This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136352e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3136352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: rkph+Mg4qqOiFPf+2W4y+eptSZVkaDl/BDhdTfanFjA= Subject key identifier: 5B:BB:A8:8F:7B:F4:2A:36:12:3C:75:71:9A:BF:C9:AA:DE:F2:2F:74 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0A3519F8CA0A6139BA8AF13F42B178ABA362F064 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136352e302f32342d3234203d3e20383334.roa Signing time: Thu 08 Jan 2026 09:26:21 +0000 ROA not before: Thu 08 Jan 2026 09:21:21 +0000 ROA not after: Thu 07 Jan 2027 09:26:21 +0000 asID: 834 IP address blocks: 147.125.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:35:19:f8:ca:0a:61:39:ba:8a:f1:3f:42:b1:78:ab:a3:62:f0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 8 09:21:21 2026 GMT Not After : Jan 7 09:26:21 2027 GMT Subject: CN=5BBBA88F7BF42A36123C75719ABFC9AADEF22F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:d8:6f:b3:96:a1:f0:f0:ed:9c:5c:3c:90: 82:f5:db:61:14:26:6d:9c:88:b0:ab:f4:6c:23:91: 33:c4:9a:01:8e:d3:c3:e7:46:ec:6d:8b:ed:19:61: 51:4d:9e:cb:eb:23:24:11:8f:1f:05:c4:f3:00:d8: ed:af:d7:40:c0:40:35:50:7c:68:7c:f4:30:12:e4: 59:2e:b8:24:11:22:aa:93:be:e8:8c:19:04:83:e1: 8a:dd:06:7b:eb:7f:6d:48:4b:61:97:55:7b:d6:6c: 4a:e0:b3:93:a0:ff:42:19:b0:c1:62:b6:ed:03:e5: 68:1d:a7:e5:d1:f0:01:97:12:d1:ef:6f:67:76:1b: d1:cc:c3:2c:dd:d8:bb:d5:51:0a:5f:ee:34:56:e4: 5c:c5:fd:c9:17:99:1d:46:23:81:2b:cf:28:bf:da: 76:19:8e:d2:fd:1a:2e:94:73:d8:33:bd:90:5e:03: d6:35:b8:91:75:84:73:7f:6e:de:09:f0:39:27:b8: 4d:c0:28:cd:dc:26:33:b9:0e:39:5c:60:c2:06:e5: 0c:d0:50:cf:2a:4c:13:93:b2:ba:a1:0f:45:5e:35: e1:79:99:35:b8:da:de:50:b5:a7:9b:32:23:31:d5: 1b:54:31:5a:09:8a:97:18:8a:ad:75:59:14:c0:4c: 03:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BB:A8:8F:7B:F4:2A:36:12:3C:75:71:9A:BF:C9:AA:DE:F2:2F:74 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.165.0/24 Signature Algorithm: sha256WithRSAEncryption 29:6e:81:55:f2:c3:73:bb:5e:3d:26:0e:fa:02:e5:b6:ca:0c: 4a:75:6b:e3:5f:f2:e1:5c:36:f5:6b:b6:c2:49:39:c8:79:1c: cb:37:d7:6e:40:d8:9e:f4:b8:18:33:0e:35:41:9b:ee:eb:33: e3:2e:72:46:27:b8:22:55:4b:cb:f8:b0:81:39:f3:29:a1:83: 9a:d7:25:1d:a4:fc:6b:ea:16:01:b1:33:a5:9b:19:7c:4c:65: 79:38:ac:6f:f8:4e:00:b7:12:e2:79:ca:ba:80:2f:3c:38:37: cc:e7:89:05:91:19:ae:97:0f:9d:6b:d1:4e:b2:23:eb:5d:26: 25:89:ba:ba:52:c9:5b:6c:da:4f:b7:51:fe:5b:da:d6:7c:5e: 24:7f:71:bc:62:1e:0d:25:e3:52:13:3b:36:94:cc:b5:17:f7: 03:9a:8b:5f:3b:a5:ec:5b:b8:fa:00:60:03:8e:28:11:21:a2: 0b:8d:17:b5:28:5a:a3:e8:ac:81:45:69:7f:55:35:70:cf:10: 36:33:42:70:19:65:21:e8:cd:9e:63:55:5f:78:d6:d5:a2:50: 51:36:9b:d8:b8:ca:0c:28:96:bc:54:91:18:61:b2:43:02:e8: 18:80:7b:f8:3e:0f:4e:f1:8d:97:9f:2d:b7:4b:2f:fd:30:31: 49:fa:d5:47 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCjUZ+MoKYTm6ivE/QrF4q6Ni8GQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDgwOTIxMjFaFw0yNzAxMDcwOTI2MjFaMDMxMTAvBgNV BAMTKDVCQkJBODhGN0JGNDJBMzYxMjNDNzU3MTlBQkZDOUFBREVGMjJGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofdhvs5ah8PDtnFw8kIL122EU Jm2ciLCr9GwjkTPEmgGO08PnRuxti+0ZYVFNnsvrIyQRjx8FxPMA2O2v10DAQDVQ fGh89DAS5FkuuCQRIqqTvuiMGQSD4YrdBnvrf21IS2GXVXvWbErgs5Og/0IZsMFi tu0D5Wgdp+XR8AGXEtHvb2d2G9HMwyzd2LvVUQpf7jRW5FzF/ckXmR1GI4Erzyi/ 2nYZjtL9Gi6Uc9gzvZBeA9Y1uJF1hHN/bt4J8DknuE3AKM3cJjO5DjlcYMIG5QzQ UM8qTBOTsrqhD0VeNeF5mTW42t5QtaebMiMx1RtUMVoJipcYiq11WRTATAONAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUW7uoj3v0KjYSPHVxmr/Jqt7yL3QwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 pTANBgkqhkiG9w0BAQsFAAOCAQEAKW6BVfLDc7tePSYO+gLltsoMSnVr41/y4Vw2 9Wu2wkk5yHkcyzfXbkDYnvS4GDMONUGb7usz4y5yRie4IlVLy/iwgTnzKaGDmtcl HaT8a+oWAbEzpZsZfExleTisb/hOALcS4nnKuoAvPDg3zOeJBZEZrpcPnWvRTrIj 610mJYm6ulLJW2zaT7dR/lva1nxeJH9xvGIeDSXjUhM7NpTMtRf3A5qLXzul7Fu4 +gBgA44oESGiC40XtShao+isgUVpf1U1cM8QNjNCcBllIejNnmNVX3jW1aJQUTab 2LjKDCiWvFSRGGGyQwLoGIB7+D4PTvGNl58tt0sv/TAxSfrVRw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:33 2026 by rpki-client