This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3230372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: pqhSB2hR+SuzND9OrZbb39xwwn2yWG4zqsZaEdvDTMU= Subject key identifier: 6F:8A:9F:3B:B5:88:88:B5:9B:A7:85:F6:D9:D4:80:22:BD:67:8F:BD Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 34250046FF430413015AF24594A60292A7A2C9DD Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20383334.roa Signing time: Tue 06 Jan 2026 15:08:40 +0000 ROA not before: Tue 06 Jan 2026 15:03:40 +0000 ROA not after: Tue 05 Jan 2027 15:08:40 +0000 asID: 834 IP address blocks: 147.125.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:25:00:46:ff:43:04:13:01:5a:f2:45:94:a6:02:92:a7:a2:c9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 6 15:03:40 2026 GMT Not After : Jan 5 15:08:40 2027 GMT Subject: CN=6F8A9F3BB58888B59BA785F6D9D48022BD678FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:44:11:1d:ef:d1:31:60:36:80:13:08:47: 41:54:3c:a8:68:c5:6b:6e:a4:7b:34:06:cd:1b:cb: d6:e7:53:25:f4:92:08:98:9a:24:b2:73:34:e2:7a: b7:6a:81:2a:7c:2c:9c:2f:d7:61:4d:a7:b4:d8:52: 73:7e:5f:2a:1c:b6:ae:17:bf:49:1a:ad:4d:30:2d: fc:44:f1:3a:89:81:c2:bc:5d:aa:2c:70:56:f0:14: 6a:eb:fe:f2:d6:6e:83:45:e9:45:e8:73:c6:f4:1f: dc:30:5a:34:f5:7e:f8:5c:d4:7d:85:67:55:d4:b9: 54:1c:11:b7:14:5a:76:5c:2c:f4:d8:f5:0a:b9:c7: 27:65:ab:4b:7d:c2:37:f0:ff:a8:08:fc:0a:43:7b: d6:83:f1:0c:3f:b8:03:d2:ab:ee:c5:b0:25:49:17: ec:b8:a7:5e:77:48:55:f4:43:58:ae:80:1e:b6:f2: 7f:d4:22:d4:0b:53:55:b4:60:e7:6f:39:c8:5d:a2: 36:cd:2b:4f:3a:0e:1b:3c:94:d8:ca:4c:e2:fc:28: 28:3d:84:a3:6c:9c:35:0a:d8:06:0b:90:62:97:4d: b0:ed:67:14:aa:5a:9c:13:8e:d4:78:f6:de:3e:7c: 25:62:41:72:7f:c8:8a:de:7a:c5:b8:cb:d1:0c:86: 0c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8A:9F:3B:B5:88:88:B5:9B:A7:85:F6:D9:D4:80:22:BD:67:8F:BD X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.207.0/24 Signature Algorithm: sha256WithRSAEncryption 32:77:e7:5f:30:0f:13:e0:a6:a8:f9:c2:9c:7c:b4:2b:e2:1a: a5:98:ab:47:6c:92:7e:f4:94:c4:48:f3:8c:fc:6a:08:28:52: 0e:7b:bd:68:28:fb:4b:91:a0:e5:da:7d:7c:b8:f2:b9:6f:c1: 61:50:ef:d0:d0:3c:a4:04:1d:4a:51:e6:3c:41:48:a9:ba:9e: e3:fd:55:93:9a:70:4c:cf:70:6e:91:21:e1:31:ea:37:22:ac: 79:a8:ca:60:45:66:48:6a:09:fe:70:d1:82:50:d9:63:96:91: f1:54:36:ff:0b:26:a2:15:c1:ca:e5:50:62:c9:e1:7b:7f:e9: 27:95:0c:9e:4c:24:c4:90:d3:e9:30:86:fb:3f:13:7e:c9:6d: 10:e4:0e:b9:58:d9:3f:01:50:97:08:8e:b9:a6:d3:63:a4:b5: 2e:9a:79:92:87:63:f1:d6:38:70:e2:17:33:5f:f4:e7:56:d2: e7:97:ab:86:54:b4:aa:0c:6c:f9:16:03:27:c6:a1:71:61:27: 86:a1:6c:f5:5b:ed:8a:00:d7:f6:9e:59:4b:35:11:25:4a:08: b2:91:13:b2:b9:0a:78:78:75:04:b4:9e:6a:d5:d8:00:4a:49: 24:d8:36:95:cf:c2:b7:db:d8:01:6b:43:fd:c5:2e:9e:35:c4: b3:e5:03:74 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNCUARv9DBBMBWvJFlKYCkqeiyd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDYxNTAzNDBaFw0yNzAxMDUxNTA4NDBaMDMxMTAvBgNV BAMTKDZGOEE5RjNCQjU4ODg4QjU5QkE3ODVGNkQ5RDQ4MDIyQkQ2NzhGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3UQRHe/RMWA2gBMIR0FUPKho xWtupHs0Bs0by9bnUyX0kgiYmiSyczTierdqgSp8LJwv12FNp7TYUnN+Xyoctq4X v0karU0wLfxE8TqJgcK8XaoscFbwFGrr/vLWboNF6UXoc8b0H9wwWjT1fvhc1H2F Z1XUuVQcEbcUWnZcLPTY9Qq5xydlq0t9wjfw/6gI/ApDe9aD8Qw/uAPSq+7FsCVJ F+y4p153SFX0Q1iugB628n/UItQLU1W0YOdvOchdojbNK086Dhs8lNjKTOL8KCg9 hKNsnDUK2AYLkGKXTbDtZxSqWpwTjtR49t4+fCViQXJ/yIreesW4y9EMhgxvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUb4qfO7WIiLWbp4X22dSAIr1nj70wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 zzANBgkqhkiG9w0BAQsFAAOCAQEAMnfnXzAPE+CmqPnCnHy0K+IapZirR2ySfvSU xEjzjPxqCChSDnu9aCj7S5Gg5dp9fLjyuW/BYVDv0NA8pAQdSlHmPEFIqbqe4/1V k5pwTM9wbpEh4THqNyKseajKYEVmSGoJ/nDRglDZY5aR8VQ2/wsmohXByuVQYsnh e3/pJ5UMnkwkxJDT6TCG+z8TfsltEOQOuVjZPwFQlwiOuabTY6S1Lpp5kodj8dY4 cOIXM1/051bS55erhlS0qgxs+RYDJ8ahcWEnhqFs9VvtigDX9p5ZSzURJUoIspET srkKeHh1BLSeatXYAEpJJNg2lc/Ct9vYAWtD/cUunjXEs+UDdA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:14 2026 by rpki-client