This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203630393439.roa File: 33312e362e34382e302f32342d3234203d3e203630393439.roa (raw, json) Hash identifier: I8PInuxgDlvjRwZ2aewxJiRgb/KCabVZ6rUclkeyx2M= Subject key identifier: 10:4D:46:F5:55:E3:A2:6F:67:46:ED:70:5E:49:A6:77:40:E3:80:A6 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 3E946544C8B60E0750D928F74B3D94F70841A494 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203630393439.roa Signing time: Wed 03 Dec 2025 09:58:04 +0000 ROA not before: Wed 03 Dec 2025 09:53:04 +0000 ROA not after: Wed 02 Dec 2026 09:58:04 +0000 asID: 60949 IP address blocks: 31.6.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:94:65:44:c8:b6:0e:07:50:d9:28:f7:4b:3d:94:f7:08:41:a4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 3 09:53:04 2025 GMT Not After : Dec 2 09:58:04 2026 GMT Subject: CN=104D46F555E3A26F6746ED705E49A67740E380A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:00:58:8d:34:9b:03:38:54:89:b3:59:e2: ef:81:78:4f:2a:f1:7d:6d:d8:a6:b8:4f:c2:12:d8: 44:a0:f3:53:69:f3:55:5a:c0:b2:cc:57:c2:65:ce: 7f:ef:07:09:67:d9:08:82:d9:d1:72:29:7c:fd:1c: 92:2a:2a:2c:73:b4:a4:7d:e9:9b:5f:52:0e:93:85: 61:5b:91:b2:72:8b:18:c7:a2:f0:2b:1c:7d:ae:5d: 1b:44:5c:8d:0c:65:d4:70:4b:f9:e8:81:8e:6a:d5: 8f:00:f2:3c:84:93:1f:6d:5e:e5:e3:10:b3:75:bb: cd:ab:f5:e1:7a:f0:4a:85:74:0b:cc:08:15:dd:e8: e7:cc:d9:80:c2:2c:3a:d7:f3:63:e8:8f:9f:72:ab: f5:0b:99:2c:d3:82:75:3d:5b:bb:b9:88:f7:f3:5a: 9a:33:6b:85:b7:d4:e9:1c:9a:6f:5b:4a:84:b4:09: d2:be:a7:9a:39:d4:f8:2b:a8:12:ce:5c:0e:24:4d: 51:56:4d:87:42:90:27:0f:7a:e0:b3:6c:2a:9c:66: 1e:d8:e0:56:e2:6f:4e:18:df:5b:93:e8:d4:ae:2e: 21:57:31:90:58:b7:00:6a:c8:8e:01:69:2a:ad:ff: de:9a:e4:9c:46:17:ea:96:28:9b:3b:e1:e1:d1:2d: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4D:46:F5:55:E3:A2:6F:67:46:ED:70:5E:49:A6:77:40:E3:80:A6 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34382e302f32342d3234203d3e203630393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.48.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:d7:3a:f1:08:48:8c:1b:dd:a5:9d:09:0b:e2:6f:87:e7:2b: 0c:bc:65:fd:9f:d9:78:7a:60:df:ae:19:8a:6a:b4:b1:71:f4: 89:39:23:0d:c5:9c:b1:a3:25:0b:b9:80:a9:5b:fd:1b:55:b2: 1b:96:af:e6:bf:4c:a1:a4:aa:eb:14:bb:0d:43:10:7a:59:76: 80:a8:e4:98:3c:2f:72:f4:c0:b1:f0:9e:69:5b:02:ed:88:89: c7:2c:b2:54:d4:56:53:88:5c:a1:b8:e3:4d:2b:a1:55:f5:44: 10:5c:8f:da:3c:83:11:17:bd:27:7f:e1:6b:3b:f3:0d:d8:a9: b8:8b:3e:01:9c:2d:09:95:30:79:b0:fa:d1:5b:63:e8:0a:4b: 25:f5:8b:36:05:eb:96:7e:b5:e7:39:fd:c6:d5:4d:25:ef:8b: 77:e5:95:2f:c2:2d:31:5d:64:f8:49:3f:a8:e1:59:74:88:8e: be:be:ee:a4:86:db:1d:14:c2:a7:c2:fd:df:09:c5:6d:83:46: 16:5c:5a:06:4b:4f:5e:51:55:2d:7a:9f:26:d1:52:46:73:23: bd:73:66:90:49:47:7d:44:39:94:ae:bf:39:ef:69:82:e5:1e: 2b:38:a8:6b:dc:d2:bd:05:b4:2e:84:5e:0e:73:cc:64:9a:ae: 91:82:79:18 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUPpRlRMi2DgdQ2Sj3Sz2U9whBpJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDMwOTUzMDRaFw0yNjEyMDIwOTU4MDRaMDMxMTAvBgNV BAMTKDEwNEQ0NkY1NTVFM0EyNkY2NzQ2RUQ3MDVFNDlBNjc3NDBFMzgwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPgBYjTSbAzhUibNZ4u+BeE8q 8X1t2Ka4T8IS2ESg81Np81VawLLMV8Jlzn/vBwln2QiC2dFyKXz9HJIqKixztKR9 6ZtfUg6ThWFbkbJyixjHovArHH2uXRtEXI0MZdRwS/nogY5q1Y8A8jyEkx9tXuXj ELN1u82r9eF68EqFdAvMCBXd6OfM2YDCLDrX82Poj59yq/ULmSzTgnU9W7u5iPfz Wpoza4W31Okcmm9bSoS0CdK+p5o51PgrqBLOXA4kTVFWTYdCkCcPeuCzbCqcZh7Y 4Fbib04Y31uT6NSuLiFXMZBYtwBqyI4BaSqt/96a5JxGF+qWKJs74eHRLRJVAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUEE1G9VXjom9nRu1wXkmmd0DjgKYwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM0MzgyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzkzNDM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYwMA0G CSqGSIb3DQEBCwUAA4IBAQAP1zrxCEiMG92lnQkL4m+H5ysMvGX9n9l4emDfrhmK arSxcfSJOSMNxZyxoyULuYCpW/0bVbIblq/mv0yhpKrrFLsNQxB6WXaAqOSYPC9y 9MCx8J5pWwLtiInHLLJU1FZTiFyhuONNK6FV9UQQXI/aPIMRF70nf+FrO/MN2Km4 iz4BnC0JlTB5sPrRW2PoCksl9Ys2BeuWfrXnOf3G1U0l74t35ZUvwi0xXWT4ST+o 4Vl0iI6+vu6khtsdFMKnwv3fCcVtg0YWXFoGS09eUVUtep8m0VJGcyO9c2aQSUd9 RDmUrr8572mC5R4rOKhr3NK9BbQuhF4Oc8xkmq6RgnkY -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:23 2025 by rpki-client