This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/31E2Jpw8sSB2ex_0sGgJgcUJMss.roa File: 31E2Jpw8sSB2ex_0sGgJgcUJMss.roa (raw, json) Hash identifier: O/6cy5BdL9Ym6N9VXkBQwcBrlMkbVvWmJJRdoB4bLck= Subject key identifier: DF:51:36:26:9C:3C:B1:20:76:7B:1F:F4:B0:68:09:81:C5:09:32:CB Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED5440721F45812F239862BFCE231C Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/31E2Jpw8sSB2ex_0sGgJgcUJMss.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214738 IP address blocks: 185.118.79.0/24 maxlen: 24 213.21.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:40:72:1f:45:81:2f:23:98:62:bf:ce:23:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df5136269c3cb120767b1ff4b0680981c50932cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:21:bd:ef:2b:62:d0:90:75:d3:d2:18:13:b0: 26:41:5b:98:dc:37:82:3b:0d:9f:2c:23:88:6e:24: e4:8b:f8:f9:e4:66:2d:75:80:86:30:09:08:51:e3: 63:40:2c:c2:d0:83:e6:69:40:13:32:2c:87:2e:1a: 56:c6:4c:24:f0:cb:bf:e3:cd:a3:8e:3c:d8:66:a2: f9:41:62:62:29:97:b5:f0:3b:9c:45:a7:5b:fe:77: 06:0f:8e:53:04:b9:5d:17:73:75:69:53:4d:17:87: f0:74:59:68:96:9e:43:34:d9:ee:4f:02:e0:45:41: 86:4d:6b:b3:ae:45:ae:20:84:e4:b0:c3:c6:8e:06: 96:85:3e:dd:85:11:bd:8a:7d:82:b0:36:57:59:55: e7:59:ba:8a:28:68:cd:f4:a8:69:e5:9d:db:1b:03: 90:e4:9c:85:66:ef:ca:4f:d1:41:b2:54:44:c6:eb: b9:b7:1b:47:76:d7:1d:bd:b8:cb:30:d7:90:96:ac: eb:1b:08:e4:1a:89:34:56:df:25:01:f6:70:5b:84: 06:46:3c:15:2d:a7:69:08:51:0d:2a:09:57:ff:13: eb:4f:29:df:ab:e7:a4:e0:5c:10:ee:a6:c0:73:01: d8:f1:97:60:e1:68:ba:8f:78:cf:6c:b5:ab:62:c0: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:51:36:26:9C:3C:B1:20:76:7B:1F:F4:B0:68:09:81:C5:09:32:CB X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/31E2Jpw8sSB2ex_0sGgJgcUJMss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.79.0/24 213.21.232.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:7f:ae:91:6a:ce:d2:97:f3:d7:05:95:e8:cc:a9:93:4a:78: 00:83:07:c4:d8:e2:ca:1f:20:df:96:c0:20:81:1e:7c:56:56: 05:2a:42:f5:82:cd:40:d0:9c:d7:64:fd:e7:3c:71:a4:ab:ad: 12:e4:0a:4e:7d:58:ba:4e:c6:b5:2d:54:a2:f7:7f:e8:de:00: fb:5b:c3:dd:af:87:fb:de:3f:ee:56:d3:b0:49:ba:01:2d:31: 31:bf:16:00:c9:81:23:db:2b:fb:7e:a7:7f:39:cd:de:83:a5: d2:1c:42:0a:87:dd:5c:98:cb:6b:e7:76:58:5d:34:4f:b7:2a: 14:29:4c:9f:d4:ca:6f:0f:4f:7f:ef:81:95:b9:11:4b:d4:42: a8:db:c9:6c:fd:44:3f:22:e9:58:4f:07:f5:21:0c:00:e5:69: 02:fd:a2:53:f7:d9:b3:47:35:ad:b4:f6:f0:90:9e:fa:87:de: a6:1b:fa:6e:2c:ab:76:3b:29:57:f8:bf:94:c9:4d:31:74:1a: f3:7c:3e:45:95:38:1f:39:b1:a8:21:5f:d2:3e:3c:3d:05:2b: 5e:fd:ae:63:da:ac:3d:94:9c:06:75:87:83:f0:4c:b3:e7:f9: ca:3e:08:fb:82:b9:13:85:16:b1:7a:58:1d:c0:07:d1:03:4e: e6:4e:5e:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57VRAch9FgS8jmGK/ziMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjUxMzYyNjljM2NiMTIwNzY3YjFmZjRiMDY4MDk4MWM1MDkzMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CG97yti0JB109IYE7AmQVuY3DeC Ow2fLCOIbiTki/j55GYtdYCGMAkIUeNjQCzC0IPmaUATMiyHLhpWxkwk8Mu/482j jjzYZqL5QWJiKZe18DucRadb/ncGD45TBLldF3N1aVNNF4fwdFlolp5DNNnuTwLg RUGGTWuzrkWuIITksMPGjgaWhT7dhRG9in2CsDZXWVXnWbqKKGjN9Khp5Z3bGwOQ 5JyFZu/KT9FBslRExuu5txtHdtcdvbjLMNeQlqzrGwjkGok0Vt8lAfZwW4QGRjwV LadpCFENKglX/xPrTynfq+ek4FwQ7qbAcwHY8Zdg4Wi6j3jPbLWrYsCHVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN9RNiacPLEgdnsf9LBoCYHFCTLLMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvMzFFMkpwdzhzU0IyZXhfMHNHZ0pnY1VKTXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXZPAwQA 1RXoMA0GCSqGSIb3DQEBCwUAA4IBAQBKf66Ras7Sl/PXBZXozKmTSngAgwfE2OLK HyDflsAggR58VlYFKkL1gs1A0JzXZP3nPHGkq60S5ApOfVi6Tsa1LVSi93/o3gD7 W8Pdr4f73j/uVtOwSboBLTExvxYAyYEj2yv7fqd/Oc3eg6XSHEIKh91cmMtr53ZY XTRPtyoUKUyf1MpvD09/74GVuRFL1EKo28ls/UQ/IulYTwf1IQwA5WkC/aJT99mz RzWttPbwkJ76h96mG/puLKt2OylX+L+UyU0xdBrzfD5FlTgfObGoIV/SPjw9BSte /a5j2qw9lJwGdYeD8Eyz5/nKPgj7grkThRaxelgdwAfRA07mTl4g -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:44 2026 by rpki-client