This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS31898.roa File: AS31898.roa (raw, json) Hash identifier: 83hKSXKr+qUmW/QSPyeAY/IC50gGyYkR53hA8+plqLc= Subject key identifier: 33:0B:8D:2B:FC:7B:77:6F:5D:F6:74:E7:CF:88:F0:24:CA:42:57:EC Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Certificate serial: 172DEB837821AEFD3A9A76F96546F243830D715D Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS31898.roa Signing time: Wed 21 Jan 2026 02:27:18 +0000 ROA not before: Wed 21 Jan 2026 02:22:18 +0000 ROA not after: Wed 20 Jan 2027 02:27:18 +0000 asID: 31898 IP address blocks: 2a0f:85c1:3f0::/48 maxlen: 48 2a0f:85c1:c18::/48 maxlen: 48 2a0f:85c1:cc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2d:eb:83:78:21:ae:fd:3a:9a:76:f9:65:46:f2:43:83:0d:71:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c Validity Not Before: Jan 21 02:22:18 2026 GMT Not After : Jan 20 02:27:18 2027 GMT Subject: CN=330B8D2BFC7B776F5DF674E7CF88F024CA4257EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:99:45:75:1e:70:03:0c:a0:7b:6e:50:38: aa:76:77:94:58:6d:40:8c:e1:80:3c:19:c0:95:61: 66:2c:03:8c:1f:d0:ad:29:7a:e2:ec:e1:ae:9d:22: bc:21:04:09:25:4f:d6:33:31:95:e1:e1:77:9f:29: c9:d4:97:64:c6:09:bc:6f:a3:5a:33:d4:f2:d1:8d: c9:68:4f:7b:5e:86:85:ec:7a:47:40:46:16:82:bf: 14:d7:b0:49:ea:11:a2:2c:1c:8e:02:9e:9f:12:aa: 5b:3d:d6:ea:2f:0b:f5:c3:36:95:f1:e2:3c:88:b7: 3c:80:df:59:11:7a:98:a7:35:23:a8:c8:70:71:d5: 0d:80:27:79:e4:e4:ab:5f:43:f1:0b:40:f2:f8:ed: 9d:32:be:46:a3:cc:33:9a:1c:cd:96:6e:fa:3a:50: 1d:45:87:ef:3f:f4:ca:7e:bc:6f:70:90:67:28:73: 16:6a:32:29:59:fb:d0:6d:83:37:6c:d4:81:4f:07: d2:34:6b:b7:92:53:b6:25:a9:a8:00:21:e0:93:3f: 39:5a:d0:5e:42:ff:ab:d5:a7:19:15:4b:7e:4d:2b: 43:54:b9:b3:70:85:89:cd:a2:63:35:e9:3e:0a:5e: 59:52:9e:c9:5b:2c:4d:d0:dd:74:3a:f1:ee:bd:d4: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0B:8D:2B:FC:7B:77:6F:5D:F6:74:E7:CF:88:F0:24:CA:42:57:EC X509v3 Authority Key Identifier: keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS31898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:85c1:3f0::/48 2a0f:85c1:c18::/48 2a0f:85c1:cc0::/48 Signature Algorithm: sha256WithRSAEncryption 28:d2:ce:ae:51:ba:61:70:32:a5:98:14:75:29:da:50:67:18: 53:5d:46:a6:88:76:2c:5f:22:1e:f3:35:0a:9a:59:9f:36:02: 51:4d:0a:f8:f6:54:c0:23:5b:1f:be:11:0f:f5:5f:a8:39:55: 58:43:a0:76:2c:8e:f6:3d:e7:da:3a:8c:42:be:77:0d:a5:86: b4:8a:96:84:67:e1:0d:48:06:f9:da:46:d8:25:82:1e:c6:f1: 9e:1f:f0:11:a5:62:87:91:40:ef:50:25:59:d3:e7:92:f6:0a: 43:12:c9:8e:dd:b1:b2:54:20:b8:d4:53:38:91:52:64:00:6f: 9d:0d:5b:04:5d:60:0d:93:3e:17:24:10:05:ee:dd:ba:b7:3c: 83:d7:40:92:1f:9f:46:e6:82:7b:ba:d9:bf:27:9b:50:15:ac: f3:08:49:dc:70:5c:9e:9a:b9:b5:4e:10:b9:22:cc:b4:bb:39: ce:dd:76:65:65:59:f0:f7:90:34:2b:10:dd:13:3d:d5:9d:b3: dd:4f:b9:fd:dd:4c:4c:64:e1:8a:52:eb:0b:2a:d8:1b:98:cb: 14:00:8e:c4:c8:2b:8e:12:82:d6:fe:4e:b8:a1:4a:8e:96:0c: 08:49:63:a9:40:f6:3a:2d:3f:46:44:b2:aa:e6:5b:62:ad:1e: 07:a7:a2:18 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUFy3rg3ghrv06mnb5ZUbyQ4MNcV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy MjgzNGIxYzAeFw0yNjAxMjEwMjIyMThaFw0yNzAxMjAwMjI3MThaMDMxMTAvBgNV BAMTKDMzMEI4RDJCRkM3Qjc3NkY1REY2NzRFN0NGODhGMDI0Q0E0MjU3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlplFdR5wAwyge25QOKp2d5RY bUCM4YA8GcCVYWYsA4wf0K0peuLs4a6dIrwhBAklT9YzMZXh4XefKcnUl2TGCbxv o1oz1PLRjcloT3tehoXsekdARhaCvxTXsEnqEaIsHI4Cnp8Sqls91uovC/XDNpXx 4jyItzyA31kRepinNSOoyHBx1Q2AJ3nk5KtfQ/ELQPL47Z0yvkajzDOaHM2Wbvo6 UB1Fh+8/9Mp+vG9wkGcocxZqMilZ+9Btgzds1IFPB9I0a7eSU7YlqagAIeCTPzla 0F5C/6vVpxkVS35NK0NUubNwhYnNomM16T4KXllSnslbLE3Q3XQ68e691GePAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUMwuNK/x7d29d9nTnz4jwJMpCV+wwHwYDVR0j BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMzE4OTgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMCEEAgACMBsDBwAqD4XB A/ADBwAqD4XBDBgDBwAqD4XBDMAwDQYJKoZIhvcNAQELBQADggEBACjSzq5RumFw MqWYFHUp2lBnGFNdRqaIdixfIh7zNQqaWZ82AlFNCvj2VMAjWx++EQ/1X6g5VVhD oHYsjvY959o6jEK+dw2lhrSKloRn4Q1IBvnaRtglgh7G8Z4f8BGlYoeRQO9QJVnT 55L2CkMSyY7dsbJUILjUUziRUmQAb50NWwRdYA2TPhckEAXu3bq3PIPXQJIfn0bm gnu62b8nm1AVrPMISdxwXJ6aubVOELkizLS7Oc7ddmVlWfD3kDQrEN0TPdWds91P uf3dTExk4YpS6wsq2BuYyxQAjsTIK44Sgtb+TrihSo6WDAhJY6lA9jotP0ZEsqrm W2KtHgenohg= -----END CERTIFICATE-----Generated at Sun Jan 25 11:06:41 2026 by rpki-client