This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/z_HTT3a31vAkFtPvUQtcTev0iQU.roa File: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (raw, json) Hash identifier: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA= Subject key identifier: CF:F1:D3:4F:76:B7:D6:F0:24:16:D3:EF:51:0B:5C:4D:EB:F4:89:05 Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee Certificate serial: 019B7F138B9B5F58E185237B33E8AB568164 Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/z_HTT3a31vAkFtPvUQtcTev0iQU.roa Signing time: Fri 02 Jan 2026 14:19:05 +0000 ROA not before: Fri 02 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199110 IP address blocks: 31.44.250.0/24 maxlen: 24 31.44.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:8b:9b:5f:58:e1:85:23:7b:33:e8:ab:56:81:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee Validity Not Before: Jan 2 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cff1d34f76b7d6f02416d3ef510b5c4debf48905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:c0:0d:2d:d0:95:9b:c5:73:f3:2d:6b:89: 4f:2f:9f:61:09:a6:32:dd:fb:b6:48:48:7c:e7:11: 37:4a:d1:ab:4d:63:20:88:da:83:c4:29:05:86:2e: 47:c5:35:1e:d6:21:ac:26:08:33:4f:9c:fb:a2:6f: a5:e3:16:96:56:3e:9c:b8:b4:17:b6:17:a3:bd:69: af:5c:df:af:7a:20:8a:3c:a8:ab:20:12:85:69:49: 45:94:dd:69:ee:96:86:d5:40:0c:a0:0b:cf:1b:dd: 71:fc:cc:6e:84:23:eb:06:32:3f:c8:c2:68:77:b5: 88:c4:35:56:a8:ae:f9:fa:5d:4e:d4:70:de:7b:02: a2:37:60:d5:0b:f7:90:9f:43:b0:02:f4:cf:80:e3: 0a:a5:3e:31:0d:9e:42:45:1a:26:4f:b7:e3:44:16: 9e:dc:f4:25:4b:ea:f8:f0:0d:a5:ad:b9:03:11:09: 69:16:a7:7a:b0:8a:79:68:a9:a1:af:ce:42:46:e1: 20:3f:cc:d9:f7:87:c2:36:c6:60:b0:3b:29:b5:87: e6:43:f3:92:6e:c0:43:58:5a:af:24:c9:9d:72:4e: 7d:07:48:fb:f2:53:21:ea:ad:46:78:96:23:c5:b7: 48:b8:bd:a2:84:04:30:e8:6b:2c:b2:1c:90:77:8b: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:D3:4F:76:B7:D6:F0:24:16:D3:EF:51:0B:5C:4D:EB:F4:89:05 X509v3 Authority Key Identifier: keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/z_HTT3a31vAkFtPvUQtcTev0iQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.250.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:c0:27:bf:52:11:5c:f8:23:4e:78:c9:77:22:70:0e:18:15: 04:34:4c:53:47:75:bb:61:78:40:c9:12:53:6f:e9:8c:87:f0: 0b:7d:43:53:57:fb:9f:cd:98:97:91:ca:af:4e:c2:29:ab:cf: 32:b7:a3:16:52:48:13:75:ac:6c:47:e0:7b:c7:2f:25:0b:12: 3e:be:80:e3:89:a7:65:0f:4f:51:cc:56:4f:03:ff:4c:c3:05: a6:a9:c0:5c:4c:50:3d:f0:5f:d6:c6:84:3d:04:ed:40:98:44: 12:e2:59:03:bd:7f:83:ac:a1:2e:99:64:1d:c3:54:dd:13:63: e1:76:e7:e2:d5:cb:4d:4e:ef:f5:21:17:01:3e:9e:b4:11:11: 26:f3:d3:92:1b:a6:ec:a6:44:9d:c9:00:87:f9:d4:e9:9c:00: 5c:af:eb:6f:25:8a:ca:1e:0c:d6:84:e7:c2:80:b9:9b:ed:cd: 6a:30:94:cd:c5:63:c3:af:0c:1c:b4:66:0f:1d:8a:e2:5d:a9: d2:6e:5a:40:55:09:f5:bd:79:a4:16:c6:07:82:42:1f:b7:90: eb:02:83:ff:24:e1:0c:d1:71:31:af:ad:88:26:9a:67:78:e8: 04:15:39:7d:d1:fa:e4:f1:f1:41:5f:33:68:b7:20:9a:65:ab: 32:a5:2d:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4ubX1jhhSN7M+irVoFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm MzgwZWUwHhcNMjYwMTAyMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmYxZDM0Zjc2YjdkNmYwMjQxNmQzZWY1MTBiNWM0ZGViZjQ4OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KzADS3QlZvFc/Mta4lPL59hCaYy 3fu2SEh85xE3StGrTWMgiNqDxCkFhi5HxTUe1iGsJggzT5z7om+l4xaWVj6cuLQX thejvWmvXN+veiCKPKirIBKFaUlFlN1p7paG1UAMoAvPG91x/MxuhCPrBjI/yMJo d7WIxDVWqK75+l1O1HDeewKiN2DVC/eQn0OwAvTPgOMKpT4xDZ5CRRomT7fjRBae 3PQlS+r48A2lrbkDEQlpFqd6sIp5aKmhr85CRuEgP8zZ94fCNsZgsDsptYfmQ/OS bsBDWFqvJMmdck59B0j78lMh6q1GeJYjxbdIuL2ihAQw6GssshyQd4uBRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/x0092t9bwJBbT71ELXE3r9IkFMB8GA1UdIwQY MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt NjQ4MzhkZjM5NzdhLzEvel9IVFQzYTMxdkFrRnRQdlVRdGNUZXYwaVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyz6MA0G CSqGSIb3DQEBCwUAA4IBAQBcwCe/UhFc+CNOeMl3InAOGBUENExTR3W7YXhAyRJT b+mMh/ALfUNTV/ufzZiXkcqvTsIpq88yt6MWUkgTdaxsR+B7xy8lCxI+voDjiadl D09RzFZPA/9MwwWmqcBcTFA98F/WxoQ9BO1AmEQS4lkDvX+DrKEumWQdw1TdE2Ph dufi1ctNTu/1IRcBPp60EREm89OSG6bspkSdyQCH+dTpnABcr+tvJYrKHgzWhOfC gLmb7c1qMJTNxWPDrwwctGYPHYriXanSblpAVQn1vXmkFsYHgkIft5DrAoP/JOEM 0XExr62IJppneOgEFTl90frk8fFBXzNotyCaZasypS2V -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:42 2026 by rpki-client