This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32312d3234203d3e20383334.roa File: 3134372e3132352e3136302e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: d8VqkAgW8UHvPcqmjLwfbH/g4okMzW2Z+Sude6ZElfg= Subject key identifier: F9:5C:AA:5F:7F:0A:20:79:C7:EB:18:2E:1D:B7:ED:2A:22:86:72:F6 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 67BE36B898CE4E75859CB25DD5076571457A4B89 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32312d3234203d3e20383334.roa Signing time: Mon 17 Nov 2025 09:51:52 +0000 ROA not before: Mon 17 Nov 2025 09:46:52 +0000 ROA not after: Mon 16 Nov 2026 09:51:52 +0000 asID: 834 IP address blocks: 147.125.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:be:36:b8:98:ce:4e:75:85:9c:b2:5d:d5:07:65:71:45:7a:4b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 09:46:52 2025 GMT Not After : Nov 16 09:51:52 2026 GMT Subject: CN=F95CAA5F7F0A2079C7EB182E1DB7ED2A228672F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:7e:80:2b:01:3f:1f:d1:71:91:f3:48:6a: 9d:2a:82:48:f1:1c:76:c1:86:48:ac:23:87:99:19: f9:d6:64:0e:83:61:ac:d3:9a:ee:d0:79:e7:4b:ca: 72:10:d9:a0:ae:00:8a:0d:38:e5:df:89:cf:dc:ac: 84:ba:00:20:0f:75:82:b0:7c:78:97:c4:2f:50:09: 0a:a2:17:43:cf:8f:0f:81:a9:08:78:34:32:71:04: 9f:c6:a8:b8:d4:75:71:8d:00:2e:3c:35:46:5c:c3: 60:60:6a:c1:a2:c7:1c:5e:3b:9b:ab:2a:f5:e8:c2: 42:11:03:0a:3f:3d:eb:3a:ec:5f:78:b1:8c:6b:d0: 3a:ac:dc:a7:cb:f7:45:62:5b:a5:00:18:c7:74:54: 15:e9:8e:70:24:6d:e9:97:5b:51:eb:4f:29:ed:64: 15:95:bb:73:42:42:07:0e:b8:20:7a:6e:6e:7f:b8: 40:5d:97:ee:36:df:a8:35:5f:9f:a4:20:7a:7e:c2: 83:79:d9:38:c5:c1:4f:9d:d3:5b:74:bd:fc:32:3a: b8:30:cb:96:49:a1:85:f7:50:f0:e5:b2:cb:7c:05: 83:84:08:b5:36:29:89:ac:a7:d5:bd:de:ad:2f:f8: f0:9e:66:0f:a1:03:23:f4:1c:52:6c:26:1c:2a:c3: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5C:AA:5F:7F:0A:20:79:C7:EB:18:2E:1D:B7:ED:2A:22:86:72:F6 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.160.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:9c:7c:3a:09:29:72:48:bf:19:4d:c2:c5:1a:fa:ea:5c:18: d6:0e:3d:e0:90:d2:dc:d6:87:e0:39:5b:31:ce:a9:b0:ab:e9: 72:9e:10:96:44:04:7d:f1:dd:b9:1f:5b:b7:e3:8a:c6:8d:b8: b1:dd:06:48:54:1c:85:ea:50:18:76:52:df:b5:6c:6f:1a:2e: 3e:44:73:5b:2e:fc:37:d6:9f:ca:5d:0f:46:60:3a:a4:26:bc: db:37:56:a0:a9:7e:a9:27:d3:0a:5d:fa:6e:3c:08:b2:16:bd: 61:2e:3b:19:0b:26:d3:b1:a2:a8:b4:1f:2b:dc:4b:6e:3f:a3: c0:b6:18:84:e8:2e:38:8e:10:30:12:e7:f8:ac:99:38:8c:0b: e2:02:5f:63:4a:34:3a:13:d0:60:92:a0:74:44:71:7c:79:f1: 1a:1d:e2:44:da:2c:30:40:2d:cf:77:b8:6a:5e:a5:c9:ea:43: 26:24:20:38:eb:3e:3f:5a:69:9b:bc:a9:d2:59:c3:20:2a:b5: 96:15:71:d6:45:bf:31:31:3d:f3:0e:01:67:e1:41:3e:f4:ce: 0d:3c:e4:50:b1:52:49:87:aa:32:00:2a:4b:bb:07:5a:c0:e8: 72:2d:dc:72:e3:68:3a:c6:ed:b5:bc:4d:89:33:1c:c9:cd:d8: 5b:61:76:57 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZ742uJjOTnWFnLJd1QdlcUV6S4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcwOTQ2NTJaFw0yNjExMTYwOTUxNTJaMDMxMTAvBgNV BAMTKEY5NUNBQTVGN0YwQTIwNzlDN0VCMTgyRTFEQjdFRDJBMjI4NjcyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6X6AKwE/H9FxkfNIap0qgkjx HHbBhkisI4eZGfnWZA6DYazTmu7QeedLynIQ2aCuAIoNOOXfic/crIS6ACAPdYKw fHiXxC9QCQqiF0PPjw+BqQh4NDJxBJ/GqLjUdXGNAC48NUZcw2BgasGixxxeO5ur KvXowkIRAwo/Pes67F94sYxr0Dqs3KfL90ViW6UAGMd0VBXpjnAkbemXW1HrTynt ZBWVu3NCQgcOuCB6bm5/uEBdl+4236g1X5+kIHp+woN52TjFwU+d01t0vfwyOrgw y5ZJoYX3UPDlsst8BYOECLU2KYmsp9W93q0v+PCeZg+hAyP0HFJsJhwqw9+1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+VyqX38KIHnH6xguHbftKiKGcvYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzYzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5N9 oDANBgkqhkiG9w0BAQsFAAOCAQEAa5x8Ogkpcki/GU3CxRr66lwY1g494JDS3NaH 4DlbMc6psKvpcp4QlkQEffHduR9bt+OKxo24sd0GSFQchepQGHZS37VsbxouPkRz Wy78N9afyl0PRmA6pCa82zdWoKl+qSfTCl36bjwIsha9YS47GQsm07GiqLQfK9xL bj+jwLYYhOguOI4QMBLn+KyZOIwL4gJfY0o0OhPQYJKgdERxfHnxGh3iRNosMEAt z3e4al6lyepDJiQgOOs+P1ppm7yp0lnDICq1lhVx1kW/MTE98w4BZ+FBPvTODTzk ULFSSYeqMgAqS7sHWsDoci3ccuNoOsbttbxNiTMcyc3YW2F2Vw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:46 2025 by rpki-client