This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20343031373736.roa File: 33312e362e35392e302f32342d3234203d3e20343031373736.roa (raw, json) Hash identifier: TkkGVRj+TCRB85RWRmoSnmyy0OVTjfyEp0GZR7DbP+c= Subject key identifier: FF:7E:51:C5:45:DF:2C:A3:EF:94:D1:BE:85:64:05:27:D8:BF:2C:01 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 01861C47D9CA5414E34BB3D2F9EE27EDE28C13D8 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20343031373736.roa Signing time: Mon 01 Dec 2025 08:50:45 +0000 ROA not before: Mon 01 Dec 2025 08:45:45 +0000 ROA not after: Mon 30 Nov 2026 08:50:45 +0000 asID: 401776 IP address blocks: 31.6.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:1c:47:d9:ca:54:14:e3:4b:b3:d2:f9:ee:27:ed:e2:8c:13:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 1 08:45:45 2025 GMT Not After : Nov 30 08:50:45 2026 GMT Subject: CN=FF7E51C545DF2CA3EF94D1BE85640527D8BF2C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:38:2f:c2:bf:5a:50:05:d3:82:db:61:34:d4: 0f:02:97:a7:d0:a8:d8:f9:e5:23:3c:b6:13:71:05: 2c:b2:6c:65:9d:e4:89:d3:cd:07:9a:a3:f0:c5:3f: 98:94:cf:21:e9:4f:a6:49:e8:62:30:06:11:f5:b7: 5c:dc:62:90:65:2d:81:d3:b0:62:ce:70:5b:be:ad: 7e:bb:95:1d:5b:c8:35:c3:5e:17:ae:37:99:d1:df: 4e:d8:52:92:1c:29:2f:d1:c6:12:59:15:cf:09:fb: a8:f0:ab:9a:9a:4a:a7:da:ac:09:05:e9:ac:9d:84: 92:92:01:f8:2a:31:6d:2f:cf:90:8c:6e:b0:62:ad: 5c:f3:e8:50:6d:10:8a:87:60:9f:07:50:16:1a:98: 15:e5:69:7e:45:b1:ee:a3:6c:b0:8d:63:0e:97:ec: 76:93:0e:ec:03:4d:12:a1:3d:02:42:f3:2d:b4:79: 26:2d:7f:62:77:1b:d7:39:b0:3e:dc:c8:62:0c:44: 05:56:78:de:fe:b4:98:0d:b1:f9:ef:ef:d5:60:97: 60:8f:7b:70:d5:c5:dd:72:b3:b9:02:30:5c:0f:8b: 40:f5:08:a2:ca:c4:eb:48:b1:de:83:b2:19:ad:03: ba:6b:f4:6c:8b:82:c5:ea:a2:5b:79:16:94:13:31: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7E:51:C5:45:DF:2C:A3:EF:94:D1:BE:85:64:05:27:D8:BF:2C:01 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e20343031373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.59.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:82:0b:5d:22:04:83:ef:28:77:6f:ac:ab:8b:8f:b9:f1:c0: 82:e0:3a:34:7e:68:10:8a:d1:e4:30:99:a1:4d:5f:57:5b:33: 4c:72:37:67:16:9b:52:6b:9f:ea:aa:f5:a1:70:59:b2:6f:fa: f0:4f:28:3c:fc:59:d5:75:11:73:0d:eb:c5:b2:31:8d:45:a5: d1:c5:4b:8e:9a:09:ab:3c:88:c7:ba:86:57:2e:68:f8:be:9a: cf:b8:5d:4c:0f:66:2a:7e:03:4a:68:c8:4c:14:b4:be:9f:ac: 56:38:73:29:b8:77:64:1d:8d:74:d6:0e:9d:a6:01:10:9c:15: 57:43:26:7a:60:53:62:06:bc:1a:cf:3b:01:c1:36:c8:23:c4: 91:33:78:5a:1a:a9:e8:cd:c7:13:e2:46:b3:e6:47:c1:dc:fa: 8b:30:85:3b:d0:2f:66:7d:d2:36:01:a0:33:aa:6e:d5:d7:27: 58:c1:ae:2f:07:ec:d6:3c:b3:94:6c:eb:7b:67:04:b6:1b:71: da:c7:54:1e:fd:2e:fe:90:3b:ae:57:97:a8:15:68:93:92:78: c2:7a:88:5d:23:c5:b9:f4:79:71:be:16:44:70:77:90:e0:91: e9:00:41:9e:b0:0c:0b:c4:4c:f2:67:56:9f:76:e1:67:7c:13: 41:59:23:4e -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAYYcR9nKVBTjS7PS+e4n7eKME9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDEwODQ1NDVaFw0yNjExMzAwODUwNDVaMDMxMTAvBgNV BAMTKEZGN0U1MUM1NDVERjJDQTNFRjk0RDFCRTg1NjQwNTI3RDhCRjJDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsOC/Cv1pQBdOC22E01A8Cl6fQ qNj55SM8thNxBSyybGWd5InTzQeao/DFP5iUzyHpT6ZJ6GIwBhH1t1zcYpBlLYHT sGLOcFu+rX67lR1byDXDXheuN5nR307YUpIcKS/RxhJZFc8J+6jwq5qaSqfarAkF 6aydhJKSAfgqMW0vz5CMbrBirVzz6FBtEIqHYJ8HUBYamBXlaX5Fse6jbLCNYw6X 7HaTDuwDTRKhPQJC8y20eSYtf2J3G9c5sD7cyGIMRAVWeN7+tJgNsfnv79Vgl2CP e3DVxd1ys7kCMFwPi0D1CKLKxOtIsd6DshmtA7pr9GyLgsXqolt5FpQTMV2DAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/35RxUXfLKPvlNG+hWQFJ9i/LAEwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzkyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzNzM3MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjsw DQYJKoZIhvcNAQELBQADggEBAEyCC10iBIPvKHdvrKuLj7nxwILgOjR+aBCK0eQw maFNX1dbM0xyN2cWm1Jrn+qq9aFwWbJv+vBPKDz8WdV1EXMN68WyMY1FpdHFS46a Cas8iMe6hlcuaPi+ms+4XUwPZip+A0poyEwUtL6frFY4cym4d2QdjXTWDp2mARCc FVdDJnpgU2IGvBrPOwHBNsgjxJEzeFoaqejNxxPiRrPmR8Hc+oswhTvQL2Z90jYB oDOqbtXXJ1jBri8H7NY8s5Rs63tnBLYbcdrHVB79Lv6QO65Xl6gVaJOSeMJ6iF0j xbn0eXG+FkRwd5DgkekAQZ6wDAvETPJnVp924Wd8E0FZI04= -----END CERTIFICATE-----Generated at Fri Dec 5 04:56:20 2025 by rpki-client