This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20313430363431.roa File: 33312e362e36332e302f32342d3234203d3e20313430363431.roa (raw, json) Hash identifier: of9F4yPbNM1rMKDy5ZvIgVGVhzz/tuRcUYMrH1n7mf0= Subject key identifier: 6B:1B:09:75:4B:4A:1F:E8:4B:A8:51:6B:0B:EF:FE:C1:92:86:C5:B5 Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3 Certificate serial: 659FBB1FAA2870555B503313E1612936D11E65E0 Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20313430363431.roa Signing time: Tue 09 Dec 2025 13:55:14 +0000 ROA not before: Tue 09 Dec 2025 13:50:14 +0000 ROA not after: Tue 08 Dec 2026 13:55:14 +0000 asID: 140641 IP address blocks: 31.6.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9f:bb:1f:aa:28:70:55:5b:50:33:13:e1:61:29:36:d1:1e:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3 Validity Not Before: Dec 9 13:50:14 2025 GMT Not After : Dec 8 13:55:14 2026 GMT Subject: CN=6B1B09754B4A1FE84BA8516B0BEFFEC19286C5B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:c1:3e:40:4e:ae:28:95:b1:f8:be:1b:7a: 43:6d:24:fb:26:5d:52:7a:ab:e3:74:5d:5e:97:71: 50:3b:0b:d8:26:41:ec:85:70:d0:94:5c:9b:54:0c: 85:28:d6:7c:bb:36:6e:0a:ca:59:d3:ad:45:32:cc: 18:d1:b3:2c:ab:d3:e0:41:45:d1:aa:48:a0:04:cb: 39:9e:0a:36:f0:b6:81:2d:2b:e8:67:58:99:75:34: 5e:8e:32:58:d0:bd:da:c8:7d:66:f9:c2:95:74:b6: 2c:f7:cb:16:92:ce:e3:00:24:fb:1a:34:20:c0:5e: fa:3d:6a:fe:30:11:e1:11:28:38:f6:f2:a9:f4:11: 65:1a:f0:57:a9:7e:be:cb:fe:47:e1:46:94:61:32: a8:7e:0f:84:e9:96:58:ed:e3:2e:02:ca:e6:90:30: 17:1c:c7:79:d7:c9:ca:c0:27:4d:63:12:e3:fc:ce: 87:a3:4b:17:7d:45:e1:31:69:26:a7:38:cc:0f:68: a8:04:e0:d8:7d:a0:f7:80:27:fd:2f:b8:8c:7c:bf: 9c:a2:5a:10:16:0b:2c:ee:d9:5c:2c:2e:a2:79:39: 5f:e7:6a:80:d2:f3:bf:46:9d:bb:f3:12:15:eb:16: 08:93:96:c5:9d:63:e5:f2:66:2e:bc:85:ed:93:d0: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:09:75:4B:4A:1F:E8:4B:A8:51:6B:0B:EF:FE:C1:92:86:C5:B5 X509v3 Authority Key Identifier: keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36332e302f32342d3234203d3e20313430363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.6.63.0/24 Signature Algorithm: sha256WithRSAEncryption 35:de:a5:76:2b:3f:8d:2e:c1:e3:b5:7e:1b:38:af:1f:d8:f0: a8:2c:f1:08:de:66:52:8e:b4:69:4e:6c:6b:f7:e3:5d:bb:39: 66:06:2a:87:29:51:f6:6d:57:4b:f8:d2:9a:86:a6:e1:43:46: 25:ac:6d:cf:e9:97:4a:45:d6:ff:e0:70:d2:09:39:a3:cf:53: 83:b7:60:e7:28:bc:da:86:38:f3:77:23:27:0d:5c:f7:dd:ba: 21:9c:58:70:d7:09:35:0a:e5:c8:5d:c5:92:dc:3c:4d:ce:32: ac:0d:b3:5b:96:5f:86:87:00:b9:34:cd:c0:16:5c:9e:cc:1f: 65:f4:e3:74:78:e5:ad:af:50:f1:db:e0:46:10:41:b9:37:bd: 92:7f:f2:a3:34:cf:90:3c:39:eb:9a:c1:38:f5:21:fd:f0:73: 82:49:39:4f:ac:02:e4:f3:49:72:8a:fe:2e:bf:f8:91:df:c6: 09:ba:b4:57:0e:88:bb:98:fd:32:fd:de:fd:68:3b:a2:8e:2d: e0:57:a0:f4:68:fa:77:ab:e2:b9:ae:fc:b0:39:f4:41:f6:97: 6e:98:ca:56:a7:ea:b5:10:7c:86:30:7b:07:61:33:2c:32:9d: 12:75:ea:76:5e:94:1e:94:56:a1:82:59:e3:45:e1:23:f2:72: 6c:a5:89:22 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUZZ+7H6oocFVbUDMT4WEpNtEeZeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0 MGI1ZjNlMzAeFw0yNTEyMDkxMzUwMTRaFw0yNjEyMDgxMzU1MTRaMDMxMTAvBgNV BAMTKDZCMUIwOTc1NEI0QTFGRTg0QkE4NTE2QjBCRUZGRUMxOTI4NkM1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dcE+QE6uKJWx+L4bekNtJPsm XVJ6q+N0XV6XcVA7C9gmQeyFcNCUXJtUDIUo1ny7Nm4KylnTrUUyzBjRsyyr0+BB RdGqSKAEyzmeCjbwtoEtK+hnWJl1NF6OMljQvdrIfWb5wpV0tiz3yxaSzuMAJPsa NCDAXvo9av4wEeERKDj28qn0EWUa8Fepfr7L/kfhRpRhMqh+D4Tplljt4y4CyuaQ MBccx3nXycrAJ01jEuP8zoejSxd9ReExaSanOMwPaKgE4Nh9oPeAJ/0vuIx8v5yi WhAWCyzu2VwsLqJ5OV/naoDS879GnbvzEhXrFgiTlsWdY+XyZi68he2T0FnvAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUaxsJdUtKH+hLqFFrC+/+wZKGxbUwHwYDVR0j BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM2MzMyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNjM0MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBj8w DQYJKoZIhvcNAQELBQADggEBADXepXYrP40uweO1fhs4rx/Y8Kgs8QjeZlKOtGlO bGv34127OWYGKocpUfZtV0v40pqGpuFDRiWsbc/pl0pF1v/gcNIJOaPPU4O3YOco vNqGOPN3IycNXPfduiGcWHDXCTUK5chdxZLcPE3OMqwNs1uWX4aHALk0zcAWXJ7M H2X043R45a2vUPHb4EYQQbk3vZJ/8qM0z5A8OeuawTj1If3wc4JJOU+sAuTzSXKK /i6/+JHfxgm6tFcOiLuY/TL93v1oO6KOLeBXoPRo+ner4rmu/LA59EH2l26Yylan 6rUQfIYwewdhMywynRJ16nZelB6UVqGCWeNF4SPycmyliSI= -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:46 2025 by rpki-client