This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa File: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (raw, json) Hash identifier: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI= Subject key identifier: 71:89:1D:AB:B4:6F:4E:0A:36:A4:AB:97:14:B0:5E:C6:AF:6D:DC:E9 Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Certificate serial: 019B7B36699EE2A4C5C5F80BC655DC6A6268 Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21170 IP address blocks: 31.184.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:69:9e:e2:a4:c5:c5:f8:0b:c6:55:dc:6a:62:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71891dabb46f4e0a36a4ab9714b05ec6af6ddce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:1d:a9:56:20:1d:a8:bd:3f:b1:19:f8:f8: 90:66:02:87:2c:7a:78:2f:b2:52:90:35:61:9e:d8: c9:9d:d8:b7:e0:7f:09:2e:65:3f:eb:31:e9:3c:08: c1:9b:34:c8:c8:26:b3:50:26:85:6d:63:18:34:37: b5:a7:d2:f6:34:6a:8b:b6:e7:37:44:ae:2d:77:4f: 84:ec:bc:93:55:3e:4a:26:3d:89:ef:c5:ad:55:cd: 86:d3:27:c7:e7:ad:82:9f:cf:11:7a:35:1f:1c:c3: 46:9c:8f:0d:2a:93:d8:6d:40:82:eb:c3:27:78:15: 8d:fc:c3:0d:de:bd:18:ae:0a:e5:31:18:d9:0d:3a: 6a:41:ae:2e:b4:d7:df:09:2e:20:9c:8c:a0:d2:f8: 62:29:c8:2f:ec:1b:25:2a:21:ed:c6:2a:bc:e6:17: e4:28:2f:08:b7:07:28:bc:e2:32:c8:b7:2c:fd:b1: 6a:2d:8c:54:9a:8f:14:5c:b0:10:51:41:60:9c:6b: 92:91:9c:2b:3b:e0:f7:40:d3:6b:06:97:89:8a:f7: 3a:9d:08:b7:01:01:56:cb:36:66:9f:ae:8a:7e:3a: 8b:5b:40:66:79:1f:01:55:87:5f:88:c6:9d:68:44: 00:49:77:a4:ba:e0:d4:50:68:dd:2b:09:6b:62:c2: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:1D:AB:B4:6F:4E:0A:36:A4:AB:97:14:B0:5E:C6:AF:6D:DC:E9 X509v3 Authority Key Identifier: keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.184.164.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1e:de:79:b6:d7:c5:12:33:56:de:fd:e1:9b:66:9c:20:80: b6:de:12:75:55:dc:79:13:48:bd:1c:76:07:e1:69:d1:7d:ff: 12:17:a2:52:5d:be:2d:0b:c5:b8:f0:cb:ee:df:de:5e:e6:82: 0a:aa:12:9f:18:7a:56:ec:52:e9:9c:de:75:51:f4:a6:f6:59: 1f:14:0c:d2:2e:fb:50:1d:c6:dc:24:a3:98:ba:cc:d0:7c:d0: 2e:56:95:3c:34:4b:55:22:6e:b0:b0:5d:b7:45:d3:90:a2:4e: 5d:f5:6c:af:60:aa:64:7c:27:83:4a:6d:85:91:52:51:87:16: 7f:6c:d1:0a:7a:ad:d5:ab:bb:3b:9f:73:cb:20:67:a6:5f:80: 88:66:2f:5d:18:0e:80:7a:2f:8e:a8:e1:7d:34:05:51:00:8d: f0:0c:08:e4:a3:0e:2d:c2:6f:f0:5b:4e:6e:88:d6:6d:2f:f6: bb:23:db:41:6f:60:81:5b:ce:55:e2:6f:27:ed:75:ba:e7:e7: 1b:17:ae:81:0a:45:e4:ca:fd:ac:66:1d:fa:9a:ca:27:17:22: 92:e3:6a:bb:41:b7:2f:f9:06:e4:e4:84:d7:d3:96:67:aa:bf: be:ab:9d:29:18:0d:51:66:35:0d:31:a6:8e:ea:af:8a:4b:39: 1d:23:29:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nmme4qTFxfgLxlXcamJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk YmQ3MjUwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTg5MWRhYmI0NmY0ZTBhMzZhNGFiOTcxNGIwNWVjNmFmNmRkY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraIdqVYgHai9P7EZ+PiQZgKHLHp4 L7JSkDVhntjJndi34H8JLmU/6zHpPAjBmzTIyCazUCaFbWMYNDe1p9L2NGqLtuc3 RK4td0+E7LyTVT5KJj2J78WtVc2G0yfH562Cn88RejUfHMNGnI8NKpPYbUCC68Mn eBWN/MMN3r0YrgrlMRjZDTpqQa4utNffCS4gnIyg0vhiKcgv7BslKiHtxiq85hfk KC8ItwcovOIyyLcs/bFqLYxUmo8UXLAQUUFgnGuSkZwrO+D3QNNrBpeJivc6nQi3 AQFWyzZmn66KfjqLW0BmeR8BVYdfiMadaEQASXekuuDUUGjdKwlrYsL9FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGJHau0b04KNqSrlxSwXsavbdzpMB8GA1UdIwQY MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et NmJhMGEwY2UwMWVkLzEvY1lrZHE3UnZUZ28ycEt1WEZMQmV4cTl0M09rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7ikMA0G CSqGSIb3DQEBCwUAA4IBAQBTHt55ttfFEjNW3v3hm2acIIC23hJ1Vdx5E0i9HHYH 4WnRff8SF6JSXb4tC8W48Mvu395e5oIKqhKfGHpW7FLpnN51UfSm9lkfFAzSLvtQ HcbcJKOYuszQfNAuVpU8NEtVIm6wsF23RdOQok5d9WyvYKpkfCeDSm2FkVJRhxZ/ bNEKeq3Vq7s7n3PLIGemX4CIZi9dGA6Aei+OqOF9NAVRAI3wDAjkow4twm/wW05u iNZtL/a7I9tBb2CBW85V4m8n7XW65+cbF66BCkXkyv2sZh36msonFyKS42q7Qbcv +Qbk5ITX05Znqr++q50pGA1RZjUNMaaO6q+KSzkdIymS -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:34 2026 by rpki-client