This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135362e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3135362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: iKflmyuc391gHyYkm8CAUyHl2UsN5R+mPmuABHX5ax8= Subject key identifier: F5:34:42:79:38:41:D5:33:DA:E2:BE:D9:F4:46:26:71:60:06:EF:1D Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 08447BBC8D7DB98AF3F2671786F025414757C307 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135362e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:24 +0000 ROA not before: Mon 08 Dec 2025 11:30:24 +0000 ROA not after: Mon 07 Dec 2026 11:35:24 +0000 asID: 834 IP address blocks: 147.125.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:44:7b:bc:8d:7d:b9:8a:f3:f2:67:17:86:f0:25:41:47:57:c3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:24 2025 GMT Not After : Dec 7 11:35:24 2026 GMT Subject: CN=F53442793841D533DAE2BED9F44626716006EF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:9b:1f:52:b0:0c:67:03:0a:c6:63:b7:07: 1e:d3:23:80:af:9c:e5:fa:8b:6b:ad:73:b4:91:4e: 84:f2:ef:c1:1d:40:4c:d2:d7:a6:18:ab:f6:4b:5d: 1b:f5:4b:0d:19:13:52:8e:5e:5e:0f:53:73:8e:35: 61:43:81:7b:9a:ca:a9:66:39:59:aa:2d:6a:44:f3: a6:41:7f:94:fd:cd:33:38:9d:ef:45:30:6d:b7:7f: 57:c6:22:5e:cf:64:cc:47:2f:68:9c:c7:4d:74:2e: 1f:ec:a6:c9:97:d0:ef:6c:1d:aa:50:d0:29:b7:96: 6c:4b:24:2a:c9:04:15:24:a6:bc:89:e0:a1:dd:70: ff:98:12:3d:56:5a:6a:2b:c6:52:9f:f9:9c:29:2f: 47:45:d4:6a:e3:c0:a3:01:e0:b3:91:a4:6c:4e:f9: 1c:59:c7:73:d5:ef:1e:30:3e:b8:bc:d3:ff:f5:1a: 2b:cc:ae:20:fb:53:af:c8:b8:d1:ab:2c:f7:cd:7e: b0:fd:06:fa:97:90:49:6b:d7:8f:4f:18:53:66:e6: 57:2f:f8:ba:64:a1:ec:c6:b2:46:2d:f0:6e:85:9e: 09:ab:5e:10:a1:ad:e7:79:38:da:02:3a:7e:bd:96: d6:34:fe:26:eb:2c:97:5b:a1:2f:40:3d:99:da:29: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:34:42:79:38:41:D5:33:DA:E2:BE:D9:F4:46:26:71:60:06:EF:1D X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.156.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:7a:71:4b:30:29:f2:90:57:47:38:49:f2:ae:23:6a:1b:e6: f4:c8:eb:5a:a6:f3:c5:23:a0:71:cc:54:53:6d:31:e3:57:22: 36:d2:9a:ba:70:ec:35:11:5e:6e:07:0f:8a:f3:a2:23:5d:9b: d4:e3:68:49:2f:8d:2c:59:3b:63:25:a2:ce:3d:3e:81:06:6e: 74:e5:40:7e:fc:c7:85:db:8c:f1:0c:b9:67:1a:00:63:94:6d: db:f0:17:28:c7:24:1b:18:b7:d4:2e:a5:be:e4:f5:f1:19:ff: 2e:83:6a:d1:cc:70:6e:40:73:86:25:93:b1:e1:c8:47:e0:67: 2e:2c:6f:5a:25:1b:12:8b:db:98:24:7e:ba:07:dd:0a:21:19: b5:19:c3:6a:53:9e:78:e2:5e:2b:e0:f5:d7:23:4b:54:48:e7: 19:25:7a:0e:90:e3:a3:a9:fc:f3:4f:b7:5d:75:22:e0:d7:6f: dc:00:fb:17:87:ee:5e:b7:c9:68:61:dd:fe:68:a7:49:1c:a2: 02:05:3e:1e:4b:d6:25:a0:6a:01:6c:e9:c7:61:60:41:dd:4b: 21:c6:c1:82:28:0b:5e:c8:5b:57:e5:3e:54:b2:1d:56:91:1f: dd:4b:61:9e:c3:44:ea:5c:96:6f:a2:f8:d3:6c:ff:ab:88:a7: 53:c9:2b:cf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCER7vI19uYrz8mcXhvAlQUdXwwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMjRaFw0yNjEyMDcxMTM1MjRaMDMxMTAvBgNV BAMTKEY1MzQ0Mjc5Mzg0MUQ1MzNEQUUyQkVEOUY0NDYyNjcxNjAwNkVGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzi5sfUrAMZwMKxmO3Bx7TI4Cv nOX6i2utc7SRToTy78EdQEzS16YYq/ZLXRv1Sw0ZE1KOXl4PU3OONWFDgXuayqlm OVmqLWpE86ZBf5T9zTM4ne9FMG23f1fGIl7PZMxHL2icx010Lh/spsmX0O9sHapQ 0Cm3lmxLJCrJBBUkpryJ4KHdcP+YEj1WWmorxlKf+ZwpL0dF1GrjwKMB4LORpGxO +RxZx3PV7x4wPri80//1GivMriD7U6/IuNGrLPfNfrD9BvqXkElr149PGFNm5lcv +LpkoezGskYt8G6FngmrXhChred5ONoCOn69ltY0/ibrLJdboS9APZnaKc5ZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU9TRCeThB1TPa4r7Z9EYmcWAG7x0wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 nDANBgkqhkiG9w0BAQsFAAOCAQEALXpxSzAp8pBXRzhJ8q4jahvm9MjrWqbzxSOg ccxUU20x41ciNtKaunDsNRFebgcPivOiI12b1ONoSS+NLFk7YyWizj0+gQZudOVA fvzHhduM8Qy5ZxoAY5Rt2/AXKMckGxi31C6lvuT18Rn/LoNq0cxwbkBzhiWTseHI R+BnLixvWiUbEovbmCR+ugfdCiEZtRnDalOeeOJeK+D11yNLVEjnGSV6DpDjo6n8 80+3XXUi4Ndv3AD7F4fuXrfJaGHd/minSRyiAgU+HkvWJaBqAWzpx2FgQd1LIcbB gigLXshbV+U+VLIdVpEf3UthnsNE6lyWb6L402z/q4inU8krzw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:48 2025 by rpki-client