This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e372e302f32342d3234203d3e20313938383331.roa File: 33312e362e372e302f32342d3234203d3e20313938383331.roa (raw, json) Hash identifier: hzXQ8bzTSHCkIlIoZMs+/FiQjaqgPKUxnQwl1R7x3k0= Subject key identifier: 49:18:02:08:2F:DE:93:B1:DE:28:CD:A8:E6:8A:44:35:28:EB:58:A4 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 51E2C0CDA8F59130CFCD2C2394302F5C3AC50797 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e372e302f32342d3234203d3e20313938383331.roa Signing time: Mon 01 Dec 2025 23:55:12 +0000 ROA not before: Mon 01 Dec 2025 23:50:12 +0000 ROA not after: Mon 30 Nov 2026 23:55:12 +0000 asID: 198831 IP address blocks: 31.6.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e2:c0:cd:a8:f5:91:30:cf:cd:2c:23:94:30:2f:5c:3a:c5:07:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 1 23:50:12 2025 GMT Not After : Nov 30 23:55:12 2026 GMT Subject: CN=491802082FDE93B1DE28CDA8E68A443528EB58A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:b2:fb:b8:af:f4:87:9e:51:e9:7d:25:2c: b7:89:e4:c4:6f:77:8a:6c:94:43:3a:a8:e5:5d:43: d2:6c:a1:44:6c:49:24:da:47:35:e7:61:ca:97:3a: de:31:1b:9c:30:c9:c0:f6:63:a5:5e:25:71:53:fe: a8:f6:17:7e:8a:a5:0c:5a:cf:36:ac:1b:cf:56:db: c4:eb:6a:63:8a:e6:2b:df:b4:d4:e2:bd:6e:72:10: 71:21:d8:4e:cd:67:dc:ff:33:5c:45:51:13:d1:67: 55:61:7f:cf:3d:bc:06:57:9a:15:e3:11:a7:0f:80: 07:9f:79:10:3f:07:40:cb:bb:33:4f:c9:d1:a8:da: 57:b1:f8:2a:6f:fb:75:a2:29:89:0f:16:e7:49:71: ab:2b:3c:38:5b:65:7a:d6:43:7a:96:36:e6:f2:70: 19:4c:9b:34:ad:b7:6b:4a:22:dc:b9:b9:b1:7c:3c: 51:b7:ef:9e:86:7b:18:66:27:fa:48:13:b2:19:14: 0c:50:5c:93:71:2b:20:2e:16:d0:60:aa:6e:fd:27: d1:66:ab:2c:64:ea:f2:23:43:2e:9e:b6:68:26:ca: 63:26:15:16:8a:c3:b4:2c:fb:fe:75:d1:66:e6:4e: 03:0d:11:28:b3:97:da:3b:ab:2b:3b:ea:22:a7:09: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:02:08:2F:DE:93:B1:DE:28:CD:A8:E6:8A:44:35:28:EB:58:A4 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e372e302f32342d3234203d3e20313938383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.7.0/24 Signature Algorithm: sha256WithRSAEncryption 44:a9:8d:4e:9a:7d:ac:8f:09:4d:2e:14:c4:9b:a5:e9:4d:2e: d8:83:86:64:2c:d5:da:df:99:c0:ed:b0:b0:cc:ad:c8:18:ba: 7c:c7:38:91:09:55:f8:77:1d:61:ed:a0:5f:af:0f:88:fe:b8: 28:8a:ae:b1:18:3d:9e:cc:9d:3e:39:e2:02:b5:a7:d1:fa:25: 6b:4e:cd:ed:59:24:ad:46:90:2a:22:98:d8:5c:58:cc:2c:49: b5:81:71:13:56:fd:86:0d:5e:4a:5a:be:da:90:b1:a8:07:71: 1b:7e:7b:cb:bf:cf:ce:d8:7a:fa:9d:5c:db:79:1c:a1:1f:c2: ef:df:2e:10:e5:e6:ee:c3:4a:43:06:d5:e1:b0:46:bb:2b:c8: eb:c1:aa:bf:93:67:fd:fb:a9:8a:51:75:4d:5d:18:bf:ea:7d: 1c:6d:6e:81:b9:7f:21:50:62:33:dc:6b:81:20:74:1d:14:b4: 95:81:63:49:f3:5e:3c:83:77:f0:12:8c:46:da:da:02:7d:4b: 2a:52:3e:4d:4c:a3:c9:65:94:80:27:f5:93:90:9a:bc:e0:74: 71:79:dc:30:19:07:36:bd:f1:cc:ac:5d:78:d5:70:8f:23:e6: e0:33:f1:1c:fd:ce:f1:bb:8e:c7:8f:07:b5:13:4a:36:79:a9: 88:6d:59:dd -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUUeLAzaj1kTDPzSwjlDAvXDrFB5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDEyMzUwMTJaFw0yNjExMzAyMzU1MTJaMDMxMTAvBgNV BAMTKDQ5MTgwMjA4MkZERTkzQjFERTI4Q0RBOEU2OEE0NDM1MjhFQjU4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYbL7uK/0h55R6X0lLLeJ5MRv d4pslEM6qOVdQ9JsoURsSSTaRzXnYcqXOt4xG5wwycD2Y6VeJXFT/qj2F36KpQxa zzasG89W28TramOK5ivftNTivW5yEHEh2E7NZ9z/M1xFURPRZ1Vhf889vAZXmhXj EacPgAefeRA/B0DLuzNPydGo2lex+Cpv+3WiKYkPFudJcasrPDhbZXrWQ3qWNuby cBlMmzStt2tKIty5ubF8PFG3756GexhmJ/pIE7IZFAxQXJNxKyAuFtBgqm79J9Fm qyxk6vIjQy6etmgmymMmFRaKw7Qs+/510WbmTgMNESizl9o7qys76iKnCZFHAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUSRgCCC/ek7HeKM2o5opENSjrWKQwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM3MmUzMDJm MzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzgzMzMxLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYHMA0G CSqGSIb3DQEBCwUAA4IBAQBEqY1Omn2sjwlNLhTEm6XpTS7Yg4ZkLNXa35nA7bCw zK3IGLp8xziRCVX4dx1h7aBfrw+I/rgoiq6xGD2ezJ0+OeICtafR+iVrTs3tWSSt RpAqIpjYXFjMLEm1gXETVv2GDV5KWr7akLGoB3EbfnvLv8/O2Hr6nVzbeRyhH8Lv 3y4Q5ebuw0pDBtXhsEa7K8jrwaq/k2f9+6mKUXVNXRi/6n0cbW6BuX8hUGIz3GuB IHQdFLSVgWNJ8148g3fwEoxG2toCfUsqUj5NTKPJZZSAJ/WTkJq84HRxedwwGQc2 vfHMrF141XCPI+bgM/Ec/c7xu47Hjwe1E0o2eamIbVnd -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:56 2025 by rpki-client