This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/slzLq75d_2U3gzXMediesPc1y_A.roa File: slzLq75d_2U3gzXMediesPc1y_A.roa (raw, json) Hash identifier: o+7OLqNyBmfA/DpIWOrqjBa7X/0F+NH08pgpTA/9P1E= Subject key identifier: B2:5C:CB:AB:BE:5D:FF:65:37:83:35:CC:79:D8:9E:B0:F7:35:CB:F0 Certificate issuer: /CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d Certificate serial: 019B7DC9F76D6CF1536652BD2E35B3431F23 Authority key identifier: AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/slzLq75d_2U3gzXMediesPc1y_A.roa Signing time: Fri 02 Jan 2026 08:19:06 +0000 ROA not before: Fri 02 Jan 2026 08:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34081 IP address blocks: 31.14.163.0/24 maxlen: 25 84.33.0.0/18 maxlen: 24 84.33.16.0/23 maxlen: 24 84.33.192.0/18 maxlen: 24 172.83.81.0/24 maxlen: 25 193.188.28.0/22 maxlen: 24 217.70.144.0/20 maxlen: 24 2001:1a38::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:f7:6d:6c:f1:53:66:52:bd:2e:35:b3:43:1f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaebc9bfef2b4d23f19513bfd4d60bb798f5a59d Validity Not Before: Jan 2 08:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25ccbabbe5dff65378335cc79d89eb0f735cbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:34:1d:f7:5b:2a:87:9c:f2:b1:3d:cd:14:69: 26:ec:7e:9b:bc:c3:fb:02:d3:22:a6:b9:80:bf:ea: 13:43:93:9e:28:52:70:ac:aa:81:08:d7:a5:c6:82: 67:8b:f3:0a:b9:03:17:98:07:86:ef:02:f6:6e:02: 7b:71:3e:ef:98:fd:70:c1:40:db:8f:44:bc:86:78: 9c:80:0c:40:0b:91:ec:35:f3:ac:e0:d1:3d:12:11: fa:21:37:13:12:41:0e:61:93:71:59:b3:5a:cf:ee: 14:34:59:4c:c8:56:b0:e3:fe:dc:dd:28:b4:aa:d8: 95:16:d6:b0:56:d7:d8:5f:ca:57:f0:81:82:cc:49: 8d:db:90:11:84:51:78:30:69:c7:e1:08:f6:56:12: 7f:ef:3d:ac:d9:83:36:4a:ad:5a:4e:ad:ba:b0:2f: 87:6d:8c:f7:b3:e5:22:b4:4b:db:9a:82:a1:a5:ac: 1f:37:4a:cd:35:ca:9d:de:1d:0e:da:a5:2b:2a:30: dd:5a:10:0b:36:71:05:a7:01:c3:53:48:1d:4c:5c: fb:24:9a:f6:d0:03:59:cd:45:48:f1:48:95:5a:9e: 99:f7:c6:ed:41:8a:e0:84:5e:e4:38:7a:28:43:58: d7:ac:0b:1a:e1:07:1a:b6:f1:5d:63:f8:20:e5:6a: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5C:CB:AB:BE:5D:FF:65:37:83:35:CC:79:D8:9E:B0:F7:35:CB:F0 X509v3 Authority Key Identifier: keyid:AA:EB:C9:BF:EF:2B:4D:23:F1:95:13:BF:D4:D6:0B:B7:98:F5:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quvJv-8rTSPxlRO_1NYLt5j1pZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/slzLq75d_2U3gzXMediesPc1y_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fb1289-4d14-40f0-9679-11afb4992eef/1/quvJv-8rTSPxlRO_1NYLt5j1pZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.163.0/24 