This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0k31-UXgmmRBwzHof-gD4pikvDQ.roa File: 0k31-UXgmmRBwzHof-gD4pikvDQ.roa (raw, json) Hash identifier: PSv/kSQTtCCpzoANd8PGHpzIclXxYDX8f/hDlrj4qBs= Subject key identifier: D2:4D:F5:F9:45:E0:9A:64:41:C3:31:E8:7F:E8:03:E2:98:A4:BC:34 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019AA2EF7E2970A658EDC8729F4F10E2CC8F Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0k31-UXgmmRBwzHof-gD4pikvDQ.roa Signing time: Thu 20 Nov 2025 20:23:15 +0000 ROA not before: Thu 20 Nov 2025 20:23:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207530 IP address blocks: 2a12:bec4:1a90::/44 maxlen: 48 2a12:bec4:1b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:ef:7e:29:70:a6:58:ed:c8:72:9f:4f:10:e2:cc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Nov 20 20:23:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d24df5f945e09a6441c331e87fe803e298a4bc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:64:54:6c:9b:4e:c8:81:4f:39:57:40:cf:e7: d6:4c:57:08:21:f1:d5:a9:cf:86:36:e1:9f:19:bf: 16:30:29:ef:5c:ee:b0:49:0c:be:b7:31:2c:3c:ac: 9a:3b:92:d5:22:c1:a1:9c:ca:78:d9:8f:b5:f3:a5: 74:17:66:8a:5e:55:55:c8:81:b0:7a:e3:d2:b5:35: 7d:89:86:88:a2:f3:15:4c:3c:33:3f:78:c5:07:83: ea:32:2c:4c:78:db:e7:f0:21:33:e9:b6:45:83:01: 3a:55:24:e9:e5:96:c2:54:94:6e:46:1f:07:ca:9d: 0a:69:f5:70:65:1d:c5:74:af:73:a1:32:e1:11:62: 91:ce:67:ac:be:93:7f:76:b6:9e:6b:4a:95:be:1c: 4f:77:2e:a3:bb:7a:51:c0:da:63:76:32:1d:8a:e5: 5f:6d:c5:da:b8:3e:bd:fc:4d:9e:0c:6d:46:e9:79: 93:c3:fd:b2:80:93:4e:2a:ae:b8:93:68:7e:30:17: b0:e2:97:a1:17:a0:ae:8a:aa:b1:8c:19:41:ed:c2: af:f8:b5:0a:ec:29:76:f5:d8:ac:bf:b0:63:60:d3: 3c:6c:7d:33:d2:89:1b:c0:13:b3:96:c2:e3:e2:7e: d9:c6:19:86:3b:07:ed:32:20:cb:f3:93:bd:2d:53: 34:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4D:F5:F9:45:E0:9A:64:41:C3:31:E8:7F:E8:03:E2:98:A4:BC:34 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0k31-UXgmmRBwzHof-gD4pikvDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1a90::/44 2a12:bec4:1b20::/44 Signature Algorithm: sha256WithRSAEncryption 4e:59:5b:7d:f4:71:0a:8c:04:2d:b3:45:b4:7f:ae:6c:42:04: fd:e6:76:0d:05:4e:d0:96:8c:e0:f3:ef:dc:9e:fa:09:c0:3e: cb:fb:84:b9:94:df:b5:64:39:0a:82:2a:0a:58:50:f7:1d:30: 74:c2:19:41:2e:0f:d0:35:2f:86:98:11:53:a7:0f:f4:ab:c0: 4e:88:ca:97:a4:86:2b:a5:93:f3:88:bc:ed:43:2c:50:1e:0b: 09:0b:8a:9d:69:66:b9:f7:15:8c:60:7f:f0:a8:73:8c:20:b4: db:9d:0a:9d:4e:97:4f:97:d2:5b:26:0f:26:87:a7:dd:b5:c7: c5:ba:84:a2:98:d5:9b:8b:70:21:f5:7d:b3:c7:c9:93:f2:33: 95:07:d0:d8:c0:cc:8f:e6:89:73:cd:19:35:97:50:ad:5b:f5: 0a:0e:da:cc:a5:76:67:0c:63:5c:9d:0b:21:bc:cc:4b:09:57: 77:96:aa:96:50:21:5c:0b:84:64:44:8b:14:50:27:69:89:7d: 23:4a:40:7b:7e:70:83:b7:0c:24:0e:84:63:0b:61:af:94:7d: 21:30:c7:49:0e:41:cd:76:b3:80:0e:f5:40:71:17:56:e9:b4: 9f:6f:c0:d0:e5:7f:38:02:69:3f:69:de:da:8f:51:e0:a3:49: 38:cb:2a:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqi734pcKZY7chyn08Q4syPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjUxMTIwMjAyMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjRkZjVmOTQ1ZTA5YTY0NDFjMzMxZTg3ZmU4MDNlMjk4YTRiYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GRUbJtOyIFPOVdAz+fWTFcIIfHV qc+GNuGfGb8WMCnvXO6wSQy+tzEsPKyaO5LVIsGhnMp42Y+186V0F2aKXlVVyIGw euPStTV9iYaIovMVTDwzP3jFB4PqMixMeNvn8CEz6bZFgwE6VSTp5ZbCVJRuRh8H yp0KafVwZR3FdK9zoTLhEWKRzmesvpN/draea0qVvhxPdy6ju3pRwNpjdjIdiuVf bcXauD69/E2eDG1G6XmTw/2ygJNOKq64k2h+MBew4pehF6CuiqqxjBlB7cKv+LUK 7Cl29disv7BjYNM8bH0z0okbwBOzlsLj4n7ZxhmGOwftMiDL85O9LVM04QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNJN9flF4JpkQcMx6H/oA+KYpLw0MB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvMGszMS1VWGdtbVJCd3pIb2YtZ0Q0cGlrdkRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+xBqQ AwcEKhK+xBsgMA0GCSqGSIb3DQEBCwUAA4IBAQBOWVt99HEKjAQts0W0f65sQgT9 5nYNBU7Qlozg8+/cnvoJwD7L+4S5lN+1ZDkKgioKWFD3HTB0whlBLg/QNS+GmBFT pw/0q8BOiMqXpIYrpZPziLztQyxQHgsJC4qdaWa59xWMYH/wqHOMILTbnQqdTpdP l9JbJg8mh6fdtcfFuoSimNWbi3Ah9X2zx8mT8jOVB9DYwMyP5olzzRk1l1CtW/UK DtrMpXZnDGNcnQshvMxLCVd3lqqWUCFcC4RkRIsUUCdpiX0jSkB7fnCDtwwkDoRj C2GvlH0hMMdJDkHNdrOADvVAcRdW6bSfb8DQ5X84Amk/ad7aj1Hgo0k4yyp2 -----END CERTIFICATE-----Generated at Fri Dec 5 20:06:43 2025 by rpki-client