This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/31-g2O4jA-IdMKhrhpCzByPryFw.roa File: 31-g2O4jA-IdMKhrhpCzByPryFw.roa (raw, json) Hash identifier: GKsHl7IDsZtj7GZMS2THAskx0P5sRUkyuOPplPo3N4A= Subject key identifier: DF:5F:A0:D8:EE:23:03:E2:1D:30:A8:6B:86:90:B3:07:23:EB:C8:5C Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc Certificate serial: 019B7F832E4DECE7C163CC7D468DA3897721 Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/31-g2O4jA-IdMKhrhpCzByPryFw.roa Signing time: Fri 02 Jan 2026 16:21:02 +0000 ROA not before: Fri 02 Jan 2026 16:21:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199947 IP address blocks: 45.140.84.0/22 maxlen: 22 185.41.32.0/22 maxlen: 22 2a01:5420::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:2e:4d:ec:e7:c1:63:cc:7d:46:8d:a3:89:77:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc Validity Not Before: Jan 2 16:21:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df5fa0d8ee2303e21d30a86b8690b30723ebc85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:0b:a6:b0:a9:f9:76:89:fe:02:c6:2c:42: b4:a7:1a:b5:43:98:91:45:14:28:8d:05:7a:cd:fe: 36:de:01:a7:2d:82:b6:c2:e8:9a:24:e6:94:86:83: c0:d7:72:70:56:74:ee:0c:6e:76:c9:08:8b:f6:96: 54:f5:94:d7:12:a0:af:29:96:0e:01:02:6c:38:69: 26:e6:a6:b2:74:23:f3:95:af:35:6f:7f:c7:fe:6a: 7a:c3:f5:ce:de:f9:ad:62:ec:f0:93:d2:ca:05:27: 8d:eb:09:e6:9d:53:17:a5:ca:4c:09:c3:cd:b1:00: 01:be:3e:0b:47:10:a4:b1:51:d0:31:47:0b:10:3e: ff:7c:51:ab:fc:6e:2a:5a:11:56:5c:76:fd:6c:85: 24:02:95:e9:4d:75:45:6a:32:72:80:bc:55:d9:14: 30:ba:0e:b9:ae:f8:45:cb:dd:65:e6:02:fb:e1:dd: 8e:b2:1d:91:c9:c6:e2:82:62:83:76:69:e4:31:08: c8:0e:a3:27:5f:81:3a:a1:6f:a4:73:4c:d0:5d:15: 11:cc:c3:c8:dc:a8:0b:e3:f2:35:2a:f5:2e:27:7c: e5:18:00:95:cb:41:e9:d9:82:01:d6:6f:4f:6e:3e: be:05:e6:07:96:0a:27:21:37:f4:be:a3:6a:75:20: dc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:A0:D8:EE:23:03:E2:1D:30:A8:6B:86:90:B3:07:23:EB:C8:5C X509v3 Authority Key Identifier: keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/31-g2O4jA-IdMKhrhpCzByPryFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.84.0/22 185.41.32.0/22 IPv6: 2a01:5420::/32 Signature Algorithm: sha256WithRSAEncryption 1c:46:1e:0d:9e:e1:34:c5:8a:e5:80:26:72:48:d8:2f:bb:21: dc:3e:41:1a:c4:be:f7:87:28:62:d2:9e:df:97:a2:bb:cb:a6: d1:50:b5:fc:e8:b5:ed:f4:bb:7a:e6:7f:ab:7b:62:78:5b:36: a5:f3:a9:a3:a1:c0:73:a0:c1:93:23:57:3d:cc:03:04:4e:37: cb:82:01:e8:41:54:b6:28:fe:1c:fd:4e:f5:d7:a2:0b:e3:1b: 74:89:c9:3d:e2:72:6d:df:b1:7a:19:9f:97:e3:fd:f4:5a:3f: 02:e9:80:6f:ab:81:97:12:81:e6:86:bf:bb:11:4f:91:d5:55: 64:57:76:8e:c3:be:0c:99:06:a7:2e:a4:f6:0b:77:7f:85:e5: 8c:46:76:7c:f7:59:ac:d1:49:b8:19:18:0b:67:ec:98:eb:b2: 21:af:75:59:88:49:17:97:c7:c7:d6:66:62:fa:1c:99:99:b6: 82:7f:92:dc:67:09:ec:e7:b8:34:28:c5:c9:31:10:dd:ae:8f: 5e:30:47:1d:6d:97:7f:e9:88:96:e7:5f:dc:f7:b3:85:d3:1f: 7c:44:55:5f:2a:57:bf:80:1d:4f:f8:34:19:e7:6e:a9:8b:2c: 39:bb:21:27:69:87:b5:c2:f0:18:10:31:9b:3f:e3:cd:b1:39: 6a:4c:19:02 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/gy5N7OfBY8x9Ro2jiXchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4ZjU2NzU0OTk4M2Y0M2FkZDk5OGMzNmU4Zjc4YmQxNWY0 NWEyY2MwHhcNMjYwMTAyMTYyMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjVmYTBkOGVlMjMwM2UyMWQzMGE4NmI4NjkwYjMwNzIzZWJjODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dULprCp+XaJ/gLGLEK0pxq1Q5iR RRQojQV6zf423gGnLYK2wuiaJOaUhoPA13JwVnTuDG52yQiL9pZU9ZTXEqCvKZYO AQJsOGkm5qaydCPzla81b3/H/mp6w/XO3vmtYuzwk9LKBSeN6wnmnVMXpcpMCcPN sQABvj4LRxCksVHQMUcLED7/fFGr/G4qWhFWXHb9bIUkApXpTXVFajJygLxV2RQw ug65rvhFy91l5gL74d2Osh2RycbigmKDdmnkMQjIDqMnX4E6oW+kc0zQXRURzMPI 3KgL4/I1KvUuJ3zlGACVy0Hp2YIB1m9Pbj6+BeYHlgonITf0vqNqdSDcFQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFN9foNjuIwPiHTCoa4aQswcj68hcMB8GA1UdIwQY MBaAFCj1Z1SZg/Q63ZmMNuj3i9FfRaLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMt ZDBiMTExYmE0MTQ4LzEvMzEtZzJPNGpBLUlkTUtocmhwQ3pCeVByeUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85Y2ZkOGUtMjNjZC00NDdhLTlkMmMtZDBiMTExYmE0MTQ4 LzEvS1BWblZKbUQ5RHJkbVl3MjZQZUwwVjlGb3N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYxUAwQC uSkgMA0EAgACMAcDBQAqAVQgMA0GCSqGSIb3DQEBCwUAA4IBAQAcRh4NnuE0xYrl gCZySNgvuyHcPkEaxL73hyhi0p7fl6K7y6bRULX86LXt9Lt65n+re2J4Wzal86mj ocBzoMGTI1c9zAMETjfLggHoQVS2KP4c/U7116IL4xt0ick94nJt37F6GZ+X4/30 Wj8C6YBvq4GXEoHmhr+7EU+R1VVkV3aOw74MmQanLqT2C3d/heWMRnZ891ms0Um4 GRgLZ+yY67Ihr3VZiEkXl8fH1mZi+hyZmbaCf5LcZwns57g0KMXJMRDdro9eMEcd bZd/6YiW51/c97OF0x98RFVfKle/gB1P+DQZ526piyw5uyEnaYe1wvAYEDGbP+PN sTlqTBkC -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:36 2026 by rpki-client