This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3139392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 3zJkX8WsKKHFmY5+CyH7vnIhGHure61LjKndHvuLiEM= Subject key identifier: 05:B9:FB:A7:A1:93:3E:E1:B1:4D:14:3B:A0:E9:4D:F3:10:30:52:53 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 36035F74413782E58BAC92A8F0E41AAC772881E0 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20383334.roa Signing time: Tue 09 Dec 2025 16:34:27 +0000 ROA not before: Tue 09 Dec 2025 16:29:27 +0000 ROA not after: Tue 08 Dec 2026 16:34:27 +0000 asID: 834 IP address blocks: 147.125.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:03:5f:74:41:37:82:e5:8b:ac:92:a8:f0:e4:1a:ac:77:28:81:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 9 16:29:27 2025 GMT Not After : Dec 8 16:34:27 2026 GMT Subject: CN=05B9FBA7A1933EE1B14D143BA0E94DF310305253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fa:9b:ea:c9:09:dd:35:fa:b0:cf:a1:8e:e3: 45:01:51:c1:4e:0f:37:11:8f:68:a8:e2:5d:cd:12: 40:d8:38:2d:38:ee:7f:b9:d2:10:37:48:06:b9:4a: b6:55:c4:2b:fe:3d:2e:a9:c4:0e:57:06:2f:a7:24: c8:0d:87:83:f7:a4:84:0b:67:c8:a6:c1:16:23:26: 0c:59:f4:7a:05:1e:9c:76:e4:91:79:87:f0:cc:d9: e3:41:06:e6:b3:20:82:a0:66:f6:c1:b2:2a:e4:dc: d1:d7:08:76:f1:5b:e7:90:88:f5:3b:55:17:8c:62: 80:0f:0f:cd:4d:be:f4:24:1c:a2:04:36:d5:1b:aa: 9c:98:34:6a:fc:1e:62:8c:60:8d:6a:6b:12:f1:6c: 9a:93:e1:71:f7:b3:cd:ed:2e:c7:ce:c3:f4:2d:e4: 7e:e2:96:f0:dc:bb:a0:f0:39:39:8a:17:71:86:8c: 47:ac:30:3b:e5:10:f1:1b:1d:92:9c:4e:e7:75:74: 18:a9:82:30:3f:d3:c8:f6:e1:29:1f:62:12:b2:a4: 99:3e:cb:28:8e:8b:b9:ef:af:97:b8:83:a2:97:66: bc:06:75:cd:b4:38:eb:19:ea:96:4b:54:43:af:da: 5e:57:6c:2a:88:18:d6:7e:a4:35:34:8c:f0:a3:2d: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B9:FB:A7:A1:93:3E:E1:B1:4D:14:3B:A0:E9:4D:F3:10:30:52:53 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.199.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:93:4f:89:4b:16:a0:00:99:4f:dc:8f:61:8d:f8:6a:61:09: 15:5a:da:f2:e9:44:73:e6:34:8f:64:d3:41:d4:e4:c8:e1:3d: bf:e1:13:c3:a9:a6:6a:dc:af:1a:dc:6f:21:5f:62:04:5a:3d: fe:eb:e7:f0:48:7c:ee:65:9d:28:42:03:ea:fc:73:55:27:d5: 12:e3:0a:f2:67:05:7d:38:28:03:d7:ef:92:a1:c5:fe:8c:11: 5f:2f:2d:81:77:2d:fb:06:5b:84:b4:ec:99:55:d3:c9:82:18: d9:51:7e:2d:87:bc:ea:d0:2f:f8:8f:b1:16:02:b1:7e:73:4c: 44:a2:c0:28:b7:b1:02:2a:b6:cd:bb:65:55:b9:f9:ea:51:4a: c9:77:05:6a:57:50:66:75:f7:fd:4c:c2:fa:7e:2e:a0:79:ab: f9:07:cc:10:cd:2e:d5:a6:5e:18:c7:6f:d1:56:b0:81:5e:8c: 43:6f:17:4b:2d:25:40:4c:90:9c:ce:0c:7b:5b:7e:e1:28:4d: ec:6c:9d:19:41:ff:83:8f:94:d7:41:31:fb:27:f5:20:c6:d9: 6f:b5:bc:44:2d:88:72:1d:5b:91:df:47:87:81:84:76:1c:d1: b7:5c:a7:79:f8:6c:50:95:e0:9d:22:34:31:6a:37:36:db:28: d1:0d:79:f9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNgNfdEE3guWLrJKo8OQarHcogeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDkxNjI5MjdaFw0yNjEyMDgxNjM0MjdaMDMxMTAvBgNV BAMTKDA1QjlGQkE3QTE5MzNFRTFCMTREMTQzQkEwRTk0REYzMTAzMDUyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+pvqyQndNfqwz6GO40UBUcFO DzcRj2io4l3NEkDYOC047n+50hA3SAa5SrZVxCv+PS6pxA5XBi+nJMgNh4P3pIQL Z8imwRYjJgxZ9HoFHpx25JF5h/DM2eNBBuazIIKgZvbBsirk3NHXCHbxW+eQiPU7 VReMYoAPD81NvvQkHKIENtUbqpyYNGr8HmKMYI1qaxLxbJqT4XH3s83tLsfOw/Qt 5H7ilvDcu6DwOTmKF3GGjEesMDvlEPEbHZKcTud1dBipgjA/08j24SkfYhKypJk+ yyiOi7nvr5e4g6KXZrwGdc20OOsZ6pZLVEOv2l5XbCqIGNZ+pDU0jPCjLbR1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBbn7p6GTPuGxTRQ7oOlN8xAwUlMwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 xzANBgkqhkiG9w0BAQsFAAOCAQEAHJNPiUsWoACZT9yPYY34amEJFVra8ulEc+Y0 j2TTQdTkyOE9v+ETw6mmatyvGtxvIV9iBFo9/uvn8Eh87mWdKEID6vxzVSfVEuMK 8mcFfTgoA9fvkqHF/owRXy8tgXct+wZbhLTsmVXTyYIY2VF+LYe86tAv+I+xFgKx fnNMRKLAKLexAiq2zbtlVbn56lFKyXcFaldQZnX3/UzC+n4uoHmr+QfMEM0u1aZe GMdv0VawgV6MQ28XSy0lQEyQnM4Me1t+4ShN7GydGUH/g4+U10Ex+yf1IMbZb7W8 RC2Ich1bkd9Hh4GEdhzRt1ynefhsUJXgnSI0MWo3Ntso0Q15+Q== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:46 2025 by rpki-client