This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31322e302f32342d3234203d3e20323132333335.roa File: 33312e362e31322e302f32342d3234203d3e20323132333335.roa (raw, json) Hash identifier: MWQEjFaWTdLx1yBrEcAiMhwbH96XujllTpEmttxhC9o= Subject key identifier: 1B:75:82:D2:33:37:89:99:F6:AB:2B:D9:79:C0:0E:A0:DA:9B:40:D0 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 0B064EEB66FD324005E58E83BA8CB41F10777BB1 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31322e302f32342d3234203d3e20323132333335.roa Signing time: Thu 22 Jan 2026 07:55:35 +0000 ROA not before: Thu 22 Jan 2026 07:50:35 +0000 ROA not after: Thu 21 Jan 2027 07:55:35 +0000 asID: 212335 IP address blocks: 31.6.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:06:4e:eb:66:fd:32:40:05:e5:8e:83:ba:8c:b4:1f:10:77:7b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Jan 22 07:50:35 2026 GMT Not After : Jan 21 07:55:35 2027 GMT Subject: CN=1B7582D233378999F6AB2BD979C00EA0DA9B40D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:55:9b:e6:0a:6e:86:54:83:f8:a5:5d:9c: 52:06:8f:64:0e:f6:c8:90:4e:7b:27:f2:aa:df:17: 48:ab:19:4c:39:86:dc:bb:c9:07:50:36:a2:38:23: 59:aa:c6:26:1b:1c:20:66:eb:21:1b:c8:29:bb:86: dc:d1:8f:94:28:46:fe:74:b4:57:63:f3:1b:6d:21: 1d:b5:68:d5:47:0e:6f:e2:d9:b8:76:1d:25:31:ce: 43:e9:7f:f1:11:06:b8:08:60:f4:51:cf:cf:e2:9c: 4a:4f:24:8d:2c:90:4f:ca:77:7c:65:fa:88:f8:39: 9e:37:de:0e:ff:d2:b7:f7:8e:42:e9:88:18:9f:9d: a8:08:37:4d:b1:11:b6:1c:21:06:d9:7e:ee:c5:fb: a6:02:eb:9f:7b:36:9f:00:e3:28:c9:9a:26:f1:21: b7:4f:2c:68:fb:d1:31:61:74:40:b8:40:08:a7:08: ad:a8:96:a2:69:e4:ef:3c:8d:42:1c:04:0f:d9:30: 29:f3:83:79:04:ad:42:09:c5:12:92:4f:4d:18:18: 1f:ac:fb:0f:1e:e6:f9:77:be:e6:f7:05:22:b4:96: 0c:cb:a6:c8:55:d7:95:79:e3:e2:8e:76:dd:af:42: a5:e3:42:06:72:ea:10:04:e6:ea:4e:a6:f5:7c:44: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:75:82:D2:33:37:89:99:F6:AB:2B:D9:79:C0:0E:A0:DA:9B:40:D0 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31322e302f32342d3234203d3e20323132333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.12.0/24 Signature Algorithm: sha256WithRSAEncryption 33:72:54:19:cb:00:36:4d:90:ee:6b:bc:1a:1e:44:17:d4:c8: ec:a1:11:57:43:0f:2e:05:1e:46:6c:f4:0f:08:e5:2c:7c:e6: d7:68:a5:c0:37:42:5d:51:11:7d:25:7a:84:d1:89:f8:ba:10: 0a:f9:9a:34:a4:c6:bc:6b:03:78:74:f9:60:34:02:6d:c3:04: d8:73:e8:ad:c8:50:3a:a9:97:2c:74:3d:16:51:45:b2:18:a2: 46:e0:59:ea:87:81:41:46:52:28:46:07:a2:eb:41:50:f8:cc: 1d:76:66:e3:f8:90:81:e8:31:59:63:7c:3f:b6:e9:e0:f4:13: bd:28:29:89:ff:b9:20:3e:42:e7:b6:9b:99:60:52:ed:5b:20: 65:94:39:30:dd:bb:f9:2e:c1:f6:d4:f0:b8:a2:52:b6:94:47: a6:80:fe:04:b4:bd:c3:5f:d1:da:46:02:9a:73:c0:08:2d:58: 06:8f:e1:f0:59:d9:e7:15:7a:5c:f5:92:1a:2e:7d:d6:1b:c5: db:6f:e6:3c:aa:e0:10:d3:b6:68:ce:d2:83:df:87:7c:d0:17: 0a:8d:24:d8:32:2c:0d:91:e4:f3:91:2d:85:95:49:95:f6:3f: 03:35:72:29:c2:64:70:f7:c5:62:62:3f:d2:84:47:6e:bb:fa: 2b:bd:fc:f6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCwZO62b9MkAF5Y6Duoy0HxB3e7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNjAxMjIwNzUwMzVaFw0yNzAxMjEwNzU1MzVaMDMxMTAvBgNV BAMTKDFCNzU4MkQyMzMzNzg5OTlGNkFCMkJEOTc5QzAwRUEwREE5QjQwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuFWb5gpuhlSD+KVdnFIGj2QO 9siQTnsn8qrfF0irGUw5hty7yQdQNqI4I1mqxiYbHCBm6yEbyCm7htzRj5QoRv50 tFdj8xttIR21aNVHDm/i2bh2HSUxzkPpf/ERBrgIYPRRz8/inEpPJI0skE/Kd3xl +oj4OZ433g7/0rf3jkLpiBifnagIN02xEbYcIQbZfu7F+6YC6597Np8A4yjJmibx IbdPLGj70TFhdEC4QAinCK2olqJp5O88jUIcBA/ZMCnzg3kErUIJxRKST00YGB+s +w8e5vl3vub3BSK0lgzLpshV15V54+KOdt2vQqXjQgZy6hAE5upOpvV8RHlLAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUG3WC0jM3iZn2qyvZecAOoNqbQNAwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMxMzIyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzMzMzUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBgww DQYJKoZIhvcNAQELBQADggEBADNyVBnLADZNkO5rvBoeRBfUyOyhEVdDDy4FHkZs 9A8I5Sx85tdopcA3Ql1REX0leoTRifi6EAr5mjSkxrxrA3h0+WA0Am3DBNhz6K3I UDqplyx0PRZRRbIYokbgWeqHgUFGUihGB6LrQVD4zB12ZuP4kIHoMVljfD+26eD0 E70oKYn/uSA+Que2m5lgUu1bIGWUOTDdu/kuwfbU8LiiUraUR6aA/gS0vcNf0dpG AppzwAgtWAaP4fBZ2ecVelz1khoufdYbxdtv5jyq4BDTtmjO0oPfh3zQFwqNJNgy LA2R5PORLYWVSZX2PwM1cinCZHD3xWJiP9KER267+iu9/PY= -----END CERTIFICATE-----Generated at Sun Jan 25 15:45:45 2026 by rpki-client