This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3234302e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: lqfIgRJK+H6pzOXkv96YyPDUETm1tQ3N/6gFSwBAuRg= Subject key identifier: 07:21:21:01:55:9E:05:A5:52:74:DB:76:6D:FF:20:F3:A3:2B:56:E5 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 70509BCA0A11E95974F33DD08D2B61CB25B915B3 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa Signing time: Thu 20 Nov 2025 11:05:36 +0000 ROA not before: Thu 20 Nov 2025 11:00:36 +0000 ROA not after: Thu 19 Nov 2026 11:05:36 +0000 asID: 834 IP address blocks: 147.125.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:50:9b:ca:0a:11:e9:59:74:f3:3d:d0:8d:2b:61:cb:25:b9:15:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 11:00:36 2025 GMT Not After : Nov 19 11:05:36 2026 GMT Subject: CN=07212101559E05A55274DB766DFF20F3A32B56E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:79:dd:a5:60:ac:2d:af:bd:74:8e:f9:1d: dc:0c:0c:d1:0f:ca:e4:57:b8:cb:69:31:88:67:30: ff:46:49:4e:91:92:2b:0e:37:40:6a:5c:b4:f1:87: a6:9f:fc:92:ff:df:36:c8:d8:f8:87:6a:4c:ed:57: 88:cc:d8:78:62:2e:e1:13:12:a1:26:ea:67:45:37: 03:07:80:69:dc:17:d4:14:2d:16:0a:91:62:79:e5: 85:fe:c0:24:be:36:59:ff:ee:fe:20:49:d2:34:0a: 47:39:78:43:e1:0d:d7:4a:8e:cf:32:95:71:aa:f6: 83:54:7b:82:6c:ad:69:72:a6:17:0d:51:65:1c:d9: dd:39:11:32:5f:77:c8:44:af:a7:1e:66:6b:c7:98: 58:e4:8a:c6:d7:68:75:01:b0:20:f8:da:34:2d:04: 80:be:9e:3e:c5:ea:eb:6b:44:2b:e5:c7:f5:dc:ae: 89:1d:5b:53:04:60:cb:19:3c:30:b1:6b:58:26:52: 7a:4f:3a:70:c5:a6:32:8c:9e:ad:8f:b1:b9:2c:74: 7c:6b:c2:ef:61:42:a4:c6:de:98:c8:07:83:a3:76: 34:f6:27:d1:ef:cf:44:8a:22:50:78:1d:ad:a8:a1: 50:3a:20:ef:e6:22:44:00:81:4b:14:6d:b7:94:78: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:21:21:01:55:9E:05:A5:52:74:DB:76:6D:FF:20:F3:A3:2B:56:E5 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.240.0/23 Signature Algorithm: sha256WithRSAEncryption 42:9f:af:52:05:2c:53:5b:06:7b:7d:46:07:3e:22:03:b8:64: e0:3b:e5:4c:d9:97:e9:3e:12:d7:28:12:bd:fd:72:7d:05:cf: 43:68:00:62:a6:0d:6f:45:9a:89:aa:a9:af:e5:24:e0:05:a7: 6c:82:ef:6f:3b:36:14:35:06:21:c0:af:99:1b:80:ff:c1:6c: f6:17:c1:d9:33:93:67:c8:94:31:cc:09:6e:22:76:0c:49:0d: c8:b5:c8:c0:d4:0e:62:cc:a3:a1:56:36:65:9f:e3:64:b1:0e: 59:61:da:a2:c5:c9:65:3a:2a:13:dd:58:40:75:a6:a8:9f:62: cd:b7:fe:4a:af:31:1c:5e:75:ad:5b:e7:0a:f1:e4:ad:77:ff: b9:25:7c:a4:4c:5a:99:5f:e9:21:1e:c9:e3:9b:80:48:82:78: c2:85:17:49:ae:25:f5:f6:28:3f:3b:9f:6c:39:a8:d5:6d:f6: 7b:71:39:7b:03:09:bb:f1:f5:42:3c:e0:dc:47:92:a8:f9:9d: 8d:99:56:85:58:01:de:c1:2f:6f:48:33:c5:e0:27:c3:ac:55: 79:8f:57:0a:0c:c3:ba:30:fb:2f:1f:c6:16:7d:49:5d:25:d8: b1:3a:0e:42:33:cc:0c:65:f2:7e:4a:13:06:5f:57:2c:bc:fd: 56:c5:ea:33 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcFCbygoR6Vl08z3QjSthyyW5FbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMTAwMzZaFw0yNjExMTkxMTA1MzZaMDMxMTAvBgNV BAMTKDA3MjEyMTAxNTU5RTA1QTU1Mjc0REI3NjZERkYyMEYzQTMyQjU2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5XndpWCsLa+9dI75HdwMDNEP yuRXuMtpMYhnMP9GSU6RkisON0BqXLTxh6af/JL/3zbI2PiHakztV4jM2HhiLuET EqEm6mdFNwMHgGncF9QULRYKkWJ55YX+wCS+Nln/7v4gSdI0Ckc5eEPhDddKjs8y lXGq9oNUe4JsrWlyphcNUWUc2d05ETJfd8hEr6ceZmvHmFjkisbXaHUBsCD42jQt BIC+nj7F6utrRCvlx/XcrokdW1MEYMsZPDCxa1gmUnpPOnDFpjKMnq2PsbksdHxr wu9hQqTG3pjIB4OjdjT2J9Hvz0SKIlB4Ha2ooVA6IO/mIkQAgUsUbbeUeCcfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUByEhAVWeBaVSdNt2bf8g86MrVuUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 8DANBgkqhkiG9w0BAQsFAAOCAQEAQp+vUgUsU1sGe31GBz4iA7hk4DvlTNmX6T4S 1ygSvf1yfQXPQ2gAYqYNb0Waiaqpr+Uk4AWnbILvbzs2FDUGIcCvmRuA/8Fs9hfB 2TOTZ8iUMcwJbiJ2DEkNyLXIwNQOYsyjoVY2ZZ/jZLEOWWHaosXJZToqE91YQHWm qJ9izbf+Sq8xHF51rVvnCvHkrXf/uSV8pExamV/pIR7J45uASIJ4woUXSa4l9fYo PzufbDmo1W32e3E5ewMJu/H1Qjzg3EeSqPmdjZlWhVgB3sEvb0gzxeAnw6xVeY9X CgzDujD7Lx/GFn1JXSXYsToOQjPMDGXyfkoTBl9XLLz9VsXqMw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:01 2025 by rpki-client