This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20393834.roa File: 3134372e3132352e3135382e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: f/Q2oF3sBjpY4zKx016doBaNRjcxC+43TA5E8r+XyuY= Subject key identifier: 6C:F6:3E:77:CF:AE:7F:2E:92:61:AB:35:5D:5B:D8:9B:B8:6A:4B:2E Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5FCF32664225D0825D631DEAAC7CDB11756C19D6 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20393834.roa Signing time: Sat 24 Jan 2026 07:31:03 +0000 ROA not before: Sat 24 Jan 2026 07:26:03 +0000 ROA not after: Sat 23 Jan 2027 07:31:03 +0000 asID: 984 IP address blocks: 147.125.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cf:32:66:42:25:d0:82:5d:63:1d:ea:ac:7c:db:11:75:6c:19:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 24 07:26:03 2026 GMT Not After : Jan 23 07:31:03 2027 GMT Subject: CN=6CF63E77CFAE7F2E9261AB355D5BD89BB86A4B2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c6:5a:42:ee:b2:2c:08:e9:97:22:6a:0b:0c: 83:e0:6a:8d:a0:e2:20:1c:ae:9b:cc:d1:5d:76:bd: 72:7a:de:ab:1c:a8:f9:b0:e2:d3:21:cd:dd:76:f0: 62:6b:3a:37:ad:57:3f:3f:4f:cf:9e:ce:ef:19:92: c4:cb:1e:23:01:10:fd:b5:68:18:fc:2f:28:6e:c7: 0e:df:21:a3:32:b0:20:e8:80:ed:8c:80:d4:6d:b6: de:2d:ed:83:3e:37:32:23:4f:9b:26:68:1b:7c:99: ae:39:de:3e:7c:18:b7:e8:e4:ab:76:07:05:fe:24: 43:c4:5a:19:61:69:84:e1:90:0c:e3:02:e5:76:2f: 4f:77:17:ac:3c:5e:6c:bd:9e:6e:45:84:7b:45:64: 84:57:ad:18:57:c2:67:fd:bc:0b:0f:ec:2d:9d:ce: c6:f7:5c:11:a4:8c:78:cb:bd:d3:f3:9d:24:0f:d2: 99:00:f8:00:42:c1:7d:ea:93:f4:38:c7:63:b4:bf: 03:f3:4b:82:cd:73:d4:62:38:da:bc:ad:1a:2e:35: 34:c2:94:00:f1:92:a7:8b:53:f8:5a:03:3c:86:8d: d7:64:9e:4b:3c:05:22:4d:07:f6:d5:07:be:60:79: 2c:94:1f:80:8d:7a:13:d5:93:55:9e:7f:1f:bf:15: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F6:3E:77:CF:AE:7F:2E:92:61:AB:35:5D:5B:D8:9B:B8:6A:4B:2E X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.158.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:53:53:0a:f6:2b:88:1f:8b:a8:d7:5c:dd:9e:0f:25:21:50: 6b:3e:29:5d:bd:5c:68:49:cf:79:d1:87:6a:bb:05:2f:c9:15: ff:e1:12:2f:12:67:8e:dd:9a:88:59:ba:35:a1:c2:86:fe:ee: d6:b6:8c:e9:33:4b:95:f6:5f:40:e0:d7:d2:d7:ac:6e:e7:57: 5c:45:bf:86:a8:18:3a:bb:19:8b:37:30:b5:04:cb:38:e9:43: 6a:fa:c3:2e:63:5e:45:50:ae:5b:ad:8f:f8:fc:c9:a7:a5:f7: b4:ed:bd:1e:2f:c2:d7:36:2e:84:1f:eb:1c:d8:54:4d:a9:4b: eb:2c:a1:44:cf:3b:f2:ce:32:a1:8e:d9:d6:62:fc:84:b7:c8: bf:5a:3d:29:fd:6b:33:9e:7a:7b:76:0b:83:82:7b:a8:70:db: df:10:aa:11:8b:c2:35:60:01:7e:00:e6:b4:e4:4d:7f:9e:7e: 4f:05:87:e2:36:25:84:99:a0:e8:98:25:05:bf:47:d4:0c:8b: 10:65:c6:7b:f6:94:2f:b2:69:ea:76:7c:f8:a8:ea:d4:16:3f: 8e:2a:03:c1:fa:0a:5b:de:4e:66:f0:04:5b:8e:6e:77:a4:a6: e7:c5:9d:a4:52:29:95:e0:04:30:a9:b4:f3:50:e6:7b:22:00: c2:01:37:5b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUX88yZkIl0IJdYx3qrHzbEXVsGdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMjQwNzI2MDNaFw0yNzAxMjMwNzMxMDNaMDMxMTAvBgNV BAMTKDZDRjYzRTc3Q0ZBRTdGMkU5MjYxQUIzNTVENUJEODlCQjg2QTRCMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxlpC7rIsCOmXImoLDIPgao2g 4iAcrpvM0V12vXJ63qscqPmw4tMhzd128GJrOjetVz8/T8+ezu8ZksTLHiMBEP21 aBj8Lyhuxw7fIaMysCDogO2MgNRttt4t7YM+NzIjT5smaBt8ma453j58GLfo5Kt2 BwX+JEPEWhlhaYThkAzjAuV2L093F6w8Xmy9nm5FhHtFZIRXrRhXwmf9vAsP7C2d zsb3XBGkjHjLvdPznSQP0pkA+ABCwX3qk/Q4x2O0vwPzS4LNc9RiONq8rRouNTTC lADxkqeLU/haAzyGjddknks8BSJNB/bVB75geSyUH4CNehPVk1Wefx+/FRaHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUbPY+d8+ufy6SYas1XVvYm7hqSy4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzgzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 njANBgkqhkiG9w0BAQsFAAOCAQEAalNTCvYriB+LqNdc3Z4PJSFQaz4pXb1caEnP edGHarsFL8kV/+ESLxJnjt2aiFm6NaHChv7u1raM6TNLlfZfQODX0tesbudXXEW/ hqgYOrsZizcwtQTLOOlDavrDLmNeRVCuW62P+PzJp6X3tO29Hi/C1zYuhB/rHNhU TalL6yyhRM878s4yoY7Z1mL8hLfIv1o9Kf1rM556e3YLg4J7qHDb3xCqEYvCNWAB fgDmtORNf55+TwWH4jYlhJmg6JglBb9H1AyLEGXGe/aUL7Jp6nZ8+Kjq1BY/jioD wfoKW95OZvAEW45ud6Sm58WdpFIpleAEMKm081DmeyIAwgE3Ww== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:44 2026 by rpki-client