This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32322d3234203d3e20383334.roa File: 3134372e3132352e3138342e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: VB9D5nTo7vqYlpA396+Iksx2/+zqEdyLwPb0410K4+o= Subject key identifier: 2E:E7:50:0B:AC:A9:AD:FF:21:38:F1:6B:CB:35:3D:B2:81:08:2A:86 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0D672193969F33D4FF1BCD6CDDFCD8018E5A11A9 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32322d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:47 +0000 ROA not before: Fri 09 Jan 2026 08:11:47 +0000 ROA not after: Fri 08 Jan 2027 08:16:47 +0000 asID: 834 IP address blocks: 147.125.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:67:21:93:96:9f:33:d4:ff:1b:cd:6c:dd:fc:d8:01:8e:5a:11:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:47 2026 GMT Not After : Jan 8 08:16:47 2027 GMT Subject: CN=2EE7500BACA9ADFF2138F16BCB353DB281082A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:1d:62:bb:60:08:72:4a:b0:bf:ee:1f:30: 84:67:8b:cb:d3:52:5c:40:2b:97:9a:a7:a9:6d:77: a8:43:a1:7a:2e:da:07:a4:27:5b:7f:89:ba:7b:30: c0:07:bb:e5:c3:e7:ed:f4:65:56:07:e9:3c:3c:a5: 57:0a:f5:e8:25:e3:db:06:2e:ea:d8:84:d0:bc:a4: 13:ee:7e:2e:1e:a5:4e:38:70:97:99:45:a3:1b:58: e9:7c:a8:38:62:2b:41:c1:df:29:93:b4:e5:ed:54: 61:7b:6a:9b:a9:3f:ec:e7:e3:48:23:56:2d:2b:eb: 98:dd:51:39:3d:c6:b8:07:e8:3b:33:af:8f:19:a2: 60:7a:ee:36:eb:76:32:aa:04:f2:72:46:76:12:00: ad:ec:81:1f:b3:ff:63:5b:d4:c3:b9:2a:57:ff:f3: 2e:1b:e5:2a:85:66:01:c2:73:db:90:87:81:7c:3f: ea:9e:e6:5f:6c:01:e7:12:02:90:da:b2:98:74:2e: 76:12:bd:31:56:0a:46:ff:e5:b8:8b:a9:dd:4a:1e: 7c:13:f8:a7:6b:b1:30:8b:90:90:35:29:ba:49:01: f9:a4:47:c3:70:92:8a:d3:58:63:7c:fa:d3:9a:fb: 98:76:92:99:18:b6:d3:9a:bc:ca:8a:95:e1:a3:76: ca:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E7:50:0B:AC:A9:AD:FF:21:38:F1:6B:CB:35:3D:B2:81:08:2A:86 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.184.0/22 Signature Algorithm: sha256WithRSAEncryption 42:5c:f4:c6:67:7d:f2:81:ee:6b:ff:67:ed:5b:59:e1:a5:11: 22:cb:50:29:0c:0e:21:0a:62:bf:13:0f:67:fd:49:72:53:33: 49:2e:32:06:66:ca:c8:95:b4:25:03:6d:04:47:b8:a2:04:70: 55:c2:5f:24:c0:71:34:21:e1:5d:a8:ad:7b:27:f4:e9:51:9a: 98:28:6a:ab:4e:6d:2b:ea:ea:83:3e:fa:d7:d5:e2:42:a2:f3: 18:02:7f:8d:25:44:84:fc:d6:a2:2b:ce:20:12:97:ed:b0:3a: e5:39:3e:17:e1:63:d3:10:2c:3b:2f:f8:1d:8b:4f:0f:a9:ae: ab:75:47:f4:75:6b:47:d2:9b:ad:ca:86:53:46:33:9f:e9:75: 74:dd:67:39:83:b7:e1:0a:db:cf:96:69:8b:11:a8:c8:fa:20: 3f:3a:ca:5f:b4:e7:3e:1a:62:9c:2a:5f:b2:d8:d2:fe:05:70: 6d:f4:bf:30:83:db:0f:78:07:cf:fb:b9:c2:63:ed:7e:21:f0: 53:e8:cd:3c:51:a8:c6:8d:ed:2d:bd:1f:9a:8b:d1:30:e2:e1: d2:f4:6e:64:77:0f:ed:35:e2:f5:15:63:13:67:1f:77:2f:32: 5b:39:8e:31:f7:e6:06:fc:73:78:1d:d7:75:cf:d9:f4:a1:60: b3:07:7c:64 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDWchk5afM9T/G81s3fzYAY5aEakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDdaFw0yNzAxMDgwODE2NDdaMDMxMTAvBgNV BAMTKDJFRTc1MDBCQUNBOUFERkYyMTM4RjE2QkNCMzUzREIyODEwODJBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU8B1iu2AIckqwv+4fMIRni8vT UlxAK5eap6ltd6hDoXou2gekJ1t/ibp7MMAHu+XD5+30ZVYH6Tw8pVcK9egl49sG LurYhNC8pBPufi4epU44cJeZRaMbWOl8qDhiK0HB3ymTtOXtVGF7apupP+zn40gj Vi0r65jdUTk9xrgH6Dszr48ZomB67jbrdjKqBPJyRnYSAK3sgR+z/2Nb1MO5Klf/ 8y4b5SqFZgHCc9uQh4F8P+qe5l9sAecSApDasph0LnYSvTFWCkb/5biLqd1KHnwT +KdrsTCLkJA1KbpJAfmkR8NwkorTWGN8+tOa+5h2kpkYttOavMqKleGjdsqZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQULudQC6yprf8hOPFryzU9soEIKoYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9 uDANBgkqhkiG9w0BAQsFAAOCAQEAQlz0xmd98oHua/9n7VtZ4aURIstQKQwOIQpi vxMPZ/1JclMzSS4yBmbKyJW0JQNtBEe4ogRwVcJfJMBxNCHhXaiteyf06VGamChq q05tK+rqgz7619XiQqLzGAJ/jSVEhPzWoivOIBKX7bA65Tk+F+Fj0xAsOy/4HYtP D6muq3VH9HVrR9KbrcqGU0Yzn+l1dN1nOYO34Qrbz5ZpixGoyPogPzrKX7TnPhpi nCpfstjS/gVwbfS/MIPbD3gHz/u5wmPtfiHwU+jNPFGoxo3tLb0fmovRMOLh0vRu ZHcP7TXi9RVjE2cfdy8yWzmOMffmBvxzeB3Xdc/Z9KFgswd8ZA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:38 2026 by rpki-client