This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/r1wL1w6v-FmiJM6wTPegvCqzZVs.roa File: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (raw, json) Hash identifier: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4= Subject key identifier: AF:5C:0B:D7:0E:AF:F8:59:A2:24:CE:B0:4C:F7:A0:BC:2A:B3:65:5B Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019B7D5CC3EB1F7F1B08FE0AEABA445D66BE Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/r1wL1w6v-FmiJM6wTPegvCqzZVs.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.171.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c3:eb:1f:7f:1b:08:fe:0a:ea:ba:44:5d:66:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af5c0bd70eaff859a224ceb04cf7a0bc2ab3655b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:99:82:90:b7:71:6f:49:6b:c4:c6:0e:3b:85: 82:85:86:b5:04:ce:4e:ca:4c:a6:e4:90:e0:ac:94: d6:9c:2a:3f:c4:f7:66:eb:97:bd:c4:80:fb:4d:57: 43:11:81:d6:12:5f:ee:ae:e6:79:5f:c1:e0:a2:f3: 67:81:00:e2:29:d4:a3:0f:c7:d4:6e:38:10:0b:20: 17:c8:75:20:93:d4:0d:52:ba:f6:de:73:8b:50:a4: 42:a1:2c:cf:24:39:b9:82:7b:db:d3:73:7c:3b:52: dd:ef:0c:d8:1b:b6:bd:6e:4c:09:3f:23:58:01:5b: f5:34:0e:0e:b0:09:fa:50:0e:98:02:da:6d:74:e6: d0:ce:22:ac:5f:05:2e:9a:42:1d:df:34:2e:c4:2d: e6:b4:1e:01:49:2d:c3:72:19:95:d2:d5:cf:97:98: 68:da:c3:71:37:df:b1:e1:39:c9:c2:82:5f:04:f8: 87:38:e4:62:e5:36:76:55:85:1c:fd:63:c6:1c:2d: 87:69:2d:04:db:fe:65:13:2c:09:ab:63:6e:3f:90: 90:12:18:aa:4a:b5:55:e1:93:1b:24:fc:0d:52:6f: 7a:de:ba:0d:81:97:ea:b8:c7:7c:54:e8:2e:87:e7: 9d:92:a1:4f:34:65:d7:ca:73:61:7a:4e:3b:75:b9: 70:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5C:0B:D7:0E:AF:F8:59:A2:24:CE:B0:4C:F7:A0:BC:2A:B3:65:5B X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/r1wL1w6v-FmiJM6wTPegvCqzZVs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.130.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:7a:11:96:93:18:a7:07:07:41:4a:b9:f2:c0:4a:cd:26:0f: 6e:ab:d5:6d:1b:92:e6:c8:45:2d:14:68:a2:d2:2e:df:11:dd: 0b:78:5b:21:f9:4a:5e:f9:6d:7c:8e:13:d6:bb:80:2d:28:dd: 58:3d:5f:f0:d3:47:12:aa:ec:b0:8a:ce:82:99:b8:b7:3b:93: 7e:3e:5b:2c:52:42:f9:a6:29:13:a4:1b:73:b7:0f:43:c0:4d: 4e:e1:42:d1:86:d7:e6:33:c2:b7:69:50:07:b4:3d:fc:a8:7d: e7:8a:4f:76:59:90:5a:b4:fc:e4:7a:11:0b:a6:ff:50:08:59: 71:b5:b5:02:15:32:7c:79:39:06:ec:da:7f:0c:0c:61:2d:08: 46:04:55:33:56:b0:7e:c1:00:fb:80:3f:8b:31:92:57:9c:8a: 74:dc:29:31:82:7b:01:6d:e8:20:b5:7d:f0:9e:65:e0:67:28: ab:94:f6:5c:48:03:08:e8:8d:95:3a:f8:b6:37:16:88:30:4c: 37:84:46:39:11:d5:7d:5d:d7:c0:99:66:e4:6b:ab:10:c3:32: 8e:9d:d5:e5:84:f9:d6:18:fb:ce:99:30:9b:2c:1d:7e:64:74: 0b:3d:97:6f:47:aa:b6:68:af:72:f2:f0:e5:50:93:09:ba:50: 8d:79:51:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMPrH38bCP4K6rpEXWa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjVjMGJkNzBlYWZmODU5YTIyNGNlYjA0Y2Y3YTBiYzJhYjM2NTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pmCkLdxb0lrxMYOO4WChYa1BM5O ykym5JDgrJTWnCo/xPdm65e9xID7TVdDEYHWEl/uruZ5X8HgovNngQDiKdSjD8fU bjgQCyAXyHUgk9QNUrr23nOLUKRCoSzPJDm5gnvb03N8O1Ld7wzYG7a9bkwJPyNY AVv1NA4OsAn6UA6YAtptdObQziKsXwUumkId3zQuxC3mtB4BSS3DchmV0tXPl5ho 2sNxN9+x4TnJwoJfBPiHOORi5TZ2VYUc/WPGHC2HaS0E2/5lEywJq2NuP5CQEhiq SrVV4ZMbJPwNUm963roNgZfquMd8VOguh+edkqFPNGXXynNhek47dblwTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9cC9cOr/hZoiTOsEz3oLwqs2VbMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvcjF3TDF3NnYtRm1pSk02d1RQZWd2Q3F6WlZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6uCMA0G CSqGSIb3DQEBCwUAA4IBAQALehGWkxinBwdBSrnywErNJg9uq9VtG5LmyEUtFGii 0i7fEd0LeFsh+Upe+W18jhPWu4AtKN1YPV/w00cSquywis6Cmbi3O5N+PlssUkL5 pikTpBtztw9DwE1O4ULRhtfmM8K3aVAHtD38qH3nik92WZBatPzkehELpv9QCFlx tbUCFTJ8eTkG7Np/DAxhLQhGBFUzVrB+wQD7gD+LMZJXnIp03CkxgnsBbeggtX3w nmXgZyirlPZcSAMI6I2VOvi2NxaIMEw3hEY5EdV9XdfAmWbka6sQwzKOndXlhPnW GPvOmTCbLB1+ZHQLPZdvR6q2aK9y8vDlUJMJulCNeVFW -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:07 2026 by rpki-client