This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32312d3234203d3e20383334.roa File: 3134372e3132352e3138342e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: JXs6tC/dKM2FggYOtwhMfjTOs5t+jETW20mtJzLqQg4= Subject key identifier: EF:F2:74:25:C6:40:18:7B:67:15:66:42:53:0D:5C:8E:35:84:AD:C3 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 58B11A78EC40121EAA16407FECE7142DBB6DAD5A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32312d3234203d3e20383334.roa Signing time: Wed 19 Nov 2025 09:15:18 +0000 ROA not before: Wed 19 Nov 2025 09:10:18 +0000 ROA not after: Wed 18 Nov 2026 09:15:18 +0000 asID: 834 IP address blocks: 147.125.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b1:1a:78:ec:40:12:1e:aa:16:40:7f:ec:e7:14:2d:bb:6d:ad:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 19 09:10:18 2025 GMT Not After : Nov 18 09:15:18 2026 GMT Subject: CN=EFF27425C640187B67156642530D5C8E3584ADC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:be:e5:54:cf:c4:fa:6e:f4:b2:ab:a0:82: 6d:38:10:9f:76:8d:7c:e1:3a:54:5a:a9:11:71:43: f6:3a:50:42:47:1c:c7:92:25:c8:87:66:1a:5a:47: 7f:e5:c1:86:df:51:3c:61:2e:cc:01:f7:e5:3c:70: 17:4f:fe:11:22:5b:49:8b:15:55:2c:12:a7:db:e1: 03:66:fd:c8:ae:3a:84:37:e2:56:5b:4f:d1:d7:37: d1:45:fe:3b:c0:58:a7:bf:0a:0f:32:e8:db:85:39: f0:df:80:45:b0:b5:4c:c7:b6:e0:bb:66:9a:9e:d8: b9:b1:b2:ad:c8:8f:17:16:c4:0b:ef:34:65:7f:75: c9:72:d1:c7:49:64:15:fc:ec:0a:cf:a2:ed:5e:e9: 1f:94:da:f2:6e:0f:12:7a:c8:c8:10:ef:be:8b:e5: 1f:a5:0a:5e:19:d9:2d:0d:7e:24:13:91:23:c0:68: 76:11:a3:8a:bb:4e:0d:ec:03:2f:1f:dc:cf:f2:2f: 0d:28:b1:17:77:51:25:fa:8f:37:f2:e4:fb:d1:9d: 51:ba:90:85:ed:ff:d4:f0:ec:51:a0:bc:45:1c:49: 25:d2:01:79:86:26:ba:7d:33:c1:d4:1e:c9:b7:ce: f2:94:23:55:91:cf:94:38:7e:64:a4:97:4f:f9:e7: e4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F2:74:25:C6:40:18:7B:67:15:66:42:53:0D:5C:8E:35:84:AD:C3 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.184.0/21 Signature Algorithm: sha256WithRSAEncryption 55:82:f7:55:72:f1:8c:2c:ed:35:a7:d6:0b:f6:c6:3b:fd:2b: e3:e0:f3:54:76:81:26:3b:7e:57:9a:bf:8b:0e:31:23:90:70: 47:65:3d:3a:55:90:e0:73:a9:9f:25:e1:06:44:e2:d1:b0:a3: a1:76:f2:56:f1:11:6a:07:64:cd:02:e2:96:ca:92:bb:9c:70: 1e:a4:9c:5e:d5:51:2c:b5:10:d9:aa:40:4b:aa:2d:8b:f2:5d: 88:61:2f:88:00:10:9b:2b:52:82:78:bf:62:c9:f9:ea:06:cc: 01:77:81:ed:9d:e0:a8:bb:40:ad:6a:a4:97:c1:f9:dd:bc:a9: 93:d3:e4:43:f5:6b:f1:33:12:51:a8:7f:b9:e0:59:7c:5a:d2: 41:a8:f8:8a:e9:8b:e2:c6:ea:15:48:59:94:b9:93:75:79:e6: 20:a7:18:46:c6:0f:bd:5b:50:d1:d3:41:a3:d0:11:d9:50:44: 58:a6:d6:48:04:74:de:16:03:84:c9:d9:3c:73:69:a7:76:a0: 37:67:f6:6e:7a:dd:db:c4:cd:27:79:da:5d:85:d5:be:8d:f6: 74:5a:15:dc:c3:6d:67:69:29:c4:62:51:f8:63:29:60:a9:e3: 1b:db:4e:39:47:99:da:e9:70:67:d7:a5:24:37:f2:ed:ad:be: d8:a0:f8:ca -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWLEaeOxAEh6qFkB/7OcULbttrVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTkwOTEwMThaFw0yNjExMTgwOTE1MThaMDMxMTAvBgNV BAMTKEVGRjI3NDI1QzY0MDE4N0I2NzE1NjY0MjUzMEQ1QzhFMzU4NEFEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUlr7lVM/E+m70squggm04EJ92 jXzhOlRaqRFxQ/Y6UEJHHMeSJciHZhpaR3/lwYbfUTxhLswB9+U8cBdP/hEiW0mL FVUsEqfb4QNm/ciuOoQ34lZbT9HXN9FF/jvAWKe/Cg8y6NuFOfDfgEWwtUzHtuC7 Zpqe2Lmxsq3IjxcWxAvvNGV/dcly0cdJZBX87ArPou1e6R+U2vJuDxJ6yMgQ776L 5R+lCl4Z2S0NfiQTkSPAaHYRo4q7Tg3sAy8f3M/yLw0osRd3USX6jzfy5PvRnVG6 kIXt/9Tw7FGgvEUcSSXSAXmGJrp9M8HUHsm3zvKUI1WRz5Q4fmSkl0/55+RbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU7/J0JcZAGHtnFWZCUw1cjjWErcMwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzgzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5N9 uDANBgkqhkiG9w0BAQsFAAOCAQEAVYL3VXLxjCztNafWC/bGO/0r4+DzVHaBJjt+ V5q/iw4xI5BwR2U9OlWQ4HOpnyXhBkTi0bCjoXbyVvERagdkzQLilsqSu5xwHqSc XtVRLLUQ2apAS6oti/JdiGEviAAQmytSgni/Ysn56gbMAXeB7Z3gqLtArWqkl8H5 3bypk9PkQ/Vr8TMSUah/ueBZfFrSQaj4iumL4sbqFUhZlLmTdXnmIKcYRsYPvVtQ 0dNBo9AR2VBEWKbWSAR03hYDhMnZPHNpp3agN2f2bnrd28TNJ3naXYXVvo32dFoV 3MNtZ2kpxGJR+GMpYKnjG9tOOUeZ2ulwZ9elJDfy7a2+2KD4yg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:09:01 2025 by rpki-client