This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232352e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3232352e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: kTwN2nCu+DxS6PdmwwKxdudiIEqILMB7DrRcQ9XCL/A= Subject key identifier: 99:A0:01:1D:32:A1:4A:D8:A6:4F:F9:66:39:51:E6:4D:27:C0:2C:D9 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 63CF89B84B3D2827AD2CF8C8C8311E050CB355F6 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232352e302f32342d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:48 +0000 ROA not before: Fri 09 Jan 2026 08:11:48 +0000 ROA not after: Fri 08 Jan 2027 08:16:48 +0000 asID: 834 IP address blocks: 147.125.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cf:89:b8:4b:3d:28:27:ad:2c:f8:c8:c8:31:1e:05:0c:b3:55:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:48 2026 GMT Not After : Jan 8 08:16:48 2027 GMT Subject: CN=99A0011D32A14AD8A64FF9663951E64D27C02CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:e1:fa:14:53:3b:34:be:35:d2:30:11:fe: 4e:9a:13:91:cc:c5:02:29:b8:82:55:01:eb:cf:b1: 3b:bd:29:b1:fe:97:ab:8e:35:2d:11:c8:c3:7e:06: d3:6e:da:5b:d3:f6:6e:58:26:e1:c6:af:c6:88:70: 95:83:8f:fe:66:1a:4e:ce:f7:c5:97:b6:58:11:37: f2:b9:f6:df:c6:81:cb:9a:0d:51:8e:b0:48:6a:0d: b0:e2:38:2f:1a:0d:59:61:f0:df:ba:f7:cd:f1:6d: 79:81:df:97:67:e9:11:42:67:19:7d:62:32:7a:e6: 03:fd:7f:4c:4c:60:80:3f:2b:a3:39:c9:aa:9c:f0: 71:d8:e7:ad:f0:0f:d2:e7:04:af:b8:9b:25:38:a1: 4f:52:51:9c:a0:6b:fc:9f:31:ee:40:6c:42:17:e2: aa:de:c8:88:3b:78:46:d6:00:48:65:b1:12:7d:29: 11:b8:42:2c:85:53:03:2a:bb:9f:2a:03:ea:85:24: e9:af:77:f1:f3:e4:8c:6c:df:0f:97:0f:15:35:41: ba:85:22:92:fc:76:7a:2b:49:d2:5b:03:db:3f:a0: a2:b9:fe:9c:1e:8c:12:ac:ab:b5:13:e4:ca:3e:c6: 83:3d:28:67:0d:a7:a1:39:c0:1c:2c:5d:f6:6d:f5: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A0:01:1D:32:A1:4A:D8:A6:4F:F9:66:39:51:E6:4D:27:C0:2C:D9 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232352e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.225.0/24 Signature Algorithm: sha256WithRSAEncryption 01:90:8d:ba:db:c0:7a:a4:5c:80:8a:06:39:b5:f5:14:75:a7: 25:d7:37:18:8b:66:0f:0c:60:1e:23:d1:f0:50:eb:b6:f3:16: 83:a6:9c:fb:7d:34:5c:f5:3b:d0:31:89:0f:7e:75:74:ee:67: ff:de:42:08:d2:0a:ed:9b:2c:51:83:1c:2f:53:30:cc:11:a0: 78:7c:c2:45:d7:f7:45:77:4c:20:6e:2b:a6:a0:97:da:a1:05: 7e:a6:1a:20:46:e8:22:62:2d:10:72:cc:ae:9a:34:20:91:9f: 8c:a8:7a:56:f6:8b:de:74:22:7f:61:12:9d:fb:8e:4f:0d:87: a3:cd:53:cf:b5:5d:fc:44:58:e7:70:fa:9a:89:4a:58:0d:9e: 4b:ab:fb:e9:ff:a4:82:cc:d7:ce:1f:5e:f3:60:d5:a9:7f:8c: c1:f2:ad:8c:f3:2a:8b:3c:4b:a4:16:91:c7:b9:23:ae:de:a9: 56:1b:8f:b1:9e:46:23:99:12:ab:42:91:a4:bf:ed:1a:a5:fb: fd:a3:60:de:d9:b8:12:8c:78:7f:95:92:5b:c5:8a:6a:8a:39: ef:d1:fb:e4:56:a6:77:a2:16:45:c1:6a:1e:0d:2e:f3:f8:8f: 0e:65:c4:12:10:21:58:f2:7d:fa:1b:a2:51:ee:c7:1a:6d:76: e6:b9:15:18 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUY8+JuEs9KCetLPjIyDEeBQyzVfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDhaFw0yNzAxMDgwODE2NDhaMDMxMTAvBgNV BAMTKDk5QTAwMTFEMzJBMTRBRDhBNjRGRjk2NjM5NTFFNjREMjdDMDJDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0neH6FFM7NL410jAR/k6aE5HM xQIpuIJVAevPsTu9KbH+l6uONS0RyMN+BtNu2lvT9m5YJuHGr8aIcJWDj/5mGk7O 98WXtlgRN/K59t/GgcuaDVGOsEhqDbDiOC8aDVlh8N+6983xbXmB35dn6RFCZxl9 YjJ65gP9f0xMYIA/K6M5yaqc8HHY563wD9LnBK+4myU4oU9SUZyga/yfMe5AbEIX 4qreyIg7eEbWAEhlsRJ9KRG4QiyFUwMqu58qA+qFJOmvd/Hz5Ixs3w+XDxU1QbqF IpL8dnorSdJbA9s/oKK5/pwejBKsq7UT5Mo+xoM9KGcNp6E5wBwsXfZt9fbRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUmaABHTKhStimT/lmOVHmTSfALNkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 4TANBgkqhkiG9w0BAQsFAAOCAQEAAZCNutvAeqRcgIoGObX1FHWnJdc3GItmDwxg HiPR8FDrtvMWg6ac+300XPU70DGJD351dO5n/95CCNIK7ZssUYMcL1MwzBGgeHzC Rdf3RXdMIG4rpqCX2qEFfqYaIEboImItEHLMrpo0IJGfjKh6VvaL3nQif2ESnfuO Tw2Ho81Tz7Vd/ERY53D6molKWA2eS6v76f+kgszXzh9e82DVqX+MwfKtjPMqizxL pBaRx7kjrt6pVhuPsZ5GI5kSq0KRpL/tGqX7/aNg3tm4Eox4f5WSW8WKaoo579H7 5Famd6IWRcFqHg0u8/iPDmXEEhAhWPJ9+huiUe7HGm125rkVGA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:46 2026 by rpki-client