This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3133302e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: VVo8oHq2jUAUHTKT9s0/j8CG318UDVeBwA9SPG7q+FU= Subject key identifier: C8:C0:2D:99:4B:BE:3C:62:7A:26:42:FB:EE:1D:66:8E:E9:F5:5B:A8 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0712B2D6AFFD2CBB74F852C6B10DBFF23D0BCA0E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e20383334.roa Signing time: Mon 19 Jan 2026 09:09:35 +0000 ROA not before: Mon 19 Jan 2026 09:04:35 +0000 ROA not after: Mon 18 Jan 2027 09:09:35 +0000 asID: 834 IP address blocks: 147.125.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:12:b2:d6:af:fd:2c:bb:74:f8:52:c6:b1:0d:bf:f2:3d:0b:ca:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 19 09:04:35 2026 GMT Not After : Jan 18 09:09:35 2027 GMT Subject: CN=C8C02D994BBE3C627A2642FBEE1D668EE9F55BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:cf:62:25:58:61:56:6a:a9:3b:6a:37:74: 7e:24:bc:73:b1:1c:e4:99:4b:5f:29:bc:a5:92:40: 40:5a:0a:ca:3e:f2:df:91:fe:78:d9:40:75:65:ea: c7:f9:b7:d4:55:b7:91:39:b7:19:d4:17:9e:f3:7c: e1:c1:b4:0f:d8:28:ff:42:ff:f9:ac:f9:fe:5b:30: fc:4f:9a:42:68:a8:0e:53:08:8d:e5:77:18:65:ec: 8b:48:12:a6:21:8e:24:b8:c1:ca:b5:3c:35:7a:97: d6:ad:67:c3:9c:08:df:81:78:8a:69:75:02:77:68: ac:0f:3d:4b:f1:16:98:5a:62:89:49:7d:8a:97:03: 2e:23:7b:52:4b:2e:98:ad:8e:77:18:c4:fe:5a:28: 27:c3:50:aa:3d:db:a8:fb:32:de:f4:48:f0:d3:58: 57:be:2e:a4:70:49:dd:c8:4a:3a:33:85:ff:e1:c1: 14:f5:f9:4f:b2:41:7a:af:0e:65:49:0a:23:57:b7: 9e:b8:33:69:e3:9a:f9:2c:13:39:00:c9:72:6c:00: 02:29:3e:95:9a:c4:a9:0b:d8:1c:2b:39:d0:f4:7e: b1:03:ff:60:aa:ef:11:8c:ad:e6:bb:88:5a:49:b4: 80:27:f0:a2:8f:5b:82:63:95:93:e6:bf:f8:0c:e0: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C0:2D:99:4B:BE:3C:62:7A:26:42:FB:EE:1D:66:8E:E9:F5:5B:A8 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.130.0/23 Signature Algorithm: sha256WithRSAEncryption 86:d9:07:f2:3c:9d:6d:ee:51:41:91:e6:72:86:eb:8d:22:45: e4:1d:3e:cf:8b:95:85:95:03:34:cd:79:48:07:af:b0:3a:46: ce:37:05:1b:2e:f3:8b:3a:af:bf:15:bd:45:f8:35:a0:66:e8: 80:03:27:79:24:5b:c9:29:82:da:46:56:90:1c:bc:47:b1:48: 1d:12:4f:d0:0e:40:eb:43:7d:82:42:13:c8:b0:ac:71:3d:8a: d9:18:a2:9d:c5:6d:56:6f:85:69:5d:53:92:8f:20:e0:8b:6c: ed:a6:5e:91:da:b1:91:f9:ae:e7:1f:09:38:9b:33:1e:7f:1f: 08:50:bb:be:a8:85:54:bf:bf:d0:36:c6:0b:34:0e:f6:ab:7d: 46:65:be:19:a5:53:98:f2:9e:1d:9b:b9:b0:75:db:87:aa:21: f3:a4:49:0b:4e:18:1a:75:13:00:4c:22:ba:7a:57:69:40:d9: 5b:9d:d9:ba:21:45:b5:92:cb:2b:39:86:5e:93:a6:5e:b4:30: 52:62:b3:70:82:7d:9f:ed:04:9e:b1:36:7a:3b:d3:5b:6f:e4: 7f:98:1c:ac:be:03:4c:f7:08:10:03:67:d0:78:13:ce:ff:1a: 0f:0a:a9:46:80:71:85:b3:d5:a2:63:e9:59:fe:65:a0:ce:b3: 4e:e0:84:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBxKy1q/9LLt0+FLGsQ2/8j0Lyg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMTkwOTA0MzVaFw0yNzAxMTgwOTA5MzVaMDMxMTAvBgNV BAMTKEM4QzAyRDk5NEJCRTNDNjI3QTI2NDJGQkVFMUQ2NjhFRTlGNTVCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn189iJVhhVmqpO2o3dH4kvHOx HOSZS18pvKWSQEBaCso+8t+R/njZQHVl6sf5t9RVt5E5txnUF57zfOHBtA/YKP9C //ms+f5bMPxPmkJoqA5TCI3ldxhl7ItIEqYhjiS4wcq1PDV6l9atZ8OcCN+BeIpp dQJ3aKwPPUvxFphaYolJfYqXAy4je1JLLpitjncYxP5aKCfDUKo926j7Mt70SPDT WFe+LqRwSd3ISjozhf/hwRT1+U+yQXqvDmVJCiNXt564M2njmvksEzkAyXJsAAIp PpWaxKkL2BwrOdD0frED/2Cq7xGMrea7iFpJtIAn8KKPW4JjlZPmv/gM4Mt5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUyMAtmUu+PGJ6JkL77h1mjun1W6gwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 gjANBgkqhkiG9w0BAQsFAAOCAQEAhtkH8jydbe5RQZHmcobrjSJF5B0+z4uVhZUD NM15SAevsDpGzjcFGy7zizqvvxW9Rfg1oGbogAMneSRbySmC2kZWkBy8R7FIHRJP 0A5A60N9gkITyLCscT2K2RiincVtVm+FaV1Tko8g4Its7aZekdqxkfmu5x8JOJsz Hn8fCFC7vqiFVL+/0DbGCzQO9qt9RmW+GaVTmPKeHZu5sHXbh6oh86RJC04YGnUT AEwiunpXaUDZW53ZuiFFtZLLKzmGXpOmXrQwUmKzcIJ9n+0EnrE2ejvTW2/kf5gc rL4DTPcIEANn0HgTzv8aDwqpRoBxhbPVomPpWf5loM6zTuCEJA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:37 2026 by rpki-client