3bI6RMvv+BJmYeqa6QrT 5nZzUa5gqF7IbvXe/iohlOJ17lVVwPGNliTsHleV5w1ymcbapEYln3OoyiXiKOXn aXKbtWzr1qpGNt42XKd8NrARnipDJzxg/kXv1+3B7sh8g82OAkCQMyVVeyaFQyYF ng5dwYQp/wqJIj8b0p5MKQ5swpEGtf0xOMFYtzYpZB6C688vnuhc7MO+aWvBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUz8Jcgff9GI0Gs0/0IRhiEppuh6QwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k334MA0GCSqGSIb3DQEBCwUAA4IBAQAzLjdCVqthTfCDdQzhJhp0VdHTjBxw2qox azRiCIMp16BD1/Yzget6YPBBqQclXfHosNWajnba5KFuSI60aehs/hDx1QG9iEuL QxCHQo3fLCI2ITFALNv6381CAarzgMHLzYdTlENY+xsbRmBMjPhmloJdWdX2cAm4 9RT6nl9DBpIbJAaHMTZVkxUFIIe/dG4gs7RTlfLDokkpVlR0KddjFiaX9JYZHaEt on/56Oq9jxZ4Gb6Ngg8JIgHkBaFl7iJQavIshGmMr1AeUXaqIdNlPwRncUtWt+ci yKFSXlDSiaMtJUqK6Ef2NTkfRm4l/3vyxzz3jgxDEhbUNTIr0GIM -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:31 2025 by rpki-client