This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/w43SRNzlPxSA_GhpM6DYxSTwQsM.roa File: w43SRNzlPxSA_GhpM6DYxSTwQsM.roa (raw, json) Hash identifier: vB448hXkyXc9yB6e7NKnRC8sjeNuYNYXiC8ftXoZZdQ= Subject key identifier: C3:8D:D2:44:DC:E5:3F:14:80:FC:68:69:33:A0:D8:C5:24:F0:42:C3 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37E66E8D15BF1885D5E24E449F3578 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/w43SRNzlPxSA_GhpM6DYxSTwQsM.roa Signing time: Fri 02 Jan 2026 10:19:11 +0000 ROA not before: Fri 02 Jan 2026 10:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33830 IP address blocks: 31.145.72.0/24 maxlen: 24 31.145.171.0/24 maxlen: 24 62.244.244.0/24 maxlen: 24 213.248.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e6:6e:8d:15:bf:18:85:d5:e2:4e:44:9f:35:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c38dd244dce53f1480fc686933a0d8c524f042c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:4b:4c:db:00:d5:d6:d1:18:8e:81:9e:19: 15:d6:f9:05:c2:13:e2:5c:15:bd:f7:62:ed:8a:89: 43:9e:be:a8:25:bf:71:06:c2:81:64:b5:4d:c7:ad: 17:19:ed:17:d8:d4:48:c6:6d:05:c8:94:e1:e8:fc: 95:be:67:41:6d:24:46:db:c2:e7:cd:14:af:5f:45: 02:26:2e:eb:c5:58:80:0c:59:24:c7:c8:0c:8b:c8: f4:95:16:7a:4c:b2:46:14:59:36:9d:04:ff:3a:a8: 0e:56:0c:f2:e9:d1:ca:f9:12:c2:f6:8a:77:cd:ef: ec:bf:55:dc:60:62:f5:a0:6f:a2:2f:24:c0:57:ac: e0:ed:e9:a5:c5:cc:1e:c3:6a:14:c9:f3:0f:60:85: d9:72:8c:a0:ce:7a:67:6f:9e:63:8f:78:e3:17:5c: 0e:0e:d1:47:d6:74:48:41:a3:61:9b:3f:15:24:a1: 17:78:33:df:b6:cd:22:e6:3d:03:74:07:89:ae:62: a6:43:97:3e:6f:93:d4:68:39:5e:16:0d:ff:9e:30: c7:bc:ea:70:b1:83:cb:f9:8a:3e:86:1a:52:0d:0b: 9f:c3:f4:a7:0d:d4:07:19:3f:5f:69:82:d1:e9:d3: cd:29:58:66:62:43:1c:ec:75:2a:55:f7:0c:03:6c: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8D:D2:44:DC:E5:3F:14:80:FC:68:69:33:A0:D8:C5:24:F0:42:C3 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/w43SRNzlPxSA_GhpM6DYxSTwQsM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.145.72.0/24 31.145.171.0/24 62.244.244.0/24 213.248.141.0/24 Signature Algorithm: sha256WithRSAEncryption 50:bd:28:1c:31:61:eb:aa:08:51:f1:54:dc:27:d1:58:24:ec: f0:b5:45:a9:f8:71:73:89:c2:92:f5:4d:25:0c:66:8d:07:0f: 90:30:41:5c:9f:2b:76:02:79:2d:d1:e3:78:2c:a3:c9:e1:94: 6b:c0:c5:e0:39:43:7f:d4:64:da:91:14:1c:da:02:d4:12:ed: 39:cf:23:43:95:47:51:68:c3:73:3d:4e:0d:ba:60:d2:29:6c: 67:5a:26:4c:1d:7c:58:5b:0e:d7:ea:43:22:a5:73:57:03:dc: 9c:6b:0c:9f:b7:23:d8:7f:33:7f:3a:8c:70:6d:9b:6c:99:70: fe:d3:67:bf:68:f9:70:6c:64:a6:c4:09:52:53:98:a0:fd:65: 6d:a9:ad:d5:0b:3c:b9:75:d2:21:fd:b9:43:53:cf:87:8e:1a: 62:a7:7f:d8:0f:fb:78:c5:14:0b:43:ef:da:e6:c3:6a:55:84: e6:78:07:f8:9b:b0:94:b9:34:6e:fd:6b:81:d1:bc:d3:dd:58: 2c:94:b3:71:ff:8c:55:ac:be:a9:32:ef:60:a0:46:72:08:80: e4:c2:cb:05:0d:92:43:c1:cb:7f:07:ec:d8:08:47:8d:6b:70: bb:9f:7d:d3:0d:1e:b3:6f:b2:c4:bb:c9:12:c9:d0:2a:23:30: 02:61:b9:f7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+N+ZujRW/GIXV4k5EnzV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzhkZDI0NGRjZTUzZjE0ODBmYzY4NjkzM2EwZDhjNTI0ZjA0MmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l9LTNsA1dbRGI6BnhkV1vkFwhPi XBW992LtiolDnr6oJb9xBsKBZLVNx60XGe0X2NRIxm0FyJTh6PyVvmdBbSRG28Ln zRSvX0UCJi7rxViADFkkx8gMi8j0lRZ6TLJGFFk2nQT/OqgOVgzy6dHK+RLC9op3 ze/sv1XcYGL1oG+iLyTAV6zg7emlxcwew2oUyfMPYIXZcoygznpnb55jj3jjF1wO DtFH1nRIQaNhmz8VJKEXeDPfts0i5j0DdAeJrmKmQ5c+b5PUaDleFg3/njDHvOpw sYPL+Yo+hhpSDQufw/SnDdQHGT9faYLR6dPNKVhmYkMc7HUqVfcMA2yFjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMON0kTc5T8UgPxoaTOg2MUk8ELDMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvdzQzU1JOemxQeFNBX0docE02RFl4U1R3UXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH5FIAwQA H5GrAwQAPvT0AwQA1fiNMA0GCSqGSIb3DQEBCwUAA4IBAQBQvSgcMWHrqghR8VTc J9FYJOzwtUWp+HFzicKS9U0lDGaNBw+QMEFcnyt2Ankt0eN4LKPJ4ZRrwMXgOUN/ 1GTakRQc2gLUEu05zyNDlUdRaMNzPU4NumDSKWxnWiZMHXxYWw7X6kMipXNXA9yc awyftyPYfzN/OoxwbZtsmXD+02e/aPlwbGSmxAlSU5ig/WVtqa3VCzy5ddIh/blD U8+Hjhpip3/YD/t4xRQLQ+/a5sNqVYTmeAf4m7CUuTRu/WuB0bzT3VgslLNx/4xV rL6pMu9goEZyCIDkwssFDZJDwct/B+zYCEeNa3C7n33TDR6zb7LEu8kSydAqIzAC Ybn3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:01 2026 by rpki-client