This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137332e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3137332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: kW/dkmZp9ItGD92f9M6WHHksrkPHMwBcRwRh+O1c6hs= Subject key identifier: FE:CA:59:AC:D9:5B:D7:EE:89:BB:F3:B5:DE:1E:2B:F8:C0:51:10:79 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2BFD88C5E645D68F5730D6DE68E49FCF80DA1AC3 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137332e302f32342d3234203d3e20383334.roa Signing time: Mon 17 Nov 2025 09:51:52 +0000 ROA not before: Mon 17 Nov 2025 09:46:52 +0000 ROA not after: Mon 16 Nov 2026 09:51:52 +0000 asID: 834 IP address blocks: 147.125.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:fd:88:c5:e6:45:d6:8f:57:30:d6:de:68:e4:9f:cf:80:da:1a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 09:46:52 2025 GMT Not After : Nov 16 09:51:52 2026 GMT Subject: CN=FECA59ACD95BD7EE89BBF3B5DE1E2BF8C0511079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:de:08:62:44:6f:d6:89:ee:05:a0:c0:28:53: ee:41:a8:4e:cb:8e:a7:89:4e:5a:82:e6:13:7b:2e: a0:cc:ab:b8:07:e2:f4:4d:e1:e1:0e:ef:76:07:4f: 72:ea:92:0c:8c:cb:40:33:98:ac:a7:91:3f:45:b1: 1b:76:60:45:68:1c:e3:ce:55:76:a6:b6:a1:64:c7: 8a:a2:d2:5d:69:96:b5:9d:fe:45:37:de:6b:26:f4: 34:13:09:8f:54:d0:45:53:66:1f:35:04:6e:5a:c5: 55:62:a7:c4:ab:1a:14:22:0f:71:d0:b9:e7:28:bc: 9a:dc:ce:29:ea:66:dd:d6:83:4e:21:c2:8d:cb:5c: 58:04:51:7a:52:da:fb:dc:9a:e1:3e:18:8e:ff:76: 80:94:89:9b:0f:14:b9:d0:f0:d6:ce:12:22:b7:42: 6f:b8:2b:53:c3:4f:07:1b:db:55:95:63:ee:93:aa: f0:2a:77:93:c5:73:af:71:26:37:cf:a5:cb:34:14: da:54:c2:12:c4:a0:26:a6:32:dd:13:b6:03:ad:e2: 5c:f5:e2:ee:11:37:51:53:c2:11:e6:6d:9f:6e:35: 4c:93:d2:07:d4:a0:15:fa:0a:ef:a9:d7:ba:83:d9: df:a6:7c:d5:b7:6f:68:be:04:01:3f:b9:9e:31:83: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CA:59:AC:D9:5B:D7:EE:89:BB:F3:B5:DE:1E:2B:F8:C0:51:10:79 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.173.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:35:bd:a4:8f:59:79:a0:d8:38:57:ef:a0:f4:97:07:7f:07: 1a:4a:78:2f:cc:8e:61:2c:d1:2e:3f:98:46:b4:cf:9f:11:26: 71:08:86:bc:f7:11:88:a0:a7:d4:b0:f1:0f:05:16:67:f2:a9: e7:c9:2e:77:9c:1c:92:ab:41:48:f3:17:36:a9:ec:4d:c4:fb: 3c:be:6e:49:fe:a5:d6:3e:4f:a0:78:d2:63:78:d3:d7:cb:bd: 6b:7a:f1:be:e5:0e:78:b0:c8:79:c7:c9:27:82:18:6d:b1:b1: d5:0c:db:91:0e:31:96:17:3b:43:12:db:b1:27:f4:1c:10:b1: e6:c1:5f:0a:63:c7:f2:cd:ed:d6:ae:23:96:c2:a4:eb:28:bc: b3:6d:c0:67:a4:91:0c:9c:16:c5:18:18:fb:2a:e8:7f:d7:68: 19:41:3f:a3:ae:b1:19:17:c3:0d:33:0e:57:df:3c:62:bb:de: 82:8a:3b:8f:ef:5a:1c:48:6d:c2:ff:cd:60:5a:be:aa:bb:4c: 3c:ec:c1:b2:e5:e4:cf:3f:28:fd:8c:3e:87:aa:61:df:1d:fd: 8f:2f:ea:74:97:02:b9:89:70:f1:f4:54:36:da:81:ee:b8:68: 52:7e:e1:e3:1e:b6:26:5d:ff:12:23:d6:e3:74:67:cf:f7:86: 67:ee:12:94 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUK/2IxeZF1o9XMNbeaOSfz4DaGsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcwOTQ2NTJaFw0yNjExMTYwOTUxNTJaMDMxMTAvBgNV BAMTKEZFQ0E1OUFDRDk1QkQ3RUU4OUJCRjNCNURFMUUyQkY4QzA1MTEwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr3ghiRG/Wie4FoMAoU+5BqE7L jqeJTlqC5hN7LqDMq7gH4vRN4eEO73YHT3LqkgyMy0AzmKynkT9FsRt2YEVoHOPO VXamtqFkx4qi0l1plrWd/kU33msm9DQTCY9U0EVTZh81BG5axVVip8SrGhQiD3HQ uecovJrczinqZt3Wg04hwo3LXFgEUXpS2vvcmuE+GI7/doCUiZsPFLnQ8NbOEiK3 Qm+4K1PDTwcb21WVY+6TqvAqd5PFc69xJjfPpcs0FNpUwhLEoCamMt0TtgOt4lz1 4u4RN1FTwhHmbZ9uNUyT0gfUoBX6Cu+p17qD2d+mfNW3b2i+BAE/uZ4xg/PvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU/spZrNlb1+6Ju/O13h4r+MBREHkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 rTANBgkqhkiG9w0BAQsFAAOCAQEAbjW9pI9ZeaDYOFfvoPSXB38HGkp4L8yOYSzR Lj+YRrTPnxEmcQiGvPcRiKCn1LDxDwUWZ/Kp58kud5wckqtBSPMXNqnsTcT7PL5u Sf6l1j5PoHjSY3jT18u9a3rxvuUOeLDIecfJJ4IYbbGx1QzbkQ4xlhc7QxLbsSf0 HBCx5sFfCmPH8s3t1q4jlsKk6yi8s23AZ6SRDJwWxRgY+yrof9doGUE/o66xGRfD DTMOV988Yrvegoo7j+9aHEhtwv/NYFq+qrtMPOzBsuXkzz8o/Yw+h6ph3x39jy/q dJcCuYlw8fRUNtqB7rhoUn7h4x62Jl3/EiPW43Rnz/eGZ+4SlA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:22 2025 by rpki-client