This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20383334.roa File: 33312e362e35322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: hCcHb0mLWBksC5ZMqIjvAYhjS26j6tlndPVhiXtp5Wo= Subject key identifier: 47:D3:8A:5F:D3:4C:51:65:9B:C6:1E:8D:EF:7A:01:46:A9:4A:77:33 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 2E347599507A88D0F2DD9DB3FF021A9D1466F478 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 00:01:29 +0000 ROA not before: Thu 13 Nov 2025 23:56:29 +0000 ROA not after: Fri 13 Nov 2026 00:01:29 +0000 asID: 834 IP address blocks: 31.6.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:34:75:99:50:7a:88:d0:f2:dd:9d:b3:ff:02:1a:9d:14:66:f4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 13 23:56:29 2025 GMT Not After : Nov 13 00:01:29 2026 GMT Subject: CN=47D38A5FD34C51659BC61E8DEF7A0146A94A7733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:38:83:73:13:47:1e:33:b8:2c:25:1c:55: 1c:65:72:cc:c0:45:49:9a:cb:0e:e9:8d:47:a3:70: 55:3f:98:2d:be:96:af:07:27:69:73:78:d3:8f:a0: 92:88:6f:84:43:07:20:7e:fe:08:7d:61:6e:ac:4e: f3:aa:e1:05:39:97:c5:9e:56:ec:fd:eb:c3:c6:67: e7:61:ee:14:8e:67:28:b0:30:e5:c8:1b:f8:fd:26: a9:8a:25:0b:be:e2:5b:56:38:36:32:e5:6d:a2:a1: 12:bc:78:58:65:c7:aa:fd:e8:33:ba:89:c8:81:33: 6c:b6:db:d0:03:f8:67:12:28:fe:dd:f6:57:2d:44: fa:f1:8f:05:25:56:f2:11:8a:ef:9f:74:51:d2:fe: 01:77:4f:a3:d0:f9:65:26:ca:59:5c:ee:da:5f:1f: a2:06:47:1a:ac:c3:87:6e:12:7e:ff:4c:c4:0e:2a: 3d:0c:fa:41:d4:67:31:bf:c2:d0:5d:f6:32:e9:bb: 74:c5:3e:32:46:fe:9e:72:7f:6a:5a:71:4b:e1:74: cf:2d:6d:fb:51:37:6c:e8:0e:75:eb:bb:cb:bc:f2: 2d:ee:ce:40:70:c7:90:1c:13:ab:a2:f7:43:fc:b3: a3:ed:94:25:ca:e1:40:00:f9:29:ea:4e:88:7f:c7: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:8A:5F:D3:4C:51:65:9B:C6:1E:8D:EF:7A:01:46:A9:4A:77:33 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.52.0/24 Signature Algorithm: sha256WithRSAEncryption 97:d2:84:f4:7e:57:bb:4d:79:1d:b1:f8:e1:7f:89:12:e5:c4: 07:af:80:87:3f:35:da:e6:ae:98:27:c1:79:b6:08:b5:a9:88: dd:7f:71:00:47:81:60:a4:ed:b5:d1:f6:32:be:93:a6:70:27: 37:80:cc:84:30:bb:6a:b2:40:80:87:a8:ff:88:d8:b5:5f:43: c1:15:a5:41:bf:28:4c:e4:bb:ce:12:1d:95:13:5a:cc:1a:5b: e6:5d:e7:65:11:f9:c3:55:65:e8:59:31:0a:94:1a:fa:af:91: c9:c9:95:48:74:ed:94:d4:08:11:7d:de:8e:37:71:98:81:c1: 1d:cd:3a:11:c1:fc:0f:5d:55:9f:35:f1:ff:6d:3f:75:98:6a: 76:a4:8b:3b:d2:47:22:ff:d8:3c:ce:57:d6:af:21:77:1f:84: 8f:41:01:e5:13:06:80:80:0c:50:86:8e:83:50:bf:35:19:ad: 6f:27:9e:56:8b:09:02:dc:ce:d4:7b:ad:59:85:ff:89:f1:30: 56:57:25:95:68:28:ed:4c:cd:c8:87:fd:6b:91:44:bf:87:ce: 91:ec:d3:73:d1:38:a1:23:06:53:95:1c:d3:2f:41:9d:54:b3: 4d:a2:f9:c8:07:5e:5b:d8:16:ed:6d:2e:37:2c:41:67:b4:af: e3:5d:f2:1f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIULjR1mVB6iNDy3Z2z/wIanRRm9HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMTMyMzU2MjlaFw0yNjExMTMwMDAxMjlaMDMxMTAvBgNV BAMTKDQ3RDM4QTVGRDM0QzUxNjU5QkM2MUU4REVGN0EwMTQ2QTk0QTc3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbjiDcxNHHjO4LCUcVRxlcszA RUmayw7pjUejcFU/mC2+lq8HJ2lzeNOPoJKIb4RDByB+/gh9YW6sTvOq4QU5l8We Vuz968PGZ+dh7hSOZyiwMOXIG/j9JqmKJQu+4ltWODYy5W2ioRK8eFhlx6r96DO6 iciBM2y229AD+GcSKP7d9lctRPrxjwUlVvIRiu+fdFHS/gF3T6PQ+WUmyllc7tpf H6IGRxqsw4duEn7/TMQOKj0M+kHUZzG/wtBd9jLpu3TFPjJG/p5yf2pacUvhdM8t bftRN2zoDnXru8u88i3uzkBwx5AcE6ui90P8s6PtlCXK4UAA+SnqToh/x5dFAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUR9OKX9NMUWWbxh6N73oBRqlKdzMwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzIyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjQwDQYJKoZI hvcNAQELBQADggEBAJfShPR+V7tNeR2x+OF/iRLlxAevgIc/NdrmrpgnwXm2CLWp iN1/cQBHgWCk7bXR9jK+k6ZwJzeAzIQwu2qyQICHqP+I2LVfQ8EVpUG/KEzku84S HZUTWswaW+Zd52UR+cNVZehZMQqUGvqvkcnJlUh07ZTUCBF93o43cZiBwR3NOhHB /A9dVZ818f9tP3WYanakizvSRyL/2DzOV9avIXcfhI9BAeUTBoCADFCGjoNQvzUZ rW8nnlaLCQLcztR7rVmF/4nxMFZXJZVoKO1MzciH/WuRRL+HzpHs03PROKEjBlOV HNMvQZ1Us02i+cgHXlvYFu1tLjcsQWe0r+Nd8h8= -----END CERTIFICATE-----Generated at Fri Dec 5 04:56:21 2025 by rpki-client