This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/31__Ljvdh5fFWa-BF1FmCzwwDW4.roa File: 31__Ljvdh5fFWa-BF1FmCzwwDW4.roa (raw, json) Hash identifier: N9hIOu5MLbrZZOjfnys+h1KWiRyVn1BnWX+ujPnZveQ= Subject key identifier: DF:5F:FF:2E:3B:DD:87:97:C5:59:AF:81:17:51:66:0B:3C:30:0D:6E Certificate issuer: /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc Certificate serial: 019B7AC7D26493D6583328105AC475E93FF4 Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/31__Ljvdh5fFWa-BF1FmCzwwDW4.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 185.7.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:64:93:d6:58:33:28:10:5a:c4:75:e9:3f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df5fff2e3bdd8797c559af811751660b3c300d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f0:32:57:21:ac:32:d5:07:7a:a2:9d:19:b4: dc:5a:af:c6:0b:36:80:3a:13:97:6b:34:9d:a1:00: 59:e9:ea:9c:e9:91:d1:e3:10:87:72:b3:d0:3b:1b: 37:00:15:1e:e6:66:f7:82:54:5a:54:bc:c2:13:a7: e4:eb:97:05:ac:3c:42:eb:89:9c:f7:63:87:e3:af: 28:8e:5d:94:1f:22:5f:7e:ce:69:eb:1a:2c:da:6b: 93:87:31:30:c3:63:c1:8e:48:84:c6:88:16:01:45: e3:ca:89:d1:a6:3b:09:4b:e4:e9:e8:5f:8f:e6:43: b2:54:c4:2f:19:c7:41:9f:95:bf:86:e0:5e:1c:2a: 25:43:91:4c:ac:c6:48:84:a9:41:41:bb:ae:ee:d9: d9:5a:55:35:9e:cb:52:bd:97:05:16:01:75:2c:86: dc:19:b1:3c:68:33:52:b3:e5:24:7c:20:2b:16:1f: 56:3d:02:bc:da:9b:dd:22:cc:3d:51:d3:82:09:cc: f1:69:d8:2e:ca:e3:c2:61:66:a8:65:ec:56:a1:10: bc:d4:f2:8c:86:35:4b:42:2e:39:e4:8e:17:c6:1b: 8a:a9:6e:63:eb:e3:40:6c:ed:f6:bf:45:f5:c0:8d: 64:15:06:24:20:18:e9:5d:e0:41:94:2f:29:bb:9d: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:FF:2E:3B:DD:87:97:C5:59:AF:81:17:51:66:0B:3C:30:0D:6E X509v3 Authority Key Identifier: keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/31__Ljvdh5fFWa-BF1FmCzwwDW4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.212.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:4f:87:c4:fe:c2:ea:3a:db:d3:fa:b1:d2:bb:4e:df:1e:38: ac:9c:cc:4a:eb:7e:fc:5c:e0:4b:fa:74:3b:5c:1e:3e:73:cc: e3:de:57:c4:cc:a2:8c:35:48:b0:8b:f8:44:ce:33:f1:ed:e5: 12:4f:e4:35:99:b1:47:c9:28:2f:d3:4c:b0:7f:35:78:fc:e3: a8:2d:f6:f6:3d:ac:92:b4:21:4c:44:52:aa:bf:0e:47:3f:4d: f3:0f:7e:26:b6:02:d1:97:ca:a5:d4:59:ec:37:e3:68:d9:c8: 75:c3:5a:b8:40:e1:d4:49:41:b0:86:86:25:6b:4f:d9:5b:ba: b5:65:90:25:53:ac:cf:8f:69:d2:37:c3:fd:b4:31:2e:6e:94: 93:86:09:fd:cf:dd:73:6a:29:a5:da:a9:f7:c1:88:2b:07:56: 51:cb:da:fb:43:15:75:df:01:ec:02:93:a1:b3:55:f3:38:4e: 5c:e1:c6:84:3d:9e:31:87:c9:1c:3c:cc:15:5c:06:df:a8:a2: 89:10:be:72:a7:e7:23:f8:45:a7:bf:22:99:37:c9:20:5c:6f: 4e:96:27:ee:d6:09:c3:e3:8d:f9:60:89:83:8b:87:92:60:d0: 77:ac:2f:cc:db:f7:c6:c0:54:fb:6f:f9:ef:91:4e:6f:71:b5: e4:a9:de:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9Jkk9ZYMygQWsR16T/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NzNmZjEwZDdhNTU0ZmM1MWE3Zjk5YzFmNjFlMWNlZWY5 OTg1YmMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjVmZmYyZTNiZGQ4Nzk3YzU1OWFmODExNzUxNjYwYjNjMzAwZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/AyVyGsMtUHeqKdGbTcWq/GCzaA OhOXazSdoQBZ6eqc6ZHR4xCHcrPQOxs3ABUe5mb3glRaVLzCE6fk65cFrDxC64mc 92OH468ojl2UHyJffs5p6xos2muThzEww2PBjkiExogWAUXjyonRpjsJS+Tp6F+P 5kOyVMQvGcdBn5W/huBeHColQ5FMrMZIhKlBQbuu7tnZWlU1nstSvZcFFgF1LIbc GbE8aDNSs+UkfCArFh9WPQK82pvdIsw9UdOCCczxadguyuPCYWaoZexWoRC81PKM hjVLQi455I4XxhuKqW5j6+NAbO32v0X1wI1kFQYkIBjpXeBBlC8pu50SNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9f/y473YeXxVmvgRdRZgs8MA1uMB8GA1UdIwQY MBaAFOZz/xDXpVT8Uaf5nB9h4c7vmYW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2Qt NDhjYTMzNjc1YTUwLzEvMzFfX0xqdmRoNWZGV2EtQkYxRm1Dend3RFc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jYmU3ZTUtZGNjOC00MjY1LThkN2QtNDhjYTMzNjc1YTUw LzEvNW5QX0VOZWxWUHhScF9tY0gySGh6dS1aaGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQfUMA0G CSqGSIb3DQEBCwUAA4IBAQCaT4fE/sLqOtvT+rHSu07fHjisnMxK6378XOBL+nQ7 XB4+c8zj3lfEzKKMNUiwi/hEzjPx7eUST+Q1mbFHySgv00ywfzV4/OOoLfb2PayS tCFMRFKqvw5HP03zD34mtgLRl8ql1FnsN+No2ch1w1q4QOHUSUGwhoYla0/ZW7q1 ZZAlU6zPj2nSN8P9tDEubpSThgn9z91zaiml2qn3wYgrB1ZRy9r7QxV13wHsApOh s1XzOE5c4caEPZ4xh8kcPMwVXAbfqKKJEL5yp+cj+EWnvyKZN8kgXG9Olifu1gnD 4435YImDi4eSYNB3rC/M2/fGwFT7b/nvkU5vcbXkqd6l -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:23 2026 by rpki-client