This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20323133373334.roa File: 3134372e3132352e3230342e302f32342d3234203d3e20323133373334.roa (raw, json) Hash identifier: 1zvlyo6RAqBQ5NFvtnABN6QOLkkWWAYGTIt5WayqTuM= Subject key identifier: EA:3D:AF:DC:0A:D1:03:4D:F9:47:D6:1E:DC:29:AC:7F:03:10:66:26 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 617D5B5BB4BB7A12A9004C2EBAE0FB0EA14000B5 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20323133373334.roa Signing time: Mon 05 Jan 2026 03:42:11 +0000 ROA not before: Mon 05 Jan 2026 03:37:11 +0000 ROA not after: Mon 04 Jan 2027 03:42:11 +0000 asID: 213734 IP address blocks: 147.125.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7d:5b:5b:b4:bb:7a:12:a9:00:4c:2e:ba:e0:fb:0e:a1:40:00:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 5 03:37:11 2026 GMT Not After : Jan 4 03:42:11 2027 GMT Subject: CN=EA3DAFDC0AD1034DF947D61EDC29AC7F03106626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e8:8c:15:55:a5:0c:bc:55:74:32:31:3a:cc: 53:cc:09:34:75:5b:98:1b:e0:fb:d0:94:ef:df:99: 1a:2c:c6:ac:5d:df:7f:b0:ac:f3:dc:ce:17:72:c2: 8a:e4:04:10:27:7a:ed:20:c2:58:b6:34:cd:21:dc: de:93:83:e3:e9:d1:8a:19:23:2c:32:c9:45:35:06: 95:62:cd:95:1e:18:68:6a:6a:ba:c7:94:9a:f1:c6: 74:97:9b:f5:7b:8e:09:f9:0e:88:d0:ca:6c:dc:e4: 25:55:b6:d9:09:ea:d7:45:34:9b:cf:53:ec:3c:b1: 21:8f:43:15:06:c9:09:77:6a:23:80:f3:0e:a8:8b: 25:6d:9d:56:d1:ce:5a:a6:1a:dc:76:10:d8:a9:4a: 4d:c8:c9:a1:97:92:ce:c7:5d:1e:2d:5d:a7:56:72: 25:65:d3:3f:de:22:8d:34:4c:f5:ba:34:4a:8b:2d: 2a:fb:ee:f4:29:23:04:ec:3c:85:5d:05:c8:4b:90: 9b:b1:44:7b:12:0d:e2:b6:00:65:9b:4c:64:35:99: ce:7d:fb:b2:cc:42:41:04:87:ad:57:ec:32:fa:e5: df:62:58:6a:1a:87:c3:de:81:dd:ca:88:47:87:7a: 1c:99:3a:72:7f:59:12:cd:bb:9c:19:55:d3:3f:a1: 37:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3D:AF:DC:0A:D1:03:4D:F9:47:D6:1E:DC:29:AC:7F:03:10:66:26 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230342e302f32342d3234203d3e20323133373334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.204.0/24 Signature Algorithm: sha256WithRSAEncryption 99:3b:aa:b0:dc:f5:3a:56:09:ca:bc:6a:4f:b1:6b:5d:b9:f2: 9a:09:38:80:fe:7c:41:13:fe:ee:29:21:56:bb:e1:9b:e9:90: 92:10:03:e9:c6:fb:ef:6d:06:45:39:b5:f5:42:9f:19:f7:7e: 30:64:3e:af:81:97:05:5f:46:54:61:d1:b6:e3:7f:00:1b:96: cd:40:e9:e7:72:83:28:db:c8:96:32:b7:b5:de:6a:89:99:a1: cf:2f:c8:1e:51:9f:3a:42:22:e0:2c:97:43:36:8e:35:08:c7: 86:d5:38:be:3d:36:7c:d6:66:95:fb:bc:a6:ab:f5:fe:13:99: b0:4b:cf:df:2e:ce:53:41:05:a3:9f:f0:a5:3e:b9:6d:b3:54: 21:a2:96:0e:bb:53:f7:8d:1d:d2:35:9e:5d:b6:4c:fb:d6:7e: a4:90:94:22:2c:57:46:cc:43:5d:cc:6d:18:c8:c2:66:1b:77: f0:b9:6a:da:bc:63:49:0a:3b:02:8b:a0:9c:84:0a:30:95:18: 85:2a:18:cd:b6:da:75:ca:c9:17:65:9e:66:ac:6b:9f:01:e6: b9:a0:30:cb:7a:7d:a6:0a:aa:4f:c7:b2:cb:51:96:4f:c8:76: 45:8c:64:45:cb:b4:b6:6a:a1:57:c9:fa:3c:02:78:f3:28:66: 88:2d:ae:85 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUYX1bW7S7ehKpAEwuuuD7DqFAALUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDUwMzM3MTFaFw0yNzAxMDQwMzQyMTFaMDMxMTAvBgNV BAMTKEVBM0RBRkRDMEFEMTAzNERGOTQ3RDYxRURDMjlBQzdGMDMxMDY2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6IwVVaUMvFV0MjE6zFPMCTR1 W5gb4PvQlO/fmRosxqxd33+wrPPczhdyworkBBAneu0gwli2NM0h3N6Tg+Pp0YoZ IywyyUU1BpVizZUeGGhqarrHlJrxxnSXm/V7jgn5DojQymzc5CVVttkJ6tdFNJvP U+w8sSGPQxUGyQl3aiOA8w6oiyVtnVbRzlqmGtx2ENipSk3IyaGXks7HXR4tXadW ciVl0z/eIo00TPW6NEqLLSr77vQpIwTsPIVdBchLkJuxRHsSDeK2AGWbTGQ1mc59 +7LMQkEEh61X7DL65d9iWGoah8Pegd3KiEeHehyZOnJ/WRLNu5wZVdM/oTerAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU6j2v3ArRA035R9Ye3CmsfwMQZiYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM3MzMzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9zDANBgkqhkiG9w0BAQsFAAOCAQEAmTuqsNz1OlYJyrxqT7FrXbnymgk4 gP58QRP+7ikhVrvhm+mQkhAD6cb7720GRTm19UKfGfd+MGQ+r4GXBV9GVGHRtuN/ ABuWzUDp53KDKNvIljK3td5qiZmhzy/IHlGfOkIi4CyXQzaONQjHhtU4vj02fNZm lfu8pqv1/hOZsEvP3y7OU0EFo5/wpT65bbNUIaKWDrtT940d0jWeXbZM+9Z+pJCU IixXRsxDXcxtGMjCZht38Llq2rxjSQo7AougnIQKMJUYhSoYzbbadcrJF2WeZqxr nwHmuaAwy3p9pgqqT8eyy1GWT8h2RYxkRcu0tmqhV8n6PAJ48yhmiC2uhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:34:40 2026 by rpki-client