This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32322d3234203d3e20383334.roa File: 3134372e3132352e3138302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: yfNBu8Ta2Nx5jCny6Ayc/V83OI5H8RQVJMIMYU+xwH4= Subject key identifier: B8:0E:90:1F:77:D6:26:4C:53:30:10:D2:DB:1A:F8:F2:1C:3F:48:A0 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 384E4517F547D057EF28801D353CAB18520E3BD3 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32322d3234203d3e20383334.roa Signing time: Wed 19 Nov 2025 09:15:19 +0000 ROA not before: Wed 19 Nov 2025 09:10:19 +0000 ROA not after: Wed 18 Nov 2026 09:15:19 +0000 asID: 834 IP address blocks: 147.125.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:4e:45:17:f5:47:d0:57:ef:28:80:1d:35:3c:ab:18:52:0e:3b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 19 09:10:19 2025 GMT Not After : Nov 18 09:15:19 2026 GMT Subject: CN=B80E901F77D6264C533010D2DB1AF8F21C3F48A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d4:cf:08:6f:55:88:3c:06:d4:15:28:ed:33: 76:3e:a4:7e:19:4d:0c:97:ed:5a:93:ed:01:36:be: 3e:82:58:5b:c2:8d:94:8a:af:db:e9:d8:aa:a1:87: 01:76:91:ae:34:93:68:cd:b7:38:fd:d6:0f:84:ea: c6:13:b9:75:44:b2:f1:a4:be:f7:ea:eb:ed:a0:c5: 6c:f5:be:5f:40:6a:8b:18:fd:5d:e4:f7:13:54:03: 24:82:55:ae:cb:d6:82:0f:4f:9a:e9:06:dd:07:92: 1f:db:5d:f7:f4:ca:4e:df:5b:f6:72:a4:5b:24:b6: 06:53:ee:55:0b:98:a4:65:e6:0c:59:06:32:67:95: 3d:30:91:ce:d2:d2:db:43:d2:fb:c1:21:65:24:6c: b3:49:d1:78:fa:ff:dd:a7:30:37:cf:1a:e0:41:1d: 2e:ec:f9:b7:48:71:87:7a:0d:b0:b6:42:b9:19:c0: 81:dc:9d:f3:e2:af:f2:e1:48:8c:a6:2e:09:4f:90: 50:1b:67:02:e5:6a:a1:7d:a9:60:50:d6:11:18:50: 76:2a:8d:1d:1b:13:a9:d0:a9:6c:ff:1a:ef:ae:e8: e8:84:d6:71:12:8c:ba:cf:71:99:96:16:b3:51:13: fb:d0:87:6f:95:53:86:28:d4:23:f8:24:a8:3d:d3: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0E:90:1F:77:D6:26:4C:53:30:10:D2:DB:1A:F8:F2:1C:3F:48:A0 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.180.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:80:f8:ff:41:87:5a:02:3f:56:3a:bb:58:7d:73:37:c6:55: 35:c1:b2:a7:a7:5d:ae:52:58:14:fb:2e:cf:6a:46:2e:dd:55: 02:2d:fd:0f:40:d5:61:fe:b6:06:ab:9b:b2:c1:69:5d:06:78: 09:63:6a:f0:81:40:d6:0b:6b:19:df:c2:04:4a:0c:89:42:01: 03:46:60:35:f0:a5:49:b2:8e:71:19:33:00:cf:c8:e0:08:a4: b6:c8:6d:30:74:97:44:f7:2a:34:f2:9a:ed:c1:7c:84:b7:f7: e0:83:dc:00:52:5b:a9:84:7f:ed:9d:40:e6:5e:1d:54:49:61: b3:79:f4:3f:21:7f:3e:c7:ab:4e:4e:c3:89:c0:5f:8a:5b:d1: 9c:7c:25:54:44:0c:08:72:de:db:23:92:fb:f8:71:b7:48:c6: a0:ff:ed:39:2d:25:41:6f:f5:a2:59:77:51:f4:4d:b5:bc:c7: 65:54:7a:9f:68:5d:50:21:0e:1b:ca:96:51:dc:58:ca:2a:3c: 3d:8c:2f:26:d1:af:0b:45:8c:e5:21:5e:31:79:68:8a:e6:b6: f5:0c:3a:87:9f:18:1e:a9:06:9e:84:e2:fc:1a:38:ec:67:86: b1:20:a8:1d:f1:4b:a1:e0:37:ad:75:24:c6:7b:8c:4c:0d:af: 18:33:f5:7d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOE5FF/VH0FfvKIAdNTyrGFIOO9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTkwOTEwMTlaFw0yNjExMTgwOTE1MTlaMDMxMTAvBgNV BAMTKEI4MEU5MDFGNzdENjI2NEM1MzMwMTBEMkRCMUFGOEYyMUMzRjQ4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1M8Ib1WIPAbUFSjtM3Y+pH4Z TQyX7VqT7QE2vj6CWFvCjZSKr9vp2KqhhwF2ka40k2jNtzj91g+E6sYTuXVEsvGk vvfq6+2gxWz1vl9AaosY/V3k9xNUAySCVa7L1oIPT5rpBt0Hkh/bXff0yk7fW/Zy pFsktgZT7lULmKRl5gxZBjJnlT0wkc7S0ttD0vvBIWUkbLNJ0Xj6/92nMDfPGuBB HS7s+bdIcYd6DbC2QrkZwIHcnfPir/LhSIymLglPkFAbZwLlaqF9qWBQ1hEYUHYq jR0bE6nQqWz/Gu+u6OiE1nESjLrPcZmWFrNRE/vQh2+VU4Yo1CP4JKg903RRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUuA6QH3fWJkxTMBDS2xr48hw/SKAwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9 tDANBgkqhkiG9w0BAQsFAAOCAQEAToD4/0GHWgI/Vjq7WH1zN8ZVNcGyp6ddrlJY FPsuz2pGLt1VAi39D0DVYf62BqubssFpXQZ4CWNq8IFA1gtrGd/CBEoMiUIBA0Zg NfClSbKOcRkzAM/I4AiktshtMHSXRPcqNPKa7cF8hLf34IPcAFJbqYR/7Z1A5l4d VElhs3n0PyF/PserTk7DicBfilvRnHwlVEQMCHLe2yOS+/hxt0jGoP/tOS0lQW/1 oll3UfRNtbzHZVR6n2hdUCEOG8qWUdxYyio8PYwvJtGvC0WM5SFeMXloiua29Qw6 h58YHqkGnoTi/Bo47GeGsSCoHfFLoeA3rXUkxnuMTA2vGDP1fQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:11 2025 by rpki-client