This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa File: 33312e362e36322e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: qRuJjiVQ66mWEVjnGkSDqgdLkiihfApcvSmafEHKI30= Subject key identifier: 86:0D:7D:9F:71:FE:02:01:DF:17:53:3E:BB:EA:C1:16:2C:D9:5F:F2 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 5D22D78E960920E60FEE12ED73686AD5E0946B8C Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa Signing time: Wed 14 Jan 2026 17:48:31 +0000 ROA not before: Wed 14 Jan 2026 17:43:31 +0000 ROA not after: Wed 13 Jan 2027 17:48:31 +0000 asID: 16276 IP address blocks: 31.6.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:22:d7:8e:96:09:20:e6:0f:ee:12:ed:73:68:6a:d5:e0:94:6b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Jan 14 17:43:31 2026 GMT Not After : Jan 13 17:48:31 2027 GMT Subject: CN=860D7D9F71FE0201DF17533EBBEAC1162CD95FF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:05:35:08:dd:94:00:4a:e6:72:f5:aa:5b:6b: 7f:62:03:31:9f:ab:f3:d1:61:34:ad:83:bf:5a:7d: fc:cc:8e:3f:91:75:7c:b2:e0:ee:46:52:21:15:12: a9:1b:a6:09:29:4d:a7:ee:83:dc:38:e6:b2:b7:20: e2:8c:e5:fa:9d:ad:71:ee:54:90:31:7f:20:85:f9: 69:53:19:50:34:9f:dd:4a:6b:7c:32:2e:2f:d0:6c: 1a:70:c0:68:1b:b5:56:bc:de:c5:fb:af:32:ef:e5: fb:09:8e:0f:24:3f:e6:59:53:4a:c9:6d:32:d7:da: f0:3a:ff:fd:ee:39:67:77:04:13:76:57:b8:e1:95: e4:88:7a:f3:4a:94:37:5c:20:bf:c3:1a:6e:c9:93: 8a:d6:91:68:a6:e8:f8:80:7b:29:61:41:ee:a0:7d: 17:3e:a8:0a:84:13:03:18:e4:35:18:73:89:0e:35: 08:d8:ca:82:40:f6:c4:d7:8b:30:33:05:92:4d:da: 4b:2b:24:51:fa:6f:73:db:e0:d1:31:60:f9:e7:3d: 25:88:61:3f:9a:63:de:53:20:50:35:84:3a:1b:79: ed:54:0a:c2:0e:55:c7:26:84:97:f2:7d:a6:50:36: 57:9d:23:d5:6d:f4:c6:5f:49:65:d6:f1:78:ac:5c: 6a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0D:7D:9F:71:FE:02:01:DF:17:53:3E:BB:EA:C1:16:2C:D9:5F:F2 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.62.0/24 Signature Algorithm: sha256WithRSAEncryption 28:e5:92:7a:b5:a8:e1:27:5e:b5:23:13:7f:5b:db:0a:a8:af: d0:da:91:c6:c1:d8:a7:dc:52:5c:1f:bb:8d:fe:79:96:31:d8: 68:72:ab:0d:f3:02:a3:5e:a5:d6:cf:9d:3e:d1:4e:2e:71:be: a4:41:fb:79:8e:5e:ba:f6:b5:05:64:52:c7:87:1f:f7:80:36: 51:7e:83:cb:fd:9d:49:f3:59:38:d4:47:e4:50:e5:44:33:4a: a3:d3:04:80:60:b1:27:fa:8c:ab:df:72:f7:88:4a:75:ed:88: 24:24:a2:5e:00:44:04:cd:c5:c5:91:2c:00:b1:82:74:eb:4d: 4c:1e:25:6f:8e:cf:52:ff:b3:d5:5c:6c:80:ba:7b:62:6b:2e: 1a:c8:22:94:dd:94:e2:2a:f1:67:93:74:15:9b:2a:78:15:f5: 8b:6d:3c:fe:e1:00:fc:e9:f4:e3:fb:e4:c3:7a:31:d1:45:99: 7a:1c:8b:68:fa:5c:aa:aa:5e:39:8c:9b:15:ec:ee:f5:c6:75: 31:99:d2:a8:df:ab:9d:a5:fd:11:38:1b:5a:cc:89:e8:5f:e5: 82:b6:84:85:b1:d7:1a:c2:9e:15:7d:52:e1:d6:33:8a:e5:c4: 96:f7:1b:86:b4:cd:2a:c6:35:63:76:a3:5f:fa:69:41:cb:a9: 2e:21:ac:19 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUXSLXjpYJIOYP7hLtc2hq1eCUa4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNjAxMTQxNzQzMzFaFw0yNzAxMTMxNzQ4MzFaMDMxMTAvBgNV BAMTKDg2MEQ3RDlGNzFGRTAyMDFERjE3NTMzRUJCRUFDMTE2MkNEOTVGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaBTUI3ZQASuZy9apba39iAzGf q/PRYTStg79affzMjj+RdXyy4O5GUiEVEqkbpgkpTafug9w45rK3IOKM5fqdrXHu VJAxfyCF+WlTGVA0n91Ka3wyLi/QbBpwwGgbtVa83sX7rzLv5fsJjg8kP+ZZU0rJ bTLX2vA6//3uOWd3BBN2V7jhleSIevNKlDdcIL/DGm7Jk4rWkWim6PiAeylhQe6g fRc+qAqEEwMY5DUYc4kONQjYyoJA9sTXizAzBZJN2ksrJFH6b3Pb4NExYPnnPSWI YT+aY95TIFA1hDobee1UCsIOVccmhJfyfaZQNledI9Vt9MZfSWXW8XisXGqFAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUhg19n3H+AgHfF1M+u+rBFizZX/IwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM2MzIyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwY+MA0G CSqGSIb3DQEBCwUAA4IBAQAo5ZJ6tajhJ161IxN/W9sKqK/Q2pHGwdin3FJcH7uN /nmWMdhocqsN8wKjXqXWz50+0U4ucb6kQft5jl669rUFZFLHhx/3gDZRfoPL/Z1J 81k41EfkUOVEM0qj0wSAYLEn+oyr33L3iEp17YgkJKJeAEQEzcXFkSwAsYJ0601M HiVvjs9S/7PVXGyAuntiay4ayCKU3ZTiKvFnk3QVmyp4FfWLbTz+4QD86fTj++TD ejHRRZl6HIto+lyqql45jJsV7O71xnUxmdKo36udpf0ROBtazInoX+WCtoSFsdca wp4VfVLh1jOK5cSW9xuGtM0qxjVjdqNf+mlBy6kuIawZ -----END CERTIFICATE-----Generated at Sun Jan 25 09:30:20 2026 by rpki-client