This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3235322e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: KNfNxWh9MEkUmsX5ZmcOY7vtl/mrw9LCtBZz88qC3Qc= Subject key identifier: 97:4A:FE:9D:AF:B1:D0:D4:B6:2C:E5:03:46:CC:05:1E:CE:AE:D0:9D Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 54DF3E295057B3317B05901E25866FDD1887B06D Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 17:07:47 +0000 ROA not before: Mon 24 Nov 2025 17:02:47 +0000 ROA not after: Mon 23 Nov 2026 17:07:47 +0000 asID: 20473 IP address blocks: 147.125.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:df:3e:29:50:57:b3:31:7b:05:90:1e:25:86:6f:dd:18:87:b0:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 24 17:02:47 2025 GMT Not After : Nov 23 17:07:47 2026 GMT Subject: CN=974AFE9DAFB1D0D4B62CE50346CC051ECEAED09D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:42:c5:53:29:e1:79:40:82:ae:37:a4:75: 92:82:56:e6:bd:25:c8:08:1f:2b:f4:7e:ba:d6:e2: dc:1b:b4:85:d7:3a:df:b9:ca:f4:ef:db:9a:94:50: 77:7f:df:9e:de:16:4c:94:f0:7e:bb:36:58:92:33: c8:5e:14:4b:4c:5c:e9:67:6b:e0:ea:fe:d0:0b:ce: a2:9d:df:92:f2:7d:0f:ca:70:f4:9b:65:ee:03:18: 77:7a:40:22:34:54:12:89:51:ff:84:ef:97:03:e7: cc:c3:0c:5e:56:d8:3d:a7:f5:54:6b:d9:51:b1:e4: ab:92:ae:d4:4e:57:5d:75:bd:2e:40:2d:6d:f6:0f: fb:04:93:e0:8c:53:37:01:fd:c7:68:94:60:2b:e3: d2:84:cb:65:53:42:87:0e:23:a4:33:bc:33:56:68: d5:99:67:20:13:83:c3:08:48:71:ba:d5:5e:10:71: da:3d:62:cb:7e:f7:64:2d:19:41:72:d2:13:2d:8d: 11:9e:b0:8d:2e:3d:49:ca:05:06:2a:33:a9:9a:29: 76:28:7c:99:b5:99:1a:26:2e:e1:ff:bb:bb:a7:33: d8:70:96:75:c2:2a:99:ce:2a:25:01:b7:b8:7b:4b: 74:64:56:65:08:31:d7:ae:f3:99:5a:60:e0:15:b6: 4c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4A:FE:9D:AF:B1:D0:D4:B6:2C:E5:03:46:CC:05:1E:CE:AE:D0:9D X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.252.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3f:d7:06:63:bf:ed:b7:86:33:ac:00:a6:04:36:ba:4d:69: e3:8a:21:8d:e7:0b:9c:0d:22:12:77:6b:7e:c3:be:69:75:b1: 25:7d:6e:8e:d5:47:73:c2:11:16:2c:69:c8:bd:fc:6d:45:eb: 01:ff:e2:83:57:02:46:cf:a7:52:12:48:83:bd:04:ac:13:4f: 9b:1d:aa:c7:d0:06:a2:0f:aa:fb:46:17:99:50:65:ba:40:98: e2:45:77:fa:19:63:4b:46:73:03:9e:29:0d:ce:d6:25:4e:72: 86:18:4a:34:27:9d:7d:9a:d1:98:22:69:3a:83:c0:55:c2:c8: 18:25:88:90:d7:b7:22:da:f2:0f:5a:d6:46:63:b1:b9:fd:3b: 7e:bc:3f:20:1f:de:ef:59:fc:44:67:90:89:01:7e:16:92:3a: 58:69:ec:b6:26:c8:65:59:62:b4:28:1a:0c:32:5e:bd:89:18: 71:d7:2f:7f:35:01:5c:2a:b6:93:26:41:c0:1c:27:64:7b:c9: 8b:7f:1e:40:4c:27:6a:2f:cb:bb:d5:65:e1:eb:17:3d:c5:99: fd:9b:80:d8:01:68:9e:65:4c:65:6c:78:52:86:f6:96:6a:6b: e5:6d:89:7b:fd:c9:05:29:25:c8:62:c6:1c:16:1c:65:dd:93: 3a:8e:ee:b3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUVN8+KVBXszF7BZAeJYZv3RiHsG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjQxNzAyNDdaFw0yNjExMjMxNzA3NDdaMDMxMTAvBgNV BAMTKDk3NEFGRTlEQUZCMUQwRDRCNjJDRTUwMzQ2Q0MwNTFFQ0VBRUQwOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKULFUynheUCCrjekdZKCVua9 JcgIHyv0frrW4twbtIXXOt+5yvTv25qUUHd/357eFkyU8H67NliSM8heFEtMXOln a+Dq/tALzqKd35LyfQ/KcPSbZe4DGHd6QCI0VBKJUf+E75cD58zDDF5W2D2n9VRr 2VGx5KuSrtROV111vS5ALW32D/sEk+CMUzcB/cdolGAr49KEy2VTQocOI6QzvDNW aNWZZyATg8MISHG61V4Qcdo9Yst+92QtGUFy0hMtjRGesI0uPUnKBQYqM6maKXYo fJm1mRomLuH/u7unM9hwlnXCKpnOKiUBt7h7S3RkVmUIMdeu85laYOAVtkxzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUl0r+na+x0NS2LOUDRswFHs6u0J0wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTffwwDQYJKoZIhvcNAQELBQADggEBAHA/1wZjv+23hjOsAKYENrpNaeOKIY3n C5wNIhJ3a37Dvml1sSV9bo7VR3PCERYsaci9/G1F6wH/4oNXAkbPp1ISSIO9BKwT T5sdqsfQBqIPqvtGF5lQZbpAmOJFd/oZY0tGcwOeKQ3O1iVOcoYYSjQnnX2a0Zgi aTqDwFXCyBgliJDXtyLa8g9a1kZjsbn9O368PyAf3u9Z/ERnkIkBfhaSOlhp7LYm yGVZYrQoGgwyXr2JGHHXL381AVwqtpMmQcAcJ2R7yYt/HkBMJ2ovy7vVZeHrFz3F mf2bgNgBaJ5lTGVseFKG9pZqa+VtiXv9yQUpJchixhwWHGXdkzqO7rM= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:43 2025 by rpki-client