This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa File: 3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa (raw, json) Hash identifier: SW7G2pPC4JfGQfMtCS203X85rpp7GLG1LkG9EdGsACY= Subject key identifier: 7A:38:00:51:3E:F6:2C:76:87:27:22:A2:FF:54:C3:C9:9A:42:16:9A Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5BC57AD79C1F7D7F97895A81C404C7CEB5839B05 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa Signing time: Thu 08 Jan 2026 11:00:26 +0000 ROA not before: Thu 08 Jan 2026 10:55:26 +0000 ROA not after: Thu 07 Jan 2027 11:00:26 +0000 asID: 47377 IP address blocks: 147.125.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c5:7a:d7:9c:1f:7d:7f:97:89:5a:81:c4:04:c7:ce:b5:83:9b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 8 10:55:26 2026 GMT Not After : Jan 7 11:00:26 2027 GMT Subject: CN=7A3800513EF62C76872722A2FF54C3C99A42169A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:3c:f6:74:82:94:a3:b1:24:8f:ea:4f:89: bf:7e:c7:24:9a:e3:14:cc:b3:91:aa:8d:81:bc:87: 46:ec:75:4a:1c:87:27:56:7f:0c:61:b8:c6:d3:17: 51:39:7e:fd:58:f4:ae:31:96:fc:17:14:6a:3a:24: 79:4e:ce:cf:7a:bf:da:ea:d8:6d:95:9e:0e:bc:66: 05:75:45:9a:96:67:17:59:84:3d:f3:62:6e:9b:27: fa:20:13:2c:76:f8:7a:32:a3:6b:35:84:48:70:a0: ed:1c:d4:35:37:28:a1:d4:6d:50:5b:57:9b:90:2b: 4d:b6:1a:2f:4e:20:03:4e:88:0d:7b:2d:0a:85:0b: ca:4c:61:1f:db:81:1c:ba:24:51:28:45:28:6f:c8: 19:ff:c4:4e:43:23:de:37:40:ab:3b:05:3c:5f:b2: 55:2e:58:68:0b:7d:f7:7b:98:d2:40:dd:3e:3a:6f: 28:9c:c3:a0:74:81:f2:b6:51:fc:d4:c8:f6:bd:bb: b4:60:2d:30:b7:b4:f6:2c:fd:70:74:c3:06:4b:1d: 60:3a:6f:9d:1d:89:15:c8:78:61:da:3e:43:af:2d: 0d:ae:17:02:a1:c8:b6:0b:79:0e:07:72:7e:c4:f0: 56:16:7a:39:a7:36:e9:65:b5:b7:63:65:78:ad:e7: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:00:51:3E:F6:2C:76:87:27:22:A2:FF:54:C3:C9:9A:42:16:9A X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139362e302f32342d3234203d3e203437333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.196.0/24 Signature Algorithm: sha256WithRSAEncryption a2:13:a9:45:d7:2b:8b:3a:05:be:73:fc:7b:3f:d4:5e:53:82: 47:e2:5e:3a:81:1b:58:cd:bd:69:ff:9d:ff:9b:6b:60:f4:fa: 59:a1:e5:d3:1a:11:f0:01:5c:c7:5c:a5:77:a4:29:7b:f4:58: 93:21:13:56:25:8d:d6:0b:27:7a:43:bf:be:77:34:88:f3:40: a9:8d:a7:2b:ff:76:e0:ad:a3:7b:9c:29:ad:f8:3c:32:79:7f: 0f:8f:e3:34:6c:5f:ac:4a:b1:4f:ab:4d:37:1a:f2:25:28:2e: fd:78:b6:55:e8:76:9e:02:cd:b6:63:39:10:f4:87:20:97:4c: 55:1f:38:a6:ba:fc:cd:c7:eb:ca:25:58:30:ab:44:e8:0d:3e: 1f:3a:f3:5a:e7:0e:2e:1b:58:fb:3e:a7:c9:90:00:46:23:27: 65:69:bd:a1:c0:71:8b:7e:73:31:f6:71:55:c0:ba:66:5b:71: d0:c3:1d:22:8f:99:4b:43:3d:fc:da:71:a1:74:e4:46:dc:cf: 90:c1:f9:95:7e:f0:eb:26:b6:f5:ac:90:5b:40:7a:90:bb:4f: a4:e8:e8:3d:0f:eb:97:a4:e4:03:58:c4:21:53:2c:db:6c:58: 8b:06:e4:02:7d:bf:53:75:7c:6c:8e:11:74:c3:a5:da:60:86: 96:4b:e1:6b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUW8V615wffX+XiVqBxATHzrWDmwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDgxMDU1MjZaFw0yNzAxMDcxMTAwMjZaMDMxMTAvBgNV BAMTKDdBMzgwMDUxM0VGNjJDNzY4NzI3MjJBMkZGNTRDM0M5OUE0MjE2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONzz2dIKUo7Ekj+pPib9+xySa 4xTMs5GqjYG8h0bsdUochydWfwxhuMbTF1E5fv1Y9K4xlvwXFGo6JHlOzs96v9rq 2G2Vng68ZgV1RZqWZxdZhD3zYm6bJ/ogEyx2+Hoyo2s1hEhwoO0c1DU3KKHUbVBb V5uQK022Gi9OIANOiA17LQqFC8pMYR/bgRy6JFEoRShvyBn/xE5DI943QKs7BTxf slUuWGgLffd7mNJA3T46byicw6B0gfK2UfzUyPa9u7RgLTC3tPYs/XB0wwZLHWA6 b50diRXIeGHaPkOvLQ2uFwKhyLYLeQ4Hcn7E8FYWejmnNulltbdjZXit55SZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUejgAUT72LHaHJyKi/1TDyZpCFpowHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczMzM3Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcQwDQYJKoZIhvcNAQELBQADggEBAKITqUXXK4s6Bb5z/Hs/1F5TgkfiXjqB G1jNvWn/nf+ba2D0+lmh5dMaEfABXMdcpXekKXv0WJMhE1YljdYLJ3pDv753NIjz QKmNpyv/duCto3ucKa34PDJ5fw+P4zRsX6xKsU+rTTca8iUoLv14tlXodp4CzbZj ORD0hyCXTFUfOKa6/M3H68olWDCrROgNPh8681rnDi4bWPs+p8mQAEYjJ2VpvaHA cYt+czH2cVXAumZbcdDDHSKPmUtDPfzacaF05Ebcz5DB+ZV+8OsmtvWskFtAepC7 T6To6D0P65ek5ANYxCFTLNtsWIsG5AJ9v1N1fGyOEXTDpdpghpZL4Ws= -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:42 2026 by rpki-client