This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230362e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3230362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: 2bFuywKU7wwxbvnAM1BJ2ZO3xj2EwFVT8TPaulT3Z9s= Subject key identifier: 81:22:BD:99:0A:C0:B2:5B:84:B7:66:A5:FD:46:83:F7:C5:07:C1:3C Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 715A2E6963279DA0F1A55B287B868E61A1557F00 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230362e302f32332d3234203d3e20383334.roa Signing time: Tue 09 Dec 2025 08:54:27 +0000 ROA not before: Tue 09 Dec 2025 08:49:27 +0000 ROA not after: Tue 08 Dec 2026 08:54:27 +0000 asID: 834 IP address blocks: 147.125.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5a:2e:69:63:27:9d:a0:f1:a5:5b:28:7b:86:8e:61:a1:55:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 9 08:49:27 2025 GMT Not After : Dec 8 08:54:27 2026 GMT Subject: CN=8122BD990AC0B25B84B766A5FD4683F7C507C13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:68:2e:4a:55:a9:0e:aa:80:53:19:e9:a1:66: d3:29:87:d3:f3:eb:5e:f3:d5:c8:d1:3f:2f:81:7f: 2b:2e:2a:62:6d:f5:99:69:96:bb:30:22:15:4c:6b: 58:8d:fa:4f:ae:90:5f:c2:20:1d:c4:c6:12:0f:d1: 14:35:0e:00:45:50:92:28:f5:12:c2:50:7e:82:76: d4:cb:f0:b9:5a:13:2e:f2:e7:82:b3:18:f8:01:7c: bd:20:fe:5a:f1:e8:58:92:5c:6c:bd:d0:12:4b:d1: 8e:f3:af:58:66:dc:f7:57:00:ea:c4:f6:2b:3c:50: 60:0b:e0:91:fd:25:ce:15:51:25:6c:49:88:fd:35: e1:76:36:37:af:f9:89:32:f2:23:1c:3f:4e:38:25: 06:8b:73:1f:b2:23:fe:ac:58:2a:15:03:4a:8d:fb: 62:99:86:02:76:42:a2:b6:ea:a9:87:2c:c2:ac:71: a4:e1:4c:be:54:39:fb:5b:74:90:13:c6:95:03:1d: cb:d1:32:14:2f:ff:2c:23:5c:08:b6:d4:1f:e2:a1: 42:ab:d7:6f:17:3b:ca:9f:de:9b:b5:62:8f:9f:49: 5b:76:5a:55:ae:35:1d:9f:dc:93:16:e2:8b:73:9b: f8:26:7f:36:f3:02:13:d0:98:94:84:d9:ef:c2:9d: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:22:BD:99:0A:C0:B2:5B:84:B7:66:A5:FD:46:83:F7:C5:07:C1:3C X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.206.0/23 Signature Algorithm: sha256WithRSAEncryption 07:0a:a8:eb:f4:95:b1:16:e9:69:03:38:70:a6:21:7d:3a:f3: 6e:87:fb:1e:57:8c:52:8d:93:f0:59:23:d2:e7:23:ba:13:76: 71:5c:d7:5f:40:36:27:d8:53:7f:b4:2b:42:31:38:ed:ce:1e: 5d:6a:0a:c0:cc:9b:64:b4:76:ac:66:92:81:7c:1f:01:49:e7: 8d:a7:b4:0a:5d:42:0a:c4:65:f0:fa:8e:39:8d:d9:e7:19:2b: 34:94:87:e3:53:48:89:0b:f6:e5:2e:4d:c7:a1:8c:41:a5:58: 0e:44:a6:b9:21:13:c5:a9:c8:dd:b1:6c:04:19:6d:cb:5a:3c: 51:eb:b5:4b:e9:48:ba:c3:58:4f:b1:6a:2e:1b:5e:61:f5:02: 99:2c:2a:4c:cb:65:fd:f4:44:6a:3f:fa:32:a8:db:7c:a3:97: 38:5b:b3:d7:7b:7b:0f:0e:1f:a8:c8:bf:a9:72:6b:08:ae:ef: ba:16:a7:ea:6e:21:4d:a7:03:f2:ec:8d:59:1c:91:e0:ec:8f: 12:c2:b3:d4:3a:1c:0f:f3:60:b5:93:45:4e:44:90:5b:6c:53: 44:63:74:93:1b:c0:19:15:5d:ef:f3:68:e9:1b:0f:89:97:bb: cf:aa:b7:0c:15:39:ef:96:76:e0:a9:4b:5e:1c:14:c8:1f:47: 2b:01:3e:3a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcVouaWMnnaDxpVsoe4aOYaFVfwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDkwODQ5MjdaFw0yNjEyMDgwODU0MjdaMDMxMTAvBgNV BAMTKDgxMjJCRDk5MEFDMEIyNUI4NEI3NjZBNUZENDY4M0Y3QzUwN0MxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqaC5KVakOqoBTGemhZtMph9Pz 617z1cjRPy+BfysuKmJt9ZlplrswIhVMa1iN+k+ukF/CIB3ExhIP0RQ1DgBFUJIo 9RLCUH6CdtTL8LlaEy7y54KzGPgBfL0g/lrx6FiSXGy90BJL0Y7zr1hm3PdXAOrE 9is8UGAL4JH9Jc4VUSVsSYj9NeF2Njev+Yky8iMcP044JQaLcx+yI/6sWCoVA0qN +2KZhgJ2QqK26qmHLMKscaThTL5UOftbdJATxpUDHcvRMhQv/ywjXAi21B/ioUKr 128XO8qf3pu1Yo+fSVt2WlWuNR2f3JMW4otzm/gmfzbzAhPQmJSE2e/CnUGHAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUgSK9mQrAsluEt2al/UaD98UHwTwwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 zjANBgkqhkiG9w0BAQsFAAOCAQEABwqo6/SVsRbpaQM4cKYhfTrzbof7HleMUo2T 8Fkj0ucjuhN2cVzXX0A2J9hTf7QrQjE47c4eXWoKwMybZLR2rGaSgXwfAUnnjae0 Cl1CCsRl8PqOOY3Z5xkrNJSH41NIiQv25S5Nx6GMQaVYDkSmuSETxanI3bFsBBlt y1o8Ueu1S+lIusNYT7FqLhteYfUCmSwqTMtl/fREaj/6MqjbfKOXOFuz13t7Dw4f qMi/qXJrCK7vuhan6m4hTacD8uyNWRyR4OyPEsKz1DocD/NgtZNFTkSQW2xTRGN0 kxvAGRVd7/No6RsPiZe7z6q3DBU575Z24KlLXhwUyB9HKwE+Og== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:44 2025 by rpki-client