This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: s8w0BciiEtiugl7k/4M79q5AAy+ncrvP0n92v+Xy/lM=
Subject key identifier: 6F:FD:82:6F:9F:DB:64:CE:EB:98:FE:C9:F6:B6:F3:C5:B6:58:34:47
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3487BD8E64709CC3EEB8F9EF5B57D1B7B2166B54
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e20383334.roa
Signing time: Mon 09 Feb 2026 07:53:10 +0000
ROA not before: Mon 09 Feb 2026 07:48:10 +0000
ROA not after: Mon 08 Feb 2027 07:53:10 +0000
asID: 834
IP address blocks: 147.125.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:87:bd:8e:64:70:9c:c3:ee:b8:f9:ef:5b:57:d1:b7:b2:16:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 9 07:48:10 2026 GMT
Not After : Feb 8 07:53:10 2027 GMT
Subject: CN=6FFD826F9FDB64CEEB98FEC9F6B6F3C5B6583447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:81:47:fa:a8:a9:13:80:19:95:91:46:ca:
68:f5:20:8d:49:9c:d8:28:a7:a3:f9:bb:bf:af:c9:
dc:ed:46:6d:87:da:86:0c:f4:02:d7:d0:bd:cd:5f:
bd:92:34:0f:8a:ee:c0:86:d3:d4:9e:ed:d7:2d:51:
6e:20:a4:f1:f8:f1:ac:b4:ce:cf:1f:39:12:6c:7e:
d4:16:50:50:5d:1a:a6:36:76:d3:ab:54:cd:9b:5d:
79:04:ea:fe:d9:64:7b:14:71:e2:f8:7d:7c:f2:1b:
37:12:00:30:9f:4d:33:99:b9:9a:46:1c:5c:dd:c4:
35:fa:df:bd:15:4f:e0:92:06:aa:d8:1f:9b:f0:6d:
9f:57:db:93:75:e3:65:7b:c8:0f:04:93:a0:1f:47:
de:bf:6b:67:34:4e:77:69:99:ff:2f:bb:ff:76:4a:
6f:6f:44:58:e5:9f:07:34:69:1e:57:6b:e1:61:42:
8f:75:02:eb:cb:92:b0:ec:70:a8:52:1b:ff:81:03:
34:36:48:a2:0f:20:05:32:15:2b:07:7a:fc:b5:f4:
da:91:22:fd:2a:44:40:08:e8:2f:ec:fd:30:65:9b:
00:4c:6c:78:ec:41:f3:ec:c6:cf:a0:fe:47:4a:d4:
16:e6:e0:69:e8:98:80:e3:30:bf:07:32:03:7a:54:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FD:82:6F:9F:DB:64:CE:EB:98:FE:C9:F6:B6:F3:C5:B6:58:34:47
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.254.0/24
Signature Algorithm: sha256WithRSAEncryption
27:10:a3:d6:b8:c1:d1:85:f6:c4:76:88:69:fc:ad:70:97:a4:
98:cc:d2:0b:e3:84:4f:1b:4b:55:82:fc:02:44:bd:e9:b5:a3:
00:01:2f:22:c2:35:17:1c:14:f7:40:ca:2b:f6:8a:c0:b3:1f:
48:63:45:19:b0:d7:2a:ae:c9:43:2c:d6:23:1f:f7:bf:55:a8:
1d:26:ca:7d:20:fa:8a:ea:66:87:2c:d4:84:c1:06:80:bb:2c:
20:5b:3c:af:bb:73:3b:a3:f0:c2:8f:b6:f7:9a:62:20:40:d2:
20:ee:3b:4d:55:73:06:9f:ee:16:97:65:e9:11:72:91:5c:e3:
31:c3:3c:ba:73:0f:35:4d:67:61:31:ff:38:0d:0d:fa:20:f3:
87:9a:19:5b:f0:a5:5b:13:0f:ac:09:df:6b:b3:b1:4a:2d:fd:
3d:45:f2:c8:0e:4b:fc:e2:4b:e3:40:bb:1e:b3:dd:78:c6:12:
ee:09:84:c5:8a:75:00:7e:77:ac:17:5b:85:ad:2e:ca:c1:00:
1d:4f:d0:f3:ea:ce:9c:8c:bd:96:87:ae:51:b3:e7:e8:c7:ea:
aa:ed:ef:0b:6f:10:0a:00:63:7c:00:c5:52:3d:8e:57:3c:70:
7b:83:66:d2:d0:96:60:e6:bc:a0:29:9b:72:af:23:30:ee:f0:
b2:e9:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:27:15 2026 by rpki-client