This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231352e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3231352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: gaN3TKfMRf7Sb4h4Srod+hxi3FKpwe70sGIAERHYMGc= Subject key identifier: C7:36:78:69:64:2E:71:DC:F7:66:B1:D9:7E:A4:85:12:A7:CD:8E:89 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 61098767093261C7EEB335FC8C62844BF210A889 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231352e302f32342d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 10:41:45 +0000 ROA not before: Fri 09 Jan 2026 10:36:45 +0000 ROA not after: Fri 08 Jan 2027 10:41:45 +0000 asID: 834 IP address blocks: 147.125.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:09:87:67:09:32:61:c7:ee:b3:35:fc:8c:62:84:4b:f2:10:a8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 10:36:45 2026 GMT Not After : Jan 8 10:41:45 2027 GMT Subject: CN=C7367869642E71DCF766B1D97EA48512A7CD8E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:6f:e1:26:8a:28:1d:7f:6a:de:34:38:58: 12:ab:2f:48:70:45:c8:4c:80:0c:3c:f3:ef:5e:6c: 5f:05:f0:11:fe:36:2c:d7:64:78:df:56:41:fb:f9: 77:d6:62:82:10:90:04:b1:a3:c2:3d:98:f1:19:06: 37:9b:5a:f8:7d:12:f0:38:ca:67:8c:6d:78:3a:6e: 46:9e:be:20:dc:02:43:9d:ec:46:bf:46:48:43:3a: fa:96:77:55:47:c4:1d:d3:3d:b9:15:b9:23:3a:a8: fd:a2:81:91:66:75:7d:4a:24:a3:13:71:c7:89:c9: be:4a:05:ce:99:cd:fa:ea:5b:01:f8:82:83:2c:1b: ed:3d:d3:26:78:d8:4e:9b:b0:8c:d8:ca:c7:90:3f: 68:85:e9:2c:f7:45:96:4b:53:25:18:d8:e0:25:d5: fa:2c:88:e9:3b:3e:47:a0:02:19:b9:60:16:83:7a: ba:d3:fc:71:d6:c8:16:dc:6a:a0:ba:87:2a:5b:6d: c7:ff:5b:3b:24:e4:ab:c6:67:f9:33:80:7f:3f:2b: 3b:cc:32:b9:45:e7:c7:a9:76:22:aa:eb:38:70:21: 8a:4c:1c:7e:a0:54:db:70:3a:d6:60:20:38:5d:5c: 17:50:c3:67:e5:7b:cb:a0:a7:a3:bc:78:9c:7a:70: 25:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:36:78:69:64:2E:71:DC:F7:66:B1:D9:7E:A4:85:12:A7:CD:8E:89 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.215.0/24 Signature Algorithm: sha256WithRSAEncryption 57:dc:5f:81:01:bc:e0:40:f3:8c:d8:c3:35:44:36:9f:cd:49: ab:f5:3d:67:d2:81:bd:df:9d:7a:d6:05:56:83:2b:21:6b:67: 0d:aa:08:91:52:0b:bd:16:98:7f:d9:82:bb:0a:2a:fe:c1:8f: 2b:05:59:f9:e9:6d:55:83:bb:93:1c:6c:61:45:b6:96:74:a0: 76:32:ee:cc:10:c5:ff:63:97:9d:ad:0f:45:b6:3e:c4:7f:90: 5f:c8:1d:ce:be:62:90:4e:15:2e:f9:b9:1e:a5:ef:54:21:b2: e3:ce:11:42:14:70:d7:26:5a:00:4f:25:12:2b:cd:e1:73:3c: c9:2e:fb:bf:9e:ec:d4:dc:26:d4:eb:a4:cf:4f:06:4b:7f:7a: a8:da:d1:10:7a:ef:92:66:a2:e2:4b:70:50:ce:6d:ea:91:25: e8:95:5a:6b:7a:68:8c:93:26:8b:80:70:06:80:a4:6d:10:fc: 9d:f1:39:71:43:fe:ae:18:d1:2c:51:56:ea:6e:4a:7c:99:d9: a6:d4:38:b2:ed:c4:c3:79:64:5b:9d:3a:11:9b:a6:b1:d6:0b: 4f:e7:07:44:c7:e8:3d:20:d1:39:70:10:b7:f2:c1:b2:30:40: b7:81:9a:f9:35:56:66:37:20:24:f7:0e:49:33:54:88:18:7f: 95:dd:84:1d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYQmHZwkyYcfuszX8jGKES/IQqIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkxMDM2NDVaFw0yNzAxMDgxMDQxNDVaMDMxMTAvBgNV BAMTKEM3MzY3ODY5NjQyRTcxRENGNzY2QjFEOTdFQTQ4NTEyQTdDRDhFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2w2/hJoooHX9q3jQ4WBKrL0hw RchMgAw88+9ebF8F8BH+NizXZHjfVkH7+XfWYoIQkASxo8I9mPEZBjebWvh9EvA4 ymeMbXg6bkaeviDcAkOd7Ea/RkhDOvqWd1VHxB3TPbkVuSM6qP2igZFmdX1KJKMT cceJyb5KBc6ZzfrqWwH4goMsG+090yZ42E6bsIzYyseQP2iF6Sz3RZZLUyUY2OAl 1fosiOk7PkegAhm5YBaDerrT/HHWyBbcaqC6hypbbcf/Wzsk5KvGZ/kzgH8/KzvM MrlF58epdiKq6zhwIYpMHH6gVNtwOtZgIDhdXBdQw2fle8ugp6O8eJx6cCXFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUxzZ4aWQucdz3ZrHZfqSFEqfNjokwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 1zANBgkqhkiG9w0BAQsFAAOCAQEAV9xfgQG84EDzjNjDNUQ2n81Jq/U9Z9KBvd+d etYFVoMrIWtnDaoIkVILvRaYf9mCuwoq/sGPKwVZ+eltVYO7kxxsYUW2lnSgdjLu zBDF/2OXna0PRbY+xH+QX8gdzr5ikE4VLvm5HqXvVCGy484RQhRw1yZaAE8lEivN 4XM8yS77v57s1Nwm1Oukz08GS396qNrREHrvkmai4ktwUM5t6pEl6JVaa3pojJMm i4BwBoCkbRD8nfE5cUP+rhjRLFFW6m5KfJnZptQ4su3Ew3lkW506EZumsdYLT+cH RMfoPSDROXAQt/LBsjBAt4Ga+TVWZjcgJPcOSTNUiBh/ld2EHQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:29 2026 by rpki-client