This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3137382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: kfaya+UNwGPgwvMYWvhgghOXSx85NrxUOiSRMm2x1+s= Subject key identifier: E9:19:00:63:97:6E:65:BC:AB:4E:DF:76:C5:40:BE:9F:8D:89:A4:9B Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 100F49564B266EB5DA5EFE0ECF8E43A770111739 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32332d3234203d3e20383334.roa Signing time: Mon 19 Jan 2026 09:09:35 +0000 ROA not before: Mon 19 Jan 2026 09:04:35 +0000 ROA not after: Mon 18 Jan 2027 09:09:35 +0000 asID: 834 IP address blocks: 147.125.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0f:49:56:4b:26:6e:b5:da:5e:fe:0e:cf:8e:43:a7:70:11:17:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 19 09:04:35 2026 GMT Not After : Jan 18 09:09:35 2027 GMT Subject: CN=E9190063976E65BCAB4EDF76C540BE9F8D89A49B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0c:52:c4:2e:5c:1b:26:64:34:8b:a6:b0:9b: 90:ed:d3:e1:82:46:25:35:a2:fd:41:6a:a3:d8:cd: f4:3e:84:65:cb:33:8b:b8:b1:ba:9d:3b:93:f7:0a: 3f:f3:ce:03:f8:5d:27:3e:b2:7c:c2:3d:74:f6:d7: cf:19:65:4d:2f:38:25:78:61:27:9f:92:b0:43:32: 4c:52:5e:92:92:80:c0:69:e0:5b:f9:a5:70:74:b5: 40:8f:31:ef:29:ea:70:56:66:ec:bf:fe:41:4d:7b: 8f:90:ef:ef:e7:59:60:b7:c6:a9:3c:77:af:40:72: 06:85:22:47:4e:34:d5:b4:ed:f8:e0:42:b6:e5:ef: 2f:17:7c:df:26:c2:7a:c3:63:8b:3c:dd:e7:27:08: 39:ba:81:2f:03:96:5c:af:f4:03:ac:46:3f:e9:a7: 25:24:1b:37:63:19:40:ea:ad:9f:e7:b9:5c:a0:30: 74:c3:52:e0:10:c7:a8:3a:8c:ef:17:86:cf:98:cc: 66:34:c0:db:14:94:c5:75:88:db:7f:f8:7d:aa:cb: 6a:3c:85:f9:92:e7:1e:b2:f6:b9:1f:a1:69:c1:92: a6:4d:24:d6:13:44:9d:8c:d3:5f:31:bb:ea:05:bd: fe:b6:45:4f:0e:65:9f:25:61:39:9e:70:71:dc:4f: 36:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:19:00:63:97:6E:65:BC:AB:4E:DF:76:C5:40:BE:9F:8D:89:A4:9B X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.178.0/23 Signature Algorithm: sha256WithRSAEncryption 58:92:33:08:11:95:fb:8c:7c:2f:95:84:d2:d4:2e:ec:4f:dd: 5b:3c:36:9f:7f:8d:b5:88:f9:08:35:cd:90:98:71:8b:29:04: e9:9a:75:75:ba:91:03:b6:b2:6f:5b:13:72:ac:be:7b:58:98: 3c:68:3c:db:cc:82:00:bf:4a:7f:1a:e3:25:39:f8:4a:92:2a: 4d:ac:f9:d6:eb:1f:a2:5c:0a:51:f5:47:68:1e:8a:0b:01:d0: bb:84:57:fd:6e:de:e4:a8:6d:9f:7d:f3:77:31:e5:96:57:98: 6c:ab:85:b7:5f:6c:60:48:e2:24:30:63:46:3d:f7:16:b6:9e: 5b:e9:5c:95:69:01:49:df:cd:00:8b:2f:b2:3e:60:29:d8:bc: 71:59:18:08:13:5e:99:04:57:b7:b4:fb:03:db:c7:91:e0:bf: 75:06:65:6d:df:05:6a:93:f3:56:e7:1e:5d:be:9a:0f:50:4b: 24:66:c5:29:cb:64:3b:57:a0:37:a6:a0:e3:05:c6:fe:eb:b7: 53:ef:83:ea:7a:1c:41:99:5c:45:13:66:8c:f5:6f:2f:69:d2: 1e:25:04:5d:cd:06:c7:1c:ce:39:14:f9:20:80:fc:21:7d:38: 83:d4:ac:c0:99:15:49:c8:81:7d:e9:85:c1:dc:31:12:4e:30: aa:38:61:d6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUEA9JVksmbrXaXv4Oz45Dp3ARFzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMTkwOTA0MzVaFw0yNzAxMTgwOTA5MzVaMDMxMTAvBgNV BAMTKEU5MTkwMDYzOTc2RTY1QkNBQjRFREY3NkM1NDBCRTlGOEQ4OUE0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDFLELlwbJmQ0i6awm5Dt0+GC RiU1ov1BaqPYzfQ+hGXLM4u4sbqdO5P3Cj/zzgP4XSc+snzCPXT2188ZZU0vOCV4 YSefkrBDMkxSXpKSgMBp4Fv5pXB0tUCPMe8p6nBWZuy//kFNe4+Q7+/nWWC3xqk8 d69AcgaFIkdONNW07fjgQrbl7y8XfN8mwnrDY4s83ecnCDm6gS8Dllyv9AOsRj/p pyUkGzdjGUDqrZ/nuVygMHTDUuAQx6g6jO8Xhs+YzGY0wNsUlMV1iNt/+H2qy2o8 hfmS5x6y9rkfoWnBkqZNJNYTRJ2M018xu+oFvf62RU8OZZ8lYTmecHHcTzZRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU6RkAY5duZbyrTt92xUC+n42JpJswHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzczODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 sjANBgkqhkiG9w0BAQsFAAOCAQEAWJIzCBGV+4x8L5WE0tQu7E/dWzw2n3+NtYj5 CDXNkJhxiykE6Zp1dbqRA7ayb1sTcqy+e1iYPGg828yCAL9KfxrjJTn4SpIqTaz5 1usfolwKUfVHaB6KCwHQu4RX/W7e5Khtn33zdzHllleYbKuFt19sYEjiJDBjRj33 FraeW+lclWkBSd/NAIsvsj5gKdi8cVkYCBNemQRXt7T7A9vHkeC/dQZlbd8FapPz VuceXb6aD1BLJGbFKctkO1egN6ag4wXG/uu3U++D6nocQZlcRRNmjPVvL2nSHiUE Xc0GxxzOORT5IID8IX04g9SswJkVSciBfemFwdwxEk4wqjhh1g== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:39 2026 by rpki-client