This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210331.roa File: AS210331.roa (raw, json) Hash identifier: NpFtD4f1r18t2S9cjWJ2AXfQXUO/GoeyeAxyyEesXRw= Subject key identifier: 4B:12:9F:0D:C8:41:A6:95:15:1A:B8:3D:F5:E0:7D:32:6D:56:4C:8D Certificate issuer: /CN=9dfbff217105df8877d463f6e9bac28a4084d20c Certificate serial: 5B0303FD7B9DB6BEA7F935B4C4FC4EC6BDE15D8D Authority key identifier: 9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210331.roa Signing time: Wed 04 Feb 2026 12:57:33 +0000 ROA not before: Wed 04 Feb 2026 12:52:33 +0000 ROA not after: Wed 03 Feb 2027 12:57:33 +0000 asID: 210331 IP address blocks: 31.40.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.mft rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:03:03:fd:7b:9d:b6:be:a7:f9:35:b4:c4:fc:4e:c6:bd:e1:5d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbff217105df8877d463f6e9bac28a4084d20c Validity Not Before: Feb 4 12:52:33 2026 GMT Not After : Feb 3 12:57:33 2027 GMT Subject: CN=4B129F0DC841A695151AB83DF5E07D326D564C8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:d9:57:39:7c:17:35:19:55:89:63:52:8c: de:bb:c5:17:56:01:7a:24:78:b3:13:cc:38:c9:20: 80:70:9e:2a:ee:b4:50:bd:4d:1b:69:48:ec:08:94: 44:cc:ae:d2:56:1f:4b:44:26:b5:a8:45:ff:db:7f: d7:be:f5:63:c9:20:be:db:27:fb:87:93:c8:fb:33: 2c:e1:8a:82:70:88:ef:46:55:4e:f3:f9:07:ae:e3: aa:2c:d2:e5:f6:4b:b2:91:7f:86:4a:e6:64:e3:65: 26:c6:65:dd:45:1e:fd:f1:79:1d:39:24:79:9b:f5: 80:94:6d:48:e4:fd:0a:d2:54:54:f8:95:ae:ac:2f: cd:e0:26:2e:d7:58:61:89:13:46:c2:67:f1:16:b7: 4f:38:8d:42:c4:d7:db:da:f6:69:30:b9:a8:12:21: e9:65:64:67:5c:9f:1a:6f:28:56:ef:4f:76:ab:4a: e9:85:3a:49:57:47:9c:9e:03:41:b3:25:82:8f:ac: 19:d3:95:1f:19:b2:23:d3:66:db:05:d3:29:36:a9: 78:58:9b:c9:2d:17:39:90:44:d1:55:db:65:05:2e: 36:e6:10:ec:6f:e7:58:db:ab:d9:b7:cb:f5:39:18: b7:41:cc:83:da:93:c1:7f:9b:e8:8e:51:64:1b:a7: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:9F:0D:C8:41:A6:95:15:1A:B8:3D:F5:E0:7D:32:6D:56:4C:8D X509v3 Authority Key Identifier: keyid:9D:FB:FF:21:71:05:DF:88:77:D4:63:F6:E9:BA:C2:8A:40:84:D2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/9DFBFF217105DF8877D463F6E9BAC28A4084D20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfv_IXEF34h31GP26brCikCE0gw.