This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/P1GfPpRMWO0DN1ayjFsF8s42h0U.roa File: P1GfPpRMWO0DN1ayjFsF8s42h0U.roa (raw, json) Hash identifier: 8AiPsJ46Sh6eUO7JJzaL6h8U9SkUyiDH6w5ycG2ZG0Q= Subject key identifier: 3F:51:9F:3E:94:4C:58:ED:03:37:56:B2:8C:5B:05:F2:CE:36:87:45 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019AEEF33D737D40C328D9B0AA94F749E7AD Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/P1GfPpRMWO0DN1ayjFsF8s42h0U.roa Signing time: Fri 05 Dec 2025 14:38:29 +0000 ROA not before: Fri 05 Dec 2025 14:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5650 IP address blocks: 31.193.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:f3:3d:73:7d:40:c3:28:d9:b0:aa:94:f7:49:e7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 5 14:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f519f3e944c58ed033756b28c5b05f2ce368745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:a7:b6:dd:76:d7:f7:01:96:1e:1a:88:a1: 04:cd:41:4c:57:e0:da:88:d5:2e:90:c3:c5:21:76: 5d:0e:95:70:66:ea:ec:05:25:1a:7d:82:88:f9:e8: d7:15:94:01:ed:07:35:c2:e8:96:bd:a4:1c:42:32: b9:b0:d2:6d:a4:5b:19:ad:ca:7b:79:e4:13:54:19: d3:67:7c:80:c7:1a:3d:17:25:10:9e:82:27:ef:6a: bf:a2:fa:98:d9:ac:1b:fc:01:5e:05:5a:f2:05:33: ea:cb:e2:e1:d0:ab:53:7b:55:5f:03:3f:e4:17:34: e6:ef:1c:ee:8b:89:ed:c1:e7:3c:98:95:54:44:8e: 52:fe:d1:6d:5c:2d:52:0f:c6:c6:67:2f:e1:15:91: 30:4d:8b:1b:55:70:67:77:12:7d:54:80:62:fa:70: bd:ba:ab:3f:9c:77:71:db:dc:02:85:7b:5e:aa:b6: 4a:b7:64:b8:c8:e4:ac:65:85:0e:96:e8:c5:5e:80: 6e:b9:3b:6d:bd:7f:da:62:b5:bd:6b:3f:4c:6c:85: b5:16:18:ce:1b:d3:82:64:e8:34:8e:5c:dd:91:b6: a8:0e:3c:2c:61:ae:61:fe:96:82:3e:46:e0:e4:eb: 2a:1d:19:98:a3:6b:0a:2c:e5:1c:a1:68:95:72:2c: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:51:9F:3E:94:4C:58:ED:03:37:56:B2:8C:5B:05:F2:CE:36:87:45 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/P1GfPpRMWO0DN1ayjFsF8s42h0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.191.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:fc:c0:75:63:f8:07:f9:ee:53:98:ba:5f:46:e2:d9:21:06: c5:ca:49:43:70:eb:d0:7b:f3:1e:12:5c:ae:d0:88:b4:fb:d0: a6:70:c9:57:ff:ae:d6:45:24:6d:1b:6c:b6:eb:64:94:74:ee: 7a:88:6b:e7:8a:9f:9f:de:ac:74:cf:36:d1:2c:85:c0:37:ed: 25:39:11:51:51:1b:21:79:ad:38:41:03:65:6c:f2:0c:a9:93: 47:3d:80:c1:17:df:a9:a3:29:99:bc:97:c6:44:75:97:81:80: 95:0f:4e:7e:78:82:79:3b:0d:00:07:e9:b4:48:a8:39:ef:71: 7d:81:32:60:46:b2:e8:9b:5a:59:e5:c0:8a:0f:b9:c7:1a:10: 43:be:11:ee:2b:d2:e2:f3:f3:36:cc:7b:d9:23:77:db:24:39: 0d:cc:e4:80:22:e2:1b:04:c6:3a:d0:02:9b:b3:f8:16:7a:72: 0a:eb:fa:ad:15:01:5e:29:c3:2b:74:ee:09:62:ff:1b:66:b5: 2b:5b:8d:c7:1e:a9:7f:7c:99:bc:77:b6:e2:b2:c0:04:38:81: e7:5e:42:e6:b8:94:8a:80:33:46:b5:bd:d7:ce:2c:b9:a4:ca: 81:2f:6d:2f:0a:ac:fd:7d:31:fe:61:e0:20:92:95:ed:e7:15: 52:57:56:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZru8z1zfUDDKNmwqpT3SeetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjA1MTQzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjUxOWYzZTk0NGM1OGVkMDMzNzU2YjI4YzViMDVmMmNlMzY4NzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBSntt121/cBlh4aiKEEzUFMV+Da iNUukMPFIXZdDpVwZursBSUafYKI+ejXFZQB7Qc1wuiWvaQcQjK5sNJtpFsZrcp7 eeQTVBnTZ3yAxxo9FyUQnoIn72q/ovqY2awb/AFeBVryBTPqy+Lh0KtTe1VfAz/k FzTm7xzui4ntwec8mJVURI5S/tFtXC1SD8bGZy/hFZEwTYsbVXBndxJ9VIBi+nC9 uqs/nHdx29wChXteqrZKt2S4yOSsZYUOlujFXoBuuTttvX/aYrW9az9MbIW1FhjO G9OCZOg0jlzdkbaoDjwsYa5h/paCPkbg5OsqHRmYo2sKLOUcoWiVciw8swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD9Rnz6UTFjtAzdWsoxbBfLONodFMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvUDFHZlBwUk1XTzBETjFheWpGc0Y4czQyaDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH8G/MA0G CSqGSIb3DQEBCwUAA4IBAQBt/MB1Y/gH+e5TmLpfRuLZIQbFyklDcOvQe/MeElyu 0Ii0+9CmcMlX/67WRSRtG2y262SUdO56iGvnip+f3qx0zzbRLIXAN+0lORFRURsh ea04QQNlbPIMqZNHPYDBF9+poymZvJfGRHWXgYCVD05+eIJ5Ow0AB+m0SKg573F9 gTJgRrLom1pZ5cCKD7nHGhBDvhHuK9Li8/M2zHvZI3fbJDkNzOSAIuIbBMY60AKb s/gWenIK6/qtFQFeKcMrdO4JYv8bZrUrW43HHql/fJm8d7bissAEOIHnXkLmuJSK gDNGtb3Xziy5pMqBL20vCqz9fTH+YeAgkpXt5xVSV1ZP -----END CERTIFICATE-----Generated at Sat Dec 6 04:48:06 2025 by rpki-client