This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231312e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3231312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: tGHKhrJ+PAd2jmTsHVkWsivX5beOh05WgW/ZIzL9/Qo= Subject key identifier: 6B:50:B2:20:D2:AB:5B:65:C3:7C:DB:CB:37:CD:AC:9A:0C:7D:87:BF Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 7ABC095CF54B00827B562B4DA34F386FC6C7CB3A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231312e302f32342d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:48 +0000 ROA not before: Fri 09 Jan 2026 08:11:48 +0000 ROA not after: Fri 08 Jan 2027 08:16:48 +0000 asID: 834 IP address blocks: 147.125.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bc:09:5c:f5:4b:00:82:7b:56:2b:4d:a3:4f:38:6f:c6:c7:cb:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:48 2026 GMT Not After : Jan 8 08:16:48 2027 GMT Subject: CN=6B50B220D2AB5B65C37CDBCB37CDAC9A0C7D87BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:88:8f:1e:71:3e:92:1c:7f:00:7c:74:10: 05:a3:38:b3:b7:db:d1:d7:78:f8:4a:35:1d:45:47: 46:81:bd:c6:dd:4e:e1:62:98:f3:6b:41:9d:46:dd: ee:c6:b4:c8:a2:0d:76:fa:b0:71:8c:08:a3:f0:05: 0d:fe:7c:39:43:aa:05:7a:60:0d:ae:5a:91:fd:43: f9:b0:47:8f:c5:f0:83:2c:be:0f:d2:fa:83:52:91: c3:0d:0c:c0:be:25:88:67:e2:92:65:87:d4:d9:3a: e2:65:db:cf:05:e6:02:ac:e8:7a:88:52:f4:01:d5: c9:de:ed:bb:78:25:39:58:ad:35:69:86:a0:23:ed: 51:48:b5:7a:32:46:8f:29:49:a6:2c:bf:05:44:8a: 67:2e:54:b9:3e:dd:2b:cb:f3:9f:e0:3a:81:51:0d: a8:3a:e6:38:6b:5d:12:26:67:b9:88:9b:fd:c3:33: d3:1d:8f:31:92:d7:97:5d:f0:3d:2d:36:1c:8b:69: 41:e2:92:09:bd:e7:26:a8:7e:6d:e6:d0:2a:3b:15: 5a:e5:87:4b:e2:08:c1:19:ab:f7:02:00:53:f7:2a: 05:5a:4e:6f:a0:73:dd:08:b0:bc:06:5e:c9:8b:55: ac:ff:fc:14:00:f6:da:fb:cd:e3:5e:b0:9e:63:ed: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:50:B2:20:D2:AB:5B:65:C3:7C:DB:CB:37:CD:AC:9A:0C:7D:87:BF X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.211.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:88:2b:96:80:2f:51:6f:e0:4c:0b:4d:3c:87:22:39:4e:1b: 0b:8a:13:14:46:b1:94:2e:63:9e:4a:9e:b5:b2:27:39:6e:f5: 9f:80:dc:03:30:8a:8e:e5:8e:dd:35:0e:b9:21:2f:7d:e8:a4: ef:de:68:fb:31:0d:df:30:79:70:f3:0b:85:57:c6:17:f6:8d: d4:49:35:46:d5:bd:d8:a7:97:cc:92:2e:66:2c:d8:af:fc:cf: d2:e2:dc:3f:63:d6:24:88:07:46:86:7e:21:81:a4:ef:29:55: 7c:ac:c8:4f:c6:07:25:cc:19:86:11:e3:de:ab:25:a4:51:d4: a5:32:6c:ec:09:32:1f:60:70:1e:98:27:67:a6:20:97:9d:f2: a2:4e:7c:5b:c9:80:3c:f8:81:7b:20:57:5c:df:49:a7:7d:38: ff:c3:d3:24:87:ab:04:34:cd:0c:bc:5a:29:25:9d:3d:87:d1: 62:43:e7:5a:85:83:3d:7e:39:d4:bc:24:eb:a4:29:cc:54:68: dc:60:0b:9c:44:52:bb:b3:10:5d:b1:0b:dc:d6:61:94:f3:05: 96:b2:6d:7d:c4:a3:17:6a:ed:ed:b9:7c:66:64:a0:ea:60:d4: 0b:79:75:2d:3a:34:f8:ab:d1:06:bd:48:8b:55:3c:15:3f:8f: fc:18:f2:ad -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUerwJXPVLAIJ7VitNo084b8bHyzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDhaFw0yNzAxMDgwODE2NDhaMDMxMTAvBgNV BAMTKDZCNTBCMjIwRDJBQjVCNjVDMzdDREJDQjM3Q0RBQzlBMEM3RDg3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJPIiPHnE+khx/AHx0EAWjOLO3 29HXePhKNR1FR0aBvcbdTuFimPNrQZ1G3e7GtMiiDXb6sHGMCKPwBQ3+fDlDqgV6 YA2uWpH9Q/mwR4/F8IMsvg/S+oNSkcMNDMC+JYhn4pJlh9TZOuJl288F5gKs6HqI UvQB1cne7bt4JTlYrTVphqAj7VFItXoyRo8pSaYsvwVEimcuVLk+3SvL85/gOoFR Dag65jhrXRImZ7mIm/3DM9MdjzGS15dd8D0tNhyLaUHikgm95yaofm3m0Co7FVrl h0viCMEZq/cCAFP3KgVaTm+gc90IsLwGXsmLVaz//BQA9tr7zeNesJ5j7WGnAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUa1CyINKrW2XDfNvLN82smgx9h78wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 0zANBgkqhkiG9w0BAQsFAAOCAQEAbYgrloAvUW/gTAtNPIciOU4bC4oTFEaxlC5j nkqetbInOW71n4DcAzCKjuWO3TUOuSEvfeik795o+zEN3zB5cPMLhVfGF/aN1Ek1 RtW92KeXzJIuZizYr/zP0uLcP2PWJIgHRoZ+IYGk7ylVfKzIT8YHJcwZhhHj3qsl pFHUpTJs7AkyH2BwHpgnZ6Ygl53yok58W8mAPPiBeyBXXN9Jp304/8PTJIerBDTN DLxaKSWdPYfRYkPnWoWDPX451Lwk66QpzFRo3GALnERSu7MQXbEL3NZhlPMFlrJt fcSjF2rt7bl8ZmSg6mDUC3l1LTo0+KvRBr1Ii1U8FT+P/BjyrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:44 2026 by rpki-client