This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130362e302f32342d3234203d3e20323133353032.roa File: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (raw, json) Hash identifier: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc= Subject key identifier: 9B:B1:9D:F7:71:6A:11:E7:BA:EE:CD:43:E4:40:0C:96:32:DB:B7:D3 Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 48DD57BC34C300EACE9706A8D0EE8F48D2BD08B5 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130362e302f32342d3234203d3e20323133353032.roa Signing time: Fri 02 Jan 2026 10:55:33 +0000 ROA not before: Fri 02 Jan 2026 10:50:33 +0000 ROA not after: Fri 01 Jan 2027 10:55:33 +0000 asID: 213502 IP address blocks: 31.22.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:dd:57:bc:34:c3:00:ea:ce:97:06:a8:d0:ee:8f:48:d2:bd:08:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Jan 2 10:50:33 2026 GMT Not After : Jan 1 10:55:33 2027 GMT Subject: CN=9BB19DF7716A11E7BAEECD43E4400C9632DBB7D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:44:9b:ee:de:1c:b4:b5:f5:fa:ee:be:c0: ab:36:26:4a:37:d8:da:68:59:74:94:79:92:d8:78: 60:96:0b:e1:55:60:46:c4:94:92:56:ce:97:e6:ca: 4a:07:35:41:3b:3d:58:34:37:53:10:fe:8f:82:94: e7:55:2b:7f:c3:4a:bc:58:7d:20:60:61:6a:a6:61: 59:fa:b8:2d:e2:9d:a0:1a:c2:5c:e0:9b:f3:99:8c: b8:22:01:1d:44:76:8c:e5:95:1d:82:12:37:69:80: 54:6b:e9:43:49:07:9c:63:7a:60:94:3f:09:79:34: bb:a4:f4:0c:0e:1d:39:5c:be:47:c1:e2:ac:74:05: bd:76:5c:0b:7a:35:d9:c5:bd:76:75:4f:ec:67:0d: ba:10:ce:15:8a:f5:cb:66:8a:a3:75:a7:29:a9:7a: 46:31:a1:6e:69:4e:13:c2:40:69:28:1e:c5:ac:33: 88:a7:7b:68:1a:e7:1b:3b:0e:cc:80:8f:db:e4:99: 6c:7a:18:20:6d:62:2f:70:2b:3b:9b:5e:71:a2:3e: c1:fc:3b:45:34:09:14:8e:6e:26:8b:88:68:e7:2c: 7d:e1:16:25:e0:3b:94:d9:37:76:8f:cc:3b:52:d9: 4e:04:78:d2:29:b9:b2:a4:87:1c:0f:4d:b5:2e:5b: dd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:9D:F7:71:6A:11:E7:BA:EE:CD:43:E4:40:0C:96:32:DB:B7:D3 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130362e302f32342d3234203d3e20323133353032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.106.0/24 Signature Algorithm: sha256WithRSAEncryption 59:98:7a:50:94:67:6a:1b:fb:2e:59:35:4d:9e:66:99:eb:59: 4f:5a:91:f7:0b:b3:00:cd:a4:89:ba:b3:58:fa:72:ea:51:21: 62:1a:14:42:e4:3a:f0:5e:e5:b6:72:a6:79:63:82:93:1b:65: 6d:aa:3b:5c:2a:d1:0e:4a:f3:3a:89:59:8d:14:32:db:52:31: 08:36:78:5f:a4:8b:5e:2d:ff:4e:8c:8e:47:e7:8e:c3:72:ee: 25:e9:c0:ed:61:a9:75:17:b6:24:bb:13:d5:81:74:b8:77:9e: 0a:f7:0f:12:29:c1:8d:40:66:4b:e0:36:48:99:04:26:43:97: 1f:7e:63:9c:e7:b2:f6:57:49:3d:e8:fe:af:a6:a6:eb:40:e4: 37:62:f0:32:88:c0:e9:f0:30:b4:ea:c2:42:39:86:5c:4b:93: 26:1b:15:f2:6a:06:86:6b:9c:eb:78:18:14:6a:ff:7c:2d:2f: 20:f9:14:c6:5d:2a:53:60:4c:e2:01:bb:d1:0b:93:7d:46:ae: 4b:1d:2f:7d:11:59:ca:41:2c:cd:84:fb:75:e1:c2:34:29:90: f2:ef:c3:85:b9:09:3b:80:41:fe:46:22:05:3a:a6:59:56:40: e2:f0:93:4c:8e:83:6e:57:96:8c:0a:17:94:fa:3f:45:2e:41: 44:e0:51:a2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSN1XvDTDAOrOlwao0O6PSNK9CLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNjAxMDIxMDUwMzNaFw0yNzAxMDExMDU1MzNaMDMxMTAvBgNV BAMTKDlCQjE5REY3NzE2QTExRTdCQUVFQ0Q0M0U0NDAwQzk2MzJEQkI3RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO0Sb7t4ctLX1+u6+wKs2Jko3 2NpoWXSUeZLYeGCWC+FVYEbElJJWzpfmykoHNUE7PVg0N1MQ/o+ClOdVK3/DSrxY fSBgYWqmYVn6uC3inaAawlzgm/OZjLgiAR1EdozllR2CEjdpgFRr6UNJB5xjemCU Pwl5NLuk9AwOHTlcvkfB4qx0Bb12XAt6NdnFvXZ1T+xnDboQzhWK9ctmiqN1pymp ekYxoW5pThPCQGkoHsWsM4ine2ga5xs7DsyAj9vkmWx6GCBtYi9wKzubXnGiPsH8 O0U0CRSObiaLiGjnLH3hFiXgO5TZN3aPzDtS2U4EeNIpubKkhxwPTbUuW92VAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUm7Gd93FqEee67s1D5EAMljLbt9MwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzMzMTJlMzIzMjJlMzEzMDM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMzMzUzMDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA HxZqMA0GCSqGSIb3DQEBCwUAA4IBAQBZmHpQlGdqG/suWTVNnmaZ61lPWpH3C7MA zaSJurNY+nLqUSFiGhRC5DrwXuW2cqZ5Y4KTG2VtqjtcKtEOSvM6iVmNFDLbUjEI NnhfpIteLf9OjI5H547Dcu4l6cDtYal1F7YkuxPVgXS4d54K9w8SKcGNQGZL4DZI mQQmQ5cffmOc57L2V0k96P6vpqbrQOQ3YvAyiMDp8DC06sJCOYZcS5MmGxXyagaG a5zreBgUav98LS8g+RTGXSpTYEziAbvRC5N9Rq5LHS99EVnKQSzNhPt14cI0KZDy 78OFuQk7gEH+RiIFOqZZVkDi8JNMjoNuV5aMCheU+j9FLkFE4FGi -----END CERTIFICATE-----Generated at Sun Jan 25 13:58:56 2026 by rpki-client