This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3138382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: mdcMH3YezyUZXyFyluDFAGjxzGB69slcuZuo+SfIC84= Subject key identifier: 53:F6:45:96:8B:6F:2C:BA:A5:62:40:E9:C6:C7:ED:96:CA:9C:D3:EE Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 02CE021532F8D3C12E832ECD403B02514E106CF8 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32332d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:48 +0000 ROA not before: Fri 09 Jan 2026 08:11:48 +0000 ROA not after: Fri 08 Jan 2027 08:16:48 +0000 asID: 834 IP address blocks: 147.125.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ce:02:15:32:f8:d3:c1:2e:83:2e:cd:40:3b:02:51:4e:10:6c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:48 2026 GMT Not After : Jan 8 08:16:48 2027 GMT Subject: CN=53F645968B6F2CBAA56240E9C6C7ED96CA9CD3EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:10:99:1d:81:51:58:1f:ba:58:5f:cb:2d: 6f:99:18:ca:cf:c4:bd:48:3b:bb:19:49:3e:41:5e: d1:b2:09:c8:3d:39:25:f5:ec:e9:dc:e2:2a:a5:a8: 23:2a:26:fa:44:a5:6e:98:a3:a9:a3:e8:b2:df:25: 71:8c:3f:ad:98:22:b6:a5:cb:52:a9:bb:3d:46:28: 8b:04:d7:cc:04:45:17:21:12:d6:6f:23:4b:4c:e3: b6:fc:36:f5:9e:be:0e:9d:17:4b:0a:e7:71:af:c3: 85:52:87:25:79:ee:10:8a:a6:3e:01:bd:84:b3:36: 4e:c2:45:f8:b9:8c:77:fa:1e:59:52:f0:30:d5:50: 6b:36:1b:22:0d:31:b3:29:79:80:4c:2b:02:32:c5: eb:85:21:13:e9:a5:b8:f3:0d:1a:53:7d:92:f8:b8: 65:8a:16:06:28:75:b4:8b:6e:47:34:3b:69:99:9b: 4d:25:93:4b:ae:da:24:8f:a2:e8:f5:5e:fa:73:d8: 59:bd:71:9e:c5:82:af:e9:e6:c7:31:fd:88:77:a3: 67:b0:78:11:7f:37:02:19:1d:92:45:47:94:66:8d: 17:cd:45:60:41:15:21:f6:37:70:61:07:aa:ef:13: 46:a4:81:ce:70:a2:c5:5f:2a:dd:dd:23:82:60:a4: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F6:45:96:8B:6F:2C:BA:A5:62:40:E9:C6:C7:ED:96:CA:9C:D3:EE X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.188.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:90:81:eb:b0:68:df:c6:14:ab:8f:25:2f:a1:f7:19:10:2b: 6d:ce:2a:e9:be:b5:23:56:5b:ce:b8:36:e2:57:95:16:b0:e3: d6:c9:5a:ba:30:90:93:3e:99:bf:f0:ce:45:09:33:55:69:4c: 88:44:d7:fa:70:b2:51:5f:3a:96:b5:00:66:54:a7:9f:5e:cf: 81:75:cb:16:9f:d4:77:90:10:c3:3b:93:f6:a4:15:2e:c5:96: 14:e6:ea:bc:ce:d9:52:ae:e5:cf:77:dd:76:b4:9b:29:1a:9b: 5c:5c:fe:dd:ae:0b:b1:8f:95:ac:cb:b1:32:3d:f3:5d:41:a7: 4a:35:b4:cd:3c:22:0e:e4:cb:32:58:d2:96:e8:d5:22:cd:81: 4b:67:83:23:14:9c:b7:80:a9:14:8b:ed:76:4c:f8:a0:f9:1e: 87:2a:95:f6:ab:05:59:41:92:ad:22:d4:54:be:69:3a:ac:33: 13:e2:fc:05:ee:54:e8:59:fb:7d:15:71:95:bf:fa:b3:f8:98: 5d:a6:bd:ab:8b:c0:aa:69:97:af:71:f1:e6:e1:62:b7:af:f0: 9a:75:05:a7:7f:dc:04:e5:11:25:1d:04:4b:43:63:ec:04:7d: c7:c9:a3:b5:52:15:81:94:1c:6f:6c:44:69:cf:91:a8:d7:27: e8:33:49:55 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUAs4CFTL408Eugy7NQDsCUU4QbPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDhaFw0yNzAxMDgwODE2NDhaMDMxMTAvBgNV BAMTKDUzRjY0NTk2OEI2RjJDQkFBNTYyNDBFOUM2QzdFRDk2Q0E5Q0QzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DBCZHYFRWB+6WF/LLW+ZGMrP xL1IO7sZST5BXtGyCcg9OSX17Onc4iqlqCMqJvpEpW6Yo6mj6LLfJXGMP62YIral y1Kpuz1GKIsE18wERRchEtZvI0tM47b8NvWevg6dF0sK53Gvw4VShyV57hCKpj4B vYSzNk7CRfi5jHf6HllS8DDVUGs2GyINMbMpeYBMKwIyxeuFIRPppbjzDRpTfZL4 uGWKFgYodbSLbkc0O2mZm00lk0uu2iSPouj1Xvpz2Fm9cZ7Fgq/p5scx/Yh3o2ew eBF/NwIZHZJFR5RmjRfNRWBBFSH2N3BhB6rvE0akgc5wosVfKt3dI4JgpIuTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUU/ZFlotvLLqlYkDpxsftlsqc0+4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzgzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 vDANBgkqhkiG9w0BAQsFAAOCAQEAipCB67Bo38YUq48lL6H3GRArbc4q6b61I1Zb zrg24leVFrDj1slaujCQkz6Zv/DORQkzVWlMiETX+nCyUV86lrUAZlSnn17PgXXL Fp/Ud5AQwzuT9qQVLsWWFObqvM7ZUq7lz3fddrSbKRqbXFz+3a4LsY+VrMuxMj3z XUGnSjW0zTwiDuTLMljSlujVIs2BS2eDIxSct4CpFIvtdkz4oPkehyqV9qsFWUGS rSLUVL5pOqwzE+L8Be5U6Fn7fRVxlb/6s/iYXaa9q4vAqmmXr3Hx5uFit6/wmnUF p3/cBOURJR0ES0Nj7AR9x8mjtVIVgZQcb2xEac+RqNcn6DNJVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:40 2026 by rpki-client