This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/STu2ER9ZqjtJh70J2PZVEpF7WHU.roa File: STu2ER9ZqjtJh70J2PZVEpF7WHU.roa (raw, json) Hash identifier: ZiaF6jUSisKJ+InLLiErNjOpV1cvDXrPfUrNRl5XcgE= Subject key identifier: 49:3B:B6:11:1F:59:AA:3B:49:87:BD:09:D8:F6:55:12:91:7B:58:75 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F65ACB792DEC3CC67625787B2E01 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/STu2ER9ZqjtJh70J2PZVEpF7WHU.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206409 IP address blocks: 31.145.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f6:5a:cb:79:2d:ec:3c:c6:76:25:78:7b:2e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=493bb6111f59aa3b4987bd09d8f65512917b5875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9d:5d:e0:3e:04:ca:a1:e9:71:55:fb:86:a9: 30:0d:c9:8c:d1:c5:57:24:fb:e0:b0:9e:de:a8:1b: c5:00:29:cd:25:b4:a0:06:5e:eb:ad:9f:fb:ae:42: d8:66:2c:36:b5:22:62:46:ae:d0:7c:77:5a:1c:06: 30:ce:45:b9:ce:d3:20:24:25:1e:31:72:7a:3d:94: 61:17:64:f5:e9:9b:8f:b0:6b:0a:1a:df:83:70:57: a9:61:d5:71:0b:a5:04:79:0e:cd:a4:0b:95:a1:c4: 2d:8e:3b:20:f1:3d:e3:eb:18:5d:e2:59:6f:35:66: a0:7c:37:1a:64:b7:0b:47:9e:bb:f5:05:67:10:0b: 47:01:d9:6d:06:03:4b:ff:d3:79:de:07:4a:a1:47: a5:18:61:fe:67:a4:fb:5d:07:4d:bd:11:12:bc:6e: 34:a3:28:2e:a0:94:36:01:66:99:3d:4f:6e:cc:29: 79:bc:51:05:68:c9:ba:68:2b:9b:93:95:c5:79:7c: ac:ab:e2:fe:59:99:35:da:e2:26:cb:a3:63:a4:a8: 98:aa:19:c3:76:87:b1:ae:fc:04:0d:6c:1f:a8:94: 0f:d9:e2:e4:7e:55:9c:e6:b5:ef:f0:20:b8:dd:b5: e2:ba:52:ef:49:d8:b7:fe:56:b5:ff:82:d2:88:23: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3B:B6:11:1F:59:AA:3B:49:87:BD:09:D8:F6:55:12:91:7B:58:75 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/STu2ER9ZqjtJh70J2PZVEpF7WHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.145.59.0/24 Signature Algorithm: sha256WithRSAEncryption c8:b4:e1:6c:43:86:59:d5:6f:54:1a:20:ca:a2:f4:82:cc:9b: 43:c2:6b:b8:47:1a:d7:f8:8a:1a:46:d8:b3:27:86:66:ee:33: f6:a3:d5:89:45:a4:54:b3:b3:13:45:11:d4:a8:f3:66:21:64: c7:21:3f:c5:41:60:c0:06:12:02:75:eb:83:2c:63:12:23:96: 95:23:f9:88:8d:f7:e0:75:f8:52:d6:85:8a:2e:d3:72:ab:f0: 13:ea:e4:30:8f:c6:52:b7:f5:d4:7d:c4:29:fd:55:09:bf:39: ae:c6:58:de:56:68:5c:85:86:9f:6f:83:55:92:39:41:33:f5: ea:08:ff:0a:26:0b:6b:b4:43:64:13:7b:71:f7:f1:6c:cb:38: f3:06:7d:a5:f8:e9:e3:38:3a:94:bf:01:37:71:9e:69:eb:b4: 0a:72:b5:f3:27:82:4e:54:76:6e:72:be:fb:6e:9a:a2:0c:10: 52:47:c9:28:f5:28:ad:6e:04:41:b2:cb:98:38:53:34:6c:4d: f7:c6:3f:f0:78:db:f4:61:e1:86:78:9c:df:1c:11:0e:08:08: 24:af:65:b1:6a:42:0a:ee:2c:1f:32:83:a6:72:a0:48:b6:5e: 8b:ec:3f:41:06:7a:0e:4e:17:e2:e7:d4:ec:be:2f:b6:8d:2a: 2f:95:d6:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/Zay3kt7DzGdiV4ey4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTNiYjYxMTFmNTlhYTNiNDk4N2JkMDlkOGY2NTUxMjkxN2I1ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ1d4D4EyqHpcVX7hqkwDcmM0cVX JPvgsJ7eqBvFACnNJbSgBl7rrZ/7rkLYZiw2tSJiRq7QfHdaHAYwzkW5ztMgJCUe MXJ6PZRhF2T16ZuPsGsKGt+DcFepYdVxC6UEeQ7NpAuVocQtjjsg8T3j6xhd4llv NWagfDcaZLcLR5679QVnEAtHAdltBgNL/9N53gdKoUelGGH+Z6T7XQdNvRESvG40 oyguoJQ2AWaZPU9uzCl5vFEFaMm6aCubk5XFeXysq+L+WZk12uImy6NjpKiYqhnD doexrvwEDWwfqJQP2eLkflWc5rXv8CC43bXiulLvSdi3/la1/4LSiCOBFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEk7thEfWao7SYe9Cdj2VRKRe1h1MB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvU1R1MkVSOVpxanRKaDcwSjJQWlZFcEY3V0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5E7MA0G CSqGSIb3DQEBCwUAA4IBAQDItOFsQ4ZZ1W9UGiDKovSCzJtDwmu4RxrX+IoaRtiz J4Zm7jP2o9WJRaRUs7MTRRHUqPNmIWTHIT/FQWDABhICdeuDLGMSI5aVI/mIjffg dfhS1oWKLtNyq/AT6uQwj8ZSt/XUfcQp/VUJvzmuxljeVmhchYafb4NVkjlBM/Xq CP8KJgtrtENkE3tx9/FsyzjzBn2l+OnjODqUvwE3cZ5p67QKcrXzJ4JOVHZucr77 bpqiDBBSR8ko9SitbgRBssuYOFM0bE33xj/weNv0YeGGeJzfHBEOCAgkr2WxakIK 7iwfMoOmcqBItl6L7D9BBnoOThfi59Tsvi+2jSovldaH -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:57 2026 by rpki-client