This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230382e302f32342d3234203d3e20313336373434.roa File: 3134372e3132352e3230382e302f32342d3234203d3e20313336373434.roa (raw, json) Hash identifier: 7W++gY1Gz5enp28ae6y4RRsr3otTCxwnwHV71oB+Tis= Subject key identifier: DC:CA:51:2E:7D:C4:DB:FA:8A:5F:7B:D8:1D:74:4D:50:F6:8A:BA:FA Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 70E66A43365B5233E23C0308393D3CBDFC830232 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230382e302f32342d3234203d3e20313336373434.roa Signing time: Tue 30 Dec 2025 02:29:43 +0000 ROA not before: Tue 30 Dec 2025 02:24:43 +0000 ROA not after: Tue 29 Dec 2026 02:29:43 +0000 asID: 136744 IP address blocks: 147.125.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e6:6a:43:36:5b:52:33:e2:3c:03:08:39:3d:3c:bd:fc:83:02:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 30 02:24:43 2025 GMT Not After : Dec 29 02:29:43 2026 GMT Subject: CN=DCCA512E7DC4DBFA8A5F7BD81D744D50F68ABAFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:78:0a:08:f0:50:59:a3:4f:3f:02:fc:3f: 84:83:05:94:ac:9d:9b:66:d7:05:47:5d:d2:7c:b9: a2:bb:2e:97:73:21:95:71:7b:7c:36:df:4c:e2:cf: 4c:ba:8e:18:a4:ad:88:82:c7:06:85:62:06:57:c2: 69:7c:35:1e:69:5c:ba:d7:65:15:23:b4:57:0b:2f: d0:66:21:ac:7f:59:22:35:40:5c:67:82:31:14:66: 9d:9a:f7:0d:65:58:3a:c6:2f:16:80:2a:6e:98:8b: 86:a3:b7:ba:b7:8c:ea:88:4d:c9:45:8a:84:f6:fe: e3:5a:7a:d7:dd:7d:03:ee:df:6f:d4:81:0a:d6:01: 92:7c:4a:b2:b3:9d:97:a0:d0:ce:a7:12:d7:dd:d8: 90:3b:37:78:8e:ee:26:e3:60:b5:08:bd:ad:7e:bd: df:0e:d0:7b:ad:f1:e4:df:64:38:fd:60:ca:8e:80: 46:9a:73:16:0e:48:10:59:81:31:f1:af:15:6b:6c: bd:1e:84:51:d4:d7:58:e9:1b:17:2f:e2:fa:5d:c6: 58:a9:a7:ba:f6:22:43:62:34:66:5a:8b:6a:44:36: dd:30:dc:39:1d:42:8f:0f:7a:84:24:1c:b5:a2:76: 51:9d:61:4d:80:db:bd:a0:3d:82:8d:e4:02:1c:cc: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CA:51:2E:7D:C4:DB:FA:8A:5F:7B:D8:1D:74:4D:50:F6:8A:BA:FA X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3230382e302f32342d3234203d3e20313336373434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.208.0/24 Signature Algorithm: sha256WithRSAEncryption a2:e4:d7:fe:b1:b9:40:1e:9e:53:29:f6:23:73:fc:c8:90:f7: 24:27:19:5a:43:eb:cb:2a:8d:ae:c9:71:e5:cb:43:7b:10:78: 53:1e:b9:78:f0:9c:b9:3c:e1:10:00:13:78:9f:17:5b:33:0f: 6d:67:5c:ad:3c:03:63:1c:6d:ca:17:b4:9e:97:a2:89:e6:0c: 3c:74:58:ff:a7:77:cf:26:8c:96:19:61:11:5b:9b:7d:ec:de: 14:8c:0e:d8:83:96:13:11:6b:69:d8:22:97:f0:ea:2f:39:7d: de:31:2f:27:ab:29:a9:7a:9c:1f:95:82:61:61:a5:0c:3b:30: 42:d8:1b:da:72:08:69:d3:af:4c:4f:39:f7:ec:29:d9:5c:46: 87:ae:52:db:cc:01:ec:63:b3:d6:c2:79:81:ff:5e:bd:8a:17: c5:0f:fa:17:ec:a5:fe:8f:7a:dd:ef:de:6f:0a:c4:96:02:6c: 2d:c0:15:1f:ac:63:d3:31:b8:96:82:67:94:9e:a0:90:b7:74: 53:27:44:b7:7f:12:6e:f6:9f:3f:22:4a:75:c8:de:e3:7f:8d: 83:51:0c:b8:55:e6:41:2f:7e:b2:78:fa:c0:ae:35:8a:0a:48: e9:46:fb:66:21:23:23:29:1a:84:a8:4b:ca:36:4e:85:7b:54: b5:86:ef:b2 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUcOZqQzZbUjPiPAMIOT08vfyDAjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMzAwMjI0NDNaFw0yNjEyMjkwMjI5NDNaMDMxMTAvBgNV BAMTKERDQ0E1MTJFN0RDNERCRkE4QTVGN0JEODFENzQ0RDUwRjY4QUJBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lXgKCPBQWaNPPwL8P4SDBZSs nZtm1wVHXdJ8uaK7LpdzIZVxe3w230ziz0y6jhikrYiCxwaFYgZXwml8NR5pXLrX ZRUjtFcLL9BmIax/WSI1QFxngjEUZp2a9w1lWDrGLxaAKm6Yi4ajt7q3jOqITclF ioT2/uNaetfdfQPu32/UgQrWAZJ8SrKznZeg0M6nEtfd2JA7N3iO7ibjYLUIva1+ vd8O0Hut8eTfZDj9YMqOgEaacxYOSBBZgTHxrxVrbL0ehFHU11jpGxcv4vpdxlip p7r2IkNiNGZai2pENt0w3DkdQo8PeoQkHLWidlGdYU2A272gPYKN5AIczOYlAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU3MpRLn3E2/qKX3vYHXRNUPaKuvowHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzQzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN90DANBgkqhkiG9w0BAQsFAAOCAQEAouTX/rG5QB6eUyn2I3P8yJD3JCcZ WkPryyqNrslx5ctDexB4Ux65ePCcuTzhEAATeJ8XWzMPbWdcrTwDYxxtyhe0npei ieYMPHRY/6d3zyaMlhlhEVubfezeFIwO2IOWExFradgil/DqLzl93jEvJ6spqXqc H5WCYWGlDDswQtgb2nIIadOvTE859+wp2VxGh65S28wB7GOz1sJ5gf9evYoXxQ/6 F+yl/o963e/ebwrElgJsLcAVH6xj0zG4loJnlJ6gkLd0UydEt38SbvafPyJKdcje 43+Ng1EMuFXmQS9+snj6wK41igpI6Ub7ZiEjIykahKhLyjZOhXtUtYbvsg== -----END CERTIFICATE-----Generated at Sun Jan 25 11:12:50 2026 by rpki-client