This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa File: 3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa (raw, json) Hash identifier: DMbjLMitJPznOWRgJKgewO0mREpaYdn6SP0xQQ8ohsg= Subject key identifier: 90:EF:34:8B:43:E1:D6:B8:FA:69:3E:6D:A6:A2:51:67:64:46:DC:2E Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 69D84DF341825F44B37099C1ACDEFF55E469A76B Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa Signing time: Sun 04 Jan 2026 12:31:53 +0000 ROA not before: Sun 04 Jan 2026 12:26:53 +0000 ROA not after: Sun 03 Jan 2027 12:31:53 +0000 asID: 133153 IP address blocks: 147.125.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d8:4d:f3:41:82:5f:44:b3:70:99:c1:ac:de:ff:55:e4:69:a7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 4 12:26:53 2026 GMT Not After : Jan 3 12:31:53 2027 GMT Subject: CN=90EF348B43E1D6B8FA693E6DA6A251676446DC2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:b9:e1:40:30:db:c5:59:0c:73:f5:6c:d0: d8:0f:0f:59:0c:a6:32:db:c7:67:3d:0f:fe:0a:34: 4c:36:82:66:98:19:7d:53:16:9e:bf:73:ab:71:6d: 44:ef:14:72:fb:ca:ad:4e:10:cd:04:03:c5:47:7e: 42:52:19:25:8c:e7:8d:a1:75:65:e2:ce:d7:7c:6e: 4f:54:48:ec:b2:7f:26:a8:21:db:4c:ac:f5:c8:97: 82:1b:d4:19:b3:57:af:6a:19:f7:3e:18:5c:3e:04: d0:23:57:01:35:bd:9f:f4:23:a9:57:ea:79:dd:26: 79:c5:47:0c:e1:45:33:8a:e9:c7:74:48:64:38:6a: 22:47:b9:8c:ea:e3:1b:21:87:ef:ff:b3:4f:c2:48: 4b:43:4c:e4:6f:93:72:27:53:94:f3:c2:98:d6:f6: 67:7b:35:3c:b9:b3:36:18:8d:fa:03:5c:c6:81:95: 89:59:08:38:fd:e0:3f:96:1f:ba:33:2b:78:b6:d4: 6c:02:6d:1b:38:ce:2c:fe:77:d3:a1:01:c9:0c:37: a1:39:82:ef:0e:eb:f0:3d:61:ed:05:f7:f8:55:22: 28:1c:6f:3d:1f:90:0d:3a:a6:8f:ec:34:9b:74:03: a4:1f:92:7b:76:11:e3:92:82:4c:7e:e1:95:c3:0c: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EF:34:8B:43:E1:D6:B8:FA:69:3E:6D:A6:A2:51:67:64:46:DC:2E X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20313333313533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.199.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:2b:c9:2a:b9:0e:fb:75:1e:0c:53:c0:b3:e4:5a:db:79:26: 8b:0b:98:f1:01:10:f8:98:58:34:16:70:c8:cb:5d:b7:6a:6f: 14:4f:39:86:8e:bf:0f:8f:4a:ba:45:f4:ea:04:bb:4c:ce:6c: 0e:e7:fe:c6:9a:97:33:a6:39:dc:c1:48:00:68:cf:7d:a8:6f: 8d:3f:26:71:00:b4:e5:0c:09:a5:ba:57:18:c0:29:e5:db:35: 1f:c8:c3:cc:81:46:d8:53:04:b2:94:3e:10:29:c3:bc:5d:63: ae:f1:d2:d2:31:fa:25:80:6d:45:8e:a6:84:e5:4c:4b:4a:c0: 53:2f:ee:93:67:f0:f1:63:e9:89:cc:97:f8:d0:ae:c7:51:81: 18:8a:79:45:da:fe:d8:e7:b7:d9:72:21:b0:1a:01:a4:0e:7c: 33:c3:ef:52:65:3b:bd:5d:ae:79:e6:6d:db:88:a3:e9:cd:17: dd:4b:a5:c4:03:8b:7e:cb:13:59:08:24:1c:a2:05:22:d7:80: 3f:56:18:a3:d9:02:34:c0:8e:a7:a3:7a:b1:ab:5a:a9:c8:5b: 9d:17:8d:8a:dd:09:5f:ce:09:b0:5b:a9:c9:e6:ec:80:00:85: e8:70:40:4f:e5:59:cb:75:cc:7e:1b:ad:d0:16:cb:9b:d2:16: 8f:4e:44:bb -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUadhN80GCX0SzcJnBrN7/VeRpp2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDQxMjI2NTNaFw0yNzAxMDMxMjMxNTNaMDMxMTAvBgNV BAMTKDkwRUYzNDhCNDNFMUQ2QjhGQTY5M0U2REE2QTI1MTY3NjQ0NkRDMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PrnhQDDbxVkMc/Vs0NgPD1kM pjLbx2c9D/4KNEw2gmaYGX1TFp6/c6txbUTvFHL7yq1OEM0EA8VHfkJSGSWM542h dWXiztd8bk9USOyyfyaoIdtMrPXIl4Ib1BmzV69qGfc+GFw+BNAjVwE1vZ/0I6lX 6nndJnnFRwzhRTOK6cd0SGQ4aiJHuYzq4xshh+//s0/CSEtDTORvk3InU5TzwpjW 9md7NTy5szYYjfoDXMaBlYlZCDj94D+WH7ozK3i21GwCbRs4ziz+d9OhAckMN6E5 gu8O6/A9Ye0F9/hVIigcbz0fkA06po/sNJt0A6Qfknt2EeOSgkx+4ZXDDPn3AgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUkO80i0Ph1rj6aT5tpqJRZ2RG3C4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMxMzUzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9xzANBgkqhkiG9w0BAQsFAAOCAQEAXivJKrkO+3UeDFPAs+Ra23kmiwuY 8QEQ+JhYNBZwyMtdt2pvFE85ho6/D49KukX06gS7TM5sDuf+xpqXM6Y53MFIAGjP fahvjT8mcQC05QwJpbpXGMAp5ds1H8jDzIFG2FMEspQ+ECnDvF1jrvHS0jH6JYBt RY6mhOVMS0rAUy/uk2fw8WPpicyX+NCux1GBGIp5Rdr+2Oe32XIhsBoBpA58M8Pv UmU7vV2ueeZt24ij6c0X3UulxAOLfssTWQgkHKIFIteAP1YYo9kCNMCOp6N6sata qchbnReNit0JX84JsFupyebsgACF6HBAT+VZy3XMfhut0BbLm9IWj05Euw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:19 2026 by rpki-client