This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3139322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: jCZGfWkYl10gd5oLhu3NDdEpRI/sz3Tfe/VV5vQJ6yc= Subject key identifier: 2E:63:24:11:50:0C:D9:D2:86:24:4E:8E:EF:CD:00:F8:62:5F:18:45 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5BE0F7CEA25E690EE09D9944648FE5845CBD6318 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32332d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:48 +0000 ROA not before: Fri 09 Jan 2026 08:11:48 +0000 ROA not after: Fri 08 Jan 2027 08:16:48 +0000 asID: 834 IP address blocks: 147.125.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e0:f7:ce:a2:5e:69:0e:e0:9d:99:44:64:8f:e5:84:5c:bd:63:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:48 2026 GMT Not After : Jan 8 08:16:48 2027 GMT Subject: CN=2E632411500CD9D286244E8EEFCD00F8625F1845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:9b:50:90:aa:9c:40:59:95:6b:32:3d:68: c5:90:a1:da:0e:14:97:6a:a2:fa:09:ae:8f:bb:e9: b9:23:65:ce:d1:3a:c5:56:ce:d4:85:c2:ba:ab:78: 74:54:f3:0d:c0:88:ed:f0:96:82:54:ed:a2:89:e3: c1:b0:e9:49:00:1e:3a:ce:db:de:c4:d6:5d:2e:09: eb:32:32:ca:10:3c:a5:79:4c:ce:a6:ee:25:8a:6e: d3:9f:05:05:7e:0f:b7:9a:e9:bc:05:33:6f:8d:48: 9b:1d:b2:ab:14:3d:fc:7e:6a:1c:e0:1c:63:aa:f4: 8a:ab:a9:e3:89:91:9c:0c:67:5d:a3:1b:62:9b:3f: a0:9e:1a:b6:22:ff:66:81:3e:2a:e8:e5:7a:d1:94: 2f:c4:92:2e:fc:99:fa:33:8a:09:50:c5:07:53:00: 40:1f:51:1a:1d:b6:12:78:d1:2f:af:07:fd:d9:06: 5d:78:41:c3:0f:ba:ad:39:b9:db:a8:6b:af:6a:a4: f1:0b:73:e5:7a:fe:cf:a8:9f:aa:2f:09:96:71:94: 1f:77:51:4b:d5:2c:f8:26:26:93:0b:d2:7e:49:66: 32:2e:c2:4b:84:b1:da:50:06:3f:ee:b2:42:c3:5c: 6a:d8:93:0a:b4:ce:ef:54:14:33:c6:bc:4f:d2:bc: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:63:24:11:50:0C:D9:D2:86:24:4E:8E:EF:CD:00:F8:62:5F:18:45 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.192.0/23 Signature Algorithm: sha256WithRSAEncryption 78:47:e8:f1:67:12:60:b5:56:65:cd:3d:ca:32:c6:4f:0a:46: c2:01:c9:d8:b7:19:80:de:94:6d:25:05:9c:60:38:77:5e:07: 17:fa:ac:ad:f9:ec:1b:77:a2:66:b0:25:e5:24:80:00:61:a8: bf:2d:6a:86:95:a2:e9:20:99:91:34:98:7b:a8:da:c9:ff:66: 49:3e:14:98:7b:70:c6:37:3d:b0:e9:a7:f8:b9:52:69:7c:eb: 6d:71:43:90:2e:24:f5:74:1f:1f:27:d0:15:56:42:fb:6d:c4: 35:17:af:ec:fc:fa:17:09:71:93:ea:d2:83:ae:7c:39:2b:bd: 7a:2b:20:48:a2:d3:60:11:50:23:c2:a1:d9:d7:ac:7a:af:ab: f8:fd:fc:3a:c7:02:c5:1b:b1:a6:38:8c:de:a3:4f:24:06:b4: a2:cd:c0:79:5a:b6:ca:06:93:c3:b2:1e:22:6c:d9:ca:ac:a9: 3c:51:ef:15:e3:ac:02:b7:fc:49:1f:5f:01:f8:0a:2e:dc:42: 27:0f:04:0f:9d:5d:b1:84:a2:61:80:a8:e2:f6:2f:41:49:7a: de:44:45:4a:e1:f5:3d:0b:01:09:e3:71:79:e7:68:39:39:8d: 31:7e:c9:74:ab:0a:d8:10:0c:14:8e:eb:1b:65:44:39:fc:92: fd:2c:c6:2e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUW+D3zqJeaQ7gnZlEZI/lhFy9YxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDhaFw0yNzAxMDgwODE2NDhaMDMxMTAvBgNV BAMTKDJFNjMyNDExNTAwQ0Q5RDI4NjI0NEU4RUVGQ0QwMEY4NjI1RjE4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC66ptQkKqcQFmVazI9aMWQodoO FJdqovoJro+76bkjZc7ROsVWztSFwrqreHRU8w3AiO3wloJU7aKJ48Gw6UkAHjrO 297E1l0uCesyMsoQPKV5TM6m7iWKbtOfBQV+D7ea6bwFM2+NSJsdsqsUPfx+ahzg HGOq9IqrqeOJkZwMZ12jG2KbP6CeGrYi/2aBPiro5XrRlC/Eki78mfoziglQxQdT AEAfURodthJ40S+vB/3ZBl14QcMPuq05uduoa69qpPELc+V6/s+on6ovCZZxlB93 UUvVLPgmJpML0n5JZjIuwkuEsdpQBj/uskLDXGrYkwq0zu9UFDPGvE/SvEHpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQULmMkEVAM2dKGJE6O780A+GJfGEUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 wDANBgkqhkiG9w0BAQsFAAOCAQEAeEfo8WcSYLVWZc09yjLGTwpGwgHJ2LcZgN6U bSUFnGA4d14HF/qsrfnsG3eiZrAl5SSAAGGovy1qhpWi6SCZkTSYe6jayf9mST4U mHtwxjc9sOmn+LlSaXzrbXFDkC4k9XQfHyfQFVZC+23ENRev7Pz6Fwlxk+rSg658 OSu9eisgSKLTYBFQI8Kh2deseq+r+P38OscCxRuxpjiM3qNPJAa0os3AeVq2ygaT w7IeImzZyqypPFHvFeOsArf8SR9fAfgKLtxCJw8ED51dsYSiYYCo4vYvQUl63kRF SuH1PQsBCeNxeedoOTmNMX7JdKsK2BAMFI7rG2VEOfyS/SzGLg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:48 2026 by rpki-client