This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203239383032.roa File: 33312e362e33362e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: vTkBGVYl1czihivUq+tPaOwx3gciBTjbHCZmcEV5JzI= Subject key identifier: 38:CD:E5:D2:3A:26:B2:D6:1B:75:15:DF:62:49:DA:5A:4E:B4:73:66 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 31CBC0A45B485CC8C6ACC7275050438F7D77AD39 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203239383032.roa Signing time: Sat 22 Nov 2025 12:55:12 +0000 ROA not before: Sat 22 Nov 2025 12:50:12 +0000 ROA not after: Sat 21 Nov 2026 12:55:12 +0000 asID: 29802 IP address blocks: 31.6.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:cb:c0:a4:5b:48:5c:c8:c6:ac:c7:27:50:50:43:8f:7d:77:ad:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Nov 22 12:50:12 2025 GMT Not After : Nov 21 12:55:12 2026 GMT Subject: CN=38CDE5D23A26B2D61B7515DF6249DA5A4EB47366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:65:dc:d9:09:63:e6:3e:73:dd:b5:6e:b2: ec:13:77:dc:de:b4:89:38:ff:fe:10:8e:97:78:c5: 3c:08:b9:c0:5a:dc:a5:90:ed:68:cd:bf:cd:6f:c0: 97:f6:f7:1e:c8:31:86:ef:b4:0c:f5:e4:d1:2e:9c: 54:fd:86:8f:7e:35:2a:6f:8c:6c:88:f7:18:97:3d: cb:6a:cf:70:e2:76:70:98:ec:f4:9f:2b:1e:25:2e: 53:b3:99:d4:75:24:8f:3e:95:80:1b:80:a9:4b:03: 31:82:df:51:7a:39:a4:cc:67:83:76:ce:2b:bd:8d: f6:e5:61:9b:c8:7f:8e:7c:23:a3:ff:a7:41:0d:5b: a2:19:cc:d4:1e:6b:b3:bf:08:96:fa:cb:66:aa:d2: 06:4c:fc:3b:2a:2f:82:94:f3:0c:4b:50:81:fe:95: 73:2e:2c:5b:94:f5:b4:b3:24:18:29:4e:32:b1:de: 49:cf:6c:6e:e6:86:94:03:04:6a:ba:38:a5:0a:15: cf:d1:02:1d:99:c7:36:a8:e9:6d:0e:ae:22:e8:6f: 4e:fd:a6:59:df:c0:c1:d5:35:16:58:e7:03:f5:b9: 86:49:f1:3a:6c:fa:67:5b:62:d9:9f:be:87:62:80: aa:1e:8d:49:70:2b:c2:2b:c7:9f:c6:42:ee:05:91: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CD:E5:D2:3A:26:B2:D6:1B:75:15:DF:62:49:DA:5A:4E:B4:73:66 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33362e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.36.0/24 Signature Algorithm: sha256WithRSAEncryption 93:76:93:19:b1:67:81:a3:d1:75:62:e4:dc:7d:ca:b0:0c:06: dd:92:e5:87:56:ba:a2:e8:38:cd:2a:29:b8:2e:51:5b:7f:e5: a1:93:12:44:95:46:19:0c:bf:e1:31:a7:84:a5:a0:f0:8a:cb: 0c:b8:d6:e8:82:28:e8:49:e3:47:91:48:7f:57:b8:d5:72:60: dc:ed:55:65:7f:39:33:20:22:14:42:1a:b5:9e:33:5d:3d:27: e7:bf:c9:80:ae:39:b6:53:fc:a7:85:35:65:45:70:7f:ee:bd: 56:24:ee:bc:91:92:23:cd:28:8d:a5:22:69:b2:3a:c4:48:62: d9:62:cc:27:1b:27:2e:6c:9a:b9:29:ac:91:a6:da:04:13:e9: dc:b4:a4:98:aa:af:88:e9:de:98:df:37:53:44:02:7e:96:51: 35:d9:1c:e0:a7:89:3b:9f:99:b3:fe:fc:b0:b4:a8:1f:9f:67: 18:b1:4f:33:b0:08:c3:d3:03:0c:27:0f:8c:87:2c:6c:2e:64: 31:aa:3e:64:35:a5:f1:ff:81:6e:fa:6c:85:2e:56:08:9b:e9: e3:6e:75:4e:13:6c:64:88:9f:b1:5c:8a:72:c9:a1:c7:fd:8f: 47:64:03:2d:7f:b6:09:74:06:d3:dd:ab:55:38:87:b8:3e:92: c4:81:40:4f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUMcvApFtIXMjGrMcnUFBDj313rTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTExMjIxMjUwMTJaFw0yNjExMjExMjU1MTJaMDMxMTAvBgNV BAMTKDM4Q0RFNUQyM0EyNkIyRDYxQjc1MTVERjYyNDlEQTVBNEVCNDczNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoI2Xc2Qlj5j5z3bVusuwTd9ze tIk4//4Qjpd4xTwIucBa3KWQ7WjNv81vwJf29x7IMYbvtAz15NEunFT9ho9+NSpv jGyI9xiXPctqz3DidnCY7PSfKx4lLlOzmdR1JI8+lYAbgKlLAzGC31F6OaTMZ4N2 ziu9jfblYZvIf458I6P/p0ENW6IZzNQea7O/CJb6y2aq0gZM/DsqL4KU8wxLUIH+ lXMuLFuU9bSzJBgpTjKx3knPbG7mhpQDBGq6OKUKFc/RAh2Zxzao6W0OriLob079 plnfwMHVNRZY5wP1uYZJ8Tps+mdbYtmfvodigKoejUlwK8Irx5/GQu4FkXnfAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUOM3l0jomstYbdRXfYknaWk60c2YwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMzMzYyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYkMA0G CSqGSIb3DQEBCwUAA4IBAQCTdpMZsWeBo9F1YuTcfcqwDAbdkuWHVrqi6DjNKim4 LlFbf+WhkxJElUYZDL/hMaeEpaDwissMuNbogijoSeNHkUh/V7jVcmDc7VVlfzkz ICIUQhq1njNdPSfnv8mArjm2U/ynhTVlRXB/7r1WJO68kZIjzSiNpSJpsjrESGLZ YswnGycubJq5KayRptoEE+nctKSYqq+I6d6Y3zdTRAJ+llE12Rzgp4k7n5mz/vyw tKgfn2cYsU8zsAjD0wMMJw+MhyxsLmQxqj5kNaXx/4Fu+myFLlYIm+njbnVOE2xk iJ+xXIpyyaHH/Y9HZAMtf7YJdAbT3atVOIe4PpLEgUBP -----END CERTIFICATE-----Generated at Sat Dec 6 21:19:55 2025 by rpki-client