This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135312e302f32342d3234203d3e203437333737.roa
File: 3134372e3132352e3135312e302f32342d3234203d3e203437333737.roa (raw, json)
Hash identifier: e32xmdwbvtauJmBs6f5yTT4imqcnTC8rn298CV6dhvY=
Subject key identifier: 80:AD:92:9D:A9:AC:59:50:56:B7:3A:9C:63:A4:EA:3F:04:10:9B:AF
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6C40D6AE107A8C05109EACC06B998D164838C5FF
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135312e302f32342d3234203d3e203437333737.roa
Signing time: Thu 08 Jan 2026 11:00:28 +0000
ROA not before: Thu 08 Jan 2026 10:55:28 +0000
ROA not after: Thu 07 Jan 2027 11:00:28 +0000
asID: 47377
IP address blocks: 147.125.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:40:d6:ae:10:7a:8c:05:10:9e:ac:c0:6b:99:8d:16:48:38:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jan 8 10:55:28 2026 GMT
Not After : Jan 7 11:00:28 2027 GMT
Subject: CN=80AD929DA9AC595056B73A9C63A4EA3F04109BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:37:09:c0:eb:3e:32:66:7c:6e:53:76:5a:25:
2e:3f:b2:3d:58:34:99:b1:bb:c9:3f:d3:46:f3:44:
56:2e:77:27:f0:7c:4a:33:16:16:32:fc:19:e1:a7:
f9:4e:43:61:34:9a:21:91:f0:7a:ae:71:46:76:d5:
61:8e:cd:1a:75:8d:b2:61:28:d6:93:7b:b0:3d:05:
85:dc:b1:6f:8a:65:6f:e2:80:97:2c:d1:65:aa:be:
d7:d5:f3:97:51:74:3e:59:c7:b1:ac:30:a7:3e:41:
a5:dc:38:d0:f2:ba:cb:98:ee:ef:d1:3e:4d:71:b3:
48:70:36:80:a0:ec:30:4e:c0:75:1c:83:b7:77:76:
f5:82:3f:0a:9e:98:ce:ae:5c:15:3a:27:bc:ba:75:
12:22:1f:a7:b9:6f:56:ab:4d:7a:95:43:4a:49:c8:
a2:8a:6f:25:1e:42:ce:2d:aa:b3:b0:5c:d3:c2:6d:
c0:56:47:8e:d3:a0:f9:42:13:9a:cd:3a:67:b7:f3:
bd:2f:cd:7e:f6:95:08:a0:cf:28:be:01:55:27:c0:
ec:86:ad:ac:0c:b5:c0:b3:7c:60:df:88:0b:66:08:
0f:42:60:33:1b:8e:9c:dc:0b:a7:7b:d3:02:20:28:
5a:2b:b9:58:23:85:6f:1a:fd:53:0d:f0:d1:74:9b:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AD:92:9D:A9:AC:59:50:56:B7:3A:9C:63:A4:EA:3F:04:10:9B:AF
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135312e302f32342d3234203d3e203437333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0c:1e:74:d0:e6:b2:e2:37:c0:a5:98:dd:61:70:f7:44:5d:
d9:a8:dc:ef:db:8a:77:35:8a:c2:40:a5:f1:c2:d2:09:2d:50:
5d:98:a9:fa:6b:9d:ff:04:92:b2:8c:8c:99:4e:3d:f0:ae:72:
38:10:23:2d:b3:31:bd:a4:a0:f6:d8:aa:68:ef:7a:e3:d8:fc:
13:f6:03:97:22:f5:94:56:2d:86:16:f6:c4:55:33:00:71:1b:
65:57:01:96:31:91:a6:79:8f:c0:48:cc:bc:a9:3b:b1:a2:04:
dc:86:87:cf:02:a5:35:6b:ae:5a:7d:f7:ec:f1:bf:ec:8c:cb:
aa:3f:d6:b8:8b:73:dd:33:63:d0:5d:03:84:d8:9a:89:d6:86:
57:d7:a8:f0:36:ab:da:88:54:c1:98:fe:15:55:1d:fa:25:b2:
2c:59:f8:f6:09:0c:d5:5a:04:cf:db:31:d4:12:90:e6:21:3c:
48:8c:e6:0c:87:b3:b7:76:5a:86:56:41:4d:77:10:f5:aa:62:
9c:ce:8b:8c:f8:0e:ae:96:12:ac:26:04:e2:bb:9b:8b:dd:69:
e3:81:15:e7:e4:96:99:be:3c:a3:0e:67:31:cf:9d:61:98:47:
bf:5f:ea:3c:5a:c9:78:74:93:3d:80:02:1a:86:33:2a:ef:0c:
bd:fb:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:34 2026 by rpki-client