This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137342e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3137342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: 47maEGvOMylcQXF+6bgGjbtYbgtJ5NhE1C7ErDFBmfw= Subject key identifier: 8D:6F:AB:B5:CC:78:A3:19:A0:DD:B5:BB:6E:E2:51:63:7D:B6:82:A1 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0E419E98B9228F328CC62938E8D2541CD148E979 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137342e302f32332d3234203d3e20383334.roa Signing time: Mon 17 Nov 2025 09:51:53 +0000 ROA not before: Mon 17 Nov 2025 09:46:53 +0000 ROA not after: Mon 16 Nov 2026 09:51:53 +0000 asID: 834 IP address blocks: 147.125.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:41:9e:98:b9:22:8f:32:8c:c6:29:38:e8:d2:54:1c:d1:48:e9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 09:46:53 2025 GMT Not After : Nov 16 09:51:53 2026 GMT Subject: CN=8D6FABB5CC78A319A0DDB5BB6EE251637DB682A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:6e:01:b8:c4:0c:ee:60:d0:21:d9:46:7f: 98:12:0e:2e:12:70:12:2e:39:57:45:a1:bb:ca:94: 89:5a:a2:4e:53:45:f4:a5:6f:44:3b:7d:eb:47:fb: b5:59:3d:5d:93:12:78:ff:ee:80:fa:8f:2d:d6:d3: 83:4d:90:0a:3c:2c:3c:69:6c:41:9e:32:a7:4c:d5: 16:a8:14:8f:d5:e9:e7:63:34:e6:86:94:28:ae:bc: 42:37:48:97:b8:2c:f6:1d:4f:5e:d2:a0:3a:ed:8d: e4:5d:68:23:65:9d:50:70:e5:f9:63:8d:1b:5f:4a: 5e:a2:8e:e1:6b:dc:8a:7b:12:4f:05:17:97:e6:09: 56:f6:54:22:f7:51:a4:f4:b9:4c:9e:c5:4f:05:f7: 5e:c1:66:e9:a7:ce:21:7d:64:49:9f:32:7e:d7:9a: a6:f6:5d:d0:bc:67:bf:c3:0d:98:5d:de:3e:6b:21: df:b2:4f:42:c8:80:19:91:b4:55:78:c0:ac:bd:a0: db:f7:76:c0:cd:57:76:62:23:8a:0e:27:69:a9:85: c1:7e:c1:65:f6:8a:3b:9a:16:b3:3a:e1:30:84:31: c0:50:22:61:91:6d:5e:2e:01:a3:c2:b8:78:c8:f8: eb:81:a4:a4:d1:5b:35:ab:ef:a1:b9:33:5b:24:fe: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6F:AB:B5:CC:78:A3:19:A0:DD:B5:BB:6E:E2:51:63:7D:B6:82:A1 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.174.0/23 Signature Algorithm: sha256WithRSAEncryption 86:85:f2:fa:3c:a7:5f:bf:9e:53:8f:27:15:a3:25:53:be:91: 8a:2d:fe:d4:f6:ca:fd:76:d5:18:fd:fd:0a:21:16:03:f2:95: 7f:0f:8b:30:52:52:dd:46:c0:00:c2:aa:0f:1f:95:08:e5:d7: 6b:e7:cd:eb:8f:29:19:ba:86:c3:a5:33:af:20:7a:36:81:1b: 4f:dd:12:19:05:d9:3f:50:d3:e4:89:b4:f1:21:d0:f5:0a:01: d3:8d:f6:1c:2e:d9:1b:1f:2d:2e:11:e4:1f:74:94:fe:46:f7: 09:d7:ba:dc:c2:00:18:1d:ed:5c:26:33:77:f1:f6:1a:16:b4: 25:e4:2e:72:25:d8:d7:8b:2f:ad:89:4c:df:21:39:43:37:d8: 7b:2f:8b:c4:72:39:0a:c5:c6:e2:74:0a:59:57:96:63:4f:5f: 80:49:ff:fd:51:e0:f2:df:90:48:62:e7:11:cc:53:54:b3:c1: 0a:ff:9d:98:49:26:4e:c1:aa:87:f9:a3:25:3f:49:23:0b:3a: 33:cb:c4:01:88:af:b6:5c:3d:59:5f:4c:e0:7a:c9:00:26:c7: 8d:cc:dc:ab:e6:56:f2:4b:11:0a:2d:af:40:74:80:28:49:59: 9a:c1:a2:dc:b6:c3:ad:af:d8:52:87:b1:59:5a:67:94:a3:dd: 29:47:bd:8d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDkGemLkijzKMxik46NJUHNFI6XkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcwOTQ2NTNaFw0yNjExMTYwOTUxNTNaMDMxMTAvBgNV BAMTKDhENkZBQkI1Q0M3OEEzMTlBMEREQjVCQjZFRTI1MTYzN0RCNjgyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzW4BuMQM7mDQIdlGf5gSDi4S cBIuOVdFobvKlIlaok5TRfSlb0Q7fetH+7VZPV2TEnj/7oD6jy3W04NNkAo8LDxp bEGeMqdM1RaoFI/V6edjNOaGlCiuvEI3SJe4LPYdT17SoDrtjeRdaCNlnVBw5flj jRtfSl6ijuFr3Ip7Ek8FF5fmCVb2VCL3UaT0uUyexU8F917BZumnziF9ZEmfMn7X mqb2XdC8Z7/DDZhd3j5rId+yT0LIgBmRtFV4wKy9oNv3dsDNV3ZiI4oOJ2mphcF+ wWX2ijuaFrM64TCEMcBQImGRbV4uAaPCuHjI+OuBpKTRWzWr76G5M1sk/iF5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUjW+rtcx4oxmg3bW7buJRY322gqEwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczNDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 rjANBgkqhkiG9w0BAQsFAAOCAQEAhoXy+jynX7+eU48nFaMlU76Rii3+1PbK/XbV GP39CiEWA/KVfw+LMFJS3UbAAMKqDx+VCOXXa+fN648pGbqGw6UzryB6NoEbT90S GQXZP1DT5Im08SHQ9QoB0432HC7ZGx8tLhHkH3SU/kb3Cde63MIAGB3tXCYzd/H2 Gha0JeQuciXY14svrYlM3yE5QzfYey+LxHI5CsXG4nQKWVeWY09fgEn//VHg8t+Q SGLnEcxTVLPBCv+dmEkmTsGqh/mjJT9JIws6M8vEAYivtlw9WV9M4HrJACbHjczc q+ZW8ksRCi2vQHSAKElZmsGi3LbDra/YUoexWVpnlKPdKUe9jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:21 2025 by rpki-client