This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32322d3234203d3e20383334.roa File: 3134372e3132352e3136382e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: FWuZIT/JOk9ZczLbka6U0RKgns1udxf2W3A/nHSaixg= Subject key identifier: E1:A6:EA:99:EE:11:23:8C:64:35:86:41:3D:1E:15:42:B7:BB:28:CB Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 55D994EE82C7E8D7A2E0B0B23D763C52FCBB4B7B Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32322d3234203d3e20383334.roa Signing time: Mon 17 Nov 2025 09:51:53 +0000 ROA not before: Mon 17 Nov 2025 09:46:53 +0000 ROA not after: Mon 16 Nov 2026 09:51:53 +0000 asID: 834 IP address blocks: 147.125.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d9:94:ee:82:c7:e8:d7:a2:e0:b0:b2:3d:76:3c:52:fc:bb:4b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 09:46:53 2025 GMT Not After : Nov 16 09:51:53 2026 GMT Subject: CN=E1A6EA99EE11238C643586413D1E1542B7BB28CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:d7:74:05:7d:8c:62:07:3c:2b:e3:ef:5c: 30:7e:ba:c4:2a:f8:43:95:06:64:4f:be:bd:6e:3a: d5:e6:57:0c:c8:db:17:cf:b0:e4:a0:26:29:07:eb: c7:bf:aa:c7:e8:5e:63:1d:fd:b3:e5:02:dd:f2:b4: 26:92:f8:4c:99:d9:12:00:81:dd:49:67:f1:97:c7: 64:98:cd:1c:2d:a1:88:92:a8:62:e4:57:ad:79:66: cc:e3:70:ee:d8:47:b7:6b:88:b3:2d:96:a8:71:71: 69:88:20:31:a9:a8:30:df:df:4f:ff:6e:c6:d1:e4: d3:59:f4:6d:67:75:d5:ed:5f:0c:b3:3f:79:a4:59: 6b:3c:ce:4f:ca:2c:42:46:50:fb:b7:aa:e2:0e:21: f3:81:75:3d:0c:32:eb:2f:93:f6:c1:fd:61:1b:f5: e2:48:b5:2b:88:a3:7e:fb:da:03:27:2f:ab:68:93: 3b:2e:38:47:70:1a:ed:41:3e:3d:1d:d0:58:0c:7d: 5d:7d:be:4e:bc:3a:76:73:08:d9:07:c0:f4:07:8d: 40:57:fa:5c:74:f5:33:78:74:3d:8c:f1:01:d0:89: 57:75:d6:90:06:a1:99:35:80:d7:cb:08:c0:42:01: ff:20:d6:31:d0:b3:d0:8e:83:b3:1c:5c:45:75:23: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A6:EA:99:EE:11:23:8C:64:35:86:41:3D:1E:15:42:B7:BB:28:CB X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136382e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.168.0/22 Signature Algorithm: sha256WithRSAEncryption 26:40:0d:80:7e:df:07:1d:b0:5c:17:88:ef:09:17:7a:e5:86: 5f:94:18:f7:bc:02:78:55:44:06:46:81:79:c1:ef:90:1f:b7: 1c:1b:fb:cf:91:4a:ca:4b:dc:61:19:e5:27:03:8f:37:9c:58: 78:f0:a5:b0:c4:f5:17:5f:13:eb:c1:83:af:fe:e9:02:8c:aa: 73:27:f9:97:27:86:85:11:86:ba:37:36:1c:00:23:cc:52:99: af:ec:9b:5e:c5:62:66:d0:1c:b4:2c:b3:77:c8:6a:fd:18:84: 1f:10:59:cc:33:1a:4f:c8:21:b5:b3:f8:31:4e:3c:99:ea:f5: 2c:a5:33:88:49:f5:50:9a:49:16:0d:86:c6:04:d3:b7:c3:a1: 89:f9:8d:38:a1:3b:92:75:03:32:a5:a9:25:dc:49:28:ed:bc: 4b:0e:87:4a:9b:7f:00:bc:93:30:56:2b:48:ab:b5:87:f6:4f: de:d9:44:6f:64:ae:79:dd:d1:65:39:3f:af:e4:22:31:91:3b: 6d:a0:d3:2b:4b:f2:e3:ac:49:b7:b0:22:92:b9:69:31:5b:6b: 6a:05:c0:d3:25:43:71:24:15:02:ac:07:d9:42:96:d4:e0:f9: 66:f7:1b:5d:fd:92:91:fd:44:c1:e5:5a:5d:2a:66:e3:f0:21: 0f:6a:b3:ed -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVdmU7oLH6Nei4LCyPXY8Uvy7S3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcwOTQ2NTNaFw0yNjExMTYwOTUxNTNaMDMxMTAvBgNV BAMTKEUxQTZFQTk5RUUxMTIzOEM2NDM1ODY0MTNEMUUxNTQyQjdCQjI4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp09d0BX2MYgc8K+PvXDB+usQq +EOVBmRPvr1uOtXmVwzI2xfPsOSgJikH68e/qsfoXmMd/bPlAt3ytCaS+EyZ2RIA gd1JZ/GXx2SYzRwtoYiSqGLkV615ZszjcO7YR7driLMtlqhxcWmIIDGpqDDf30// bsbR5NNZ9G1nddXtXwyzP3mkWWs8zk/KLEJGUPu3quIOIfOBdT0MMusvk/bB/WEb 9eJItSuIo3772gMnL6tokzsuOEdwGu1BPj0d0FgMfV19vk68OnZzCNkHwPQHjUBX +lx09TN4dD2M8QHQiVd11pAGoZk1gNfLCMBCAf8g1jHQs9COg7McXEV1IxL5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU4abqme4RI4xkNYZBPR4VQre7KMswHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9 qDANBgkqhkiG9w0BAQsFAAOCAQEAJkANgH7fBx2wXBeI7wkXeuWGX5QY97wCeFVE BkaBecHvkB+3HBv7z5FKykvcYRnlJwOPN5xYePClsMT1F18T68GDr/7pAoyqcyf5 lyeGhRGGujc2HAAjzFKZr+ybXsViZtActCyzd8hq/RiEHxBZzDMaT8ghtbP4MU48 mer1LKUziEn1UJpJFg2GxgTTt8OhifmNOKE7knUDMqWpJdxJKO28Sw6HSpt/ALyT MFYrSKu1h/ZP3tlEb2Sued3RZTk/r+QiMZE7baDTK0vy46xJt7AikrlpMVtragXA 0yVDcSQVAqwH2UKW1OD5ZvcbXf2Skf1EweVaXSpm4/AhD2qz7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:08:39 2025 by rpki-client