This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3235342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: nnvWWU36IdrHVBfIWS3CGI3ATOrHtJmpSFT/+F1WDic= Subject key identifier: F4:14:5C:52:30:EF:8C:53:3C:6B:F8:05:AA:FD:0C:EC:0B:31:C9:E7 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 244C88C68929C61EEC9B282E39F1B6A086CC387C Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:24 +0000 ROA not before: Mon 08 Dec 2025 11:30:24 +0000 ROA not after: Mon 07 Dec 2026 11:35:24 +0000 asID: 834 IP address blocks: 147.125.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4c:88:c6:89:29:c6:1e:ec:9b:28:2e:39:f1:b6:a0:86:cc:38:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:24 2025 GMT Not After : Dec 7 11:35:24 2026 GMT Subject: CN=F4145C5230EF8C533C6BF805AAFD0CEC0B31C9E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a1:fd:c7:8a:18:b1:c8:ff:85:b7:3b:f6:cf: 26:d8:bc:3c:56:77:66:be:60:be:31:4f:7f:6d:ed: 40:c3:8a:b2:9a:d9:f8:64:85:74:ba:6b:26:c3:72: 72:5a:b1:23:4f:e1:fb:aa:1a:99:84:52:65:57:91: ed:4b:58:ad:0a:e6:32:23:d6:51:1f:62:f3:26:39: ca:0f:4d:36:b9:29:c7:f9:dd:17:21:98:70:96:03: 70:36:ce:80:12:03:f3:66:70:a6:81:e9:03:05:0a: cf:c0:75:3f:2d:92:ad:cf:bd:30:10:d2:91:81:4f: 9e:bc:19:91:b4:f8:e5:40:18:37:46:18:f0:8e:de: 53:c2:b6:b0:49:11:93:33:82:5e:09:dc:78:b7:f0: 0c:71:72:1a:0e:b3:36:5c:dc:68:a4:fc:ca:1b:01: 48:12:81:32:f0:99:28:52:79:3d:55:a0:7c:99:41: 26:eb:d2:6f:05:a6:78:5d:37:1f:71:b1:3c:b5:95: 14:21:9e:e0:97:fa:45:06:6a:35:d1:df:35:0b:ed: 77:3a:a8:fb:a0:a8:21:ff:4e:94:08:36:2a:12:21: 15:80:70:98:65:55:21:a4:52:81:e8:f5:e4:65:fe: b1:f3:11:24:22:a0:3b:08:ee:3c:44:3a:55:23:f6: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:5C:52:30:EF:8C:53:3C:6B:F8:05:AA:FD:0C:EC:0B:31:C9:E7 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.254.0/24 Signature Algorithm: sha256WithRSAEncryption 29:e5:18:34:6e:fc:07:85:e0:35:9e:6c:ae:ff:a3:1d:21:90: ab:7a:10:75:50:2a:cd:db:f8:b6:d6:e1:6f:6c:b5:1f:4a:3c: ab:35:b5:60:8a:1a:e3:53:be:ec:92:84:28:a6:b2:fd:06:7f: 0a:8b:c9:c5:66:90:e5:fe:11:9e:b0:21:72:da:15:1d:88:47: 40:d4:2d:a8:14:41:fe:65:aa:0b:1d:9a:f6:11:a3:ea:da:66: 5d:d6:0d:7a:52:fa:62:4c:15:e6:06:bf:50:ef:16:0b:8f:76: b9:a9:21:ca:54:43:51:51:e6:95:00:e5:ad:e4:dd:13:a6:bf: bf:82:2b:e1:0b:db:5b:8f:09:31:96:f2:c2:ff:fe:92:5f:6b: e2:a1:20:ff:97:d3:cf:87:c5:da:1f:a2:c0:19:4c:5c:fe:59: 44:34:94:b9:73:66:00:7c:d4:09:ae:75:8c:f0:36:8b:52:07: 0e:98:93:dd:58:b9:0d:2e:eb:96:be:6a:d2:b5:9d:34:16:94: 64:cc:eb:a4:f4:1f:44:f6:bf:0d:f5:7d:d7:3a:94:c5:86:a9: cd:a7:81:1c:5b:b4:60:c0:b6:5c:51:b9:ff:9b:d7:ad:d6:2d: 3d:75:0e:90:9a:52:06:e9:d4:c5:bf:33:93:ab:6d:34:8e:37: 19:d1:01:b1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJEyIxokpxh7smyguOfG2oIbMOHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMjRaFw0yNjEyMDcxMTM1MjRaMDMxMTAvBgNV BAMTKEY0MTQ1QzUyMzBFRjhDNTMzQzZCRjgwNUFBRkQwQ0VDMEIzMUM5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlof3HihixyP+Ftzv2zybYvDxW d2a+YL4xT39t7UDDirKa2fhkhXS6aybDcnJasSNP4fuqGpmEUmVXke1LWK0K5jIj 1lEfYvMmOcoPTTa5Kcf53RchmHCWA3A2zoASA/NmcKaB6QMFCs/AdT8tkq3PvTAQ 0pGBT568GZG0+OVAGDdGGPCO3lPCtrBJEZMzgl4J3Hi38AxxchoOszZc3Gik/Mob AUgSgTLwmShSeT1VoHyZQSbr0m8FpnhdNx9xsTy1lRQhnuCX+kUGajXR3zUL7Xc6 qPugqCH/TpQINioSIRWAcJhlVSGkUoHo9eRl/rHzESQioDsI7jxEOlUj9gRlAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU9BRcUjDvjFM8a/gFqv0M7AsxyecwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 /jANBgkqhkiG9w0BAQsFAAOCAQEAKeUYNG78B4XgNZ5srv+jHSGQq3oQdVAqzdv4 ttbhb2y1H0o8qzW1YIoa41O+7JKEKKay/QZ/CovJxWaQ5f4RnrAhctoVHYhHQNQt qBRB/mWqCx2a9hGj6tpmXdYNelL6YkwV5ga/UO8WC492uakhylRDUVHmlQDlreTd E6a/v4Ir4QvbW48JMZbywv/+kl9r4qEg/5fTz4fF2h+iwBlMXP5ZRDSUuXNmAHzU Ca51jPA2i1IHDpiT3Vi5DS7rlr5q0rWdNBaUZMzrpPQfRPa/DfV91zqUxYapzaeB HFu0YMC2XFG5/5vXrdYtPXUOkJpSBunUxb8zk6ttNI43GdEBsQ== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:10 2025 by rpki-client