This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3234322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: f+b3cJlOlzbtIRDZFPjEzj75xqnEZbC270B4l91vetE= Subject key identifier: 79:C2:51:D6:DA:45:54:92:69:5D:BA:54:71:62:D2:57:0E:99:8C:D9 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2F652186E9CA79D7571BDFA8B782DBCFD29E56EE Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:24 +0000 ROA not before: Mon 08 Dec 2025 11:30:24 +0000 ROA not after: Mon 07 Dec 2026 11:35:24 +0000 asID: 834 IP address blocks: 147.125.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:65:21:86:e9:ca:79:d7:57:1b:df:a8:b7:82:db:cf:d2:9e:56:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:24 2025 GMT Not After : Dec 7 11:35:24 2026 GMT Subject: CN=79C251D6DA455492695DBA547162D2570E998CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ba:1a:37:d0:45:22:19:f5:ff:16:60:c9:b0: 51:e9:fb:5d:3b:44:83:3e:ea:5e:e3:7f:22:7f:32: c8:4e:15:8b:b1:03:82:43:90:76:7f:3a:1d:5f:43: bd:10:3a:82:88:db:64:56:57:54:69:e3:2b:b4:6c: e6:ae:48:99:f1:3f:1d:0f:dc:43:d4:c5:10:fd:06: 11:50:6a:ad:5a:eb:cd:86:a4:1a:3d:da:d8:2d:e6: 05:26:f0:41:f8:8f:1a:10:86:92:95:35:e3:15:7a: 2b:88:07:5d:4d:d8:b7:a3:bb:dc:41:e6:98:b7:1f: d8:8b:3d:a3:4f:12:ec:6a:23:6d:21:c4:a1:00:fb: 8a:f9:70:a0:07:ef:fc:82:21:d4:d4:39:7f:36:71: 06:c9:e9:19:5b:bb:6a:c6:75:0c:60:90:ca:aa:03: 9a:8a:26:36:7a:57:de:b6:c4:63:1e:82:8c:bb:a5: 97:7e:16:55:b6:32:90:6a:b9:e7:08:88:4d:d9:ce: cb:1c:e7:ee:2e:3b:84:49:15:29:94:47:24:bd:5d: e8:6c:97:85:5d:e7:c0:18:53:39:7b:a3:22:25:24: d2:8f:85:d4:8c:73:f2:11:94:84:fc:86:d6:7b:70: 99:55:77:e4:49:0d:ea:3b:9e:b4:ea:ff:56:d9:fc: c2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C2:51:D6:DA:45:54:92:69:5D:BA:54:71:62:D2:57:0E:99:8C:D9 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.242.0/24 Signature Algorithm: sha256WithRSAEncryption 89:e5:14:4c:49:32:2f:2c:95:4e:f3:bf:d7:99:f3:7b:c2:6c: 78:84:6b:a6:cc:c5:df:e0:be:29:ea:ff:44:2c:ed:b7:47:85: c0:0c:18:83:f8:05:b4:a0:33:28:46:d7:35:68:58:6e:f2:74: 88:77:ed:c6:e0:9d:9c:70:85:a8:a8:fb:f3:44:c0:7d:42:47: 94:27:7c:be:a7:66:a0:2e:ff:67:4e:01:da:db:51:05:c8:fe: 80:5f:bb:eb:ae:b0:be:73:e5:f8:bc:a6:c2:bc:f3:27:53:1d: 85:23:ce:85:19:16:4d:0a:45:93:51:e0:03:47:71:9f:0f:b3: 51:09:87:f0:bc:f5:ec:4a:a4:67:78:c8:06:f3:74:34:c7:71: c4:ff:5b:a9:45:31:85:9f:4f:38:85:ff:7c:3f:8e:91:48:7f: 9f:ce:aa:8a:3b:59:7b:4d:a3:41:ac:7e:1e:05:10:0c:72:86: 10:5f:cc:46:84:2d:1c:06:18:7e:d6:a5:dc:bb:fc:12:5d:2a: c7:27:9e:1e:57:58:01:f5:be:27:e1:d8:11:08:fc:cb:f9:ca: 87:df:85:70:7a:bd:f9:d1:e6:10:28:ef:89:d3:88:59:17:99: ea:84:03:97:1b:b2:12:34:f6:a3:46:3b:ad:1c:ad:da:9b:25: c8:d1:af:3a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUL2UhhunKeddXG9+ot4Lbz9KeVu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMjRaFw0yNjEyMDcxMTM1MjRaMDMxMTAvBgNV BAMTKDc5QzI1MUQ2REE0NTU0OTI2OTVEQkE1NDcxNjJEMjU3MEU5OThDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuho30EUiGfX/FmDJsFHp+107 RIM+6l7jfyJ/MshOFYuxA4JDkHZ/Oh1fQ70QOoKI22RWV1Rp4yu0bOauSJnxPx0P 3EPUxRD9BhFQaq1a682GpBo92tgt5gUm8EH4jxoQhpKVNeMVeiuIB11N2Leju9xB 5pi3H9iLPaNPEuxqI20hxKEA+4r5cKAH7/yCIdTUOX82cQbJ6Rlbu2rGdQxgkMqq A5qKJjZ6V962xGMegoy7pZd+FlW2MpBquecIiE3Zzssc5+4uO4RJFSmURyS9Xehs l4Vd58AYUzl7oyIlJNKPhdSMc/IRlIT8htZ7cJlVd+RJDeo7nrTq/1bZ/MLjAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUecJR1tpFVJJpXbpUcWLSVw6ZjNkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 8jANBgkqhkiG9w0BAQsFAAOCAQEAieUUTEkyLyyVTvO/15nze8JseIRrpszF3+C+ Ker/RCztt0eFwAwYg/gFtKAzKEbXNWhYbvJ0iHftxuCdnHCFqKj780TAfUJHlCd8 vqdmoC7/Z04B2ttRBcj+gF+7666wvnPl+LymwrzzJ1MdhSPOhRkWTQpFk1HgA0dx nw+zUQmH8Lz17EqkZ3jIBvN0NMdxxP9bqUUxhZ9POIX/fD+OkUh/n86qijtZe02j Qax+HgUQDHKGEF/MRoQtHAYYftal3Lv8El0qxyeeHldYAfW+J+HYEQj8y/nKh9+F cHq9+dHmECjvidOIWReZ6oQDlxuyEjT2o0Y7rRyt2pslyNGvOg== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:47 2025 by rpki-client