This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa File: 33312e362e32372e302f32342d3234203d3e203632333930.roa (raw, json) Hash identifier: tHrMAAT5yuKJWrbJN6FWFW7glRRPXNCUk/58hwCZ/0w= Subject key identifier: E2:EC:20:DD:39:26:B1:BD:BE:6F:F1:87:33:3D:9C:E0:AC:F4:44:35 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 020B01BA94685CE7164DB2D74CE67C7FE36080C5 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa Signing time: Sat 13 Dec 2025 19:55:32 +0000 ROA not before: Sat 13 Dec 2025 19:50:32 +0000 ROA not after: Sat 12 Dec 2026 19:55:32 +0000 asID: 62390 IP address blocks: 31.6.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0b:01:ba:94:68:5c:e7:16:4d:b2:d7:4c:e6:7c:7f:e3:60:80:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 13 19:50:32 2025 GMT Not After : Dec 12 19:55:32 2026 GMT Subject: CN=E2EC20DD3926B1BDBE6FF187333D9CE0ACF44435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:bc:a9:bc:ea:a9:43:79:66:3a:ef:da:02: cd:15:4a:6c:e5:ef:9d:67:4e:0a:13:a1:db:05:f8: 0c:d0:49:d6:b7:54:d7:f8:df:f4:b9:24:78:78:bd: bf:33:f8:2b:ea:91:ea:c5:90:1b:93:21:16:14:b3: f1:28:ca:91:93:1b:7b:28:07:0a:57:a6:a9:76:e6: 22:48:a3:ef:39:cc:28:98:65:ac:a9:25:50:cf:d9: 40:15:1e:a2:33:8e:bf:62:7a:97:b6:73:a9:db:e0: 84:1b:8b:98:81:d6:9f:63:a8:da:b6:43:38:18:cd: 9f:f1:84:ae:51:e2:e9:b9:1d:85:1a:d4:a7:8b:f0: eb:00:99:66:01:a9:34:24:80:ef:35:68:79:50:7f: 24:14:1a:eb:a7:6f:f8:13:52:fc:4a:48:17:ab:bb: 5c:5d:f6:ca:a0:d6:c0:ee:2b:16:ec:2d:35:a3:fe: 25:8f:93:d1:0c:25:eb:1f:33:7b:ae:e9:f8:25:e3: 5f:10:28:05:ff:8a:c4:31:3e:26:1d:3f:c8:1c:d1: 4f:28:79:44:22:03:eb:b3:fc:12:b6:68:a8:80:82: b3:a6:65:c6:e7:30:65:40:23:cc:40:11:4a:bc:d8: db:5f:3f:d9:99:4b:65:a0:8b:28:ec:2a:1b:bd:93: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EC:20:DD:39:26:B1:BD:BE:6F:F1:87:33:3D:9C:E0:AC:F4:44:35 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32372e302f32342d3234203d3e203632333930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.27.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:87:31:59:9e:6f:7b:d5:b5:67:84:29:b3:76:a5:2c:a6:41: b3:2d:0f:30:92:59:90:ba:96:b8:60:27:11:be:44:42:23:ed: e2:eb:79:37:cb:98:78:aa:f8:b0:c1:66:93:d1:ea:6c:2e:91: 6d:3e:14:d8:7e:0c:17:f1:24:96:ef:72:99:ad:f3:69:8c:03: 25:f1:cf:d0:dc:53:d8:bd:7f:2b:01:a0:d7:47:65:1d:7a:1d: 76:ee:7f:9a:31:c6:35:6c:56:c4:7f:a9:cc:60:1c:b3:34:cb: e8:11:91:fc:65:af:80:10:b8:24:02:d9:61:32:2b:37:57:f3: ba:12:42:74:21:7a:04:06:24:2f:9e:19:dc:4b:ad:1e:d9:b9: 7d:8a:13:76:1c:25:6d:bd:1e:05:6b:66:a9:e2:d4:db:73:ee: 16:12:7f:23:56:9c:46:61:a6:0b:6f:75:2a:8d:6b:4f:95:0d: 24:a6:82:c9:da:6e:bf:cd:91:22:f5:72:49:bd:0b:9a:12:23: 3b:85:88:a4:b9:14:0a:2d:06:4e:d8:b8:c7:f0:1e:e9:f4:29: 9b:ef:c7:67:24:e3:41:0e:3d:f2:3b:7d:4c:79:6e:fb:c3:8d: 6b:47:24:d9:7e:e5:af:f0:e5:d1:4d:ca:28:09:1b:03:99:0d: 13:13:1c:77 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUAgsBupRoXOcWTbLXTOZ8f+NggMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMTMxOTUwMzJaFw0yNjEyMTIxOTU1MzJaMDMxMTAvBgNV BAMTKEUyRUMyMEREMzkyNkIxQkRCRTZGRjE4NzMzM0Q5Q0UwQUNGNDQ0MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWu7ypvOqpQ3lmOu/aAs0VSmzl 751nTgoTodsF+AzQSda3VNf43/S5JHh4vb8z+CvqkerFkBuTIRYUs/EoypGTG3so BwpXpql25iJIo+85zCiYZaypJVDP2UAVHqIzjr9iepe2c6nb4IQbi5iB1p9jqNq2 QzgYzZ/xhK5R4um5HYUa1KeL8OsAmWYBqTQkgO81aHlQfyQUGuunb/gTUvxKSBer u1xd9sqg1sDuKxbsLTWj/iWPk9EMJesfM3uu6fgl418QKAX/isQxPiYdP8gc0U8o eUQiA+uz/BK2aKiAgrOmZcbnMGVAI8xAEUq82NtfP9mZS2WgiyjsKhu9kyB7AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU4uwg3Tkmsb2+b/GHMz2c4Kz0RDUwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzcyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzMzOTMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYbMA0G CSqGSIb3DQEBCwUAA4IBAQALhzFZnm971bVnhCmzdqUspkGzLQ8wklmQupa4YCcR vkRCI+3i63k3y5h4qviwwWaT0epsLpFtPhTYfgwX8SSW73KZrfNpjAMl8c/Q3FPY vX8rAaDXR2Udeh127n+aMcY1bFbEf6nMYByzNMvoEZH8Za+AELgkAtlhMis3V/O6 EkJ0IXoEBiQvnhncS60e2bl9ihN2HCVtvR4Fa2ap4tTbc+4WEn8jVpxGYaYLb3Uq jWtPlQ0kpoLJ2m6/zZEi9XJJvQuaEiM7hYikuRQKLQZO2LjH8B7p9Cmb78dnJONB Dj3yO31MeW77w41rRyTZfuWv8OXRTcooCRsDmQ0TExx3 -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:32 2025 by rpki-client