This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139372e302f32342d3234203d3e203437333737.roa File: 3134372e3132352e3139372e302f32342d3234203d3e203437333737.roa (raw, json) Hash identifier: SZyDRzaUXrrHV3/WvYwGYEkfmaiqEhz86S9CYH7Sptg= Subject key identifier: 18:95:F3:A9:AE:CC:39:E1:CC:57:CD:11:83:74:F2:39:3D:D2:6A:F0 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 3C2B5C7B9511C17E10AF330E43712CD06F731973 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139372e302f32342d3234203d3e203437333737.roa Signing time: Thu 08 Jan 2026 11:00:26 +0000 ROA not before: Thu 08 Jan 2026 10:55:26 +0000 ROA not after: Thu 07 Jan 2027 11:00:26 +0000 asID: 47377 IP address blocks: 147.125.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2b:5c:7b:95:11:c1:7e:10:af:33:0e:43:71:2c:d0:6f:73:19:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 8 10:55:26 2026 GMT Not After : Jan 7 11:00:26 2027 GMT Subject: CN=1895F3A9AECC39E1CC57CD118374F2393DD26AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:73:b9:f6:c3:11:44:64:f0:04:44:1c:aa: eb:e7:48:a7:31:2a:51:8b:21:19:16:89:44:02:26: 47:e9:56:68:9e:89:8e:6e:ac:d2:5a:07:53:59:7d: 70:ab:31:54:ba:b0:88:5c:8a:a5:67:4e:eb:06:cc: 16:76:27:3f:7d:e1:a7:ce:76:7e:e1:7d:84:ec:c8: 06:5f:ce:08:0e:b6:00:5e:fd:a8:75:00:f3:e1:d7: 9c:a0:fc:c7:4d:48:56:47:3e:12:b3:03:2c:d0:6f: b7:4c:53:ba:9e:e7:dd:eb:8d:72:94:d6:bd:14:fe: 64:bd:99:47:06:26:7f:7d:76:6d:c6:f3:7b:0b:e2: 9d:3c:55:16:0a:92:a9:a1:96:c0:1b:6d:74:4c:4e: 9c:42:7e:8a:f4:0d:80:67:fd:6e:07:8c:8b:a8:96: 6e:8d:13:88:9f:69:cb:01:05:19:77:65:63:e5:b1: e6:d7:af:c5:ba:00:46:b7:ca:10:e8:8f:6a:c5:0b: 9d:ea:82:d9:b1:3d:66:e3:43:e0:0e:f8:9c:14:19: 20:91:7f:f7:63:fb:07:0c:01:59:0f:5d:23:fa:14: a3:c6:d3:56:0c:44:62:c6:07:a3:ac:06:d4:d1:3b: f1:b1:b7:9c:f1:ea:59:a5:5a:f8:50:75:07:4c:ee: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:95:F3:A9:AE:CC:39:E1:CC:57:CD:11:83:74:F2:39:3D:D2:6A:F0 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139372e302f32342d3234203d3e203437333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.197.0/24 Signature Algorithm: sha256WithRSAEncryption 38:d0:c4:8a:4a:d4:18:b5:be:e7:c5:cb:bb:9b:ae:e6:58:ed: 9c:93:8d:73:ce:20:9f:bb:5b:44:34:88:01:aa:60:71:93:97: 67:3b:cc:8c:67:38:73:a4:5f:c5:1a:c2:3e:18:10:f5:55:84: 68:3a:89:15:d9:41:b0:ef:8d:e9:54:de:99:58:b6:a2:d9:c8: 3c:4f:74:48:78:bc:79:60:6a:69:d2:c3:a9:54:2e:f6:73:da: 1d:b3:46:6b:39:b2:25:25:e8:ef:59:b0:83:ff:d9:51:c3:12: 52:bf:2e:ac:8f:19:60:c0:8d:78:a0:30:fe:e6:7d:39:b2:15: 3d:2e:de:47:ff:d4:c8:5a:18:31:54:ce:e4:cd:d8:19:9c:4e: 97:5b:d6:ac:26:02:b1:d0:01:a5:80:17:b4:9a:cd:d5:e0:7a: e2:11:d3:66:99:d5:fa:32:8a:dd:de:e1:f9:27:7e:d5:13:a2: 82:c6:d0:73:2a:14:15:ab:e4:ee:ab:8e:b6:0c:6d:6e:79:ec: 75:a1:8f:80:b7:c4:d8:be:be:73:1d:1c:b6:a4:35:72:71:8b: cf:1c:9d:cc:4b:77:fd:57:d5:da:c5:f6:2c:d1:74:be:62:7c: 4f:33:fc:f0:63:b4:5b:69:03:8d:9a:a1:90:9c:00:ef:c0:a2: 56:35:ad:96 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPCtce5URwX4QrzMOQ3Es0G9zGXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDgxMDU1MjZaFw0yNzAxMDcxMTAwMjZaMDMxMTAvBgNV BAMTKDE4OTVGM0E5QUVDQzM5RTFDQzU3Q0QxMTgzNzRGMjM5M0REMjZBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhnO59sMRRGTwBEQcquvnSKcx KlGLIRkWiUQCJkfpVmieiY5urNJaB1NZfXCrMVS6sIhciqVnTusGzBZ2Jz994afO dn7hfYTsyAZfzggOtgBe/ah1APPh15yg/MdNSFZHPhKzAyzQb7dMU7qe593rjXKU 1r0U/mS9mUcGJn99dm3G83sL4p08VRYKkqmhlsAbbXRMTpxCfor0DYBn/W4HjIuo lm6NE4ifacsBBRl3ZWPlsebXr8W6AEa3yhDoj2rFC53qgtmxPWbjQ+AO+JwUGSCR f/dj+wcMAVkPXSP6FKPG01YMRGLGB6OsBtTRO/Gxt5zx6lmlWvhQdQdM7sz9AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUGJXzqa7MOeHMV80Rg3TyOT3SavAwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczMzM3Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfcUwDQYJKoZIhvcNAQELBQADggEBADjQxIpK1Bi1vufFy7ubruZY7ZyTjXPO IJ+7W0Q0iAGqYHGTl2c7zIxnOHOkX8Uawj4YEPVVhGg6iRXZQbDvjelU3plYtqLZ yDxPdEh4vHlgamnSw6lULvZz2h2zRms5siUl6O9ZsIP/2VHDElK/LqyPGWDAjXig MP7mfTmyFT0u3kf/1MhaGDFUzuTN2BmcTpdb1qwmArHQAaWAF7SazdXgeuIR02aZ 1foyit3e4fknftUTooLG0HMqFBWr5O6rjrYMbW557HWhj4C3xNi+vnMdHLakNXJx i88cncxLd/1X1drF9izRdL5ifE8z/PBjtFtpA42aoZCcAO/AolY1rZY= -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:33 2026 by rpki-client