This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232362e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3232362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: aoIdfsmP6s4VvNdOmbOh/RbwzKd3uO0YH6CdzSjSbYk= Subject key identifier: A5:64:79:0F:A4:51:EF:92:8D:A0:41:2D:81:92:03:C7:F6:84:55:F8 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 0BA35C855C8CCA994DBDA62CC5BF29E4B599E83B Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232362e302f32332d3234203d3e20383334.roa Signing time: Fri 09 Jan 2026 08:16:47 +0000 ROA not before: Fri 09 Jan 2026 08:11:47 +0000 ROA not after: Fri 08 Jan 2027 08:16:47 +0000 asID: 834 IP address blocks: 147.125.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a3:5c:85:5c:8c:ca:99:4d:bd:a6:2c:c5:bf:29:e4:b5:99:e8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 9 08:11:47 2026 GMT Not After : Jan 8 08:16:47 2027 GMT Subject: CN=A564790FA451EF928DA0412D819203C7F68455F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e1:e6:d8:79:18:76:32:38:51:36:c7:52:99: 96:44:10:18:c6:15:45:7b:05:3d:f9:d0:b1:3b:a8: 4c:8d:06:0e:c5:bb:84:00:15:a2:f6:10:06:19:27: 31:cf:0b:8d:67:f2:40:8d:1c:b5:34:43:5d:e7:f1: a1:7b:53:7b:f9:05:f8:15:d0:69:fd:0d:b5:a2:42: 91:4a:7a:ef:0e:0c:9d:3e:43:e6:5b:45:fa:41:69: 3f:89:7e:fe:98:51:5b:08:ee:5c:10:ac:ee:39:eb: 46:0d:00:35:c9:43:1e:05:86:dd:38:a2:a7:60:13: f9:21:8d:f3:e0:2a:90:4b:63:c2:db:03:6b:01:fa: 54:7d:ae:9e:b1:fa:4f:c4:d9:95:f2:59:4f:a3:e2: 29:38:0f:04:9e:cc:ce:42:95:48:83:85:fe:4c:99: 0c:43:5f:39:40:1a:82:ae:44:c2:c1:c7:fd:2b:26: e4:53:c3:86:16:fd:47:6c:f6:ab:17:17:0f:35:5f: 07:08:9c:dd:8b:81:4f:af:ba:81:05:7a:28:fe:39: 47:88:a6:03:26:32:cf:b8:d4:20:65:19:43:71:fe: 7e:a8:40:a8:c3:02:52:39:e5:47:80:e1:53:82:0b: 90:37:7e:95:8b:14:c5:bf:c2:48:28:3e:fc:07:c4: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:64:79:0F:A4:51:EF:92:8D:A0:41:2D:81:92:03:C7:F6:84:55:F8 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.226.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:29:15:fc:1d:7e:f4:a3:5a:25:52:d4:3f:13:4d:de:d6:24: 27:c8:71:40:26:89:39:ae:52:83:76:2a:69:21:1d:e5:77:91: f9:14:18:6a:e4:6e:f2:e8:ab:e2:34:30:1e:39:fc:62:eb:a1: fb:e5:fc:b1:bc:66:2d:64:8c:ba:9a:d1:2a:f2:a6:1e:27:5f: 34:b6:12:72:ad:20:1f:a4:eb:03:03:b4:8b:10:1a:83:b3:3a: 2a:ca:54:9e:fe:db:7a:0b:30:c7:eb:aa:5a:b0:53:4f:c1:cf: d7:cd:38:22:87:98:a9:3d:bd:08:68:a4:31:d7:ca:a8:36:8a: 31:22:e3:cd:06:89:cf:6a:52:a4:b5:05:e4:3d:7b:0c:1b:3c: 9a:26:fe:25:79:63:55:02:79:7b:98:d3:8c:97:c9:08:2d:7a: 71:72:14:11:6e:67:6c:a1:75:87:75:20:c9:ad:39:df:09:7f: 0e:36:48:31:3d:9a:92:89:ff:41:9e:d2:5f:e1:88:99:ed:0f: 79:6e:cb:8a:40:cf:be:05:25:76:38:11:15:7f:17:96:de:ce: 30:17:dd:b8:78:0a:c3:eb:7b:8f:40:fc:5d:1b:8e:9e:4b:30: 21:30:ef:9f:54:6a:3a:e5:0f:55:0f:c1:9d:36:7d:2c:cd:76: 44:04:3b:20 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUC6NchVyMyplNvaYsxb8p5LWZ6DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDkwODExNDdaFw0yNzAxMDgwODE2NDdaMDMxMTAvBgNV BAMTKEE1NjQ3OTBGQTQ1MUVGOTI4REEwNDEyRDgxOTIwM0M3RjY4NDU1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4ebYeRh2MjhRNsdSmZZEEBjG FUV7BT350LE7qEyNBg7Fu4QAFaL2EAYZJzHPC41n8kCNHLU0Q13n8aF7U3v5BfgV 0Gn9DbWiQpFKeu8ODJ0+Q+ZbRfpBaT+Jfv6YUVsI7lwQrO4560YNADXJQx4Fht04 oqdgE/khjfPgKpBLY8LbA2sB+lR9rp6x+k/E2ZXyWU+j4ik4DwSezM5ClUiDhf5M mQxDXzlAGoKuRMLBx/0rJuRTw4YW/Uds9qsXFw81XwcInN2LgU+vuoEFeij+OUeI pgMmMs+41CBlGUNx/n6oQKjDAlI55UeA4VOCC5A3fpWLFMW/wkgoPvwHxEGdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUpWR5D6RR75KNoEEtgZIDx/aEVfgwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzIzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 4jANBgkqhkiG9w0BAQsFAAOCAQEALykV/B1+9KNaJVLUPxNN3tYkJ8hxQCaJOa5S g3YqaSEd5XeR+RQYauRu8uir4jQwHjn8Yuuh++X8sbxmLWSMuprRKvKmHidfNLYS cq0gH6TrAwO0ixAag7M6KspUnv7begswx+uqWrBTT8HP1804IoeYqT29CGikMdfK qDaKMSLjzQaJz2pSpLUF5D17DBs8mib+JXljVQJ5e5jTjJfJCC16cXIUEW5nbKF1 h3Ugya053wl/DjZIMT2akon/QZ7SX+GIme0PeW7LikDPvgUldjgRFX8Xlt7OMBfd uHgKw+t7j0D8XRuOnkswITDvn1RqOuUPVQ/BnTZ9LM12RAQ7IA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:33 2026 by rpki-client