This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3139312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: C5MoV7mBwLKlWLLDGBS+gHgIGWOc3+Yt4dE2FF8YXwM= Subject key identifier: 7F:81:8A:7C:B0:4F:48:A4:AF:60:87:73:C8:2E:30:3C:F2:06:93:22 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 39FD46BF64C0313C417EBA57C8E14835A59A3A36 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:48 +0000 ROA not before: Fri 09 Jan 2026 08:11:48 +0000 ROA not after: Fri 08 Jan 2027 08:16:48 +0000 asID: 834 IP address blocks: 147.125.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:fd:46:bf:64:c0:31:3c:41:7e:ba:57:c8:e1:48:35:a5:9a:3a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:48 2026 GMT Not After : Jan 8 08:16:48 2027 GMT Subject: CN=7F818A7CB04F48A4AF608773C82E303CF2069322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:0c:e1:ae:e2:ac:8a:0a:64:08:f0:6c:9c: 72:80:ad:fa:5b:2f:22:78:4b:1c:f5:63:84:8a:31: 83:5d:59:8a:b0:10:5a:c9:bc:21:11:23:eb:94:35: 74:c1:9c:7a:3e:72:fa:f5:4c:6b:b1:d4:05:fa:24: 15:21:b0:c6:d4:bb:da:3a:1e:84:b6:7b:fc:8b:a4: 4d:0c:67:20:e7:86:e5:bf:ab:b0:0a:b5:51:f3:03: 83:f7:47:f5:be:3a:88:cb:33:cc:7f:3f:4a:09:17: e7:5f:1b:6a:2c:fc:4a:d2:ed:44:39:56:6b:09:85: f4:28:20:df:11:6f:d1:0d:0d:ff:49:3e:cd:b0:ca: eb:69:3a:ae:19:d0:a1:d5:4e:99:96:5d:e9:bb:fc: f1:16:1d:18:fd:a7:61:f0:d8:1c:ef:cc:b3:95:78: 29:e9:c1:0d:8b:a7:b0:a5:1b:82:fa:0a:bf:4e:74: 71:d4:00:2a:00:41:32:ae:ad:9f:58:8d:bd:1a:48: d5:fa:02:e2:89:af:c3:78:91:95:23:04:8a:da:07: 4e:3e:6b:17:1b:4d:af:72:7b:b6:f6:e2:0d:8f:1a: 38:5b:e5:dd:d6:43:c8:9a:87:07:60:b4:10:c8:6b: 66:9e:9d:79:e0:82:21:e2:ad:d1:ed:1f:02:b0:43: f8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:81:8A:7C:B0:4F:48:A4:AF:60:87:73:C8:2E:30:3C:F2:06:93:22 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.191.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:86:2f:88:e9:e1:9d:5e:ba:d7:54:d6:e6:a5:ca:65:0c:b5: c5:f0:bf:f7:e5:4f:c5:70:13:91:fc:10:0c:4b:1d:e1:e6:6d: 17:52:0b:7b:57:34:d9:96:c9:0f:bc:b2:f7:93:68:3b:a2:4f: db:d3:11:52:71:a1:7d:cb:de:3d:bc:f9:e1:02:eb:48:ec:f5: db:10:b8:6f:e6:a0:32:66:f7:47:75:cb:65:00:cf:6a:df:d3: 7c:92:a6:95:0b:ff:5a:c7:15:17:ae:1e:86:aa:73:ea:4c:53: a9:c9:3d:84:9d:a1:92:2c:c2:6c:de:4f:8e:64:c2:5d:3a:e7: 2d:f0:54:06:05:fc:3f:ba:5d:72:eb:3a:3c:a6:14:54:65:9b: fe:89:85:65:18:2c:d6:01:69:d0:ce:76:96:9e:dd:2f:a7:12: 10:db:6c:a5:43:d5:b2:e1:7a:41:78:cb:f1:9b:c1:60:fb:6d: 1d:10:55:6e:ac:82:c5:6d:53:21:8e:c9:fe:f6:4b:97:2d:aa: 75:3e:0f:6c:cf:4e:4b:c0:b8:99:2d:da:3e:a5:71:3c:a5:d2: b8:75:12:6c:e7:cc:2d:a1:bf:db:63:83:7a:71:15:4c:fd:cc: a0:ea:92:66:f3:5b:ff:b6:d1:0d:84:d0:9e:b2:cc:1c:b8:1f: 94:02:9c:cb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOf1Gv2TAMTxBfrpXyOFINaWaOjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDhaFw0yNzAxMDgwODE2NDhaMDMxMTAvBgNV BAMTKDdGODE4QTdDQjA0RjQ4QTRBRjYwODc3M0M4MkUzMDNDRjIwNjkzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ5QzhruKsigpkCPBsnHKArfpb LyJ4Sxz1Y4SKMYNdWYqwEFrJvCERI+uUNXTBnHo+cvr1TGux1AX6JBUhsMbUu9o6 HoS2e/yLpE0MZyDnhuW/q7AKtVHzA4P3R/W+OojLM8x/P0oJF+dfG2os/ErS7UQ5 VmsJhfQoIN8Rb9ENDf9JPs2wyutpOq4Z0KHVTpmWXem7/PEWHRj9p2Hw2BzvzLOV eCnpwQ2Lp7ClG4L6Cr9OdHHUACoAQTKurZ9Yjb0aSNX6AuKJr8N4kZUjBIraB04+ axcbTa9ye7b24g2PGjhb5d3WQ8iahwdgtBDIa2aenXnggiHirdHtHwKwQ/jxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUf4GKfLBPSKSvYIdzyC4wPPIGkyIwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 vzANBgkqhkiG9w0BAQsFAAOCAQEADoYviOnhnV6611TW5qXKZQy1xfC/9+VPxXAT kfwQDEsd4eZtF1ILe1c02ZbJD7yy95NoO6JP29MRUnGhfcvePbz54QLrSOz12xC4 b+agMmb3R3XLZQDPat/TfJKmlQv/WscVF64ehqpz6kxTqck9hJ2hkizCbN5PjmTC XTrnLfBUBgX8P7pdcus6PKYUVGWb/omFZRgs1gFp0M52lp7dL6cSENtspUPVsuF6 QXjL8ZvBYPttHRBVbqyCxW1TIY7J/vZLly2qdT4PbM9OS8C4mS3aPqVxPKXSuHUS bOfMLaG/22ODenEVTP3MoOqSZvNb/7bRDYTQnrLMHLgflAKcyw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:59 2026 by rpki-client