This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e203230343733.roa File: 3134372e3132352e3235342e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: zh5BAmeb1kFfEhcgZOqvxgGat3ZDZ+61Ob5l2H0t7O0= Subject key identifier: 68:AD:22:38:66:15:57:FE:A1:18:94:67:BF:56:38:87:0C:88:07:E2 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 46362232FEE6A8EAB810A2CF958B659CEBD54136 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e203230343733.roa Signing time: Thu 20 Nov 2025 14:43:09 +0000 ROA not before: Thu 20 Nov 2025 14:38:09 +0000 ROA not after: Thu 19 Nov 2026 14:43:09 +0000 asID: 20473 IP address blocks: 147.125.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:36:22:32:fe:e6:a8:ea:b8:10:a2:cf:95:8b:65:9c:eb:d5:41:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 14:38:09 2025 GMT Not After : Nov 19 14:43:09 2026 GMT Subject: CN=68AD2238661557FEA1189467BF5638870C8807E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:5e:32:09:bc:cb:44:73:c9:29:c0:96:d0: 02:a8:d3:f4:bd:98:a3:11:cd:57:c0:bf:77:08:c2: b2:f4:00:b6:d4:e6:86:83:90:c3:9e:89:b1:6d:98: 0f:d0:5f:1a:17:35:7c:6a:33:5c:e1:c4:aa:14:19: fa:1e:fe:43:7c:e2:a8:d9:4c:6c:a7:e4:66:a6:8b: e8:53:88:4d:06:04:30:87:9c:38:d5:ed:e5:a7:22: e5:40:4f:25:be:fe:e0:cd:4f:ed:55:85:ef:ff:19: d3:8e:69:a2:5c:bf:3b:8d:36:b9:72:d5:4b:02:01: d3:eb:9f:36:9f:d3:a8:62:9e:73:da:ea:41:c1:44: 53:47:ea:0a:2b:68:ed:d1:03:dc:a0:37:a2:d3:f7: 56:c1:4f:a8:ef:02:ef:eb:00:9c:eb:22:8f:18:ce: 07:35:35:9c:fc:8b:00:a2:d3:51:1c:5d:6a:d0:de: 9b:25:34:a0:a5:2e:86:13:34:f3:56:f4:fb:cc:e6: 24:08:28:0b:69:6e:7b:c4:52:16:77:15:2e:ee:62: 49:f2:59:99:68:c6:08:49:f1:af:96:8c:9b:24:ae: 09:0d:cc:52:b2:45:5b:e2:ba:c9:99:73:ae:f1:8e: 3a:07:17:5c:19:85:94:a5:d1:54:08:01:ed:28:b4: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AD:22:38:66:15:57:FE:A1:18:94:67:BF:56:38:87:0C:88:07:E2 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.254.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ad:84:63:2d:97:92:d7:76:27:16:f5:be:bb:9f:dd:5d:2a: 58:fb:db:f8:4f:5e:5f:d6:3e:96:01:62:35:3c:84:be:0b:bf: 35:91:64:fc:37:eb:df:47:da:6c:2f:e5:15:8a:2f:da:74:00: 81:0d:a9:c9:02:0d:bd:25:38:b5:ab:ce:87:e7:78:18:68:fb: d4:dc:fd:86:2b:71:35:15:29:a3:aa:36:89:ad:33:26:60:ec: 20:dc:cc:f0:37:76:80:4f:4f:41:e7:7f:8b:99:52:72:ab:1d: ed:09:ce:be:f3:9e:9e:1c:9e:0d:44:ea:dd:b8:93:04:bd:4e: da:8b:4b:a0:04:d8:bd:65:53:4e:f6:a7:87:5c:da:e1:92:e8: fb:71:ef:6b:2f:47:09:12:6e:6d:a9:45:7f:f3:93:ef:73:b8: 20:c4:a0:4e:fa:b9:93:e9:98:d4:f1:51:05:68:3b:91:50:ae: 72:c7:40:ca:9a:ad:10:02:32:21:00:93:50:98:83:48:45:97: 6d:ac:ba:92:53:f6:84:a3:e1:68:10:9d:63:ed:8e:36:d3:5a: 25:31:c2:77:c4:6b:f3:2f:93:8d:09:bc:aa:8f:17:f1:0c:2f: 61:40:87:f8:a0:16:5e:eb:4e:89:92:55:b8:06:15:f0:bc:cf: 3e:e1:1b:23 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIURjYiMv7mqOq4EKLPlYtlnOvVQTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxNDM4MDlaFw0yNjExMTkxNDQzMDlaMDMxMTAvBgNV BAMTKDY4QUQyMjM4NjYxNTU3RkVBMTE4OTQ2N0JGNTYzODg3MEM4ODA3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL514yCbzLRHPJKcCW0AKo0/S9 mKMRzVfAv3cIwrL0ALbU5oaDkMOeibFtmA/QXxoXNXxqM1zhxKoUGfoe/kN84qjZ TGyn5Gami+hTiE0GBDCHnDjV7eWnIuVATyW+/uDNT+1Vhe//GdOOaaJcvzuNNrly 1UsCAdPrnzaf06hinnPa6kHBRFNH6goraO3RA9ygN6LT91bBT6jvAu/rAJzrIo8Y zgc1NZz8iwCi01EcXWrQ3pslNKClLoYTNPNW9PvM5iQIKAtpbnvEUhZ3FS7uYkny WZloxghJ8a+WjJskrgkNzFKyRVviusmZc67xjjoHF1wZhZSl0VQIAe0otJObAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUaK0iOGYVV/6hGJRnv1Y4hwyIB+IwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTff4wDQYJKoZIhvcNAQELBQADggEBABKthGMtl5LXdicW9b67n91dKlj72/hP Xl/WPpYBYjU8hL4LvzWRZPw3699H2mwv5RWKL9p0AIENqckCDb0lOLWrzofneBho +9Tc/YYrcTUVKaOqNomtMyZg7CDczPA3doBPT0Hnf4uZUnKrHe0Jzr7znp4cng1E 6t24kwS9TtqLS6AE2L1lU072p4dc2uGS6Ptx72svRwkSbm2pRX/zk+9zuCDEoE76 uZPpmNTxUQVoO5FQrnLHQMqarRACMiEAk1CYg0hFl22supJT9oSj4WgQnWPtjjbT WiUxwnfEa/Mvk40JvKqPF/EML2FAh/igFl7rTomSVbgGFfC8zz7hGyM= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:20 2025 by rpki-client