This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS31715.roa File: AS31715.roa (raw, json) Hash identifier: uP3unPUbuNQhI7mDeGns0cGBwRmWn3VT42tYsdMeYO0= Subject key identifier: 72:43:AC:AE:85:8C:14:CE:65:0E:B0:E4:32:A7:85:27:D6:E2:4B:0F Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d Certificate serial: 15DD0A111C12F59155405273FB4B4CEFD3152680 Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS31715.roa Signing time: Thu 27 Nov 2025 01:41:04 +0000 ROA not before: Thu 27 Nov 2025 01:36:04 +0000 ROA not after: Thu 26 Nov 2026 01:41:04 +0000 asID: 31715 IP address blocks: 143.20.83.0/24 maxlen: 24 143.20.94.0/24 maxlen: 24 143.20.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dd:0a:11:1c:12:f5:91:55:40:52:73:fb:4b:4c:ef:d3:15:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d Validity Not Before: Nov 27 01:36:04 2025 GMT Not After : Nov 26 01:41:04 2026 GMT Subject: CN=7243ACAE858C14CE650EB0E432A78527D6E24B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:7d:cf:ea:f3:be:05:02:d8:b6:f1:2b:59:7d: 48:e9:28:48:7d:09:1d:00:75:97:98:f9:b1:3e:fb: 76:d7:d0:f3:27:90:bf:23:90:8d:54:7a:a5:1a:32: 60:6b:bc:aa:bf:22:c7:ac:c9:5f:b7:5a:a3:51:b6: 15:5c:ed:0a:62:cd:96:85:06:25:d5:5b:40:cc:2f: c0:fc:89:d7:9b:bf:ee:6f:ff:a7:70:69:54:25:8f: d9:7f:e0:21:ee:d4:0b:03:0d:d1:c4:a0:ed:f3:26: 4c:5d:64:c0:fc:92:09:97:b3:1a:31:8e:fe:04:1d: a5:72:70:c9:f5:39:fa:44:4c:eb:25:bd:82:67:66: d9:f1:eb:21:11:e9:f0:ec:24:46:2d:8e:f2:47:a7: 49:78:fc:d4:31:27:15:f6:44:86:9e:09:e9:f2:b5: 97:93:18:1c:d7:ea:56:59:00:48:00:f3:2b:96:9d: 9c:90:0c:e1:c3:8d:23:cd:a3:89:83:3b:16:9f:60: db:8a:0e:70:ba:92:86:d2:17:02:c3:d3:e8:27:c3: 21:82:d4:a9:d7:6f:28:88:ce:d8:48:d5:94:e2:15: d3:49:dd:e2:90:a7:bb:83:c5:2b:11:40:f6:11:b2: db:24:c5:61:c6:f6:af:ce:a6:9d:01:ce:23:4a:f5: 07:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:43:AC:AE:85:8C:14:CE:65:0E:B0:E4:32:A7:85:27:D6:E2:4B:0F X509v3 Authority Key Identifier: keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS31715.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.20.83.0/24 143.20.94.0/24 143.20.117.0/24 Signature Algorithm: sha256WithRSAEncryption be:78:7a:8d:76:ed:e9:ac:33:16:65:bf:51:47:a0:46:46:c8: 53:b2:1b:b3:42:21:de:3d:c7:38:9f:86:8c:60:82:f3:42:df: fb:d1:cf:06:bb:fd:5c:6f:d3:b0:09:71:50:64:c0:f8:7e:bb: 02:12:2d:9e:81:ed:41:31:8b:81:92:08:6f:57:f1:94:93:c2: df:a5:7e:88:b3:5a:f0:48:f3:cb:b3:14:15:ba:5f:0c:0c:c1: fd:40:74:09:d5:58:3a:c7:03:dd:cd:6f:d7:31:de:73:65:58: 9a:2a:17:b1:0a:9f:17:df:e0:4b:01:e1:dc:8b:d8:33:ce:a9: 6b:92:33:28:ba:54:49:71:4b:43:48:5d:f7:2b:f0:30:0c:93: 52:40:82:91:74:55:6c:a3:7c:37:15:21:6d:d9:14:a6:40:39: 02:99:5e:d3:1b:e2:a7:69:18:d7:3f:32:73:00:46:59:0c:ab: 82:3b:b4:de:2d:05:e1:e0:66:a8:4a:69:bf:b3:c8:f0:c5:cc: 2e:47:71:52:29:0d:7e:fb:54:8e:1e:e7:22:09:43:2d:2e:99: 57:65:cb:10:48:eb:9e:1d:e2:72:95:86:a3:06:a5:2f:7c:9e: 28:23:8c:72:1e:2c:a6:ff:4a:92:05:b4:86:4d:7b:50:d8:2c: 51:51:50:4b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUFd0KERwS9ZFVQFJz+0tM79MVJoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk ZWI5M2Q5ZDAeFw0yNTExMjcwMTM2MDRaFw0yNjExMjYwMTQxMDRaMDMxMTAvBgNV BAMTKDcyNDNBQ0FFODU4QzE0Q0U2NTBFQjBFNDMyQTc4NTI3RDZFMjRCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6fc/q874FAti28StZfUjpKEh9 CR0AdZeY+bE++3bX0PMnkL8jkI1UeqUaMmBrvKq/IsesyV+3WqNRthVc7QpizZaF BiXVW0DML8D8idebv+5v/6dwaVQlj9l/4CHu1AsDDdHEoO3zJkxdZMD8kgmXsxox jv4EHaVycMn1OfpETOslvYJnZtnx6yER6fDsJEYtjvJHp0l4/NQxJxX2RIaeCeny tZeTGBzX6lZZAEgA8yuWnZyQDOHDjSPNo4mDOxafYNuKDnC6kobSFwLD0+gnwyGC 1KnXbyiIzthI1ZTiFdNJ3eKQp7uDxSsRQPYRstskxWHG9q/Opp0BziNK9QchAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUckOsroWMFM5lDrDkMqeFJ9biSw8wHwYDVR0j BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2 MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2 NVBaMC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTMzE3MTUucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACPFFMD BACPFF4DBACPFHUwDQYJKoZIhvcNAQELBQADggEBAL54eo127emsMxZlv1FHoEZG yFOyG7NCId49xzifhoxggvNC3/vRzwa7/Vxv07AJcVBkwPh+uwISLZ6B7UExi4GS CG9X8ZSTwt+lfoizWvBI88uzFBW6XwwMwf1AdAnVWDrHA93Nb9cx3nNlWJoqF7EK nxff4EsB4dyL2DPOqWuSMyi6VElxS0NIXfcr8DAMk1JAgpF0VWyjfDcVIW3ZFKZA OQKZXtMb4qdpGNc/MnMARlkMq4I7tN4tBeHgZqhKab+zyPDFzC5HcVIpDX77VI4e 5yIJQy0umVdlyxBI654d4nKVhqMGpS98nigjjHIeLKb/SpIFtIZNe1DYLFFRUEs= -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:57 2025 by rpki-client