This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e20323035383836.roa File: 3134372e3132352e3132382e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: /IcLTg0sTPBMUEDz6JmAGANGOE6tv1jxM/X2oYjxWgU= Subject key identifier: C4:C5:23:CA:F5:5E:F6:62:B0:A4:8B:30:F5:E3:D9:E0:5B:97:40:23 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 158E503DC0D64298664DCE76664D0DAC0198CAC4 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e20323035383836.roa Signing time: Wed 05 Nov 2025 05:34:14 +0000 ROA not before: Wed 05 Nov 2025 05:29:14 +0000 ROA not after: Wed 04 Nov 2026 05:34:14 +0000 asID: 205886 IP address blocks: 147.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8e:50:3d:c0:d6:42:98:66:4d:ce:76:66:4d:0d:ac:01:98:ca:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 5 05:29:14 2025 GMT Not After : Nov 4 05:34:14 2026 GMT Subject: CN=C4C523CAF55EF662B0A48B30F5E3D9E05B974023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:3d:8e:14:02:11:1e:9d:fa:ea:51:4e:58: 6e:f3:98:20:10:be:a0:96:77:76:e6:5a:3e:e3:ed: d1:69:9b:2a:1a:62:52:94:fc:a1:97:a7:17:e4:09: ff:3b:d4:78:9e:6d:d5:a1:37:1c:1d:bc:37:3d:67: 3d:6e:ff:ca:ff:69:39:60:4c:16:f6:f9:c5:d3:a7: 85:a0:4c:20:69:3d:a4:2b:6d:c3:02:96:30:5e:5f: b4:00:7a:80:2f:05:d1:2b:87:f3:f0:4a:95:09:4e: 4b:d8:78:ae:2d:fd:17:63:a1:99:f5:20:ab:b2:16: 45:00:4f:a2:6f:a1:a6:6d:91:69:64:d2:32:09:f1: 95:7f:22:7f:e0:17:08:b8:27:dc:5d:d2:1b:8d:8b: eb:d3:78:e8:55:0d:c2:b9:d8:c9:17:e4:e3:71:a7: 4f:13:2b:dd:0c:ae:fa:ba:7e:27:7d:2b:cd:ce:62: b3:a2:ed:4f:0f:35:1f:58:76:f3:c0:68:0f:73:26: 01:38:1a:6a:42:25:89:4d:79:8c:a7:3c:8b:ec:b2: c1:c7:ea:7e:1e:63:9c:1d:d1:69:51:01:75:62:47: 3a:bc:f3:0a:61:60:0d:fe:38:03:bd:69:69:3e:80: 0d:6f:e0:15:a3:d2:1b:00:c4:0a:56:b4:8d:87:ea: 40:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C5:23:CA:F5:5E:F6:62:B0:A4:8B:30:F5:E3:D9:E0:5B:97:40:23 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:5b:89:71:96:91:1a:3a:c3:e5:57:9e:73:c8:93:92:55:e2: f5:08:ea:f9:75:0e:bc:65:2f:5f:3a:ed:68:14:a5:d3:a4:f5: d6:d6:5f:d9:95:e2:00:81:8d:42:80:c8:50:dd:ad:d9:a7:d6: fd:8b:1f:a2:0e:63:1d:7f:b2:b0:c7:ea:d5:dc:08:62:61:5e: ac:a0:68:58:76:9c:4e:2e:35:d6:28:cf:5a:f4:68:87:96:d3: 5d:94:f9:49:53:77:0f:8f:4a:76:5a:c6:75:91:93:a0:8f:20: 6a:96:a9:ae:73:18:fa:3e:f8:13:cc:8c:f3:72:c2:30:c0:14: 4c:74:8f:71:48:ba:62:c9:55:52:1b:f8:18:86:30:13:69:61: 7a:08:09:1e:35:0c:f4:b2:4f:b7:04:d9:97:94:da:31:a6:76: 86:ea:81:af:8d:e0:8e:04:63:8d:d7:3f:7d:8c:67:e1:e6:49: f8:aa:d4:7a:14:b9:a2:97:a7:ef:db:ab:9f:e6:62:b5:59:41: b8:60:77:02:5b:89:7d:26:99:6c:f5:e4:68:f5:77:39:81:55: c7:2f:68:9d:a3:04:d9:8e:05:9b:5f:98:07:9e:c9:2a:64:39: 81:65:56:ae:ae:be:20:e0:5c:b5:f4:a5:85:d5:da:ea:09:e3: 37:5d:de:b4 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUFY5QPcDWQphmTc52Zk0NrAGYysQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMDUwNTI5MTRaFw0yNjExMDQwNTM0MTRaMDMxMTAvBgNV BAMTKEM0QzUyM0NBRjU1RUY2NjJCMEE0OEIzMEY1RTNEOUUwNUI5NzQwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCajT2OFAIRHp366lFOWG7zmCAQ vqCWd3bmWj7j7dFpmyoaYlKU/KGXpxfkCf871HiebdWhNxwdvDc9Zz1u/8r/aTlg TBb2+cXTp4WgTCBpPaQrbcMCljBeX7QAeoAvBdErh/PwSpUJTkvYeK4t/RdjoZn1 IKuyFkUAT6JvoaZtkWlk0jIJ8ZV/In/gFwi4J9xd0huNi+vTeOhVDcK52MkX5ONx p08TK90Mrvq6fid9K83OYrOi7U8PNR9YdvPAaA9zJgE4GmpCJYlNeYynPIvsssHH 6n4eY5wd0WlRAXViRzq88wphYA3+OAO9aWk+gA1v4BWj0hsAxApWtI2H6kBvAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUxMUjyvVe9mKwpIsw9ePZ4FuXQCMwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM4MzgzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9gDANBgkqhkiG9w0BAQsFAAOCAQEAK1uJcZaRGjrD5Veec8iTklXi9Qjq +XUOvGUvXzrtaBSl06T11tZf2ZXiAIGNQoDIUN2t2afW/Ysfog5jHX+ysMfq1dwI YmFerKBoWHacTi411ijPWvRoh5bTXZT5SVN3D49KdlrGdZGToI8gapaprnMY+j74 E8yM83LCMMAUTHSPcUi6YslVUhv4GIYwE2lheggJHjUM9LJPtwTZl5TaMaZ2huqB r43gjgRjjdc/fYxn4eZJ+KrUehS5open79urn+ZitVlBuGB3AluJfSaZbPXkaPV3 OYFVxy9onaME2Y4Fm1+YB57JKmQ5gWVWrq6+IOBctfSlhdXa6gnjN13etA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:51 2025 by rpki-client