This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/31zbye1HoJ0ws1Eh6tN1mKqtLis.roa File: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (raw, json) Hash identifier: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ= Subject key identifier: DF:5C:DB:C9:ED:47:A0:9D:30:B3:51:21:EA:D3:75:98:AA:AD:2E:2B Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA533C8B6CF481E331876DF02CEFBC6 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/31zbye1HoJ0ws1Eh6tN1mKqtLis.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51855 IP address blocks: 78.108.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:33:c8:b6:cf:48:1e:33:18:76:df:02:ce:fb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df5cdbc9ed47a09d30b35121ead37598aaad2e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:a9:55:d1:21:90:ed:c1:d1:bb:de:7c:64: 4d:e6:c5:80:92:21:c7:cc:81:47:b3:ed:0a:54:7c: e4:fb:af:2e:76:7b:4e:81:b8:b2:84:b3:83:ca:eb: b3:5c:fd:4a:02:6d:5b:e7:3d:ce:ac:40:1d:a8:7d: cb:b9:fd:fa:c0:a7:7e:db:22:dc:a5:8a:74:c3:b2: 95:30:5e:db:b8:f4:69:07:aa:fa:92:65:ab:a5:cc: b7:fc:37:a1:99:63:9b:86:7e:86:f9:c7:04:e6:c1: 8e:7c:70:26:e2:8e:0a:98:e3:9f:23:4b:be:d0:0b: f0:81:c7:b7:e1:ab:80:31:2c:0d:ce:8e:7c:c2:8c: 69:c2:a4:62:81:9a:02:2d:c3:67:19:e6:04:97:63: b7:d8:c5:e0:9f:58:e3:c3:d9:5f:58:ac:58:97:0b: b4:95:00:dd:7e:83:9a:2a:de:cd:ea:3a:bd:2d:02: 54:3d:66:56:13:94:73:82:14:3a:53:86:df:73:e8: 04:a6:34:40:c7:4c:85:13:5a:8c:5e:a6:82:19:de: 2a:d9:ba:6c:d7:7b:0b:c1:3d:98:a5:ff:ed:97:63: 03:fe:23:86:aa:62:42:67:b7:b0:16:5d:72:99:7d: 5b:5c:b2:3e:a6:0c:de:d3:2e:a6:4a:58:42:85:80: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5C:DB:C9:ED:47:A0:9D:30:B3:51:21:EA:D3:75:98:AA:AD:2E:2B X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/31zbye1HoJ0ws1Eh6tN1mKqtLis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.247.0/24 Signature Algorithm: sha256WithRSAEncryption 99:05:b8:70:29:a9:92:62:b4:2f:74:c2:99:b4:6c:47:fa:f2: e8:32:32:c6:c8:57:3e:85:cd:b8:9a:b6:6e:bd:ce:14:34:c1: 0f:6f:0f:9a:3b:b3:10:34:74:32:44:b0:d2:54:d2:2b:c0:f6: fc:7f:bf:0b:e7:de:3c:38:f1:97:24:db:09:d0:5d:2c:1c:25: 73:c6:94:1c:dc:a2:e9:48:28:71:6d:4c:68:bc:41:34:40:3f: 15:2e:61:bf:1a:79:87:54:86:d1:fa:a1:e0:2d:1b:3f:6d:00: 89:4a:f8:a5:6e:90:58:e3:fb:c6:3e:ed:e0:1f:34:ed:f6:1e: 89:b3:f2:aa:28:e9:ff:0e:e5:a5:fc:77:86:70:3b:d2:1c:44: b3:10:81:fd:3c:35:6d:23:26:84:6a:57:11:c5:67:bb:1e:0c: d4:5a:9f:93:64:2c:79:8c:ef:cf:9b:91:f5:65:87:86:74:08: 2e:82:f1:03:3e:26:4e:85:4a:f5:71:10:15:dc:61:7c:3e:60: 4e:3d:8f:64:77:7c:d3:4d:9b:55:ff:39:45:1d:be:86:31:e7: 53:cd:13:8a:4d:b9:1a:dd:57:9f:23:3f:5e:e7:f2:e0:b7:77: 4b:5c:1b:05:de:f2:ae:7f:0a:50:18:31:4e:b4:03:b0:cb:f8: 0b:e9:0f:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTPIts9IHjMYdt8CzvvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjVjZGJjOWVkNDdhMDlkMzBiMzUxMjFlYWQzNzU5OGFhYWQyZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidGpVdEhkO3B0bvefGRN5sWAkiHH zIFHs+0KVHzk+68udntOgbiyhLODyuuzXP1KAm1b5z3OrEAdqH3Luf36wKd+2yLc pYp0w7KVMF7buPRpB6r6kmWrpcy3/DehmWObhn6G+ccE5sGOfHAm4o4KmOOfI0u+ 0Avwgce34auAMSwNzo58woxpwqRigZoCLcNnGeYEl2O32MXgn1jjw9lfWKxYlwu0 lQDdfoOaKt7N6jq9LQJUPWZWE5RzghQ6U4bfc+gEpjRAx0yFE1qMXqaCGd4q2bps 13sLwT2Ypf/tl2MD/iOGqmJCZ7ewFl1ymX1bXLI+pgze0y6mSlhChYCxgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN9c28ntR6CdMLNRIerTdZiqrS4rMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvMzF6YnllMUhvSjB3czFFaDZ0TjFtS3F0TGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmz3MA0G CSqGSIb3DQEBCwUAA4IBAQCZBbhwKamSYrQvdMKZtGxH+vLoMjLGyFc+hc24mrZu vc4UNMEPbw+aO7MQNHQyRLDSVNIrwPb8f78L5948OPGXJNsJ0F0sHCVzxpQc3KLp SChxbUxovEE0QD8VLmG/GnmHVIbR+qHgLRs/bQCJSvilbpBY4/vGPu3gHzTt9h6J s/KqKOn/DuWl/HeGcDvSHESzEIH9PDVtIyaEalcRxWe7HgzUWp+TZCx5jO/Pm5H1 ZYeGdAgugvEDPiZOhUr1cRAV3GF8PmBOPY9kd3zTTZtV/zlFHb6GMedTzROKTbka 3VefIz9e5/Lgt3dLXBsF3vKufwpQGDFOtAOwy/gL6Q/A -----END CERTIFICATE-----Generated at Tue Jan 20 03:34:43 2026 by rpki-client