This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TEZsAVB/JIyVreQxhYw6Lt4LYdqcNjJ7GieEaO+BjYc=
Subject key identifier: EA:D2:7B:FB:EE:7B:AC:D0:A0:45:58:8B:AF:2E:1F:1E:83:15:54:C5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7240A9974847EFCF685C70D9E263DA949B13BF61
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 Jan 2026 06:49:01 +0000
ROA not before: Thu 08 Jan 2026 06:44:01 +0000
ROA not after: Thu 07 Jan 2027 06:49:01 +0000
asID: 834
IP address blocks: 147.125.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 04:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:40:a9:97:48:47:ef:cf:68:5c:70:d9:e2:63:da:94:9b:13:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jan 8 06:44:01 2026 GMT
Not After : Jan 7 06:49:01 2027 GMT
Subject: CN=EAD27BFBEE7BACD0A045588BAF2E1F1E831554C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:44:55:7c:01:68:c5:b8:d9:31:30:63:32:
4d:8d:48:f6:fe:af:c6:3e:27:20:81:92:33:3a:fa:
f0:e6:f0:c1:72:87:6d:ed:86:a3:9c:88:3e:1e:5f:
95:54:4e:9a:80:72:4c:f5:c8:14:13:96:3e:4e:59:
96:7e:f4:63:ab:8b:88:6a:ac:72:f3:9c:01:f9:d5:
df:32:1c:52:6d:8e:28:44:f8:fa:b2:0a:73:4e:0b:
ac:c7:ec:cf:7d:21:d8:09:a4:50:8e:11:87:f5:bb:
e6:e7:36:80:32:7e:e3:4d:ca:8e:8d:e2:2e:96:4b:
de:4f:50:1c:ad:fc:56:28:a1:30:a7:09:76:04:3a:
c6:36:2c:1b:30:f4:e4:f5:e7:05:81:01:f1:7b:66:
9b:c1:b7:3a:26:b2:41:c6:a9:1e:2f:60:86:31:b5:
58:4d:f0:82:19:09:43:78:97:8a:c6:6d:2f:99:35:
18:77:28:72:04:84:19:4d:d5:f5:00:4b:d8:20:51:
00:09:15:38:76:96:28:3c:b7:fe:14:04:31:51:82:
8c:7e:84:1b:10:b5:ca:b2:90:2d:bf:8f:56:e1:03:
de:a2:cb:e5:0b:5d:f3:c7:23:7f:1f:89:05:9c:6a:
49:11:b3:7e:19:40:be:bd:0c:83:c4:74:0d:72:58:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:7B:FB:EE:7B:AC:D0:A0:45:58:8B:AF:2E:1F:1E:83:15:54:C5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.162.0/24
Signature Algorithm: sha256WithRSAEncryption
32:67:a9:8c:a8:a1:1b:2c:a7:15:08:99:46:03:da:4c:10:27:
0a:37:d7:0b:94:57:e3:76:54:f1:0b:97:82:d8:66:9c:8b:07:
81:e6:69:09:b5:f4:21:9a:26:c3:37:70:06:50:79:5b:90:a6:
8a:b2:30:f9:52:bd:11:be:4a:b3:01:5b:a5:d4:bc:ce:d3:9c:
58:73:46:5d:29:da:54:6c:90:bc:01:db:a2:72:9f:eb:b5:59:
0d:0e:81:af:50:f7:12:9e:7a:25:17:30:9f:b9:bd:19:e3:0c:
2c:ee:b4:e8:b0:52:b9:20:75:62:86:ae:0e:c8:85:5c:ab:53:
8f:1a:30:93:27:eb:29:48:14:17:e1:36:21:2a:89:30:95:99:
04:7a:7f:a1:d3:32:00:42:4f:50:32:02:e4:26:90:b9:7c:81:
20:f1:4f:1d:b8:91:94:2e:e3:db:90:4d:74:55:ef:19:fc:2f:
78:75:3d:38:42:d4:f7:83:5b:e8:7e:5d:82:6c:e8:69:97:cf:
f2:b9:1a:17:5e:45:0d:bf:91:f8:d3:b7:20:a8:0f:cf:ff:48:
cd:f9:6e:9c:f7:bd:cf:94:a8:73:5d:ef:e8:9b:e0:60:2b:58:
c2:1e:76:e5:4c:d4:41:3c:ef:db:2c:11:7b:3e:9c:61:01:a7:
fd:70:80:2f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUckCpl0hH789oXHDZ4mPalJsTv2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjAxMDgwNjQ0MDFaFw0yNzAxMDcwNjQ5MDFaMDMxMTAvBgNV
BAMTKEVBRDI3QkZCRUU3QkFDRDBBMDQ1NTg4QkFGMkUxRjFFODMxNTU0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/URVfAFoxbjZMTBjMk2NSPb+
r8Y+JyCBkjM6+vDm8MFyh23thqOciD4eX5VUTpqAckz1yBQTlj5OWZZ+9GOri4hq
rHLznAH51d8yHFJtjihE+PqyCnNOC6zH7M99IdgJpFCOEYf1u+bnNoAyfuNNyo6N
4i6WS95PUByt/FYooTCnCXYEOsY2LBsw9OT15wWBAfF7ZpvBtzomskHGqR4vYIYx
tVhN8IIZCUN4l4rGbS+ZNRh3KHIEhBlN1fUAS9ggUQAJFTh2lig8t/4UBDFRgox+
hBsQtcqykC2/j1bhA96iy+ULXfPHI38fiQWcakkRs34ZQL69DIPEdA1yWD2BAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU6tJ7++57rNCgRViLry4fHoMVVMUwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
ojANBgkqhkiG9w0BAQsFAAOCAQEAMmepjKihGyynFQiZRgPaTBAnCjfXC5RX43ZU
8QuXgthmnIsHgeZpCbX0IZomwzdwBlB5W5CmirIw+VK9Eb5KswFbpdS8ztOcWHNG
XSnaVGyQvAHbonKf67VZDQ6Br1D3Ep56JRcwn7m9GeMMLO606LBSuSB1YoauDsiF
XKtTjxowkyfrKUgUF+E2ISqJMJWZBHp/odMyAEJPUDIC5CaQuXyBIPFPHbiRlC7j
25BNdFXvGfwveHU9OELU94Nb6H5dgmzoaZfP8rkaF15FDb+R+NO3IKgPz/9Izflu
nPe9z5Soc13v6JvgYCtYwh525UzUQTzv2ywRez6cYQGn/XCALw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:36:39 2026 by rpki-client