This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234392e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3234392e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: fHUNVrqIosWoUSZ0L1SHhFedbbBMdJummr7sA03DBQU= Subject key identifier: EE:B1:74:25:DC:96:38:9D:9C:54:2A:72:50:B7:03:B0:EA:93:91:69 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 23B895381B709750D2D02320854C4DBA3153756E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234392e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:57:31 +0000 ROA not before: Thu 20 Nov 2025 10:52:31 +0000 ROA not after: Thu 19 Nov 2026 10:57:31 +0000 asID: 9304 IP address blocks: 147.125.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b8:95:38:1b:70:97:50:d2:d0:23:20:85:4c:4d:ba:31:53:75:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:52:31 2025 GMT Not After : Nov 19 10:57:31 2026 GMT Subject: CN=EEB17425DC96389D9C542A7250B703B0EA939169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:99:db:ac:a7:33:46:da:e3:5f:7f:e9:c0: 78:c0:c8:fd:20:30:11:89:a3:96:6a:bc:06:6a:e5: 35:85:eb:c3:1a:a0:b5:ee:4a:92:4a:b5:c9:28:ff: cb:27:54:3b:ae:70:e1:1e:03:0b:63:ba:5d:82:a2: dc:29:d9:22:c7:f4:e6:36:35:85:ce:8f:e0:16:3a: 0f:19:e6:c8:d4:52:94:0d:b3:ce:36:a0:de:e3:bb: 95:22:3e:7e:c9:01:f8:a8:7b:49:fd:b4:fe:cb:8c: c8:32:a7:ee:9f:1e:c6:b0:7c:fc:66:8a:ed:32:1a: 04:cb:c1:88:40:d9:8b:c8:e0:7a:06:4d:37:39:74: 78:38:e5:2d:70:81:21:4b:2f:04:b5:39:1e:41:35: 6e:e8:3d:b7:92:05:68:3d:bb:98:30:67:13:fd:8d: 2f:9d:33:14:02:c1:eb:a0:ae:2b:cf:f5:04:5a:d7: 36:ba:ab:4c:7e:ab:ad:4e:34:3b:66:e0:8d:c1:0d: 45:e9:cb:e5:0f:43:62:5b:85:66:9b:e3:1b:43:63: 72:aa:21:bf:3b:1a:74:57:be:fd:14:67:df:7d:11: 55:1c:2e:71:02:39:81:f3:b4:67:72:9d:0e:5c:23: 4b:57:40:2b:ed:3d:61:02:52:06:1c:c7:9f:7d:56: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B1:74:25:DC:96:38:9D:9C:54:2A:72:50:B7:03:B0:EA:93:91:69 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234392e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.249.0/24 Signature Algorithm: sha256WithRSAEncryption 12:a4:1d:c2:ab:f0:31:4f:32:c5:22:72:cf:4c:a3:d1:5d:30: ea:34:3e:64:8b:44:47:62:15:f4:a5:60:1b:56:90:10:27:f3: 7e:97:f3:85:1d:95:4a:75:a7:f1:c8:9d:24:cc:cc:5d:12:ab: 03:2f:7a:7d:2e:c7:4c:60:70:27:56:d1:c5:9c:9b:0c:11:f3: bd:cd:48:7f:91:d8:8a:cb:9b:91:da:31:ac:11:47:54:3c:3e: ca:34:cc:fd:72:0e:26:4c:14:a7:e5:45:35:92:4a:5d:04:ff: 6f:19:1c:43:16:de:ad:d3:d5:c2:e3:7f:63:c8:05:71:a3:cd: 51:f4:e7:fd:74:cf:a3:9d:e9:68:7e:06:51:74:4d:11:ea:66: fe:4d:5a:bf:f7:4f:9b:7f:f7:fb:31:21:7e:8a:63:e2:0c:f7: 76:2a:fa:6e:37:a5:43:3e:40:a5:ee:d9:76:d9:15:11:83:42: 6e:9d:51:bc:52:5b:e5:98:fb:f7:e9:76:08:25:bf:49:00:56: f4:71:0a:08:2d:7f:af:df:38:01:9f:54:de:de:fe:02:8e:b2: 42:3d:db:74:c9:ea:fe:f6:b2:9b:87:cd:be:1b:b8:f3:26:d0: 8b:f8:7d:84:fe:84:f6:f2:e1:c3:29:07:aa:15:7c:b8:cd:4d: d5:75:59:89 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUI7iVOBtwl1DS0CMghUxNujFTdW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUyMzFaFw0yNjExMTkxMDU3MzFaMDMxMTAvBgNV BAMTKEVFQjE3NDI1REM5NjM4OUQ5QzU0MkE3MjUwQjcwM0IwRUE5MzkxNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4ZnbrKczRtrjX3/pwHjAyP0g MBGJo5ZqvAZq5TWF68MaoLXuSpJKtcko/8snVDuucOEeAwtjul2Cotwp2SLH9OY2 NYXOj+AWOg8Z5sjUUpQNs842oN7ju5UiPn7JAfioe0n9tP7LjMgyp+6fHsawfPxm iu0yGgTLwYhA2YvI4HoGTTc5dHg45S1wgSFLLwS1OR5BNW7oPbeSBWg9u5gwZxP9 jS+dMxQCweugrivP9QRa1za6q0x+q61ONDtm4I3BDUXpy+UPQ2JbhWab4xtDY3Kq Ib87GnRXvv0UZ999EVUcLnECOYHztGdynQ5cI0tXQCvtPWECUgYcx599Vpo5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7rF0JdyWOJ2cVCpyULcDsOqTkWkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k335MA0GCSqGSIb3DQEBCwUAA4IBAQASpB3Cq/AxTzLFInLPTKPRXTDqND5ki0RH YhX0pWAbVpAQJ/N+l/OFHZVKdafxyJ0kzMxdEqsDL3p9LsdMYHAnVtHFnJsMEfO9 zUh/kdiKy5uR2jGsEUdUPD7KNMz9cg4mTBSn5UU1kkpdBP9vGRxDFt6t09XC439j yAVxo81R9Of9dM+jnelofgZRdE0R6mb+TVq/90+bf/f7MSF+imPiDPd2KvpuN6VD PkCl7tl22RURg0JunVG8UlvlmPv36XYIJb9JAFb0cQoILX+v3zgBn1Te3v4CjrJC Pdt0yer+9rKbh82+G7jzJtCL+H2E/oT28uHDKQeqFXy4zU3VdVmJ -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:31 2025 by rpki-client