This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20323132343737.roa File: 33312e362e32382e302f32332d3233203d3e20323132343737.roa (raw, json) Hash identifier: LV4vaR3PuxZbJnEpqPmAhfD6T8PYwGaRYtCCcjJ3f4k= Subject key identifier: 14:80:43:DA:42:B3:44:3E:1A:94:10:C3:1C:D9:AC:34:0E:B8:44:E6 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 6712F2FBA009DF56A78398DC710D1752D13BFC36 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20323132343737.roa Signing time: Thu 11 Dec 2025 18:55:32 +0000 ROA not before: Thu 11 Dec 2025 18:50:32 +0000 ROA not after: Thu 10 Dec 2026 18:55:32 +0000 asID: 212477 IP address blocks: 31.6.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:12:f2:fb:a0:09:df:56:a7:83:98:dc:71:0d:17:52:d1:3b:fc:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 11 18:50:32 2025 GMT Not After : Dec 10 18:55:32 2026 GMT Subject: CN=148043DA42B3443E1A9410C31CD9AC340EB844E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:e2:07:73:3a:12:c4:3f:6f:c8:d8:7d:8b: d7:8d:67:ad:bd:84:25:88:90:f9:07:55:86:f4:8d: 95:1e:6d:82:32:b4:31:9d:91:57:96:0d:51:4e:ff: 9c:d0:45:cd:42:7b:a3:d6:3f:35:f6:11:2a:6c:b0: 26:10:2c:c0:b3:30:c3:d6:bf:be:61:05:0e:05:8d: 22:2a:34:17:dc:8a:f1:f2:be:d1:01:fc:03:1a:24: ef:43:e2:69:41:34:c7:69:95:83:14:fb:e4:54:84: b5:fd:a0:8c:05:b7:9f:92:4a:c4:d9:b6:0b:72:df: 9b:8b:d0:ca:85:fb:e3:82:ea:fa:04:d6:07:76:43: c9:ac:08:b4:d0:12:b4:02:8f:c0:5b:79:2c:f2:a1: 07:37:dd:01:fc:48:5e:f5:72:37:38:d8:47:5a:b2: 41:f3:4d:d5:f4:e4:fd:f2:e2:ed:fb:bf:3c:82:67: 44:4f:0d:64:4d:5a:34:7b:c9:87:6c:6e:0e:34:70: 69:4c:7c:ad:34:70:e3:94:3e:df:dc:8f:a1:d2:da: 1e:7a:3b:86:ee:3d:d0:a2:64:50:93:8d:8d:f5:80: 73:00:e1:ed:40:3f:55:a0:0c:c4:27:27:d9:65:d0: 19:8b:c2:c3:0a:2f:da:54:1b:14:40:3e:26:3e:64: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:80:43:DA:42:B3:44:3E:1A:94:10:C3:1C:D9:AC:34:0E:B8:44:E6 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32382e302f32332d3233203d3e20323132343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.28.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:cc:e5:30:bc:1e:7b:fe:4a:92:48:93:61:c2:06:b4:bf:88: dc:dc:a0:ba:e8:55:43:f0:c1:24:45:3f:2e:c5:22:51:b9:51: 83:89:d3:00:76:b2:25:b7:9a:19:d9:f1:21:f5:31:bb:c1:6b: e3:b8:7b:98:fc:78:49:2c:24:c4:f3:ad:3d:d9:32:1d:7d:19: be:74:43:c2:87:cd:f4:4b:e6:03:dd:61:6a:59:21:ac:1f:4a: 79:b5:f1:b6:6e:eb:bf:9e:d4:35:19:5a:5f:9a:69:9d:07:48: be:b9:d3:b4:77:d2:a0:d9:98:f0:39:68:11:c2:f9:49:37:89: 68:69:a8:56:22:ae:67:56:16:8b:f9:35:b2:bb:4e:b6:80:9f: 95:bd:d6:ac:48:64:6f:11:d7:3d:09:dc:a0:6f:36:73:c8:d4: 43:51:cc:f6:21:0b:98:96:67:60:73:d7:a3:7f:4d:d5:08:46: 26:97:d9:0e:b5:6b:d7:cb:89:9b:78:b4:62:3b:15:5d:52:59: 5a:17:65:45:e1:38:a3:bc:fa:2f:a4:48:17:bd:f7:e7:5c:83: be:50:fe:3e:bf:ab:4b:05:27:d1:d1:d0:7f:93:e7:9c:78:ad: 0b:54:69:3d:91:bc:af:b8:ac:e4:e7:cb:0e:9b:3d:0d:40:b3: e1:37:0b:72 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZxLy+6AJ31ang5jccQ0XUtE7/DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMTExODUwMzJaFw0yNjEyMTAxODU1MzJaMDMxMTAvBgNV BAMTKDE0ODA0M0RBNDJCMzQ0M0UxQTk0MTBDMzFDRDlBQzM0MEVCODQ0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxOIHczoSxD9vyNh9i9eNZ629 hCWIkPkHVYb0jZUebYIytDGdkVeWDVFO/5zQRc1Ce6PWPzX2ESpssCYQLMCzMMPW v75hBQ4FjSIqNBfcivHyvtEB/AMaJO9D4mlBNMdplYMU++RUhLX9oIwFt5+SSsTZ tgty35uL0MqF++OC6voE1gd2Q8msCLTQErQCj8BbeSzyoQc33QH8SF71cjc42Eda skHzTdX05P3y4u37vzyCZ0RPDWRNWjR7yYdsbg40cGlMfK00cOOUPt/cj6HS2h56 O4buPdCiZFCTjY31gHMA4e1AP1WgDMQnJ9ll0BmLwsMKL9pUGxRAPiY+ZHGFAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUFIBD2kKzRD4alBDDHNmsNA64ROYwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMyMzgyZTMw MmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMxMzIzNDM3Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEfBhww DQYJKoZIhvcNAQELBQADggEBAD/M5TC8Hnv+SpJIk2HCBrS/iNzcoLroVUPwwSRF Py7FIlG5UYOJ0wB2siW3mhnZ8SH1MbvBa+O4e5j8eEksJMTzrT3ZMh19Gb50Q8KH zfRL5gPdYWpZIawfSnm18bZu67+e1DUZWl+aaZ0HSL6507R30qDZmPA5aBHC+Uk3 iWhpqFYirmdWFov5NbK7TraAn5W91qxIZG8R1z0J3KBvNnPI1ENRzPYhC5iWZ2Bz 16N/TdUIRiaX2Q61a9fLiZt4tGI7FV1SWVoXZUXhOKO8+i+kSBe99+dcg75Q/j6/ q0sFJ9HR0H+T55x4rQtUaT2RvK+4rOTnyw6bPQ1As+E3C3I= -----END CERTIFICATE-----Generated at Sat Dec 20 22:52:56 2025 by rpki-client