This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e2039303039.roa File: 33312e362e35362e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: glKZCYOi504+RzBpP4cuDQzH7icgXu1piw80cE82l7w= Subject key identifier: A2:ED:0B:EB:F6:EA:57:41:54:AA:4C:19:FC:ED:B3:19:C4:B5:70:AD Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 3C9221FE644381616DDB0EA592A1D42E2378C62A Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e2039303039.roa Signing time: Fri 28 Nov 2025 16:26:32 +0000 ROA not before: Fri 28 Nov 2025 16:21:32 +0000 ROA not after: Fri 27 Nov 2026 16:26:32 +0000 asID: 9009 IP address blocks: 31.6.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:92:21:fe:64:43:81:61:6d:db:0e:a5:92:a1:d4:2e:23:78:c6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 28 16:21:32 2025 GMT Not After : Nov 27 16:26:32 2026 GMT Subject: CN=A2ED0BEBF6EA574154AA4C19FCEDB319C4B570AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:84:43:af:2e:b3:f8:49:7b:b9:9d:8b:cf:f7: 9b:f2:b7:74:0e:ed:40:d4:cf:3b:65:8e:5c:55:e7: e7:5d:47:ef:6f:6a:9e:bc:7b:93:ed:e7:53:08:a1: 85:0d:08:7a:53:e6:54:ac:21:68:ad:7e:fa:53:c2: 92:a2:3f:07:d5:67:d2:af:cc:37:46:56:87:8e:96: 5f:a0:7a:e0:4a:48:3d:f7:a4:89:d9:ab:2e:a1:00: a0:3f:41:d4:75:0c:32:a7:71:b0:10:c8:6b:8e:f3: f3:4a:9a:b4:4e:95:23:57:13:24:36:d3:4f:b9:7a: 9f:bf:42:b9:32:4c:66:58:83:c9:28:b4:7e:e5:ff: 81:d8:05:23:eb:c9:dc:f1:c0:9c:b5:d4:87:d9:4a: a4:49:ad:4c:3b:75:0b:18:5c:bb:f3:25:f3:8d:1f: 96:dc:8a:06:c1:e1:54:cb:2d:b6:2f:38:11:6f:83: a7:25:ee:59:35:f7:18:74:90:9b:68:4c:2f:dc:be: 51:5b:0f:66:cb:33:9f:fe:a3:92:88:1a:f0:5a:fd: e2:d5:08:06:93:b5:af:07:58:e5:ec:f9:a6:14:79: eb:a1:d9:77:0a:41:1f:14:08:66:c0:c2:44:a4:8f: f6:83:91:84:73:8c:13:c3:60:a7:fe:87:a1:d0:99: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:ED:0B:EB:F6:EA:57:41:54:AA:4C:19:FC:ED:B3:19:C4:B5:70:AD X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35362e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.56.0/24 Signature Algorithm: sha256WithRSAEncryption 09:9e:47:68:dd:41:bc:9d:fe:7d:be:f8:8c:9c:9a:51:40:24: fb:25:4d:9a:d9:19:73:f6:9f:85:af:13:2e:4d:21:74:2e:42: 05:c9:89:97:98:88:7e:ff:47:bd:2c:c3:22:44:66:f6:79:66: 62:93:c6:ae:5d:dd:b1:45:c7:8f:b9:31:5e:8a:dc:c9:38:c4: 81:0f:94:66:00:c2:29:d6:2a:2c:02:6f:f0:8d:b5:da:7d:f8: 51:00:30:bb:8a:db:38:b8:cc:a2:a8:bb:c8:c1:62:26:13:26: 2e:c0:b4:71:ac:77:c4:3d:d1:35:3e:3e:a2:b6:15:62:ba:4c: b4:1a:03:22:31:6c:b5:d8:91:d3:a4:f4:2a:eb:5f:12:0a:7a: 86:7f:01:98:32:ac:53:3e:4f:85:13:e2:b3:75:a9:a5:49:e6: 51:aa:14:c0:bc:ab:38:09:da:b1:b4:dc:25:c1:b4:4a:34:fd: 65:19:f3:d2:b5:04:61:41:16:71:76:1f:66:f5:e1:5b:c7:e2: 9a:96:66:89:ce:24:b0:ef:e2:04:69:07:84:8a:9b:69:cc:b6: 30:17:e9:3e:96:2e:73:e6:3e:38:2d:02:09:46:ee:81:e2:02: e2:8a:1e:da:be:c3:7b:fc:8d:4f:73:43:d4:24:fb:31:2c:9c: eb:b2:00:34 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUPJIh/mRDgWFt2w6lkqHULiN4xiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjgxNjIxMzJaFw0yNjExMjcxNjI2MzJaMDMxMTAvBgNV BAMTKEEyRUQwQkVCRjZFQTU3NDE1NEFBNEMxOUZDRURCMzE5QzRCNTcwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhEOvLrP4SXu5nYvP95vyt3QO 7UDUzztljlxV5+ddR+9vap68e5Pt51MIoYUNCHpT5lSsIWitfvpTwpKiPwfVZ9Kv zDdGVoeOll+geuBKSD33pInZqy6hAKA/QdR1DDKncbAQyGuO8/NKmrROlSNXEyQ2 00+5ep+/QrkyTGZYg8kotH7l/4HYBSPrydzxwJy11IfZSqRJrUw7dQsYXLvzJfON H5bcigbB4VTLLbYvOBFvg6cl7lk19xh0kJtoTC/cvlFbD2bLM5/+o5KIGvBa/eLV CAaTta8HWOXs+aYUeeuh2XcKQR8UCGbAwkSkj/aDkYRzjBPDYKf+h6HQmbM3AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUou0L6/bqV0FUqkwZ/O2zGcS1cK0wHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzYyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8GODANBgkq hkiG9w0BAQsFAAOCAQEACZ5HaN1BvJ3+fb74jJyaUUAk+yVNmtkZc/afha8TLk0h dC5CBcmJl5iIfv9HvSzDIkRm9nlmYpPGrl3dsUXHj7kxXorcyTjEgQ+UZgDCKdYq LAJv8I212n34UQAwu4rbOLjMoqi7yMFiJhMmLsC0cax3xD3RNT4+orYVYrpMtBoD IjFstdiR06T0KutfEgp6hn8BmDKsUz5PhRPis3WppUnmUaoUwLyrOAnasbTcJcG0 SjT9ZRnz0rUEYUEWcXYfZvXhW8fimpZmic4ksO/iBGkHhIqbacy2MBfpPpYuc+Y+ OC0CCUbugeIC4ooe2r7De/yNT3ND1CT7MSyc67IANA== -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:28 2025 by rpki-client