This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/31xp4j17zZBGJ4-y3cAQjC3cbjI.roa File: 31xp4j17zZBGJ4-y3cAQjC3cbjI.roa (raw, json) Hash identifier: 9pE1yUBOFzHRb+ogXPSh2yMyxtvCfRN7oWLeTd5b9kk= Subject key identifier: DF:5C:69:E2:3D:7B:CD:90:46:27:8F:B2:DD:C0:10:8C:2D:DC:6E:32 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C8097AAA981F4D05473C98C3A8ED8FD Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/31xp4j17zZBGJ4-y3cAQjC3cbjI.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 84.32.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:97:aa:a9:81:f4:d0:54:73:c9:8c:3a:8e:d8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df5c69e23d7bcd9046278fb2ddc0108c2ddc6e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:e9:6c:50:c3:8b:bd:30:ef:d3:df:26:dc: 14:b3:4a:69:69:f8:e7:b4:c8:dc:55:66:7e:38:10: fb:f7:db:51:99:3b:37:31:f4:87:e6:78:54:78:1a: 8f:03:b4:b6:d8:3d:87:32:ad:f9:98:79:05:0f:07: e1:04:ad:43:ba:bb:7a:9e:1e:f0:b4:9a:2a:5a:f8: ff:09:bf:2b:13:d7:75:a0:44:7a:bc:09:b0:ed:93: a1:4a:47:c6:17:09:17:89:d3:10:ef:6e:95:3a:39: 09:48:a5:1a:40:dd:2b:99:53:c6:40:bc:83:20:26: 6f:37:a8:bf:fb:86:8c:b6:e0:2a:16:ea:bb:22:73: 8a:f3:67:f5:ff:86:1e:bd:d6:a1:e2:06:f2:fd:64: b6:40:09:dd:7e:5e:10:22:92:fd:c2:a9:07:1a:e7: 37:7e:7b:ff:a7:37:ef:cc:91:a5:af:9d:4a:fe:cd: d1:af:8b:c6:ca:ca:68:4a:57:f8:bc:b4:20:9c:d6: 62:b3:5a:85:d5:7e:e8:d3:be:27:d9:13:41:23:56: 30:6e:4a:ba:fc:0d:28:7f:ae:09:92:e7:14:6a:a3: 43:10:ab:dc:b3:f4:69:0c:6a:de:21:82:2a:88:d7: 6c:ea:9c:25:4d:63:2c:33:fe:90:31:f9:58:75:7f: 80:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:69:E2:3D:7B:CD:90:46:27:8F:B2:DD:C0:10:8C:2D:DC:6E:32 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/31xp4j17zZBGJ4-y3cAQjC3cbjI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.216.0/24 Signature Algorithm: sha256WithRSAEncryption 72:b1:ac:bb:bd:75:fc:9b:7f:db:81:4f:cf:61:42:8c:81:b5: 82:78:fc:c7:15:23:5b:e7:82:52:d5:14:ed:6b:c6:42:a3:a5: 06:1b:e8:a7:45:3d:14:59:ab:35:40:29:01:ad:d7:0d:70:9e: 9b:01:b8:4d:22:70:12:f3:e1:d8:75:c3:4b:88:df:f8:c4:47: 49:af:b1:ff:06:1a:e3:67:04:a1:11:49:0f:8e:4f:fa:0f:6b: 77:74:3e:0e:da:1c:56:9f:98:20:58:8c:a6:2a:51:44:4b:8c: 2b:a7:14:e0:cf:c7:60:41:34:a6:a9:f7:9e:ae:e7:58:52:49: e0:1b:98:5c:ba:49:a8:85:03:83:80:4c:46:cb:df:7c:e3:d0: ff:e0:99:06:54:89:99:bb:44:2b:b2:6a:1b:24:89:ab:f7:df: 93:53:87:a4:ba:54:4c:4a:5c:e9:5e:97:25:93:e2:a8:ab:fa: 86:57:38:83:d9:f1:88:da:d9:f5:55:dd:6d:54:e7:d3:97:3f: 90:1b:87:7b:18:84:7d:55:51:91:57:76:ed:01:1a:f7:03:8e: dc:b2:19:b2:24:50:3d:00:3c:d0:2c:b5:4e:26:7e:ea:dc:d6: c9:d1:8c:b2:92:f9:08:bf:a6:d5:aa:f6:3c:3c:d3:6c:8b:1b: 4c:2f:58:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJeqqYH00FRzyYw6jtj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjVjNjllMjNkN2JjZDkwNDYyNzhmYjJkZGMwMTA4YzJkZGM2ZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9zpbFDDi70w79PfJtwUs0ppafjn tMjcVWZ+OBD799tRmTs3MfSH5nhUeBqPA7S22D2HMq35mHkFDwfhBK1Durt6nh7w tJoqWvj/Cb8rE9d1oER6vAmw7ZOhSkfGFwkXidMQ726VOjkJSKUaQN0rmVPGQLyD ICZvN6i/+4aMtuAqFuq7InOK82f1/4Yevdah4gby/WS2QAndfl4QIpL9wqkHGuc3 fnv/pzfvzJGlr51K/s3Rr4vGyspoSlf4vLQgnNZis1qF1X7o074n2RNBI1Ywbkq6 /A0of64JkucUaqNDEKvcs/RpDGreIYIqiNds6pwlTWMsM/6QMflYdX+AHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9caeI9e82QRiePst3AEIwt3G4yMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvMzF4cDRqMTd6WkJHSjQteTNjQVFqQzNjYmpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDYMA0G CSqGSIb3DQEBCwUAA4IBAQBysay7vXX8m3/bgU/PYUKMgbWCePzHFSNb54JS1RTt a8ZCo6UGG+inRT0UWas1QCkBrdcNcJ6bAbhNInAS8+HYdcNLiN/4xEdJr7H/Bhrj ZwShEUkPjk/6D2t3dD4O2hxWn5ggWIymKlFES4wrpxTgz8dgQTSmqfeerudYUkng G5hcukmohQODgExGy99849D/4JkGVImZu0QrsmobJImr99+TU4ekulRMSlzpXpcl k+Koq/qGVziD2fGI2tn1Vd1tVOfTlz+QG4d7GIR9VVGRV3btARr3A47cshmyJFA9 ADzQLLVOJn7q3NbJ0YyykvkIv6bVqvY8PNNsixtML1il -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:31 2026 by rpki-client