84.33.0.0/18 84.33.192.0/18 172.83.81.0/24 193.188.28.0/22 217.70.144.0/20 IPv6: 2001:1a38::/32 Signature Algorithm: sha256WithRSAEncryption d5:6d:41:21:c9:60:6d:0f:05:aa:7b:ba:0b:94:e0:2e:c7:d3: 36:9a:c6:73:94:df:48:80:51:31:3a:60:dd:16:1a:50:23:be: 8f:2c:b1:18:76:8d:5f:37:40:53:49:09:2b:b9:98:4f:69:26: 75:fc:a7:d0:bb:fa:86:78:20:f0:94:7b:b9:c1:2a:c7:18:83: 2e:6a:bc:5e:e9:03:0b:ce:38:de:94:93:8a:7b:cc:4b:e8:c4: ac:f8:22:05:fa:f4:fa:c3:ad:6d:e3:ac:e4:74:90:eb:23:87: 9a:33:96:7c:77:aa:7f:43:52:c7:e7:1c:b2:02:c1:14:54:57: 9c:63:23:b9:77:cc:fc:ff:16:3e:8d:49:47:0e:4a:fd:ed:9e: 37:b2:af:02:f8:3c:c1:8f:be:b6:00:d1:78:0b:3d:2c:ff:c3: 35:36:9d:0a:06:ec:de:a1:e9:31:7d:4e:af:e8:8e:c0:44:84: 01:fe:ee:bf:0b:43:fb:56:22:cc:f9:52:b8:76:39:39:7e:40: fb:33:37:49:a7:8f:83:33:99:22:26:c4:ef:cd:cc:a5:2c:89: 8b:92:73:63:fe:3b:b9:6b:61:e4:a6:22:7e:33:2c:39:ae:1c: e5:cd:82:9f:36:5b:6a:f4:f4:36:d6:0d:2c:be:cf:c1:15:e7: 60:7c:6e:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9yfdtbPFTZlK9LjWzQx8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZWJjOWJmZWYyYjRkMjNmMTk1MTNiZmQ0ZDYwYmI3OThm NWE1OWQwHhcNMjYwMTAyMDgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjVjY2JhYmJlNWRmZjY1Mzc4MzM1Y2M3OWQ4OWViMGY3MzVjYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzQd91sqh5zysT3NFGkm7H6bvMP7 AtMiprmAv+oTQ5OeKFJwrKqBCNelxoJni/MKuQMXmAeG7wL2bgJ7cT7vmP1wwUDb j0S8hnicgAxAC5HsNfOs4NE9EhH6ITcTEkEOYZNxWbNaz+4UNFlMyFaw4/7c3Si0 qtiVFtawVtfYX8pX8IGCzEmN25ARhFF4MGnH4Qj2VhJ/7z2s2YM2Sq1aTq26sC+H bYz3s+UitEvbmoKhpawfN0rNNcqd3h0O2qUrKjDdWhALNnEFpwHDU0gdTFz7JJr2 0ANZzUVI8UiVWp6Z98btQYrghF7kOHooQ1jXrAsa4QcatvFdY/gg5WpcrwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFLJcy6u+Xf9lN4M1zHnYnrD3NcvwMB8GA1UdIwQY MBaAFKrryb/vK00j8ZUTv9TWC7eY9aWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2Nzkt MTFhZmI0OTkyZWVmLzEvc2x6THE3NWRfMlUzZ3pYTWVkaWVzUGMxeV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9mYjEyODktNGQxNC00MGYwLTk2NzktMTFhZmI0OTkyZWVm LzEvcXV2SnYtOHJUU1B4bFJPXzFOWUx0NWoxcFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAHw6jAwQG VCEAAwQGVCHAAwQArFNRAwQCwbwcAwQE2UaQMA0EAgACMAcDBQAgARo4MA0GCSqG SIb3DQEBCwUAA4IBAQDVbUEhyWBtDwWqe7oLlOAux9M2msZzlN9IgFExOmDdFhpQ I76PLLEYdo1fN0BTSQkruZhPaSZ1/KfQu/qGeCDwlHu5wSrHGIMuarxe6QMLzjje lJOKe8xL6MSs+CIF+vT6w61t46zkdJDrI4eaM5Z8d6p/Q1LH5xyyAsEUVFecYyO5 d8z8/xY+jUlHDkr97Z43sq8C+DzBj762ANF4Cz0s/8M1Np0KBuzeoekxfU6v6I7A RIQB/u6/C0P7ViLM+VK4djk5fkD7MzdJp4+DM5kiJsTvzcylLImLknNj/ju5a2Hk piJ+Myw5rhzlzYKfNltq9PQ21g0svs/BFedgfG7p -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:06 2026 by rpki-client