This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32312d3234203d3e20383334.roa File: 3134372e3132352e3136382e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: MixcYuj4sQx28cD00UgvbTvHYun5ZJgatYJwQv54QuY= Subject key identifier: 07:D6:23:CB:DF:1F:4F:64:C5:50:6D:E1:30:3E:C9:7D:70:10:BD:83 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 09483FF1EE6E4E38AF5F5BAFF64A26D04CC091B7 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32312d3234203d3e20383334.roa Signing time: Sat 17 Jan 2026 09:19:23 +0000 ROA not before: Sat 17 Jan 2026 09:14:23 +0000 ROA not after: Sat 16 Jan 2027 09:19:23 +0000 asID: 834 IP address blocks: 147.125.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:48:3f:f1:ee:6e:4e:38:af:5f:5b:af:f6:4a:26:d0:4c:c0:91:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 17 09:14:23 2026 GMT Not After : Jan 16 09:19:23 2027 GMT Subject: CN=07D623CBDF1F4F64C5506DE1303EC97D7010BD83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:35:ec:c4:7d:51:4a:b9:e5:c6:a1:25:47: ce:5b:29:c0:94:1a:08:30:79:57:11:dc:e7:40:15: 23:98:bc:a1:13:87:2b:45:e9:84:da:b7:95:57:30: 92:92:f2:55:a8:5b:cb:03:cd:20:8a:29:2d:0c:35: 48:70:30:25:e4:e9:fc:09:8e:80:7a:d7:ea:a1:84: 14:29:f8:49:ce:6a:24:b2:fd:df:3d:dc:f9:03:94: 4b:36:fd:3e:a7:94:de:78:47:aa:eb:f9:26:05:2b: 54:d5:35:f8:72:24:91:ee:10:11:3b:ad:e9:f5:60: 98:eb:fb:64:7c:53:6c:ab:a1:b9:75:40:cb:0e:19: a4:72:7d:ec:14:12:e4:68:24:10:e7:eb:3b:5c:d1: 50:52:e7:81:a6:f8:00:0e:8d:ca:ca:03:6c:76:ff: 03:ca:41:42:65:b6:61:ea:05:cb:35:53:41:95:5a: b5:89:be:87:63:ab:4d:ff:30:2f:9a:f8:72:a6:52: f4:26:92:37:37:4f:ba:2b:d6:4b:e9:8f:38:ed:91: a3:50:c3:fb:51:1e:e6:cc:30:66:5e:c3:06:f2:dd: ce:9e:1e:13:ed:5c:d9:5c:a7:46:e6:84:63:dc:4b: cc:24:75:bf:a8:4e:94:61:ca:35:65:5d:98:ac:dd: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:23:CB:DF:1F:4F:64:C5:50:6D:E1:30:3E:C9:7D:70:10:BD:83 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.168.0/21 Signature Algorithm: sha256WithRSAEncryption 08:2b:e2:81:14:0a:c5:33:ec:2c:52:98:3c:9c:57:8e:27:b3: 6c:a3:a9:35:0a:05:0a:ee:62:6b:7c:5f:1e:ce:bf:03:36:91: a8:e8:09:7c:8e:30:71:1d:e1:f4:23:fa:f7:9d:29:56:e4:e9: f2:0e:13:d4:03:51:52:a6:21:bb:eb:2a:23:f8:30:b2:bc:18: e4:6a:e3:a6:4f:97:fb:59:5a:35:3f:b1:31:2a:26:70:02:b0: 1b:7c:d8:b2:8e:ae:c2:92:c7:78:86:88:2c:5b:93:dd:30:6e: e5:af:e4:16:6c:b7:4b:76:1c:fe:97:e6:ae:b5:23:01:78:85: f8:8a:d3:6e:56:0e:50:e6:65:0e:2a:09:5b:3f:9a:60:51:8f: 49:3c:a7:8f:2e:76:38:61:5e:47:d2:ff:56:90:66:1a:76:7f: 72:7b:1c:a7:ef:9d:93:a1:55:40:c2:e6:8e:dc:6e:6a:bf:4f: f4:ab:82:92:52:e9:4f:44:c6:81:b1:76:32:09:f1:17:5b:62: a0:8d:a6:f9:e8:76:09:cd:a9:e7:f4:ba:02:0e:b7:4b:43:cf: a7:6e:92:7b:26:a3:e6:2b:6e:3c:5e:35:5f:54:67:86:72:16: 77:b9:e7:fb:ca:72:17:f7:b6:aa:93:9a:c7:ce:68:a4:dd:6d: f8:1b:f7:f7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCUg/8e5uTjivX1uv9kom0EzAkbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMTcwOTE0MjNaFw0yNzAxMTYwOTE5MjNaMDMxMTAvBgNV BAMTKDA3RDYyM0NCREYxRjRGNjRDNTUwNkRFMTMwM0VDOTdENzAxMEJEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hTXsxH1RSrnlxqElR85bKcCU GggweVcR3OdAFSOYvKEThytF6YTat5VXMJKS8lWoW8sDzSCKKS0MNUhwMCXk6fwJ joB61+qhhBQp+EnOaiSy/d893PkDlEs2/T6nlN54R6rr+SYFK1TVNfhyJJHuEBE7 ren1YJjr+2R8U2yrobl1QMsOGaRyfewUEuRoJBDn6ztc0VBS54Gm+AAOjcrKA2x2 /wPKQUJltmHqBcs1U0GVWrWJvodjq03/MC+a+HKmUvQmkjc3T7or1kvpjzjtkaNQ w/tRHubMMGZewwby3c6eHhPtXNlcp0bmhGPcS8wkdb+oTpRhyjVlXZis3bgdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUB9Yjy98fT2TFUG3hMD7JfXAQvYMwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzYzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5N9 qDANBgkqhkiG9w0BAQsFAAOCAQEACCvigRQKxTPsLFKYPJxXjiezbKOpNQoFCu5i a3xfHs6/AzaRqOgJfI4wcR3h9CP6950pVuTp8g4T1ANRUqYhu+sqI/gwsrwY5Grj pk+X+1laNT+xMSomcAKwG3zYso6uwpLHeIaILFuT3TBu5a/kFmy3S3Yc/pfmrrUj AXiF+IrTblYOUOZlDioJWz+aYFGPSTynjy52OGFeR9L/VpBmGnZ/cnscp++dk6FV QMLmjtxuar9P9KuCklLpT0TGgbF2MgnxF1tioI2m+eh2Cc2p5/S6Ag63S0PPp26S eyaj5ituPF41X1RnhnIWd7nn+8pyF/e2qpOax85opN1t+Bv39w== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:39 2026 by rpki-client