This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235302e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3235302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: gaxoUqYUNXhA1pVvd7fpWjlyBa04KSP3oHXxsUFpozM=
Subject key identifier: F0:4B:3F:45:AB:B9:1C:EB:05:59:23:18:4D:21:E0:3C:97:09:89:2D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7EE40636670083F27D71397550AD271C674D3AB9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235302e302f32332d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:53:10 +0000
ROA not before: Mon 09 Feb 2026 07:48:10 +0000
ROA not after: Mon 08 Feb 2027 07:53:10 +0000
asID: 834
IP address blocks: 147.125.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e4:06:36:67:00:83:f2:7d:71:39:75:50:ad:27:1c:67:4d:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:48:10 2026 GMT
Not After : Feb 8 07:53:10 2027 GMT
Subject: CN=F04B3F45ABB91CEB055923184D21E03C9709892D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:04:2e:94:b0:7c:0c:01:3e:bf:4b:0a:e2:
3e:1b:65:10:a2:3a:41:a4:46:25:d0:29:70:4f:3c:
50:b0:5c:cf:3f:fd:33:2b:c5:6e:e9:d5:da:f9:77:
5a:e2:87:fe:48:b2:21:c9:81:e8:bb:7b:d6:64:de:
6c:26:28:d2:1e:4f:80:44:3f:fe:e4:95:8a:7f:d1:
98:68:d4:a3:e0:41:57:2f:be:de:f8:d6:9b:19:02:
47:fa:2b:c6:0d:db:50:d1:2d:d3:0f:b2:24:12:6c:
ec:9d:51:29:76:38:37:88:df:86:19:d0:77:05:75:
d0:86:d2:bc:aa:05:c0:94:da:ec:eb:d6:38:89:83:
4f:e6:cc:4c:d0:3a:34:e3:16:11:be:16:1a:55:7d:
21:84:41:7f:85:90:91:d7:b4:3d:51:45:b4:d8:e6:
17:11:43:da:11:8e:ec:16:53:8c:46:a0:11:8a:9a:
30:47:58:8b:81:ef:2c:53:5d:59:ae:12:86:dc:40:
5c:fc:72:62:2e:e3:96:e5:37:0c:1d:ec:2b:4c:77:
88:41:a4:cd:32:78:64:e2:f7:80:31:4a:38:d1:09:
d8:f3:46:5c:da:1d:87:8c:73:c0:7e:5a:7e:e4:51:
da:f8:7d:7a:f1:20:a0:ae:61:b2:6d:d9:c5:76:07:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:3F:45:AB:B9:1C:EB:05:59:23:18:4D:21:E0:3C:97:09:89:2D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.250.0/23
Signature Algorithm: sha256WithRSAEncryption
40:94:82:84:82:f0:7a:a2:a6:f7:aa:6c:b7:56:5d:cd:a6:e3:
55:fb:61:b5:53:0a:21:35:27:61:6a:3a:6f:60:17:10:47:a3:
86:2f:8b:66:4c:10:bd:cd:0e:f4:37:0e:0d:7c:7e:35:32:8f:
5f:9d:4c:cb:0f:af:07:ff:bb:be:a9:6d:78:f7:4f:c0:85:e2:
56:6a:1c:3c:64:d2:1e:6c:80:75:53:4b:2a:e1:9c:26:69:a4:
5f:e2:47:ab:2c:c0:79:cc:ba:af:a8:dd:a8:48:7d:cd:5a:7d:
22:be:09:0a:e6:3d:e7:33:59:d1:4c:df:04:45:0d:eb:45:be:
c8:79:2a:93:d5:b1:96:ce:b7:06:88:4c:2d:67:21:98:31:bd:
16:71:39:82:cd:63:e3:1f:96:02:e8:6b:6c:c5:f0:e9:e0:ca:
ec:83:7a:18:91:d7:4a:5e:c0:c5:09:66:11:d9:f4:19:e4:06:
e6:4d:0b:a2:89:5a:14:8d:b1:95:a8:61:9e:5a:c2:80:48:c1:
2b:4a:b0:c2:d6:41:98:5f:7a:a1:41:9a:e2:1f:2a:1c:80:52:
83:f4:49:a7:3e:9d:c5:06:e9:83:e0:06:06:a5:b6:04:21:de:
c7:6a:97:8e:bc:b0:1a:56:6b:e2:34:9c:8a:5f:16:3d:cb:38:
2b:4a:d7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:33 2026 by rpki-client