This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137372e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3137372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: MvVGPOaLsRmC7ZfFNwURf3aCA2/1eZwBkRRt1GDesDU= Subject key identifier: 1F:99:20:EA:8B:1E:3F:D3:80:0A:E6:EE:FD:AD:49:B3:70:FC:77:70 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1EEBC96446A0FF4AB465EC466FF077FD7CB9BF5F Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137372e302f32342d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:47 +0000 ROA not before: Fri 09 Jan 2026 08:11:47 +0000 ROA not after: Fri 08 Jan 2027 08:16:47 +0000 asID: 834 IP address blocks: 147.125.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:eb:c9:64:46:a0:ff:4a:b4:65:ec:46:6f:f0:77:fd:7c:b9:bf:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:47 2026 GMT Not After : Jan 8 08:16:47 2027 GMT Subject: CN=1F9920EA8B1E3FD3800AE6EEFDAD49B370FC7770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:a6:88:16:28:ec:fa:63:f1:fa:1e:b6:6a: f7:cf:97:4b:a8:32:c2:30:be:0c:30:6a:0f:21:85: 09:b0:58:06:e6:29:96:38:14:d9:09:0e:08:fe:8e: 83:2f:a8:42:f6:cc:c7:aa:6c:dd:e0:4c:1e:7f:0e: 94:c1:45:6d:d9:64:79:4a:69:4d:ae:89:be:34:14: 36:e9:6b:7b:3a:4c:3b:6b:da:6e:7e:ae:b4:c2:0e: 03:aa:bf:ff:eb:d2:9a:30:c3:ce:34:fc:1d:b7:29: 87:e1:22:87:a7:2e:7a:3b:58:5a:a3:1c:1a:00:19: bf:36:71:4f:3f:7c:cb:ff:05:f4:c3:0e:15:d2:25: 7a:26:1e:f0:4a:ae:81:f9:d1:85:8e:09:8e:e4:e3: a2:7b:bb:77:e5:68:12:d7:a1:51:ef:d6:6c:7f:5d: 24:70:8b:0a:25:92:95:ae:68:d9:45:64:f0:c9:df: 4b:0b:b2:04:a8:55:d7:24:d3:21:d6:70:b3:f8:fa: ea:5b:57:f7:1b:47:30:6d:3f:9d:f3:3e:ed:1c:76: f1:e3:7a:d3:44:3e:b4:46:57:02:38:c2:c2:cc:e7: 0b:1d:f5:a0:bf:c0:c1:c0:0c:a2:a4:4f:81:bd:e1: 33:5a:71:9a:2a:67:14:cd:aa:8c:5a:71:45:e8:b8: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:99:20:EA:8B:1E:3F:D3:80:0A:E6:EE:FD:AD:49:B3:70:FC:77:70 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.177.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:2a:6b:0a:39:e0:0b:0d:d5:24:62:e6:9a:d8:60:f3:05:a9: dc:ea:04:59:75:e3:1f:24:1b:67:8f:b0:56:fe:a2:50:a4:18: 75:17:8f:27:67:8c:aa:a0:89:e3:dc:2c:d1:85:20:fb:78:29: 7d:28:be:d4:e1:5c:e2:54:63:2b:0c:56:1f:67:84:ae:d5:ee: 1e:a2:33:56:dc:c3:cf:78:3b:7c:7c:07:ff:24:76:0a:22:a2: c3:29:27:1c:5f:95:24:9e:12:3d:19:72:30:43:dc:ea:14:78: 8d:c5:0a:a9:a4:c0:44:da:b7:51:6b:24:95:33:72:88:de:a1: e8:8d:96:00:f6:c8:2a:b5:02:1c:57:be:0d:c4:a1:86:f8:53: 2b:2f:fd:a9:74:60:ed:b6:74:3c:5a:cb:fc:4b:e3:95:91:9d: 1d:b6:34:22:53:c9:44:e6:58:99:61:fc:20:cd:72:3c:95:cf: 37:0b:78:1b:f0:a6:81:47:1a:54:82:66:c0:f1:f5:f0:a8:73: 80:0c:42:6c:0c:82:86:79:fd:04:59:dd:80:d3:a4:35:64:a5: cd:eb:de:0c:31:4e:69:ac:bc:bd:4d:fa:53:a9:25:c4:17:65: 38:e2:9d:51:40:83:c4:30:76:a6:15:79:b8:7d:f5:2e:27:5c: f8:8f:3c:e9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHuvJZEag/0q0ZexGb/B3/Xy5v18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDdaFw0yNzAxMDgwODE2NDdaMDMxMTAvBgNV BAMTKDFGOTkyMEVBOEIxRTNGRDM4MDBBRTZFRUZEQUQ0OUIzNzBGQzc3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqR6aIFijs+mPx+h62avfPl0uo MsIwvgwwag8hhQmwWAbmKZY4FNkJDgj+joMvqEL2zMeqbN3gTB5/DpTBRW3ZZHlK aU2uib40FDbpa3s6TDtr2m5+rrTCDgOqv//r0poww840/B23KYfhIoenLno7WFqj HBoAGb82cU8/fMv/BfTDDhXSJXomHvBKroH50YWOCY7k46J7u3flaBLXoVHv1mx/ XSRwiwolkpWuaNlFZPDJ30sLsgSoVdck0yHWcLP4+upbV/cbRzBtP53zPu0cdvHj etNEPrRGVwI4wsLM5wsd9aC/wMHADKKkT4G94TNacZoqZxTNqoxacUXouL4ZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUH5kg6oseP9OACubu/a1Js3D8d3AwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 sTANBgkqhkiG9w0BAQsFAAOCAQEAjSprCjngCw3VJGLmmthg8wWp3OoEWXXjHyQb Z4+wVv6iUKQYdRePJ2eMqqCJ49ws0YUg+3gpfSi+1OFc4lRjKwxWH2eErtXuHqIz VtzDz3g7fHwH/yR2CiKiwyknHF+VJJ4SPRlyMEPc6hR4jcUKqaTARNq3UWsklTNy iN6h6I2WAPbIKrUCHFe+DcShhvhTKy/9qXRg7bZ0PFrL/EvjlZGdHbY0IlPJROZY mWH8IM1yPJXPNwt4G/CmgUcaVIJmwPH18KhzgAxCbAyChnn9BFndgNOkNWSlzeve DDFOaay8vU36U6klxBdlOOKdUUCDxDB2phV5uH31Lidc+I886Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:42 2026 by rpki-client