This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32322d3234203d3e20383334.roa File: 3134372e3132352e3134382e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: gdR5pydnDLiwER5kV75zuaPik2ukkyBzgdUBbjKsupc= Subject key identifier: 54:5E:45:4A:72:F1:D8:97:DF:7F:B4:D3:64:7A:53:65:F8:FC:CF:53 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 59A2172679A59190B3459B4E10E0D34425A2F5CC Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32322d3234203d3e20383334.roa Signing time: Thu 20 Nov 2025 11:05:36 +0000 ROA not before: Thu 20 Nov 2025 11:00:36 +0000 ROA not after: Thu 19 Nov 2026 11:05:36 +0000 asID: 834 IP address blocks: 147.125.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a2:17:26:79:a5:91:90:b3:45:9b:4e:10:e0:d3:44:25:a2:f5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 11:00:36 2025 GMT Not After : Nov 19 11:05:36 2026 GMT Subject: CN=545E454A72F1D897DF7FB4D3647A5365F8FCCF53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:80:20:1e:70:ab:5d:f6:ed:86:b9:07:b1: 1e:ce:5c:aa:11:7c:59:b3:a6:4c:64:d5:6e:55:d5: 3c:18:29:3c:27:29:7f:74:b8:24:6b:cd:6b:7f:17: 76:07:70:db:c7:ac:c1:ab:9d:30:75:da:b6:b8:46: e8:07:f6:aa:ed:05:77:3d:96:fd:9a:bc:a0:2d:f6: 04:2b:47:4a:e3:2f:eb:93:bf:4d:8a:0e:26:4f:c3: 44:a3:fa:65:42:57:da:a7:66:21:e1:43:83:6b:50: 54:c2:aa:91:8a:1e:cb:aa:d9:dd:c6:51:4b:3d:69: 06:56:fa:eb:70:3d:6d:ee:c2:9b:3f:d6:80:9e:f9: 71:08:2d:cf:11:7d:8e:0d:12:45:3f:1c:30:ef:18: 3b:6b:d1:84:8d:79:4c:ff:7e:bb:25:d3:01:6a:c4: 3a:2b:f9:39:78:14:a9:a7:51:72:79:2c:ca:23:17: 5b:52:79:80:89:0a:20:a9:06:15:10:47:94:42:77: 28:63:a8:ce:9e:74:19:1a:5f:87:0a:41:2b:2d:f5: 02:68:a1:a4:4b:ed:ef:1d:cb:ea:53:72:ee:0a:09: db:6b:1a:f5:71:a1:c1:f8:3d:46:a3:ae:91:4f:5c: c2:85:16:9b:8b:0a:1e:75:07:bc:7e:f4:ae:10:2a: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5E:45:4A:72:F1:D8:97:DF:7F:B4:D3:64:7A:53:65:F8:FC:CF:53 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.148.0/22 Signature Algorithm: sha256WithRSAEncryption 99:aa:35:1a:1b:ba:bd:d3:75:ce:de:5f:f7:b9:e4:88:13:64: 98:91:ea:71:a0:57:b2:98:91:d1:78:38:ca:3e:a6:c9:07:98: a7:86:6a:b9:4e:82:99:62:ca:c2:af:22:37:d9:e8:9e:2f:6a: 1b:97:be:a9:cc:62:f6:71:5f:b1:25:48:74:c5:d1:78:b4:0b: 82:a6:05:94:80:cb:62:f8:aa:fa:97:b3:1e:e9:a4:75:53:39: 62:8d:d7:37:86:15:ff:01:93:be:96:f4:fc:1b:ff:40:f5:3c: b3:79:5d:21:ba:3f:99:56:87:57:bf:7f:9c:68:65:b6:93:46: 78:4f:ec:55:76:38:2c:0b:bc:0f:3f:0a:8a:cf:e6:e0:32:31: be:39:d5:a4:6d:b2:50:bd:56:aa:b9:22:49:8c:ab:fe:18:2c: 1a:1f:1e:66:e8:45:fb:31:25:ab:d2:a4:c4:39:9c:fc:3d:88: d7:a8:40:c4:29:6b:91:57:38:e9:b2:44:c6:89:98:c0:b9:c9: e7:3c:3d:6c:f4:5d:49:b2:a8:66:e0:91:93:7e:c4:b4:b6:e5: 79:90:78:84:70:9f:82:e9:f8:7b:ff:ed:08:3e:19:77:19:23: 5f:08:3a:61:dc:2a:7d:69:1c:96:13:e3:cd:33:92:1e:53:cd: 76:b2:e6:28 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWaIXJnmlkZCzRZtOEODTRCWi9cwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMTAwMzZaFw0yNjExMTkxMTA1MzZaMDMxMTAvBgNV BAMTKDU0NUU0NTRBNzJGMUQ4OTdERjdGQjREMzY0N0E1MzY1RjhGQ0NGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCoAgHnCrXfbthrkHsR7OXKoR fFmzpkxk1W5V1TwYKTwnKX90uCRrzWt/F3YHcNvHrMGrnTB12ra4RugH9qrtBXc9 lv2avKAt9gQrR0rjL+uTv02KDiZPw0Sj+mVCV9qnZiHhQ4NrUFTCqpGKHsuq2d3G UUs9aQZW+utwPW3uwps/1oCe+XEILc8RfY4NEkU/HDDvGDtr0YSNeUz/frsl0wFq xDor+Tl4FKmnUXJ5LMojF1tSeYCJCiCpBhUQR5RCdyhjqM6edBkaX4cKQSst9QJo oaRL7e8dy+pTcu4KCdtrGvVxocH4PUajrpFPXMKFFpuLCh51B7x+9K4QKucvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUVF5FSnLx2Jfff7TTZHpTZfj8z1MwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9 lDANBgkqhkiG9w0BAQsFAAOCAQEAmao1Ghu6vdN1zt5f97nkiBNkmJHqcaBXspiR 0Xg4yj6myQeYp4ZquU6CmWLKwq8iN9noni9qG5e+qcxi9nFfsSVIdMXReLQLgqYF lIDLYviq+pezHumkdVM5Yo3XN4YV/wGTvpb0/Bv/QPU8s3ldIbo/mVaHV79/nGhl tpNGeE/sVXY4LAu8Dz8Kis/m4DIxvjnVpG2yUL1WqrkiSYyr/hgsGh8eZuhF+zEl q9KkxDmc/D2I16hAxClrkVc46bJExomYwLnJ5zw9bPRdSbKoZuCRk37EtLbleZB4 hHCfgun4e//tCD4ZdxkjXwg6YdwqfWkclhPjzTOSHlPNdrLmKA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:00 2025 by rpki-client