This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20323035393830.roa File: 33312e362e34332e302f32342d3234203d3e20323035393830.roa (raw, json) Hash identifier: ZIa+UHdB2AxxdYYZUqTy58Kst6gGjYE4oMkPxHJ9aSE= Subject key identifier: 72:03:E4:CA:A5:2E:65:38:C6:A6:79:08:D1:35:A8:B5:49:D2:9E:16 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 38B5223416A5B9932A3385002A99BE38CF91C5EA Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20323035393830.roa Signing time: Wed 26 Nov 2025 20:01:20 +0000 ROA not before: Wed 26 Nov 2025 19:56:20 +0000 ROA not after: Wed 25 Nov 2026 20:01:20 +0000 asID: 205980 IP address blocks: 31.6.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b5:22:34:16:a5:b9:93:2a:33:85:00:2a:99:be:38:cf:91:c5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 26 19:56:20 2025 GMT Not After : Nov 25 20:01:20 2026 GMT Subject: CN=7203E4CAA52E6538C6A67908D135A8B549D29E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6f:00:fb:53:01:8d:91:c7:91:85:6b:87:73: 56:89:3a:46:b2:b8:f0:6b:9f:4a:69:8c:9f:74:d1: 0a:69:88:1c:26:2f:fe:42:91:8d:2e:b6:d4:53:52: 9f:97:da:7c:48:e3:96:dd:d1:f7:86:ab:47:91:71: c9:30:37:c8:d9:7b:3f:f2:69:77:e8:84:e4:bd:8c: 5e:29:3b:47:02:bc:43:dd:aa:ca:bf:9a:5e:ed:bc: 89:ea:d2:ff:f6:ff:0e:e4:4d:6a:e0:a7:f2:46:43: 0c:ca:83:ff:71:b7:e1:90:38:73:ba:31:4b:2a:ea: c0:5c:b6:d9:6b:25:a5:d1:ef:a2:e5:9b:2b:cb:cd: a7:8d:fd:9c:81:85:4f:0e:30:4d:b4:d6:dd:6d:04: 54:55:7a:3f:ea:e8:40:6f:02:e3:9f:e1:f9:04:38: 2c:b6:53:ae:bc:fe:a9:c7:ca:ae:7c:66:56:0e:9a: 2a:2f:2a:65:ee:83:d3:11:f9:92:ec:81:50:c9:55: 83:48:15:d1:34:02:dc:d7:71:71:63:3e:e9:7f:e5: 2c:f4:c1:16:fb:2b:ed:a6:db:16:af:62:cd:de:d8: ec:73:e0:1b:ac:51:bb:ed:f9:07:f3:88:10:76:d0: c7:29:3e:44:ee:85:e2:aa:8d:f1:45:c3:00:33:b0: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:E4:CA:A5:2E:65:38:C6:A6:79:08:D1:35:A8:B5:49:D2:9E:16 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20323035393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.43.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:cf:fe:93:51:7a:03:08:a9:3a:74:bb:ab:f1:55:52:32:87: 40:fb:ba:fa:c6:d0:27:e7:4e:75:c5:65:8b:14:42:6d:6e:b5: a4:41:d5:79:4b:d1:dc:af:48:c5:61:50:2b:d7:b5:5a:77:1c: 8f:8d:b3:fb:e6:5e:a0:c1:ca:78:86:05:c7:e3:39:77:7f:06: 63:d4:17:8c:42:86:95:98:b8:0c:1e:cf:78:f1:9a:a6:10:89: 55:70:35:b6:e2:6d:b0:60:ee:99:05:b5:e8:21:e7:42:f7:f9: e5:c2:27:07:c2:f7:eb:01:2c:d6:72:9e:b4:1c:88:25:5c:d5: 0c:8c:d6:e9:d7:09:de:03:72:d2:f3:60:59:af:bc:da:9c:94: d9:07:b1:72:6e:4f:e9:06:cc:39:9c:cc:ed:73:e3:c4:19:c3: 81:d7:0b:b1:70:1d:81:cf:78:49:09:f3:0f:6c:41:83:b3:cb: c0:98:93:8b:c5:83:c9:f9:9b:75:28:8f:4d:79:22:1a:c3:ce: f2:8a:8a:8b:6a:77:a5:0a:6e:6c:bc:d4:b5:d7:1b:75:43:59: c9:b8:fe:18:05:cf:b7:27:f5:58:1b:16:7e:de:cb:69:07:07: a6:fc:1a:39:35:c5:c0:33:0f:89:c1:41:8b:cf:cc:a9:0d:72: 8a:bc:c1:eb -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOLUiNBaluZMqM4UAKpm+OM+RxeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjYxOTU2MjBaFw0yNjExMjUyMDAxMjBaMDMxMTAvBgNV BAMTKDcyMDNFNENBQTUyRTY1MzhDNkE2NzkwOEQxMzVBOEI1NDlEMjlFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDybwD7UwGNkceRhWuHc1aJOkay uPBrn0ppjJ900QppiBwmL/5CkY0uttRTUp+X2nxI45bd0feGq0eRcckwN8jZez/y aXfohOS9jF4pO0cCvEPdqsq/ml7tvInq0v/2/w7kTWrgp/JGQwzKg/9xt+GQOHO6 MUsq6sBcttlrJaXR76LlmyvLzaeN/ZyBhU8OME201t1tBFRVej/q6EBvAuOf4fkE OCy2U668/qnHyq58ZlYOmiovKmXug9MR+ZLsgVDJVYNIFdE0AtzXcXFjPul/5Sz0 wRb7K+2m2xavYs3e2Oxz4BusUbvt+QfziBB20McpPkTuheKqjfFFwwAzsKCBAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUcgPkyqUuZTjGpnkI0TWotUnSnhYwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzMyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzOTM4MzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBisw DQYJKoZIhvcNAQELBQADggEBACzP/pNRegMIqTp0u6vxVVIyh0D7uvrG0CfnTnXF ZYsUQm1utaRB1XlL0dyvSMVhUCvXtVp3HI+Ns/vmXqDByniGBcfjOXd/BmPUF4xC hpWYuAwez3jxmqYQiVVwNbbibbBg7pkFtegh50L3+eXCJwfC9+sBLNZynrQciCVc 1QyM1unXCd4DctLzYFmvvNqclNkHsXJuT+kGzDmczO1z48QZw4HXC7FwHYHPeEkJ 8w9sQYOzy8CYk4vFg8n5m3Uoj015IhrDzvKKiotqd6UKbmy81LXXG3VDWcm4/hgF z7cn9VgbFn7ey2kHB6b8Gjk1xcAzD4nBQYvPzKkNcoq8wes= -----END CERTIFICATE-----Generated at Fri Dec 5 04:56:19 2025 by rpki-client