This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa File: 3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa (raw, json) Hash identifier: 4+b6VtnAHLNBWIMR+o+DRVUb+63PbrnzgaJi/UWMxfw= Subject key identifier: 59:B4:A6:5A:45:A6:CA:9A:96:52:7E:D4:9D:09:42:4D:93:A7:6F:07 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0D12DEF3B45681835F56A710610BC1FE39188DCD Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa Signing time: Mon 17 Nov 2025 18:55:49 +0000 ROA not before: Mon 17 Nov 2025 18:50:49 +0000 ROA not after: Mon 16 Nov 2026 18:55:49 +0000 asID: 396356 IP address blocks: 147.125.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:12:de:f3:b4:56:81:83:5f:56:a7:10:61:0b:c1:fe:39:18:8d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 18:50:49 2025 GMT Not After : Nov 16 18:55:49 2026 GMT Subject: CN=59B4A65A45A6CA9A96527ED49D09424D93A76F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:70:6e:cb:14:3c:76:1c:72:b3:53:b6:e6: d9:ab:f5:86:00:95:0a:42:43:df:02:9c:4d:c2:74: fc:fb:9e:a5:dd:32:66:ca:9f:e0:b5:fa:52:e0:18: ad:9c:0b:52:91:28:85:93:5e:cf:c7:ae:f6:14:dd: fb:a8:8b:79:74:29:13:36:78:f5:76:98:89:cd:e0: 82:ae:d8:eb:87:0e:df:b8:b9:85:87:0c:4d:71:46: aa:de:a5:39:a9:e3:a1:ee:1e:72:ff:6e:8b:df:5b: 86:d9:79:ea:5b:a0:34:b9:3e:78:5f:50:2f:79:1d: dd:b3:6f:8a:98:14:7c:42:98:60:c7:21:e1:b7:f8: 92:a9:52:52:03:cc:73:3c:50:de:ae:24:52:c4:06: b8:d4:e4:46:99:b1:d5:04:ca:f4:2d:d3:43:64:4b: f3:b3:0b:0d:bf:81:21:eb:19:dd:18:9e:23:65:b6: 6e:54:e4:89:d6:42:24:f4:1c:01:fa:92:3c:31:34: 24:2f:1e:32:ec:b4:e6:40:b8:76:78:94:fe:f7:c4: 55:1b:da:3c:74:a2:2f:0b:21:fb:22:fd:d0:42:44: 1a:cc:3f:4f:e3:b9:2b:0c:4d:7f:99:28:d0:07:45: e8:1b:6f:bb:55:ac:51:90:b9:14:76:b7:cb:00:4d: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B4:A6:5A:45:A6:CA:9A:96:52:7E:D4:9D:09:42:4D:93:A7:6F:07 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133352e302f32342d3234203d3e20333936333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.135.0/24 Signature Algorithm: sha256WithRSAEncryption 63:68:b5:4a:bf:97:7c:74:35:3f:14:25:5c:d3:f6:63:90:c9: c4:c1:20:ae:06:34:e3:d1:00:27:02:4f:91:58:2e:bf:c1:f5: f6:e3:5e:8b:7c:88:23:45:ce:5c:63:a0:c2:46:7c:c8:82:08: 01:30:68:d4:f3:2d:62:b2:ab:10:17:a4:07:bc:89:92:e9:d2: 67:8d:e0:0c:78:15:c3:53:f5:54:b8:89:0b:12:29:e8:e4:41: 27:b1:e5:2a:7d:0a:1d:2b:66:e8:75:f2:a3:3d:e7:8f:7d:ff: 26:64:8c:fb:60:3d:1f:2d:14:df:e8:cb:fb:be:57:68:f6:c1: c8:09:77:fd:96:3a:22:a1:89:65:c6:63:bc:d1:b2:3c:63:b8: 9d:41:8e:cc:de:88:df:fd:8a:c6:56:74:0c:55:ea:05:02:c8: d6:17:fa:dd:3f:99:a1:11:d1:45:d6:b1:73:e2:84:a3:b3:86: 6b:3c:57:23:87:14:ff:9a:05:ad:95:16:3c:14:4b:cb:75:45: 8a:76:aa:44:16:3f:43:3c:44:91:46:bc:c9:b8:8a:59:5c:37: 88:3a:7a:c0:9a:ff:74:76:cd:5a:b0:e4:c0:20:da:92:4d:c7: 51:8d:15:8e:fc:be:0f:8a:74:c9:e0:84:13:cd:56:82:d0:1f: fd:cc:73:9b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUDRLe87RWgYNfVqcQYQvB/jkYjc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcxODUwNDlaFw0yNjExMTYxODU1NDlaMDMxMTAvBgNV BAMTKDU5QjRBNjVBNDVBNkNBOUE5NjUyN0VENDlEMDk0MjREOTNBNzZGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VHBuyxQ8dhxys1O25tmr9YYA lQpCQ98CnE3CdPz7nqXdMmbKn+C1+lLgGK2cC1KRKIWTXs/HrvYU3fuoi3l0KRM2 ePV2mInN4IKu2OuHDt+4uYWHDE1xRqrepTmp46HuHnL/bovfW4bZeepboDS5Pnhf UC95Hd2zb4qYFHxCmGDHIeG3+JKpUlIDzHM8UN6uJFLEBrjU5EaZsdUEyvQt00Nk S/OzCw2/gSHrGd0YniNltm5U5InWQiT0HAH6kjwxNCQvHjLstOZAuHZ4lP73xFUb 2jx0oi8LIfsi/dBCRBrMP0/juSsMTX+ZKNAHRegbb7tVrFGQuRR2t8sATb/bAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUWbSmWkWmypqWUn7UnQlCTZOnbwcwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNjMzMzUzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9hzANBgkqhkiG9w0BAQsFAAOCAQEAY2i1Sr+XfHQ1PxQlXNP2Y5DJxMEg rgY049EAJwJPkVguv8H19uNei3yII0XOXGOgwkZ8yIIIATBo1PMtYrKrEBekB7yJ kunSZ43gDHgVw1P1VLiJCxIp6ORBJ7HlKn0KHStm6HXyoz3nj33/JmSM+2A9Hy0U 3+jL+75XaPbByAl3/ZY6IqGJZcZjvNGyPGO4nUGOzN6I3/2KxlZ0DFXqBQLI1hf6 3T+ZoRHRRdaxc+KEo7OGazxXI4cU/5oFrZUWPBRLy3VFinaqRBY/QzxEkUa8ybiK WVw3iDp6wJr/dHbNWrDkwCDakk3HUY0Vjvy+D4p0yeCEE81WgtAf/cxzmw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:55 2025 by rpki-client