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/55b4d9e8-4111-4394-a3a6-bd8251e7fbbd/0/AS210331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.207.0/24 Signature Algorithm: sha256WithRSAEncryption 52:73:d1:8d:3e:de:11:e1:c7:55:dc:c8:66:d5:5d:27:91:23: 84:c8:14:cc:87:1a:33:64:ff:70:98:49:98:29:9c:d8:9a:98: 43:53:42:eb:17:53:1a:a6:4e:4f:2e:e2:ee:35:e1:a1:68:4e: f2:b0:14:c3:0d:9e:ff:35:98:55:89:9d:d0:67:0f:6f:d1:77: c5:b2:01:57:21:6e:cd:ff:6c:ae:21:b9:16:6d:8c:41:da:d8: 5c:b1:51:cd:4f:a7:ab:63:d5:9a:7d:35:b1:2f:5c:a1:ca:e0: 57:84:a6:55:3d:58:8a:bb:d3:1d:f0:ee:55:fe:67:25:e3:de: 54:a4:c7:eb:b5:94:89:99:a7:d4:50:9f:d5:28:62:10:7e:12: 90:c7:c9:01:15:2c:6e:bd:fc:ba:db:17:ec:b1:11:54:42:4f: dc:af:1a:fe:6d:e7:20:1c:fd:d7:8c:ab:03:04:a8:be:74:fc: b5:4b:7c:e8:4c:fa:6c:a7:6c:25:8a:60:c7:84:82:27:5e:fe: 2f:29:37:8b:38:53:f8:d3:2d:0a:1c:c8:62:f2:a3:c8:96:b8: b3:8a:c0:d8:fe:71:d3:4e:8f:3c:d0:59:dc:79:d5:98:e1:7f: d8:42:36:8e:e8:bf:39:1f:c0:5e:dc:35:e8:93:4e:41:26:f1: 93:ac:e2:4c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWwMD/Xudtr6n+TW0xPxOxr3hXY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWRmYmZmMjE3MTA1ZGY4ODc3ZDQ2M2Y2ZTliYWMyOGE0 MDg0ZDIwYzAeFw0yNjAyMDQxMjUyMzNaFw0yNzAyMDMxMjU3MzNaMDMxMTAvBgNV BAMTKDRCMTI5RjBEQzg0MUE2OTUxNTFBQjgzREY1RTA3RDMyNkQ1NjRDOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChVNlXOXwXNRlViWNSjN67xRdW AXokeLMTzDjJIIBwnirutFC9TRtpSOwIlETMrtJWH0tEJrWoRf/bf9e+9WPJIL7b J/uHk8j7MyzhioJwiO9GVU7z+Qeu46os0uX2S7KRf4ZK5mTjZSbGZd1FHv3xeR05 JHmb9YCUbUjk/QrSVFT4la6sL83gJi7XWGGJE0bCZ/EWt084jULE19va9mkwuagS IellZGdcnxpvKFbvT3arSumFOklXR5yeA0GzJYKPrBnTlR8ZsiPTZtsF0yk2qXhY m8ktFzmQRNFV22UFLjbmEOxv51jbq9m3y/U5GLdBzIPak8F/m+iOUWQbpx/BAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUSxKfDchBppUVGrg99eB9Mm1WTI0wHwYDVR0j BBgwFoAUnfv/IXEF34h31GP26brCikCE0gwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTViNGQ5ZTgtNDExMS00Mzk0LWEzYTYtYmQ4MjUxZTdm YmJkLzAvOURGQkZGMjE3MTA1REY4ODc3RDQ2M0Y2RTlCQUMyOEE0MDg0RDIwQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25mdl9JWEVGMzRoMzFHUDI2YnJDaWtD RTBndy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1YjRkOWU4LTQxMTEt NDM5NC1hM2E2LWJkODI1MWU3ZmJiZC8wL0FTMjEwMzMxLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyjP MA0GCSqGSIb3DQEBCwUAA4IBAQBSc9GNPt4R4cdV3Mhm1V0nkSOEyBTMhxozZP9w mEmYKZzYmphDU0LrF1Mapk5PLuLuNeGhaE7ysBTDDZ7/NZhViZ3QZw9v0XfFsgFX IW7N/2yuIbkWbYxB2thcsVHNT6erY9WafTWxL1yhyuBXhKZVPViKu9Md8O5V/mcl 495UpMfrtZSJmafUUJ/VKGIQfhKQx8kBFSxuvfy62xfssRFUQk/crxr+becgHP3X jKsDBKi+dPy1S3zoTPpsp2wlimDHhIInXv4vKTeLOFP40y0KHMhi8qPIlrizisDY /nHTTo880FncedWY4X/YQjaO6L85H8Be3DXok05BJvGTrOJM -----END CERTIFICATE-----Generated at Thu Feb 5 13:52:25 2026 by rpki-client