This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: /yuOGKs5BgvevuJaZbFlKGL7Nv4961O/gTbl25RQRPk= Subject key identifier: DF:A3:C8:78:28:4B:CA:FC:8A:0C:8C:B7:57:F4:EC:BC:F0:FA:7C:A4 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 4EE91C6CEBD150B8FB46CF208A5FF69A6495E87A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa Signing time: Fri 09 Jan 2026 08:11:32 +0000 ROA not before: Fri 09 Jan 2026 08:06:32 +0000 ROA not after: Fri 08 Jan 2027 08:11:32 +0000 asID: 9304 IP address blocks: 147.125.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e9:1c:6c:eb:d1:50:b8:fb:46:cf:20:8a:5f:f6:9a:64:95:e8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:06:32 2026 GMT Not After : Jan 8 08:11:32 2027 GMT Subject: CN=DFA3C878284BCAFC8A0C8CB757F4ECBCF0FA7CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:27:3d:80:20:f2:57:a0:37:03:15:8f:85: 72:cb:cb:b5:b9:73:f7:5e:74:e1:f7:e4:6d:fc:7e: 36:38:57:17:57:d2:fd:11:ff:16:f3:49:02:7b:5a: 9d:2d:61:7e:e4:eb:af:d6:16:2e:3b:96:58:57:d5: 38:09:53:da:d7:ae:58:7a:de:d5:14:1e:43:99:3c: 7d:7e:96:f7:f9:e0:cc:9f:4d:a9:c5:29:3e:c2:c9: 85:f5:95:4a:bc:4e:77:d7:24:ae:e9:25:c2:fb:b1: a2:24:0e:d8:b8:62:4a:c5:03:4a:31:5f:38:05:16: 56:b5:51:62:b3:a1:f2:ff:90:b0:fe:17:87:50:c0: d6:62:61:14:05:a8:f8:80:48:81:7a:5e:77:6a:01: 03:ab:02:f5:04:e5:7c:6b:83:ca:b7:94:fd:29:b6: 92:6b:77:75:7f:68:c1:e2:2b:ef:4e:72:05:b2:11: 77:cc:ca:9f:81:28:48:d9:ad:96:75:63:a1:74:8c: f6:eb:7b:77:bc:fb:ee:e1:22:bc:7f:94:32:28:71: 42:50:f3:7d:e0:22:b5:8a:41:c6:f2:5d:09:0c:fd: 49:a4:f5:78:a0:91:94:d4:a3:b6:9c:65:63:df:15: 0a:21:07:92:78:54:9d:87:4b:09:07:db:b0:0b:62: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A3:C8:78:28:4B:CA:FC:8A:0C:8C:B7:57:F4:EC:BC:F0:FA:7C:A4 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.251.0/24 Signature Algorithm: sha256WithRSAEncryption 60:27:3b:8c:fd:47:60:b6:12:2f:bb:ee:e5:cd:d5:5c:b9:32: 4c:ab:df:34:df:38:96:ee:38:ae:6d:74:91:80:0d:69:6b:f4: 18:36:b8:e6:6d:e8:36:80:6a:8f:12:2f:7e:78:5f:88:6d:58: 35:a8:0c:3f:f7:93:71:6b:37:a5:d4:b6:07:01:31:e9:3a:4b: f2:08:99:cb:85:3f:bb:ac:19:db:44:8e:99:65:67:36:83:c8: d0:18:f8:3b:08:9d:e0:c2:19:b4:8a:11:b9:f2:02:2b:18:36: 58:a0:02:5a:99:32:84:ad:91:8a:98:40:6a:d7:39:cf:24:bc: be:63:c3:22:36:55:6c:6e:71:6c:1c:fb:87:79:a1:63:97:6b: e1:1a:54:0e:d9:9b:b2:ae:9a:a5:d1:9a:3b:41:f1:d8:66:67: ce:3f:83:fe:d0:ca:e8:a8:41:60:10:08:d8:14:39:29:3c:6e: 79:da:e8:62:1c:c9:bf:26:74:eb:bf:77:81:de:64:9a:b2:0b: 65:b9:f5:22:71:d1:bd:48:72:ea:f3:3e:37:54:5a:1a:d7:a5: 10:20:88:70:1c:7f:e5:ae:97:e0:50:57:6f:91:e0:5e:af:0e: 74:f7:55:e4:de:c8:1c:c3:7b:a9:4c:bd:6f:18:bd:aa:3a:cd: 5f:d3:cc:cb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTukcbOvRULj7Rs8gil/2mmSV6HowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODA2MzJaFw0yNzAxMDgwODExMzJaMDMxMTAvBgNV BAMTKERGQTNDODc4Mjg0QkNBRkM4QTBDOENCNzU3RjRFQ0JDRjBGQTdDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXCyc9gCDyV6A3AxWPhXLLy7W5 c/dedOH35G38fjY4VxdX0v0R/xbzSQJ7Wp0tYX7k66/WFi47llhX1TgJU9rXrlh6 3tUUHkOZPH1+lvf54MyfTanFKT7CyYX1lUq8TnfXJK7pJcL7saIkDti4YkrFA0ox XzgFFla1UWKzofL/kLD+F4dQwNZiYRQFqPiASIF6XndqAQOrAvUE5Xxrg8q3lP0p tpJrd3V/aMHiK+9OcgWyEXfMyp+BKEjZrZZ1Y6F0jPbre3e8++7hIrx/lDIocUJQ 833gIrWKQcbyXQkM/Umk9XigkZTUo7acZWPfFQohB5J4VJ2HSwkH27ALYrCBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU36PIeChLyvyKDIy3V/TsvPD6fKQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k337MA0GCSqGSIb3DQEBCwUAA4IBAQBgJzuM/UdgthIvu+7lzdVcuTJMq9803ziW 7jiubXSRgA1pa/QYNrjmbeg2gGqPEi9+eF+IbVg1qAw/95Nxazel1LYHATHpOkvy CJnLhT+7rBnbRI6ZZWc2g8jQGPg7CJ3gwhm0ihG58gIrGDZYoAJamTKErZGKmEBq 1znPJLy+Y8MiNlVsbnFsHPuHeaFjl2vhGlQO2Zuyrpql0Zo7QfHYZmfOP4P+0Mro qEFgEAjYFDkpPG552uhiHMm/JnTrv3eB3mSasgtlufUicdG9SHLq8z43VFoa16UQ IIhwHH/lrpfgUFdvkeBerw5091Xk3sgcw3upTL1vGL2qOs1f08zL -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:55 2026 by rpki-client