This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3139362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: undAuabARJ4mPll39pDoYVlUKS5pL8Qs7RGAs+QXqAc= Subject key identifier: 3A:10:7D:F9:25:CD:8B:AE:21:C4:78:5A:F8:85:77:9F:CB:E5:83:D5 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 28FDD80714C350D3502239458CAF8705C963826D Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32332d3234203d3e20383334.roa Signing time: Tue 09 Dec 2025 16:34:27 +0000 ROA not before: Tue 09 Dec 2025 16:29:27 +0000 ROA not after: Tue 08 Dec 2026 16:34:27 +0000 asID: 834 IP address blocks: 147.125.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:fd:d8:07:14:c3:50:d3:50:22:39:45:8c:af:87:05:c9:63:82:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 9 16:29:27 2025 GMT Not After : Dec 8 16:34:27 2026 GMT Subject: CN=3A107DF925CD8BAE21C4785AF885779FCBE583D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:26:e6:c0:b2:da:ff:1a:71:57:60:b6:2f: bf:30:29:2e:68:42:87:22:2a:80:aa:8e:5f:d9:67: 32:e4:f8:27:90:66:14:1c:f2:0e:cc:83:48:5b:cf: 51:42:eb:d7:a3:e9:71:e5:92:27:b7:66:a4:f1:7c: 99:99:1c:19:4f:91:11:19:02:76:85:99:a6:7f:08: 1d:58:08:47:1f:23:35:4d:b3:e2:b9:92:a1:af:5c: 3b:a6:3e:8e:9f:3b:e8:80:fc:6f:03:16:55:1c:18: f1:fd:16:fe:e8:29:e8:5f:44:34:d8:a2:05:64:23: 50:4a:9c:bf:b6:ea:94:74:9e:14:f1:82:13:3a:80: 85:9b:90:b3:38:7e:51:01:d1:fa:8a:50:d8:21:c6: 6f:11:01:b9:2e:29:19:1f:30:5a:d6:33:ca:e0:8f: 35:32:e5:6e:d8:09:e0:e5:68:d3:2a:b9:d6:5d:18: 1e:31:80:25:59:c7:3c:b7:8f:a7:4b:eb:91:89:cc: 87:d3:72:64:e5:89:59:3b:23:f0:b8:76:13:21:40: b6:54:83:6a:42:3c:05:0d:ec:a4:c6:bf:bb:25:1b: 74:0b:c3:59:e3:05:ad:67:bd:09:c6:eb:90:56:5d: 3c:ef:8d:95:33:2d:32:4f:98:90:64:7f:23:40:29: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:10:7D:F9:25:CD:8B:AE:21:C4:78:5A:F8:85:77:9F:CB:E5:83:D5 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.196.0/23 Signature Algorithm: sha256WithRSAEncryption 05:e4:be:fb:d3:95:32:51:9c:fb:e8:df:95:5c:a0:01:38:80: 3b:37:02:f6:a8:26:c8:15:4c:30:86:87:9d:91:bc:a1:51:d6: 5d:5d:bf:24:17:8a:25:f9:81:13:3e:b4:2f:bc:f7:ee:b7:88: 6d:34:2e:32:2a:d7:49:0b:9c:68:f3:65:ff:2a:1d:66:25:dc: b8:d3:15:c6:4f:99:02:96:e4:15:ae:4d:70:1f:c0:ea:72:d5: d0:72:a6:9d:b5:f8:32:90:6b:9b:90:9e:6d:9e:bc:bf:d9:f5: 6c:58:c2:1e:77:45:be:65:2d:db:2c:a2:cc:03:b4:a4:20:2f: 7a:54:ad:37:a6:ef:5b:12:a8:cd:d8:a5:5d:e3:08:96:30:b3: 28:ed:8e:54:a2:0c:d8:ac:ea:60:18:ca:bf:24:f6:dd:be:02: 91:d1:76:b7:3c:a0:93:a1:47:75:54:79:66:04:46:30:2a:89: ea:05:ac:13:c6:24:a5:ed:d7:0a:6c:a2:3f:f5:37:c5:6f:14: fa:4c:88:7b:be:f7:05:32:17:23:70:43:f2:e0:c5:3a:f8:86: 45:5a:00:c9:9d:76:15:95:81:70:62:2a:4f:82:5a:e3:8c:9d: a8:30:5d:16:6f:01:bd:38:68:93:d6:48:98:93:7f:5c:ea:5d: 3e:38:a9:85 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKP3YBxTDUNNQIjlFjK+HBcljgm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDkxNjI5MjdaFw0yNjEyMDgxNjM0MjdaMDMxMTAvBgNV BAMTKDNBMTA3REY5MjVDRDhCQUUyMUM0Nzg1QUY4ODU3NzlGQ0JFNTgzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcTSbmwLLa/xpxV2C2L78wKS5o QociKoCqjl/ZZzLk+CeQZhQc8g7Mg0hbz1FC69ej6XHlkie3ZqTxfJmZHBlPkREZ AnaFmaZ/CB1YCEcfIzVNs+K5kqGvXDumPo6fO+iA/G8DFlUcGPH9Fv7oKehfRDTY ogVkI1BKnL+26pR0nhTxghM6gIWbkLM4flEB0fqKUNghxm8RAbkuKRkfMFrWM8rg jzUy5W7YCeDlaNMqudZdGB4xgCVZxzy3j6dL65GJzIfTcmTliVk7I/C4dhMhQLZU g2pCPAUN7KTGv7slG3QLw1njBa1nvQnG65BWXTzvjZUzLTJPmJBkfyNAKf9PAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUOhB9+SXNi64hxHha+IV3n8vlg9UwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 xDANBgkqhkiG9w0BAQsFAAOCAQEABeS++9OVMlGc++jflVygATiAOzcC9qgmyBVM MIaHnZG8oVHWXV2/JBeKJfmBEz60L7z37reIbTQuMirXSQucaPNl/yodZiXcuNMV xk+ZApbkFa5NcB/A6nLV0HKmnbX4MpBrm5CebZ68v9n1bFjCHndFvmUt2yyizAO0 pCAvelStN6bvWxKozdilXeMIljCzKO2OVKIM2KzqYBjKvyT23b4CkdF2tzygk6FH dVR5ZgRGMCqJ6gWsE8Ykpe3XCmyiP/U3xW8U+kyIe773BTIXI3BD8uDFOviGRVoA yZ12FZWBcGIqT4Ja44ydqDBdFm8BvThok9ZImJN/XOpdPjiphQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:46 2025 by rpki-client