This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/31L-LvSHaspOtk8u9hAsfR8dgGM.roa File: 31L-LvSHaspOtk8u9hAsfR8dgGM.roa (raw, json) Hash identifier: aJ3rT7AREc3SlEOe4wTEu/JmolCehQfGhFsoaKSPn1Q= Subject key identifier: DF:52:FE:2E:F4:87:6A:CA:4E:B6:4F:2E:F6:10:2C:7D:1F:1D:80:63 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB049FDCF71644C2B5939B3A0F7A89 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/31L-LvSHaspOtk8u9hAsfR8dgGM.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20048 IP address blocks: 185.119.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:04:9f:dc:f7:16:44:c2:b5:93:9b:3a:0f:7a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df52fe2ef4876aca4eb64f2ef6102c7d1f1d8063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c3:7e:da:0b:48:19:8a:f4:ad:dd:c8:3f:81: b2:3a:29:17:a0:ff:d3:7c:f0:01:9a:5a:38:fe:f0: dc:41:ec:43:ca:bd:0b:18:32:1b:12:51:82:a3:fc: 4a:63:51:7d:b4:25:f4:c3:61:a9:51:8e:31:f3:ef: 9f:51:60:71:3b:8d:b6:7c:90:73:46:25:e4:5f:2d: 73:f4:58:c5:10:7c:8c:a8:d4:07:fa:64:71:7e:51: 35:97:c6:25:b3:ea:18:f3:2e:60:7b:e3:56:a3:16: 29:f0:76:a9:4f:65:41:29:25:a9:11:e6:bd:a0:4d: e2:06:8d:c5:11:a3:a0:3f:2a:63:10:ac:be:2a:55: 7b:0a:86:54:19:fd:47:25:c0:23:eb:eb:cb:90:7f: 0c:ec:54:2c:da:64:e1:3c:d7:47:f4:8a:b2:c2:9d: 0d:53:20:b5:4b:81:0f:fb:8c:d5:bb:df:77:7f:aa: 05:87:bd:68:ce:78:a5:e0:13:b5:9f:b0:36:7f:9a: 0a:56:c4:b7:f8:91:48:cf:95:aa:fd:da:54:47:e7: 85:ce:09:04:24:f5:b7:40:86:10:c0:f7:12:ef:72: 96:04:56:e1:d1:0b:f4:80:e5:a9:c4:8f:99:56:18: d6:a3:a5:6a:9e:80:a3:fc:72:7e:4a:02:48:7e:83: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:52:FE:2E:F4:87:6A:CA:4E:B6:4F:2E:F6:10:2C:7D:1F:1D:80:63 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/31L-LvSHaspOtk8u9hAsfR8dgGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.236.0/22 Signature Algorithm: sha256WithRSAEncryption a3:89:f0:2e:4c:4e:21:27:d7:2a:bc:25:4e:ba:5b:96:cd:6b: 78:26:ce:59:d1:f5:a1:76:de:8d:1b:60:63:02:9e:2b:a2:f7: 31:4b:48:05:7e:26:9b:18:01:bd:e0:ab:11:3e:22:2a:69:df: 59:47:10:3e:8c:5a:e3:67:86:db:76:d8:3b:bd:ed:69:4f:fb: 2a:6d:f0:36:60:84:e3:86:7b:80:da:31:75:41:60:f1:73:1a: 38:d1:52:65:6e:df:9b:57:02:a8:3b:cf:4f:63:c1:ae:18:70: 3d:d1:a7:ce:e4:eb:cb:10:06:d0:cc:84:fa:22:d3:d6:62:d4: 21:84:4a:46:b0:c3:99:27:3c:db:35:ee:13:99:29:01:40:a8: d1:31:80:7a:a6:5e:2c:62:13:d7:46:24:52:cf:46:35:27:c5: 37:fd:56:cd:91:60:a5:74:d5:76:9a:a7:1c:f0:2a:e8:02:a3: de:95:8f:47:9e:1a:10:ef:7a:41:ab:42:be:d2:21:31:3c:4d: db:64:c7:9c:30:ed:4d:d0:ca:fb:0e:aa:1f:3a:05:89:49:df: 51:92:a1:4f:ba:2d:48:16:31:85:91:59:8a:47:52:1d:d6:ec: ad:38:e3:11:7f:f3:d8:85:2e:c4:0e:7b:74:90:07:b3:e0:63: d9:44:67:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wSf3PcWRMK1k5s6D3qJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjUyZmUyZWY0ODc2YWNhNGViNjRmMmVmNjEwMmM3ZDFmMWQ4MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncN+2gtIGYr0rd3IP4GyOikXoP/T fPABmlo4/vDcQexDyr0LGDIbElGCo/xKY1F9tCX0w2GpUY4x8++fUWBxO422fJBz RiXkXy1z9FjFEHyMqNQH+mRxflE1l8Yls+oY8y5ge+NWoxYp8HapT2VBKSWpEea9 oE3iBo3FEaOgPypjEKy+KlV7CoZUGf1HJcAj6+vLkH8M7FQs2mThPNdH9Iqywp0N UyC1S4EP+4zVu993f6oFh71oznil4BO1n7A2f5oKVsS3+JFIz5Wq/dpUR+eFzgkE JPW3QIYQwPcS73KWBFbh0Qv0gOWpxI+ZVhjWo6VqnoCj/HJ+SgJIfoPqpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9S/i70h2rKTrZPLvYQLH0fHYBjMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMzFMLUx2U0hhc3BPdGs4dTloQXNmUjhkZ0dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXfsMA0G CSqGSIb3DQEBCwUAA4IBAQCjifAuTE4hJ9cqvCVOuluWzWt4Js5Z0fWhdt6NG2Bj Ap4rovcxS0gFfiabGAG94KsRPiIqad9ZRxA+jFrjZ4bbdtg7ve1pT/sqbfA2YITj hnuA2jF1QWDxcxo40VJlbt+bVwKoO89PY8GuGHA90afO5OvLEAbQzIT6ItPWYtQh hEpGsMOZJzzbNe4TmSkBQKjRMYB6pl4sYhPXRiRSz0Y1J8U3/VbNkWCldNV2mqcc 8CroAqPelY9HnhoQ73pBq0K+0iExPE3bZMecMO1N0Mr7DqofOgWJSd9RkqFPui1I FjGFkVmKR1Id1uytOOMRf/PYhS7EDnt0kAez4GPZRGdk -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:00 2026 by rpki-client