This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3235322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: baObJbOgSsC3EDZJqb7hkYDrgn1zOCrvv+YBi70OvIw= Subject key identifier: AA:FC:C8:4D:85:E8:BD:E3:31:7E:B3:97:52:44:DB:BC:09:D4:30:C6 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5B1ABFEF2B0B6AF1CD8F569754755B6E4C518CBE Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e20383334.roa Signing time: Sat 10 Jan 2026 10:10:30 +0000 ROA not before: Sat 10 Jan 2026 10:05:30 +0000 ROA not after: Sat 09 Jan 2027 10:10:30 +0000 asID: 834 IP address blocks: 147.125.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1a:bf:ef:2b:0b:6a:f1:cd:8f:56:97:54:75:5b:6e:4c:51:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 10 10:05:30 2026 GMT Not After : Jan 9 10:10:30 2027 GMT Subject: CN=AAFCC84D85E8BDE3317EB3975244DBBC09D430C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:fb:85:5a:39:06:2e:7b:d9:ef:52:09:dd: 16:ef:54:d4:8d:a6:29:06:af:f2:c5:68:15:a2:f5: b2:06:07:4f:14:67:87:30:3e:4c:38:f9:39:ae:87: 85:2b:6a:f8:8b:f4:6f:d6:df:d9:0d:3f:57:cf:c2: 05:45:79:ff:c3:90:09:9c:9a:37:c5:ef:a4:e3:11: 53:7f:3e:8b:91:51:f2:d6:9f:fb:48:33:19:d5:b5: 4d:ff:6c:fc:16:f6:03:93:18:e0:45:48:f0:37:e0: 7d:16:d7:8b:de:b7:10:01:ef:0b:1f:6d:4b:83:e1: 34:f0:16:48:b6:78:0a:0a:b9:0d:d0:d0:c1:fb:e4: a7:40:f3:ca:a6:09:be:f7:f5:ea:69:b0:0b:e5:4b: e0:9e:ab:1f:f8:3a:1a:ed:ca:29:1f:ba:f2:4a:3f: c7:5a:e4:eb:dc:ae:90:0b:83:e8:fa:ae:b8:08:f8: 7a:d5:99:1b:ff:3e:3a:51:0a:88:49:56:13:f5:a0: 8d:f9:ab:30:f7:8d:2e:3c:56:24:1e:48:50:bc:3a: 56:1a:30:d3:f5:d3:d2:ab:4a:97:f5:b8:56:a4:9a: 01:c2:e4:6a:6c:87:f9:59:fc:a0:da:08:e3:bc:db: f5:3e:d4:e1:91:de:75:78:e5:b3:b4:68:79:9e:a0: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:C8:4D:85:E8:BD:E3:31:7E:B3:97:52:44:DB:BC:09:D4:30:C6 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.252.0/24 Signature Algorithm: sha256WithRSAEncryption 70:6b:bb:ef:c7:3b:ca:f4:14:71:6e:f8:68:a2:39:2b:7b:6d: 6d:4e:56:95:e4:01:44:0f:c9:34:14:52:60:c4:27:2a:ea:03: 93:f8:61:0f:13:e5:4b:6d:51:8f:f1:8c:98:99:d8:03:da:31: e4:36:e3:82:76:e5:1c:5f:e0:b1:7f:7e:2a:e0:c2:b6:6b:27: 49:0d:f6:64:d8:21:ed:6c:07:d4:a3:4d:a9:f3:77:9a:4e:36: 83:8d:b7:10:c5:7b:7d:55:a7:c8:88:2d:58:b4:03:42:d8:be: d8:2e:37:0e:74:a9:44:ae:d7:c3:fd:a0:42:91:11:ad:63:d7: 3d:75:2d:64:21:59:c6:31:1c:4e:c7:45:64:aa:a6:3c:a3:56: 77:d9:6b:ea:82:a2:44:6e:c4:b6:07:f5:45:0a:ed:83:19:69: 0e:09:3f:8a:08:0c:63:0f:5c:62:9e:f9:0c:8d:17:ae:39:d9: d5:57:ea:88:35:21:29:d5:44:45:a7:8c:b4:b6:6e:7f:87:8f: 02:b0:82:cd:35:7f:87:72:ae:51:9d:35:d7:f3:5e:8f:99:83: 59:0a:f3:4a:7e:3c:51:15:ff:5b:8c:72:a0:ef:86:b7:6f:85: ab:64:c0:3c:37:48:a7:0e:5d:f1:fd:eb:34:b7:37:c5:b8:10: 3a:8c:10:73 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUWxq/7ysLavHNj1aXVHVbbkxRjL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMTAxMDA1MzBaFw0yNzAxMDkxMDEwMzBaMDMxMTAvBgNV BAMTKEFBRkNDODREODVFOEJERTMzMTdFQjM5NzUyNDREQkJDMDlENDMwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhfuFWjkGLnvZ71IJ3RbvVNSN pikGr/LFaBWi9bIGB08UZ4cwPkw4+Tmuh4UraviL9G/W39kNP1fPwgVFef/DkAmc mjfF76TjEVN/PouRUfLWn/tIMxnVtU3/bPwW9gOTGOBFSPA34H0W14vetxAB7wsf bUuD4TTwFki2eAoKuQ3Q0MH75KdA88qmCb739eppsAvlS+Ceqx/4OhrtyikfuvJK P8da5OvcrpALg+j6rrgI+HrVmRv/PjpRCohJVhP1oI35qzD3jS48ViQeSFC8OlYa MNP109KrSpf1uFakmgHC5Gpsh/lZ/KDaCOO82/U+1OGR3nV45bO0aHmeoHF1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUqvzITYXoveMxfrOXUkTbvAnUMMYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 /DANBgkqhkiG9w0BAQsFAAOCAQEAcGu778c7yvQUcW74aKI5K3ttbU5WleQBRA/J NBRSYMQnKuoDk/hhDxPlS21Rj/GMmJnYA9ox5DbjgnblHF/gsX9+KuDCtmsnSQ32 ZNgh7WwH1KNNqfN3mk42g423EMV7fVWnyIgtWLQDQti+2C43DnSpRK7Xw/2gQpER rWPXPXUtZCFZxjEcTsdFZKqmPKNWd9lr6oKiRG7Etgf1RQrtgxlpDgk/iggMYw9c Yp75DI0XrjnZ1VfqiDUhKdVERaeMtLZuf4ePArCCzTV/h3KuUZ011/Nej5mDWQrz Sn48URX/W4xyoO+Gt2+Fq2TAPDdIpw5d8f3rNLc3xbgQOowQcw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:29 2026 by rpki-client