This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/56kT45t-qSFh3hK2wMAHEPe_l3g.roa File: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (raw, json) Hash identifier: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8= Subject key identifier: E7:A9:13:E3:9B:7E:A9:21:61:DE:12:B6:C0:C0:07:10:F7:BF:97:78 Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14 Certificate serial: 019B7834B13A43AA18D11D96C2D1B012D488 Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/56kT45t-qSFh3hK2wMAHEPe_l3g.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 31.41.40.139/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b1:3a:43:aa:18:d1:1d:96:c2:d1:b0:12:d4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7a913e39b7ea92161de12b6c0c00710f7bf9778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:df:9a:2a:6a:66:ad:ed:0d:65:b6:2f:1f:42: 83:40:0f:de:87:c5:8d:18:36:5a:98:c1:45:d1:9d: 9d:f3:aa:a9:40:5d:0e:73:b5:25:f1:52:ad:6c:a8: 73:15:a1:74:c1:39:ae:3c:2d:45:d5:b3:06:95:52: e6:af:2c:99:e3:eb:3b:6a:00:b7:bf:21:1a:15:81: 5b:72:81:ea:17:47:a5:e3:82:f3:00:16:fb:b6:ad: 24:c6:79:2d:ee:13:9a:2f:b1:6e:24:89:91:f8:f0: 08:c5:81:86:d6:0c:75:4d:3d:b1:b6:a4:a1:20:04: 0a:94:20:75:4a:ec:7b:68:c0:c4:f7:62:ab:e9:15: dc:38:30:26:df:1e:f7:bc:a0:aa:19:f1:2a:57:a8: 18:6d:0a:f3:db:2c:9c:ae:e8:50:be:58:e1:38:c5: 12:1a:47:2b:c7:b5:ab:92:5e:a7:81:10:e6:9f:70: 8d:96:1c:6c:21:52:b0:db:db:44:52:4c:74:ff:ee: c0:4d:5e:3f:a6:14:c9:8a:63:e7:89:2e:24:55:7a: bf:86:50:a9:ca:df:e4:ee:75:7c:9e:67:b0:18:2e: ab:79:77:fb:bf:d3:44:b4:59:23:5f:94:8d:32:55: 18:06:89:b5:9f:62:4c:f4:2f:67:5a:20:13:c3:0b: fe:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A9:13:E3:9B:7E:A9:21:61:DE:12:B6:C0:C0:07:10:F7:BF:97:78 X509v3 Authority Key Identifier: keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/56kT45t-qSFh3hK2wMAHEPe_l3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.40.139/32 Signature Algorithm: sha256WithRSAEncryption 08:df:c5:a6:45:22:2c:49:dc:2d:11:6c:d4:ae:00:d5:2e:95: a8:4e:82:f0:e0:55:3d:7c:88:d1:8e:89:c4:b0:04:9c:18:fd: 97:0e:15:c8:8c:6d:db:d6:3e:d8:b4:e0:d6:05:dc:7c:60:e6: 12:b6:09:9c:61:de:c1:fc:86:c9:a2:27:35:d7:6e:29:33:4e: aa:49:33:e2:92:60:b1:19:c0:23:f3:e7:9e:f0:ba:56:96:c0: d9:96:96:08:2c:62:03:ca:8b:4d:3e:04:cb:3e:e2:51:f4:df: 8f:8d:b4:1f:fc:56:13:3e:f1:c3:5f:21:03:dc:f4:55:27:9a: cb:4d:90:00:ea:71:05:8b:40:fe:e0:05:a4:18:8e:c4:fe:8a: 90:26:d1:1f:14:c1:3f:9e:b6:de:2e:c4:70:14:8f:54:cf:0d: 93:9e:ee:56:76:af:70:0a:28:98:1a:78:41:9a:ef:8c:cb:de: 15:08:90:8b:22:e9:f8:40:ce:a4:1f:db:09:10:5e:9f:8d:d2: 15:cf:1e:76:0c:d1:8b:59:e7:6b:40:29:ba:34:13:e6:e3:86: 99:e7:58:ab:d8:04:e4:5f:c3:b5:5e:09:eb:f3:77:df:b9:dd: 63:72:e0:cc:64:14:02:9c:a2:76:24:0a:ad:64:b8:47:ee:8b: 36:4c:eb:e2 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NLE6Q6oY0R2WwtGwEtSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx NzRmMTQwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2E5MTNlMzliN2VhOTIxNjFkZTEyYjZjMGMwMDcxMGY3YmY5Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d+aKmpmre0NZbYvH0KDQA/eh8WN GDZamMFF0Z2d86qpQF0Oc7Ul8VKtbKhzFaF0wTmuPC1F1bMGlVLmryyZ4+s7agC3 vyEaFYFbcoHqF0el44LzABb7tq0kxnkt7hOaL7FuJImR+PAIxYGG1gx1TT2xtqSh IAQKlCB1Sux7aMDE92Kr6RXcODAm3x73vKCqGfEqV6gYbQrz2yycruhQvljhOMUS Gkcrx7Wrkl6ngRDmn3CNlhxsIVKw29tEUkx0/+7ATV4/phTJimPniS4kVXq/hlCp yt/k7nV8nmewGC6reXf7v9NEtFkjX5SNMlUYBom1n2JM9C9nWiATwwv+lwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFOepE+ObfqkhYd4StsDABxD3v5d4MB8GA1UdIwQY MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt OTBmOTdmNzQ2Njc2LzEvNTZrVDQ1dC1xU0ZoM2hLMndNQUhFUGVfbDNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2 LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAHykoizAN BgkqhkiG9w0BAQsFAAOCAQEACN/FpkUiLEncLRFs1K4A1S6VqE6C8OBVPXyI0Y6J xLAEnBj9lw4VyIxt29Y+2LTg1gXcfGDmErYJnGHewfyGyaInNdduKTNOqkkz4pJg sRnAI/PnnvC6VpbA2ZaWCCxiA8qLTT4Eyz7iUfTfj420H/xWEz7xw18hA9z0VSea y02QAOpxBYtA/uAFpBiOxP6KkCbRHxTBP5623i7EcBSPVM8Nk57uVnavcAoomBp4 QZrvjMveFQiQiyLp+EDOpB/bCRBen43SFc8edgzRi1nna0ApujQT5uOGmedYq9gE 5F/DtV4J6/N337ndY3LgzGQUApyidiQKrWS4R+6LNkzr4g== -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:37 2026 by rpki-client