This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20323035383836.roa File: 33312e362e35392e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: 4+oAaRgxvnzX3VaxzPKO7oAuTbLkpy88iu1bJahoNA8= Subject key identifier: 00:4B:AA:42:76:19:2D:5F:47:9E:82:C7:68:44:42:E6:DA:10:03:20 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 588D2D099E436F8DC8BA5C6BBA587E07B21BCBAD Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20323035383836.roa Signing time: Fri 14 Nov 2025 10:23:01 +0000 ROA not before: Fri 14 Nov 2025 10:18:01 +0000 ROA not after: Fri 13 Nov 2026 10:23:01 +0000 asID: 205886 IP address blocks: 31.6.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8d:2d:09:9e:43:6f:8d:c8:ba:5c:6b:ba:58:7e:07:b2:1b:cb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 14 10:18:01 2025 GMT Not After : Nov 13 10:23:01 2026 GMT Subject: CN=004BAA4276192D5F479E82C7684442E6DA100320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:a2:31:43:29:a7:e0:15:fa:3a:10:75:e4: ba:6d:63:e5:8a:70:c7:3a:23:94:a0:93:36:fc:1b: 0b:d3:22:b3:b0:28:bb:8f:47:bc:b0:4d:df:5d:a6: d2:e1:8c:9d:e0:f5:0e:98:76:67:76:d7:46:ca:5f: c4:db:12:4f:3c:55:39:d0:50:eb:7d:3a:93:2d:77: f3:30:d3:65:60:28:f6:ac:ad:77:22:40:bf:58:21: 9b:b4:26:d7:ad:7c:3c:f2:c6:6b:ee:da:d6:73:5c: 54:ca:f4:09:d2:bd:a1:07:e6:95:db:fc:72:7d:91: d2:4f:31:fb:11:8d:55:72:95:b7:66:1a:a1:54:dc: 17:e4:97:38:1e:4b:67:79:36:31:01:4d:2a:38:d5: 67:84:d3:57:30:6f:93:c8:3a:3e:20:f9:f3:36:89: de:e5:8a:09:65:06:9e:88:26:da:8e:71:6f:dd:39: eb:24:49:bf:7e:7e:0d:ad:5c:7a:aa:63:eb:b3:94: 45:c3:d8:93:9e:69:8d:b4:35:9e:6d:4f:3f:ab:d9: 82:10:f9:17:31:ea:e6:32:5f:09:af:0e:d1:4a:95: 2b:2c:a3:59:0b:6a:e9:6e:28:60:c6:dd:2e:9b:ab: 57:7f:95:44:38:e7:5b:84:c0:97:3b:15:5a:74:d0: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:AA:42:76:19:2D:5F:47:9E:82:C7:68:44:42:E6:DA:10:03:20 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.59.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:28:74:eb:00:c2:e8:b3:c6:52:05:ad:10:94:05:3a:4c:40: 3e:ea:89:0b:da:4d:74:b7:1e:9f:c1:82:f3:2e:8c:e2:d2:2e: 4f:aa:37:ad:3e:42:38:ed:61:f4:c6:9c:c6:fb:67:a8:47:c5: 25:78:23:d1:c8:ee:96:61:84:55:fa:8a:6b:b9:19:31:e6:05: 97:54:18:d9:15:ce:6c:7c:1d:84:88:e7:71:65:f0:76:b9:a9: 6c:ce:2a:e1:7f:20:37:77:a5:74:ba:3d:53:95:e8:d1:ad:97: 40:2d:7c:05:5e:d1:f4:0e:74:a1:5d:82:e9:8e:f3:67:82:b3: fc:12:cd:dd:c8:30:58:7c:6d:9e:a8:59:40:6a:1c:27:82:25: 7e:f8:7b:ad:e5:ec:d6:31:86:e0:46:49:73:d1:a9:5d:78:09: 14:65:f1:1f:ac:19:56:b2:8c:1d:75:da:e0:bb:eb:17:80:fc: 9b:b2:2f:ae:b6:50:b0:97:20:69:b2:28:e1:a4:ba:84:ba:bf: 20:5e:6c:66:49:c7:97:9f:88:d8:2b:96:be:14:f0:b4:dd:95: 05:bd:db:c9:6a:8e:da:53:77:bd:63:bb:ff:d3:57:17:6d:db: ee:f7:94:0e:87:5c:b5:2c:58:2a:f4:a7:67:68:23:0a:27:3c: 88:e8:23:47 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWI0tCZ5Db43Iulxrulh+B7Iby60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMTQxMDE4MDFaFw0yNjExMTMxMDIzMDFaMDMxMTAvBgNV BAMTKDAwNEJBQTQyNzYxOTJENUY0NzlFODJDNzY4NDQ0MkU2REExMDAzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cqIxQymn4BX6OhB15LptY+WK cMc6I5Sgkzb8GwvTIrOwKLuPR7ywTd9dptLhjJ3g9Q6Ydmd210bKX8TbEk88VTnQ UOt9OpMtd/Mw02VgKPasrXciQL9YIZu0JtetfDzyxmvu2tZzXFTK9AnSvaEH5pXb /HJ9kdJPMfsRjVVylbdmGqFU3BfklzgeS2d5NjEBTSo41WeE01cwb5PIOj4g+fM2 id7ligllBp6IJtqOcW/dOeskSb9+fg2tXHqqY+uzlEXD2JOeaY20NZ5tTz+r2YIQ +Rcx6uYyXwmvDtFKlSsso1kLauluKGDG3S6bq1d/lUQ451uEwJc7FVp00N0vAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUAEuqQnYZLV9HnoLHaERC5toQAyAwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzkyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODM4MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjsw DQYJKoZIhvcNAQELBQADggEBAG0odOsAwuizxlIFrRCUBTpMQD7qiQvaTXS3Hp/B gvMujOLSLk+qN60+QjjtYfTGnMb7Z6hHxSV4I9HI7pZhhFX6imu5GTHmBZdUGNkV zmx8HYSI53Fl8Ha5qWzOKuF/IDd3pXS6PVOV6NGtl0AtfAVe0fQOdKFdgumO82eC s/wSzd3IMFh8bZ6oWUBqHCeCJX74e63l7NYxhuBGSXPRqV14CRRl8R+sGVayjB11 2uC76xeA/JuyL662ULCXIGmyKOGkuoS6vyBebGZJx5efiNgrlr4U8LTdlQW928lq jtpTd71ju//TVxdt2+73lA6HXLUsWCr0p2doIwonPIjoI0c= -----END CERTIFICATE-----Generated at Fri Dec 5 04:56:19 2025 by rpki-client