This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/H31wpTyRoKYJtgBDiBoWaIcTFUI.roa File: H31wpTyRoKYJtgBDiBoWaIcTFUI.roa (raw, json) Hash identifier: QrZs2ZR8CqADxkxY93kk4igz8fZVwk5AJZQkU9ZWYCQ= Subject key identifier: 1F:7D:70:A5:3C:91:A0:A6:09:B6:00:43:88:1A:16:68:87:13:15:42 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3616A023ADBB7A525571CA2C5BEB36 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/H31wpTyRoKYJtgBDiBoWaIcTFUI.roa Signing time: Thu 01 Jan 2026 20:18:20 +0000 ROA not before: Thu 01 Jan 2026 20:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210240 IP address blocks: 193.31.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:16:a0:23:ad:bb:7a:52:55:71:ca:2c:5b:eb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f7d70a53c91a0a609b60043881a166887131542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:e2:0a:45:07:a1:c1:6e:bd:28:23:b4:a5: 27:a7:e7:34:6f:e6:e0:f7:a9:b7:f6:b4:b2:22:91: 5d:df:1e:cd:c9:51:ff:1f:1f:21:99:e1:16:c8:8b: b0:47:16:14:4a:df:d7:6b:39:57:e2:57:4f:2b:9a: 8e:69:ba:d1:ef:c7:95:ff:33:24:cb:79:6c:e3:2e: 31:96:21:59:1d:8f:97:27:cc:bd:0d:21:53:83:41: e7:cb:61:92:f2:2b:5f:81:ce:39:50:3a:7c:90:a3: 4e:44:ff:11:c9:38:7a:83:72:3b:f3:6d:c0:1e:89: ee:6e:66:73:2e:f7:36:c3:15:a2:63:8f:ea:16:d4: fe:ab:fb:f4:fc:6c:7b:0f:24:86:01:66:0b:02:dc: 24:4a:b6:3c:3b:ac:cf:3d:26:30:25:19:3c:2c:f6: 0a:fd:f9:9a:83:1e:ec:2f:4c:db:e1:af:14:59:c2: b4:b7:da:35:95:2e:dc:64:44:75:ed:cc:3f:67:af: ba:62:97:d3:ea:d6:35:a3:88:0e:2f:f5:5b:17:84: 99:e7:b5:5d:dc:23:85:d9:3d:70:83:0d:48:64:fb: ed:40:cd:6a:72:75:01:87:c0:53:67:8d:61:ae:8a: ac:ee:16:5e:47:38:0c:e0:92:9e:7b:fe:3d:7a:81: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7D:70:A5:3C:91:A0:A6:09:B6:00:43:88:1A:16:68:87:13:15:42 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/H31wpTyRoKYJtgBDiBoWaIcTFUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.31.13.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:f0:60:a5:c5:5b:22:23:ab:4c:b5:65:c0:e7:48:5c:71:1b: 78:ba:54:0d:76:aa:e1:10:6d:5b:f8:ec:4c:40:ed:d7:9a:6e: 27:21:d3:e6:a4:0e:da:20:77:09:74:d0:1c:4b:19:5c:38:fe: 7d:18:49:e6:33:e1:ab:62:4b:74:98:47:30:3a:01:f2:75:36: 44:9c:03:ab:51:b0:22:0e:9c:e4:d7:fa:eb:1d:69:1b:40:4e: 52:e3:6e:aa:73:99:94:6c:90:2e:13:3d:9b:e4:cf:e5:91:f0: 07:cb:67:03:c6:05:40:61:28:d5:6d:61:c9:25:8c:e7:8f:f1: 4b:2f:dc:c6:53:a8:5c:77:44:64:84:49:d3:7a:81:7b:fb:39: 71:20:00:0d:77:3f:14:62:85:f6:44:d8:c9:7a:e3:cd:06:4b: 9d:4c:96:b4:6f:ec:cb:6d:7b:75:88:b5:4e:1e:a7:da:19:db: 99:97:ba:ef:60:a2:69:e4:d3:7e:1c:de:ac:1a:6e:41:fc:a5: 02:76:55:70:2a:53:56:35:2f:c1:a8:80:ae:e5:27:da:69:56: d8:96:d5:58:19:0e:85:9b:db:1b:13:c3:da:ec:90:c1:e2:3a: e1:e5:93:d1:1e:7c:11:21:8f:19:0b:73:05:94:38:a9:ed:54: 8a:fb:1a:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhagI627elJVccosW+s2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjdkNzBhNTNjOTFhMGE2MDliNjAwNDM4ODFhMTY2ODg3MTMxNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CLiCkUHocFuvSgjtKUnp+c0b+bg 96m39rSyIpFd3x7NyVH/Hx8hmeEWyIuwRxYUSt/XazlX4ldPK5qOabrR78eV/zMk y3ls4y4xliFZHY+XJ8y9DSFTg0Hny2GS8itfgc45UDp8kKNORP8RyTh6g3I7823A HonubmZzLvc2wxWiY4/qFtT+q/v0/Gx7DySGAWYLAtwkSrY8O6zPPSYwJRk8LPYK /fmagx7sL0zb4a8UWcK0t9o1lS7cZER17cw/Z6+6YpfT6tY1o4gOL/VbF4SZ57Vd 3COF2T1wgw1IZPvtQM1qcnUBh8BTZ41hroqs7hZeRzgM4JKee/49eoERsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB99cKU8kaCmCbYAQ4gaFmiHExVCMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvSDMxd3BUeVJvS1lKdGdCRGlCb1dhSWNURlVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8NMA0G CSqGSIb3DQEBCwUAA4IBAQCO8GClxVsiI6tMtWXA50hccRt4ulQNdqrhEG1b+OxM QO3Xmm4nIdPmpA7aIHcJdNAcSxlcOP59GEnmM+GrYkt0mEcwOgHydTZEnAOrUbAi Dpzk1/rrHWkbQE5S426qc5mUbJAuEz2b5M/lkfAHy2cDxgVAYSjVbWHJJYznj/FL L9zGU6hcd0RkhEnTeoF7+zlxIAANdz8UYoX2RNjJeuPNBkudTJa0b+zLbXt1iLVO HqfaGduZl7rvYKJp5NN+HN6sGm5B/KUCdlVwKlNWNS/BqICu5SfaaVbYltVYGQ6F m9sbE8Pa7JDB4jrh5ZPRHnwRIY8ZC3MFlDip7VSK+xoR -----END CERTIFICATE-----Generated at Thu Jan 15 13:17:00 2026 by rpki-client