This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa File: 33312e362e31362e302f32342d3234203d3e20323135373634.roa (raw, json) Hash identifier: U57dxZ6sPJjF5UKoMksyxBaQYk9pxh/9GrsuYf712EQ= Subject key identifier: A7:72:58:96:E8:89:AF:F3:98:66:17:E6:E6:06:EC:A3:73:DD:30:40 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 228B05A3AC728659210450DDC1B00EB17C2A260E Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa Signing time: Sun 09 Nov 2025 13:55:11 +0000 ROA not before: Sun 09 Nov 2025 13:50:11 +0000 ROA not after: Sun 08 Nov 2026 13:55:11 +0000 asID: 215764 IP address blocks: 31.6.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8b:05:a3:ac:72:86:59:21:04:50:dd:c1:b0:0e:b1:7c:2a:26:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 9 13:50:11 2025 GMT Not After : Nov 8 13:55:11 2026 GMT Subject: CN=A7725896E889AFF3986617E6E606ECA373DD3040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:8b:2d:33:4f:60:2b:0a:69:6c:0f:f0:1b: e0:3b:3c:01:a8:c2:ba:72:ff:98:fd:47:bc:89:64: 2c:74:90:83:e2:26:36:44:9d:ba:20:87:55:fb:76: 7a:50:ef:9c:75:0c:c6:ab:5b:3b:f6:b9:cf:17:da: 1d:f6:6f:6f:41:8f:eb:80:04:59:1b:2f:e3:e8:71: 65:74:a1:7c:d7:2b:06:a1:1e:c5:ca:1f:41:d2:44: 74:0f:2c:3a:5b:fa:06:32:bb:09:8d:2a:41:d8:39: de:b7:8a:8e:cd:91:86:46:c7:e8:18:38:e5:ee:66: 6e:30:75:78:36:bc:8f:25:d0:14:47:d2:cc:ac:a6: 21:18:cb:1c:40:d9:ae:90:9d:24:ed:da:fc:ed:07: 70:54:3a:25:af:92:60:a3:4a:a0:06:60:e0:8c:70: da:ea:a5:ee:3d:05:41:18:e1:98:37:a5:af:6f:e7: 70:f5:d0:9d:16:bb:22:15:31:d2:9b:bb:10:9c:a0: bc:e9:9d:62:95:17:7e:ab:2e:4f:2f:d9:e2:d2:33: a1:59:bc:cb:7f:01:7c:8a:4f:1f:5b:45:d7:5b:5a: e3:73:f7:6e:06:7f:cb:5f:a1:6e:a1:1d:54:f4:94: 07:2f:c1:95:ff:68:aa:da:79:3f:63:73:92:78:e0: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:72:58:96:E8:89:AF:F3:98:66:17:E6:E6:06:EC:A3:73:DD:30:40 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.16.0/24 Signature Algorithm: sha256WithRSAEncryption 33:86:20:1a:8d:c5:f9:f7:07:3a:54:36:b5:c7:1e:bc:5b:b4: 53:a4:66:b2:79:7b:94:88:94:6e:c8:f6:d4:99:b5:2a:b6:49: ab:bc:d4:19:f2:3b:5b:62:69:42:99:d3:84:b1:1f:0b:55:9d: 6e:25:82:be:ca:4b:15:c5:8e:98:36:7b:75:14:59:97:3f:4d: b1:3c:03:4c:e4:11:34:79:bf:4f:fe:00:b3:d4:ff:b4:41:e3: ac:0e:62:49:f4:40:cb:f7:01:74:db:89:93:6e:f2:44:fe:52: 02:1f:04:88:48:b4:f6:06:12:e4:27:e6:de:2f:17:2a:ab:ba: af:98:0a:30:99:a6:36:65:16:c2:66:17:3f:7b:2f:d1:42:c3: a1:f2:8b:c9:2c:97:12:e9:ee:49:ff:30:fa:5c:dd:11:32:b6: a5:d2:95:4f:86:2b:08:4a:39:b2:a9:ff:67:1c:db:16:e9:54: 2c:d3:ef:77:7d:fd:82:f7:4d:92:a1:8d:19:10:ec:7f:97:e6: 38:77:a0:c4:32:b8:5f:98:6f:0c:df:9a:39:e0:a4:28:30:af: 4a:4b:20:3d:33:9a:61:ce:cd:46:2b:f0:0d:88:fc:e9:a1:94: cd:0b:6e:a0:e5:1f:f2:d5:d3:0c:37:d9:1a:8c:56:05:4b:e8: 98:13:b0:38 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUIosFo6xyhlkhBFDdwbAOsXwqJg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMDkxMzUwMTFaFw0yNjExMDgxMzU1MTFaMDMxMTAvBgNV BAMTKEE3NzI1ODk2RTg4OUFGRjM5ODY2MTdFNkU2MDZFQ0EzNzNERDMwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMZostM09gKwppbA/wG+A7PAGo wrpy/5j9R7yJZCx0kIPiJjZEnbogh1X7dnpQ75x1DMarWzv2uc8X2h32b29Bj+uA BFkbL+PocWV0oXzXKwahHsXKH0HSRHQPLDpb+gYyuwmNKkHYOd63io7NkYZGx+gY OOXuZm4wdXg2vI8l0BRH0syspiEYyxxA2a6QnSTt2vztB3BUOiWvkmCjSqAGYOCM cNrqpe49BUEY4Zg3pa9v53D10J0WuyIVMdKbuxCcoLzpnWKVF36rLk8v2eLSM6FZ vMt/AXyKTx9bRddbWuNz924Gf8tfoW6hHVT0lAcvwZX/aKraeT9jc5J44D2nAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUp3JYluiJr/OYZhfm5gbso3PdMEAwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzYyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNzM2MzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBhAw DQYJKoZIhvcNAQELBQADggEBADOGIBqNxfn3BzpUNrXHHrxbtFOkZrJ5e5SIlG7I 9tSZtSq2Sau81BnyO1tiaUKZ04SxHwtVnW4lgr7KSxXFjpg2e3UUWZc/TbE8A0zk ETR5v0/+ALPU/7RB46wOYkn0QMv3AXTbiZNu8kT+UgIfBIhItPYGEuQn5t4vFyqr uq+YCjCZpjZlFsJmFz97L9FCw6Hyi8kslxLp7kn/MPpc3REytqXSlU+GKwhKObKp /2cc2xbpVCzT73d9/YL3TZKhjRkQ7H+X5jh3oMQyuF+YbwzfmjngpCgwr0pLID0z mmHOzUYr8A2I/OmhlM0LbqDlH/LV0ww32RqMVgVL6JgTsDg= -----END CERTIFICATE-----Generated at Fri Dec 5 04:55:49 2025 by rpki-client