This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32332d3234203d3e20383334.roa File: 3134372e3132352e3235322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: rln3NFAU/BNQ+t7mWzojLk0++D9FCDuiLRXug6TKGr0= Subject key identifier: E0:5E:84:EE:32:52:4C:A3:63:23:DF:AE:85:E0:D9:11:27:85:52:45 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 3A6BC34A48752393997202C658C313E3A7290E70 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32332d3234203d3e20383334.roa Signing time: Mon 17 Nov 2025 18:56:53 +0000 ROA not before: Mon 17 Nov 2025 18:51:53 +0000 ROA not after: Mon 16 Nov 2026 18:56:53 +0000 asID: 834 IP address blocks: 147.125.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6b:c3:4a:48:75:23:93:99:72:02:c6:58:c3:13:e3:a7:29:0e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 18:51:53 2025 GMT Not After : Nov 16 18:56:53 2026 GMT Subject: CN=E05E84EE32524CA36323DFAE85E0D91127855245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:f9:b1:8e:74:8f:4b:d3:49:4f:d8:c0:07: 28:bb:74:18:0b:d2:58:d7:21:57:09:d4:09:eb:01: 94:a7:e7:e3:bb:e6:54:58:5d:18:a0:53:62:5f:3a: 39:5c:37:60:42:16:86:8b:d9:13:2a:9a:f7:f4:2d: 33:81:ad:1d:e4:07:f5:bb:27:80:f9:b3:28:60:b9: 0a:a6:13:3a:fa:9c:f1:81:6e:70:fa:92:8f:02:42: 86:9d:d2:b9:46:84:a2:92:e5:2b:33:49:6a:6c:e5: 41:61:1a:37:f0:06:8a:bd:00:a2:f0:f6:f4:b1:df: ae:d6:31:d7:63:34:e7:af:c8:53:f0:80:af:5d:b1: e8:6f:f8:c4:0b:fc:09:3e:62:2b:b7:52:a8:3a:9a: 31:6b:96:3b:51:ba:50:bb:92:83:b6:f4:e3:75:10: 09:c8:da:d0:75:2e:c4:99:29:1e:1d:26:24:9b:3d: c8:35:e5:fd:92:9f:d7:34:6c:a9:c8:88:2a:cd:db: 72:38:28:af:59:b8:61:9d:96:ec:d0:9f:cb:cb:33: 8d:65:c8:65:91:b5:c9:96:8a:be:14:c1:2f:a1:f5: fb:f8:2d:0c:92:91:8b:51:2c:2b:3b:36:a6:49:7a: 4f:5b:9c:9b:8f:e3:1b:88:79:a9:ad:6c:e9:d9:fd: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5E:84:EE:32:52:4C:A3:63:23:DF:AE:85:E0:D9:11:27:85:52:45 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.252.0/23 Signature Algorithm: sha256WithRSAEncryption 09:05:39:b4:81:3a:ee:6e:8a:5a:ec:56:1b:96:82:a5:d9:b7: 46:c3:35:94:84:48:a6:21:16:d8:ff:5c:a6:ad:b9:03:3f:17: 72:a8:b5:1c:49:5f:72:44:9b:7d:b1:4a:56:3c:2e:fd:c0:75: 7a:e5:d7:3a:69:03:7b:9e:12:bb:0b:e0:14:71:87:b1:99:a8: 1b:2d:69:d7:b4:23:7f:7a:77:50:8d:ea:ef:90:1e:ed:a2:a4: d0:8e:98:3e:5f:9f:9a:3c:93:93:11:3b:a4:75:fd:ee:44:c9: 5b:0d:c7:88:ab:85:4c:dc:b4:2a:a7:36:fd:0f:7a:25:fd:08: ed:40:be:63:02:91:80:26:ef:40:cc:f5:ad:fc:5d:93:5e:f7: b1:93:19:af:db:d4:7f:77:d3:b9:8b:e5:29:f5:33:c2:6c:6c: 5d:d0:9b:5e:d5:70:9c:d1:14:28:04:58:54:68:4b:3b:00:df: de:7b:b5:89:e8:f2:ea:80:3d:dd:99:81:f5:1a:87:b3:91:4b: d5:3e:ae:23:b2:31:a1:61:4f:ab:c2:ea:f7:15:56:c5:74:56: 84:ce:50:77:be:75:dc:8b:e8:c4:c8:af:1e:0e:a3:f7:b9:16: 98:00:84:92:e5:54:e9:f0:64:f3:c6:2d:46:ab:79:e9:42:7e: 86:5b:a7:cf -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOmvDSkh1I5OZcgLGWMMT46cpDnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcxODUxNTNaFw0yNjExMTYxODU2NTNaMDMxMTAvBgNV BAMTKEUwNUU4NEVFMzI1MjRDQTM2MzIzREZBRTg1RTBEOTExMjc4NTUyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4/mxjnSPS9NJT9jAByi7dBgL 0ljXIVcJ1AnrAZSn5+O75lRYXRigU2JfOjlcN2BCFoaL2RMqmvf0LTOBrR3kB/W7 J4D5syhguQqmEzr6nPGBbnD6ko8CQoad0rlGhKKS5SszSWps5UFhGjfwBoq9AKLw 9vSx367WMddjNOevyFPwgK9dsehv+MQL/Ak+Yiu3Uqg6mjFrljtRulC7koO29ON1 EAnI2tB1LsSZKR4dJiSbPcg15f2Sn9c0bKnIiCrN23I4KK9ZuGGdluzQn8vLM41l yGWRtcmWir4UwS+h9fv4LQySkYtRLCs7NqZJek9bnJuP4xuIeamtbOnZ/Q8/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU4F6E7jJSTKNjI9+uheDZESeFUkUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZN9 /DANBgkqhkiG9w0BAQsFAAOCAQEACQU5tIE67m6KWuxWG5aCpdm3RsM1lIRIpiEW 2P9cpq25Az8Xcqi1HElfckSbfbFKVjwu/cB1euXXOmkDe54SuwvgFHGHsZmoGy1p 17Qjf3p3UI3q75Ae7aKk0I6YPl+fmjyTkxE7pHX97kTJWw3HiKuFTNy0Kqc2/Q96 Jf0I7UC+YwKRgCbvQMz1rfxdk173sZMZr9vUf3fTuYvlKfUzwmxsXdCbXtVwnNEU KARYVGhLOwDf3nu1iejy6oA93ZmB9RqHs5FL1T6uI7IxoWFPq8Lq9xVWxXRWhM5Q d7513IvoxMivHg6j97kWmACEkuVU6fBk88YtRqt56UJ+hlunzw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:42:03 2025 by rpki-client