This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3137362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: oqwcwobYL9Cv5EQIsw/8/0OXgbc7UPQem8Dl5ukXaRs= Subject key identifier: 4B:EB:A9:E4:67:4A:C9:4C:1B:9C:CD:20:44:EA:8E:3D:64:0D:FB:64 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 732BE1F1E66CEFAA296C27A3EC7D558A97312EC8 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32332d3234203d3e20383334.roa Signing time: Wed 19 Nov 2025 09:15:19 +0000 ROA not before: Wed 19 Nov 2025 09:10:19 +0000 ROA not after: Wed 18 Nov 2026 09:15:19 +0000 asID: 834 IP address blocks: 147.125.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2b:e1:f1:e6:6c:ef:aa:29:6c:27:a3:ec:7d:55:8a:97:31:2e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 19 09:10:19 2025 GMT Not After : Nov 18 09:15:19 2026 GMT Subject: CN=4BEBA9E4674AC94C1B9CCD2044EA8E3D640DFB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:ee:2c:52:10:17:4f:4c:a6:2d:b9:41:e3: c9:ab:47:c1:2d:8f:7f:c0:54:c0:12:ac:60:f5:dc: 73:20:d6:eb:41:d5:68:b2:76:e3:1c:c1:65:95:47: f5:d9:7d:83:a7:02:e8:10:df:a6:86:c5:eb:41:4d: bc:a4:63:ee:e9:57:f7:08:75:22:1f:7f:c0:3d:0c: 8f:af:28:c3:19:9f:5e:4d:3a:8a:c4:23:1c:9b:41: ed:24:02:ff:ff:fe:4a:78:c4:40:a8:98:1c:35:c0: 23:5b:8f:46:e4:d2:bb:62:1f:2c:f1:15:8d:14:ec: d4:8c:25:9f:63:7d:5a:d7:06:ed:64:2d:ea:3e:aa: 58:01:20:a2:8e:b3:3a:95:d0:79:7c:1b:59:7d:bd: 7c:c6:fa:06:32:47:11:d9:da:b2:99:c4:4f:a3:6f: 1e:3b:64:d5:dc:e5:5b:8b:1f:77:7b:8a:e7:bd:19: 25:b7:29:7f:74:3f:87:ac:69:b9:89:13:88:00:c6: 26:fe:04:42:30:32:a7:3d:9a:45:f1:7f:fa:68:9f: 40:4a:82:01:b2:73:8f:14:3b:b6:10:50:c8:23:81: 5a:e6:69:31:c8:d5:1d:99:04:00:3f:5e:9d:a3:34: 72:8b:65:7a:56:8d:b2:38:78:64:77:fa:8c:48:fd: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:A9:E4:67:4A:C9:4C:1B:9C:CD:20:44:EA:8E:3D:64:0D:FB:64 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.176.0/23 Signature Algorithm: sha256WithRSAEncryption 38:da:55:9c:49:9d:9c:6a:8c:a9:e6:6a:42:7e:c7:be:2b:b4: da:b8:1e:5d:1b:b9:ad:48:6e:21:6f:9d:6e:44:99:3d:ec:ac: 26:1f:0b:96:4b:c3:2a:52:3a:1e:6e:7b:c7:c6:f4:7b:d0:04: 28:c7:5a:d8:2f:08:2f:0c:b0:0a:57:83:57:b1:ae:71:46:26: 45:d5:34:f3:74:b0:c9:45:89:b7:1c:6b:85:af:f1:38:bf:07: 8d:fa:b5:51:02:26:7d:1c:e0:21:3b:80:d6:0b:f4:a2:5b:2d: e9:ea:00:03:a3:87:c8:11:c0:9f:79:78:75:88:0e:e9:d1:49: 36:f0:ef:09:75:3d:04:ab:f6:e0:f8:66:37:9a:b2:56:53:f4: 9a:80:2c:3f:9c:d2:c8:9e:d0:7a:fc:9f:df:c1:86:63:34:7b: 92:49:16:e7:b9:e4:cc:8b:51:ee:03:3d:69:f9:8e:6e:29:7a: 54:d3:9f:c7:8d:82:04:4b:64:f3:3c:ea:8c:36:79:e6:03:48: 8d:a2:22:9f:68:0c:59:cf:52:5a:12:60:0a:fb:5d:e1:ae:b3: 12:ab:d1:12:cf:46:80:1f:63:2c:b9:ac:9a:02:ea:7f:d2:00: 35:d2:a0:6c:bb:b8:72:0a:ad:5a:ec:45:de:1e:56:d0:e1:38: a4:a8:5b:3d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcyvh8eZs76opbCej7H1VipcxLsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTkwOTEwMTlaFw0yNjExMTgwOTE1MTlaMDMxMTAvBgNV BAMTKDRCRUJBOUU0Njc0QUM5NEMxQjlDQ0QyMDQ0RUE4RTNENjQwREZCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwe4sUhAXT0ymLblB48mrR8Et j3/AVMASrGD13HMg1utB1WiyduMcwWWVR/XZfYOnAugQ36aGxetBTbykY+7pV/cI dSIff8A9DI+vKMMZn15NOorEIxybQe0kAv///kp4xEComBw1wCNbj0bk0rtiHyzx FY0U7NSMJZ9jfVrXBu1kLeo+qlgBIKKOszqV0Hl8G1l9vXzG+gYyRxHZ2rKZxE+j bx47ZNXc5VuLH3d7iue9GSW3KX90P4esabmJE4gAxib+BEIwMqc9mkXxf/pon0BK ggGyc48UO7YQUMgjgVrmaTHI1R2ZBAA/Xp2jNHKLZXpWjbI4eGR3+oxI/doJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUS+up5GdKyUwbnM0gROqOPWQN+2QwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 sDANBgkqhkiG9w0BAQsFAAOCAQEAONpVnEmdnGqMqeZqQn7Hviu02rgeXRu5rUhu IW+dbkSZPeysJh8LlkvDKlI6Hm57x8b0e9AEKMda2C8ILwywCleDV7GucUYmRdU0 83SwyUWJtxxrha/xOL8Hjfq1UQImfRzgITuA1gv0olst6eoAA6OHyBHAn3l4dYgO 6dFJNvDvCXU9BKv24PhmN5qyVlP0moAsP5zSyJ7Qevyf38GGYzR7kkkW57nkzItR 7gM9afmObil6VNOfx42CBEtk8zzqjDZ55gNIjaIin2gMWc9SWhJgCvtd4a6zEqvR Es9GgB9jLLmsmgLqf9IANdKgbLu4cgqtWuxF3h5W0OE4pKhbPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:10 2025 by rpki-client