This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235332e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3235332e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: oVFesv9DnL9BHLe1NX/P0uyRNIGiDUUwLTD1Bspx2B4= Subject key identifier: 35:78:85:DD:B5:1E:98:96:69:6E:62:62:1E:CC:9D:31:97:B8:80:F9 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 397FF2E20F101529360F8DA45FEE77F738B92C49 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235332e302f32342d3234203d3e203230343733.roa Signing time: Thu 20 Nov 2025 14:43:25 +0000 ROA not before: Thu 20 Nov 2025 14:38:25 +0000 ROA not after: Thu 19 Nov 2026 14:43:25 +0000 asID: 20473 IP address blocks: 147.125.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7f:f2:e2:0f:10:15:29:36:0f:8d:a4:5f:ee:77:f7:38:b9:2c:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 14:38:25 2025 GMT Not After : Nov 19 14:43:25 2026 GMT Subject: CN=357885DDB51E9896696E62621ECC9D3197B880F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:ec:b8:fd:3c:b5:4b:32:2c:30:7b:b8:ac: 62:eb:60:c5:4a:e2:73:57:fd:70:72:4b:64:12:04: 48:27:52:b4:e5:30:de:a6:e2:9c:97:74:5e:94:35: 5d:2c:33:96:f4:05:69:b8:db:fe:14:74:a1:6d:1f: 48:55:4e:86:c7:6d:5f:45:38:26:d9:93:04:1e:b0: 91:f0:06:c3:4f:16:fa:77:b3:83:38:11:f8:c9:36: d3:2a:0e:f3:8e:e0:10:9b:40:fc:6d:85:ac:e7:95: 9e:d3:ef:a6:d0:26:01:90:23:80:f9:9c:bf:90:8b: 5e:50:f5:33:3b:e6:55:60:8d:70:7c:20:38:c8:66: c9:c5:17:3c:2b:54:09:52:50:46:30:ba:cd:02:bf: c7:72:f8:5a:b0:b7:a8:fb:d1:c9:27:d4:69:51:94: fe:23:96:5b:f7:5a:f0:80:79:74:e0:88:59:42:bb: e4:12:ea:8c:c7:38:18:ae:1d:b8:65:15:20:f0:f7: 16:95:dc:67:a4:3a:ac:4a:de:b9:4f:4a:1f:87:92: 0f:de:23:16:2a:a5:da:ea:c5:c9:ad:10:5f:0c:93: 7d:6d:b9:e9:12:3d:fe:8e:52:c6:2f:08:33:79:3b: 5e:1c:6c:a9:71:31:73:0e:84:b6:97:22:3c:1b:e7: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:85:DD:B5:1E:98:96:69:6E:62:62:1E:CC:9D:31:97:B8:80:F9 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235332e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.253.0/24 Signature Algorithm: sha256WithRSAEncryption 92:5a:32:93:df:fe:33:fc:e9:ac:c3:90:21:8c:b4:77:dc:7a: 95:0d:3e:74:17:55:57:36:a9:a3:8a:6c:9d:2f:b4:a6:96:ba: 1b:1a:7d:99:6f:e2:60:b5:18:1f:7d:e8:bf:d5:6a:ee:66:1f: 07:3e:52:e6:74:2a:56:d8:b3:70:75:ef:a1:e2:93:0d:4c:76: 9f:ac:ec:cd:76:ad:9b:87:ec:9b:4c:6f:a4:a8:7a:06:f5:e6: 91:a6:0b:84:2c:24:5c:c2:53:7e:1d:e9:57:d3:6b:af:6f:76: 7f:be:e6:8a:d1:4c:a7:fb:47:1c:15:a6:67:ac:ba:83:1f:5b: da:82:15:11:53:94:c0:0b:d5:67:bc:f2:bc:88:48:a6:45:3b: b9:25:7c:db:9b:e0:be:80:55:0f:07:43:13:d8:da:1e:45:b9: 86:72:33:b4:ad:6d:c1:c2:26:c6:91:a2:85:be:0f:df:fe:e5: 34:93:82:07:7e:77:46:4e:0e:72:41:13:98:db:b0:96:33:42: b7:82:dc:4f:05:7a:4e:58:47:d7:14:42:de:1e:a1:5d:ba:de: b2:91:cb:d8:23:60:ca:b3:46:21:5a:7e:f6:f9:d9:35:e4:df: e3:31:53:f7:05:55:d8:8c:68:70:25:08:ed:93:10:c6:31:ba: 82:3e:d0:fb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUOX/y4g8QFSk2D42kX+539zi5LEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxNDM4MjVaFw0yNjExMTkxNDQzMjVaMDMxMTAvBgNV BAMTKDM1Nzg4NUREQjUxRTk4OTY2OTZFNjI2MjFFQ0M5RDMxOTdCODgwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wuy4/Ty1SzIsMHu4rGLrYMVK 4nNX/XByS2QSBEgnUrTlMN6m4pyXdF6UNV0sM5b0BWm42/4UdKFtH0hVTobHbV9F OCbZkwQesJHwBsNPFvp3s4M4EfjJNtMqDvOO4BCbQPxthaznlZ7T76bQJgGQI4D5 nL+Qi15Q9TM75lVgjXB8IDjIZsnFFzwrVAlSUEYwus0Cv8dy+Fqwt6j70ckn1GlR lP4jllv3WvCAeXTgiFlCu+QS6ozHOBiuHbhlFSDw9xaV3GekOqxK3rlPSh+Hkg/e IxYqpdrqxcmtEF8Mk31tuekSPf6OUsYvCDN5O14cbKlxMXMOhLaXIjwb5yJJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUNXiF3bUemJZpbmJiHsydMZe4gPkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTff0wDQYJKoZIhvcNAQELBQADggEBAJJaMpPf/jP86azDkCGMtHfcepUNPnQX VVc2qaOKbJ0vtKaWuhsafZlv4mC1GB996L/Vau5mHwc+UuZ0KlbYs3B176Hikw1M dp+s7M12rZuH7JtMb6Soegb15pGmC4QsJFzCU34d6VfTa69vdn++5orRTKf7RxwV pmesuoMfW9qCFRFTlMAL1We88ryISKZFO7klfNub4L6AVQ8HQxPY2h5FuYZyM7St bcHCJsaRooW+D9/+5TSTggd+d0ZODnJBE5jbsJYzQreC3E8Fek5YR9cUQt4eoV26 3rKRy9gjYMqzRiFafvb52TXk3+MxU/cFVdiMaHAlCO2TEMYxuoI+0Ps= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:43 2025 by rpki-client