This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3235342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: aF+CylAftQlEOwcF0CsRVSfs5FLs5j2mm/DUq4fAWnk= Subject key identifier: 4F:26:5B:2F:FA:9D:E1:37:AC:CC:2A:2D:74:1C:9A:FE:D6:33:30:A6 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 3A67DF465ACA250F16C8933E58B37D0A68E093E8 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e2039333034.roa Signing time: Fri 09 Jan 2026 08:11:29 +0000 ROA not before: Fri 09 Jan 2026 08:06:29 +0000 ROA not after: Fri 08 Jan 2027 08:11:29 +0000 asID: 9304 IP address blocks: 147.125.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:67:df:46:5a:ca:25:0f:16:c8:93:3e:58:b3:7d:0a:68:e0:93:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:06:29 2026 GMT Not After : Jan 8 08:11:29 2027 GMT Subject: CN=4F265B2FFA9DE137ACCC2A2D741C9AFED63330A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:1b:42:4a:a1:e3:d7:71:ab:8c:2b:2b:14: 50:43:a2:2a:87:36:73:cd:0c:e7:fd:5c:4c:40:1d: e4:93:dc:9e:02:3a:86:b8:18:63:98:e9:9b:11:a2: c3:8f:f5:4a:aa:5e:74:5c:c6:07:da:9a:fe:e0:3c: b3:f9:32:ad:d2:92:3b:ef:d2:a7:3a:38:58:a5:62: 2e:9e:1b:75:8a:eb:08:7a:32:39:55:32:ce:0f:4f: 9d:e3:8b:34:a6:88:1c:8f:a0:f0:65:37:c0:42:67: d7:f9:93:92:89:6d:96:0b:78:e0:f2:86:9e:c6:44: 77:e9:b4:86:40:cb:79:aa:13:d8:9e:94:d3:ed:84: 05:d0:9c:d1:dc:a3:03:db:a2:55:42:10:a4:dd:a0: c8:76:57:d7:bd:6c:6d:4b:14:f8:8f:d1:37:ea:50: e1:49:2c:de:49:a7:a7:8e:9c:69:c7:d2:db:da:cf: 74:aa:4c:50:69:5c:b2:5f:51:fa:60:5b:b9:bb:af: 22:59:a1:01:a7:9a:49:ab:da:5c:1f:51:4f:09:6f: 7f:e9:55:95:2a:24:98:33:f9:6d:9e:b9:e6:73:0c: 8f:29:b6:55:f0:25:07:fb:4d:63:af:70:7d:8a:99: e2:63:c0:43:72:e4:fa:05:c4:bc:9e:7b:dc:ae:55: fa:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:26:5B:2F:FA:9D:E1:37:AC:CC:2A:2D:74:1C:9A:FE:D6:33:30:A6 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.254.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:e7:0a:45:5c:fd:92:f5:99:fb:d2:db:b1:fd:04:c1:c9:09: 97:68:f1:95:c8:27:d5:e8:60:6d:e3:17:e4:19:37:c0:58:82: 63:3d:45:ef:01:6b:28:31:ee:20:94:7e:bf:1d:f5:aa:45:25: 7c:2f:a3:36:69:ee:0a:bd:ff:a4:89:25:13:a5:bf:d5:48:a1: d4:1a:27:cb:72:1b:62:09:51:9c:d7:5f:a4:78:f8:a4:4e:43: 34:6e:5c:9e:13:ae:16:ad:e4:eb:d6:a3:9e:c7:1c:b5:fa:2c: d9:40:0f:b1:7e:a6:7f:c6:32:eb:b6:42:2f:f9:ad:52:34:fb: eb:bf:47:7b:1b:de:52:18:3d:d1:aa:79:56:d9:d8:78:62:a0: d8:18:94:72:ab:14:e7:fc:74:20:ff:4a:6e:03:f9:97:4f:d1: bc:5c:26:40:aa:80:ad:ee:e5:0f:11:97:d6:82:b3:a3:58:47: 6d:a2:62:66:ce:4b:90:3e:2c:d0:96:43:43:f4:7e:30:8a:c2: 86:b9:2e:04:09:c6:5a:ec:6e:53:c0:5a:18:3c:2a:fe:48:40: 3b:8d:ce:f4:3b:79:f4:e4:96:16:ac:c3:9d:dc:70:c9:e9:15: dd:2d:2d:a9:f4:63:b0:4e:24:7e:e0:51:58:bc:6b:6c:ad:35: 77:86:a2:3c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOmffRlrKJQ8WyJM+WLN9Cmjgk+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODA2MjlaFw0yNzAxMDgwODExMjlaMDMxMTAvBgNV BAMTKDRGMjY1QjJGRkE5REUxMzdBQ0NDMkEyRDc0MUM5QUZFRDYzMzMwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBvxtCSqHj13GrjCsrFFBDoiqH NnPNDOf9XExAHeST3J4COoa4GGOY6ZsRosOP9UqqXnRcxgfamv7gPLP5Mq3Skjvv 0qc6OFilYi6eG3WK6wh6MjlVMs4PT53jizSmiByPoPBlN8BCZ9f5k5KJbZYLeODy hp7GRHfptIZAy3mqE9ielNPthAXQnNHcowPbolVCEKTdoMh2V9e9bG1LFPiP0Tfq UOFJLN5Jp6eOnGnH0tvaz3SqTFBpXLJfUfpgW7m7ryJZoQGnmkmr2lwfUU8Jb3/p VZUqJJgz+W2eueZzDI8ptlXwJQf7TWOvcH2KmeJjwENy5PoFxLyee9yuVfojAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUTyZbL/qd4TeszCotdBya/tYzMKYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k33+MA0GCSqGSIb3DQEBCwUAA4IBAQBr5wpFXP2S9Zn70tux/QTByQmXaPGVyCfV 6GBt4xfkGTfAWIJjPUXvAWsoMe4glH6/HfWqRSV8L6M2ae4Kvf+kiSUTpb/VSKHU GifLchtiCVGc11+kePikTkM0blyeE64WreTr1qOexxy1+izZQA+xfqZ/xjLrtkIv +a1SNPvrv0d7G95SGD3RqnlW2dh4YqDYGJRyqxTn/HQg/0puA/mXT9G8XCZAqoCt 7uUPEZfWgrOjWEdtomJmzkuQPizQlkND9H4wisKGuS4ECcZa7G5TwFoYPCr+SEA7 jc70O3n05JYWrMOd3HDJ6RXdLS2p9GOwTiR+4FFYvGtsrTV3hqI8 -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:50 2026 by rpki-client