This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235352e302f32342d3234203d3e20333936333536.roa File: 3134372e3132352e3235352e302f32342d3234203d3e20333936333536.roa (raw, json) Hash identifier: xNU7JJGAd8Que1woowbng8OO2ye8tRBHfQDmTpNm1Ak= Subject key identifier: 33:20:72:25:D1:A3:AC:A8:40:07:FB:E3:99:B0:49:73:93:F7:15:B9 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5674AA31E7B273BAD594C7C30B08CD9940903EB6 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235352e302f32342d3234203d3e20333936333536.roa Signing time: Mon 17 Nov 2025 18:55:46 +0000 ROA not before: Mon 17 Nov 2025 18:50:46 +0000 ROA not after: Mon 16 Nov 2026 18:55:46 +0000 asID: 396356 IP address blocks: 147.125.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:74:aa:31:e7:b2:73:ba:d5:94:c7:c3:0b:08:cd:99:40:90:3e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 17 18:50:46 2025 GMT Not After : Nov 16 18:55:46 2026 GMT Subject: CN=33207225D1A3ACA84007FBE399B0497393F715B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:22:cf:99:b9:1d:af:99:2b:62:dc:6d:93: a3:2a:f7:19:40:5c:08:ee:75:d6:b9:ae:7b:cc:70: 44:ea:7d:d7:6b:e4:06:ca:54:ae:08:5e:57:d3:a5: c5:9c:96:97:57:af:08:de:b4:04:38:5f:a5:9a:f9: 54:6b:70:d5:74:77:12:80:94:33:3c:52:01:f5:76: de:0e:b7:63:9b:b8:23:d4:64:11:8d:d6:65:cb:57: 24:52:2d:01:8e:b3:3b:46:39:df:06:f2:56:e2:12: 5e:34:d9:9a:18:6e:e8:94:11:a0:19:3f:a5:2b:4d: 0a:a8:a9:df:d7:b9:53:2a:b7:ac:7c:36:6d:48:5f: 63:f8:be:1f:a7:dc:5a:32:84:5b:e3:7d:b4:36:40: c1:20:6c:13:84:5f:98:b9:bb:9c:e4:13:e1:09:b2: 98:4c:02:db:cd:82:a2:17:fc:83:a5:68:2d:18:29: fe:6d:95:a8:df:44:f7:e0:87:98:67:02:72:14:ae: 58:20:fe:6d:d9:47:51:e8:25:fa:b6:c0:43:19:08: a6:78:2b:3a:4b:af:a4:1b:17:51:86:67:97:4a:71: e9:d3:e0:4c:54:55:f3:9a:a8:a7:e1:83:e4:5f:84: 43:24:d8:b9:09:ff:27:5b:3d:a2:d5:6e:cf:e8:e2: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:20:72:25:D1:A3:AC:A8:40:07:FB:E3:99:B0:49:73:93:F7:15:B9 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235352e302f32342d3234203d3e20333936333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.255.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ce:94:a7:d2:e4:07:6b:6f:7d:c4:46:d6:7b:2a:e3:6c:27: 58:8c:0d:ea:fe:f7:c3:53:57:89:58:6e:76:fa:e5:ff:f8:f1: 11:a5:b3:78:0d:94:b1:e7:b7:9f:7e:8d:8e:20:3b:32:1c:b4: 8f:57:2b:57:89:ae:b4:98:a9:7e:3e:f5:c7:21:36:1d:b8:7f: 14:d3:23:12:f3:93:55:c3:91:4b:11:93:90:47:7c:ee:e0:9f: 29:10:51:d2:19:3c:f2:23:e0:95:5b:8b:d1:48:25:9d:50:bc: 56:93:fa:7f:be:9e:e6:45:a0:ef:2a:6c:38:99:d7:3a:1b:b2: d9:9c:eb:6e:db:e9:46:ef:cb:3c:9b:a0:85:6f:52:c4:e1:12: f5:75:76:50:f6:ce:1a:bc:7a:85:58:45:e7:f8:e7:e7:3d:a0: 6b:d4:d4:a0:f3:60:d2:99:bf:13:9c:5e:16:6f:92:3a:71:02: 3e:87:e5:3e:78:14:de:7a:d6:46:51:a0:07:5a:47:35:fb:db: 7b:d1:9c:fe:cf:4e:d1:ed:92:15:b7:fb:7c:78:12:3a:08:5e: f4:c9:41:ec:43:e3:0a:9c:d0:81:ca:48:b4:5b:59:b2:00:34: ca:9f:fc:76:ee:a7:c3:2c:4d:7d:95:26:89:a7:02:d3:ab:72: 6a:42:cd:3d -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUVnSqMeeyc7rVlMfDCwjNmUCQPrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTcxODUwNDZaFw0yNjExMTYxODU1NDZaMDMxMTAvBgNV BAMTKDMzMjA3MjI1RDFBM0FDQTg0MDA3RkJFMzk5QjA0OTczOTNGNzE1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LiLPmbkdr5krYtxtk6Mq9xlA XAjudda5rnvMcETqfddr5AbKVK4IXlfTpcWclpdXrwjetAQ4X6Wa+VRrcNV0dxKA lDM8UgH1dt4Ot2ObuCPUZBGN1mXLVyRSLQGOsztGOd8G8lbiEl402ZoYbuiUEaAZ P6UrTQqoqd/XuVMqt6x8Nm1IX2P4vh+n3FoyhFvjfbQ2QMEgbBOEX5i5u5zkE+EJ sphMAtvNgqIX/IOlaC0YKf5tlajfRPfgh5hnAnIUrlgg/m3ZR1HoJfq2wEMZCKZ4 KzpLr6QbF1GGZ5dKcenT4ExUVfOaqKfhg+RfhEMk2LkJ/ydbPaLVbs/o4r+BAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUMyByJdGjrKhAB/vjmbBJc5P3FbkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNjMzMzUzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9/zANBgkqhkiG9w0BAQsFAAOCAQEAOc6Up9LkB2tvfcRG1nsq42wnWIwN 6v73w1NXiVhudvrl//jxEaWzeA2Usee3n36NjiA7Mhy0j1crV4mutJipfj71xyE2 Hbh/FNMjEvOTVcORSxGTkEd87uCfKRBR0hk88iPglVuL0UglnVC8VpP6f76e5kWg 7ypsOJnXOhuy2ZzrbtvpRu/LPJughW9SxOES9XV2UPbOGrx6hVhF5/jn5z2ga9TU oPNg0pm/E5xeFm+SOnECPoflPngU3nrWRlGgB1pHNfvbe9Gc/s9O0e2SFbf7fHgS Oghe9MlB7EPjCpzQgcpItFtZsgA0yp/8du6nwyxNfZUmiacC06tyakLNPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:46 2025 by rpki-client