This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa File: 33312e362e33362e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: Gsu7dz94K9b2jvQhK/oOJU6M6MYORj1bVJQbmIwQvug= Subject key identifier: 21:39:4B:ED:96:24:09:53:7F:89:A6:D1:F9:A9:CA:E8:C1:04:63:C5 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 46E56131DB663CA78CECEB336B3EFE4D588D74EC Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa Signing time: Sat 22 Nov 2025 12:55:12 +0000 ROA not before: Sat 22 Nov 2025 12:50:12 +0000 ROA not after: Sat 21 Nov 2026 12:55:12 +0000 asID: 61317 IP address blocks: 31.6.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 19:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e5:61:31:db:66:3c:a7:8c:ec:eb:33:6b:3e:fe:4d:58:8d:74:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 22 12:50:12 2025 GMT Not After : Nov 21 12:55:12 2026 GMT Subject: CN=21394BED962409537F89A6D1F9A9CAE8C10463C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:db:26:77:fd:2a:5b:3f:eb:25:b0:74:23: 34:b9:e0:c0:38:f4:f6:d4:15:4c:0d:5f:80:a2:2d: f4:37:55:d6:54:36:ca:e7:93:8d:23:d6:a6:4a:3b: cb:b0:55:56:d0:3b:f2:69:8c:fd:5d:13:ba:cb:ff: d6:6a:76:ca:21:88:16:54:f4:79:c7:22:94:53:5e: a1:2e:89:ec:21:93:af:2e:24:75:57:d0:f6:47:33: fc:ca:6b:ad:b9:e0:1c:14:2a:36:5a:d4:bf:84:35: 46:88:ee:9e:9d:cb:4d:7c:18:fb:f6:ce:b1:25:b2: 13:f0:c6:7c:8b:8f:b9:ff:c8:8e:88:24:4a:f4:5e: 78:dd:c6:d3:b5:44:df:8f:5a:25:0c:22:b4:3d:37: 8e:18:f6:57:ae:81:01:25:5a:09:86:92:71:17:d9: 1d:6f:92:19:0c:b1:b8:ac:1e:62:c1:7e:bb:cb:fb: c9:a0:ba:fb:05:37:8b:0d:ea:5a:eb:68:39:b5:f2: 28:c6:0f:30:fd:d6:79:b0:ef:34:21:f1:5b:a2:bd: a8:09:dc:5a:cc:57:0d:d1:bc:fe:c6:7f:07:84:df: 78:f2:3e:7e:27:5b:54:3e:fe:32:2c:63:58:8b:3b: 3e:61:08:c2:d4:93:9f:e7:cb:f3:94:84:08:a8:63: 0f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:4B:ED:96:24:09:53:7F:89:A6:D1:F9:A9:CA:E8:C1:04:63:C5 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.36.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:23:b5:ac:94:48:c6:41:cd:e0:06:4e:ed:2a:2b:05:2f:8b: 44:3f:37:19:fc:93:b3:91:c9:15:c5:86:8e:52:97:1f:a5:b4: e2:91:c6:fe:4b:8b:f8:2b:7c:ba:6d:76:38:b9:35:bb:a1:34: 83:f4:2f:43:1a:75:d7:6b:be:e9:25:5d:d5:0e:ec:20:88:9d: 91:38:b7:5c:ef:f5:28:26:c3:bf:bf:a6:c0:1c:a1:20:48:6e: 22:0a:5c:25:61:86:e5:f4:72:46:cf:4c:92:5e:62:8b:17:14: eb:08:5d:38:9f:36:85:d2:06:ce:f8:d2:78:b8:87:1b:75:af: 18:10:50:02:ff:13:d9:cc:4c:9e:13:9d:7a:e4:ae:3f:5f:c7: 87:4d:b3:98:03:1f:2f:08:7c:c0:7c:87:a4:11:0f:e2:21:f8: 4d:70:79:40:c5:9d:e4:bf:29:b8:31:41:7d:00:27:5d:41:d5: 50:42:c6:6c:7a:46:af:f2:20:9d:f3:9c:0d:91:09:e1:e2:c3: ac:eb:bf:93:cc:5f:5d:fe:e5:3f:aa:49:97:fb:a9:9f:c9:c4: 80:d5:08:f7:81:63:a5:0f:91:c3:30:bc:62:18:b0:41:21:48: 12:13:7a:36:70:e5:07:7a:4f:6a:93:c6:46:bd:ca:c8:28:e6: 3a:fb:2a:cc -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIURuVhMdtmPKeM7Oszaz7+TViNdOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjIxMjUwMTJaFw0yNjExMjExMjU1MTJaMDMxMTAvBgNV BAMTKDIxMzk0QkVEOTYyNDA5NTM3Rjg5QTZEMUY5QTlDQUU4QzEwNDYzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcGNsmd/0qWz/rJbB0IzS54MA4 9PbUFUwNX4CiLfQ3VdZUNsrnk40j1qZKO8uwVVbQO/JpjP1dE7rL/9ZqdsohiBZU 9HnHIpRTXqEuiewhk68uJHVX0PZHM/zKa6254BwUKjZa1L+ENUaI7p6dy018GPv2 zrElshPwxnyLj7n/yI6IJEr0XnjdxtO1RN+PWiUMIrQ9N44Y9leugQElWgmGknEX 2R1vkhkMsbisHmLBfrvL+8mguvsFN4sN6lrraDm18ijGDzD91nmw7zQh8VuivagJ 3FrMVw3RvP7GfweE33jyPn4nW1Q+/jIsY1iLOz5hCMLUk5/ny/OUhAioYw+5AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUITlL7ZYkCVN/iabR+anK6MEEY8UwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMzMzYyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYkMA0G CSqGSIb3DQEBCwUAA4IBAQBNI7WslEjGQc3gBk7tKisFL4tEPzcZ/JOzkckVxYaO UpcfpbTikcb+S4v4K3y6bXY4uTW7oTSD9C9DGnXXa77pJV3VDuwgiJ2ROLdc7/Uo JsO/v6bAHKEgSG4iClwlYYbl9HJGz0ySXmKLFxTrCF04nzaF0gbO+NJ4uIcbda8Y EFAC/xPZzEyeE5165K4/X8eHTbOYAx8vCHzAfIekEQ/iIfhNcHlAxZ3kvym4MUF9 ACddQdVQQsZsekav8iCd85wNkQnh4sOs67+TzF9d/uU/qkmX+6mfycSA1Qj3gWOl D5HDMLxiGLBBIUgSE3o2cOUHek9qk8ZGvcrIKOY6+yrM -----END CERTIFICATE-----Generated at Sun Nov 23 05:26:48 2025 by rpki-client