This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/LyRifAfOL53Q_lOTFatmtsAvU8w.roa File: LyRifAfOL53Q_lOTFatmtsAvU8w.roa (raw, json) Hash identifier: W/Nz1bHj+HEPoVEqjViZMxBGg1i0sa6Onp82zcQ8NAU= Subject key identifier: 2F:24:62:7C:07:CE:2F:9D:D0:FE:53:93:15:AB:66:B6:C0:2F:53:CC Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB5E2A73FE3DA39E381DC7D3C8091E Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/LyRifAfOL53Q_lOTFatmtsAvU8w.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207574 IP address blocks: 31.24.249.0/24 maxlen: 32 2a12:4946:46::/48 maxlen: 48 2a12:4946:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5e:2a:73:fe:3d:a3:9e:38:1d:c7:d3:c8:09:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f24627c07ce2f9dd0fe539315ab66b6c02f53cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:81:d4:62:89:27:af:6f:f3:c8:8b:60:fe: 15:c7:21:7a:38:80:d8:a5:99:80:f2:bb:47:b9:11: b1:41:8c:4b:f0:b2:41:08:d7:49:48:1a:84:7d:3d: ce:cf:78:09:a2:c8:d9:c5:b3:fc:ad:7a:68:c0:c7: 96:73:d2:36:e2:d2:85:3d:22:4a:de:a8:b3:c4:a2: 0d:ce:78:94:8b:19:22:f8:43:d1:9d:9e:4a:2f:44: 54:39:74:4d:11:bf:e0:04:34:a3:64:59:7c:31:04: d7:98:fe:cb:40:32:09:35:83:b9:29:36:3b:7d:04: df:27:69:65:af:31:e5:43:88:ce:cd:59:d8:c1:7c: 6e:6d:a4:52:d6:5f:8e:d0:f2:2d:7b:48:ed:57:7a: 2c:08:20:14:b2:f4:6c:33:76:a9:62:ea:61:12:fc: 8c:51:76:bd:b1:73:38:b9:b1:f2:80:09:05:63:73: 21:81:72:5e:45:a1:8f:bf:d0:38:a1:87:0d:a3:95: bd:0e:46:a9:06:ab:65:c4:86:bc:3d:a6:3e:39:14: 5c:42:76:15:e1:3e:05:58:fa:de:c0:76:99:23:47: 5f:d8:7b:46:2e:4a:78:86:05:ed:cb:e9:6e:75:2c: 09:a3:5e:29:b2:80:45:e4:51:f3:24:09:52:c7:35: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:24:62:7C:07:CE:2F:9D:D0:FE:53:93:15:AB:66:B6:C0:2F:53:CC X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/LyRifAfOL53Q_lOTFatmtsAvU8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.249.0/24 IPv6: 2a12:4946:46::/48 2a12:4946:3000::/48 Signature Algorithm: sha256WithRSAEncryption 60:41:92:1b:7b:08:33:92:dc:50:c8:e3:b3:81:61:4d:d4:46: 5b:18:2c:02:4c:b9:04:fa:a9:53:ad:26:d9:ed:0f:09:02:f3: 42:fc:9e:85:13:b9:90:12:ee:36:0c:aa:0a:85:24:71:28:7d: 95:12:66:ba:ac:89:dd:98:ea:9e:f7:f9:74:72:f8:9e:67:a2: ca:9f:57:c2:ec:6e:7c:c3:63:1a:77:b6:f3:6e:b6:b0:68:f9: 80:18:ca:8d:4b:b1:ff:91:fd:1a:c8:7e:bb:9d:b9:33:ae:a8: c4:be:d7:82:c5:d1:77:ca:90:16:af:88:1d:38:59:72:39:c6: bb:6d:0a:ac:a1:13:07:be:91:a7:6f:01:b1:f5:79:74:e5:01: 8d:58:11:da:2f:43:c2:08:dd:d7:ae:1b:5f:64:f6:7d:04:a6: a1:cd:c0:53:16:f7:c2:74:81:62:57:f8:a8:32:ee:fd:83:58: ff:73:ec:c3:f7:a8:6d:7c:c0:c7:ca:c3:d6:0d:c3:cc:ef:91: 1d:76:07:12:92:7a:4f:88:cc:1a:a2:53:e4:88:86:ac:41:9c: 7e:c2:bc:05:b2:41:dd:16:f1:b4:07:de:15:be:05:b6:8e:a2: f3:90:4b:7a:a7:64:92:00:15:3b:ca:68:b4:a5:87:ea:5c:b5: 84:37:4e:fd -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9y14qc/49o544HcfTyAkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjI0NjI3YzA3Y2UyZjlkZDBmZTUzOTMxNWFiNjZiNmMwMmY1M2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SqB1GKJJ69v88iLYP4VxyF6OIDY pZmA8rtHuRGxQYxL8LJBCNdJSBqEfT3Oz3gJosjZxbP8rXpowMeWc9I24tKFPSJK 3qizxKINzniUixki+EPRnZ5KL0RUOXRNEb/gBDSjZFl8MQTXmP7LQDIJNYO5KTY7 fQTfJ2llrzHlQ4jOzVnYwXxubaRS1l+O0PIte0jtV3osCCAUsvRsM3apYuphEvyM UXa9sXM4ubHygAkFY3MhgXJeRaGPv9A4oYcNo5W9DkapBqtlxIa8PaY+ORRcQnYV 4T4FWPrewHaZI0df2HtGLkp4hgXty+ludSwJo14psoBF5FHzJAlSxzWxIwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFC8kYnwHzi+d0P5TkxWrZrbAL1PMMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvTHlSaWZBZk9MNTNRX2xPVEZhdG10c0F2VTh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAHxj5MBgE AgACMBIDBwAqEklGAEYDBwAqEklGMAAwDQYJKoZIhvcNAQELBQADggEBAGBBkht7 CDOS3FDI47OBYU3URlsYLAJMuQT6qVOtJtntDwkC80L8noUTuZAS7jYMqgqFJHEo fZUSZrqsid2Y6p73+XRy+J5nosqfV8LsbnzDYxp3tvNutrBo+YAYyo1Lsf+R/RrI fruduTOuqMS+14LF0XfKkBaviB04WXI5xrttCqyhEwe+kadvAbH1eXTlAY1YEdov Q8II3deuG19k9n0EpqHNwFMW98J0gWJX+Kgy7v2DWP9z7MP3qG18wMfKw9YNw8zv kR12BxKSek+IzBqiU+SIhqxBnH7CvAWyQd0W8bQH3hW+BbaOovOQS3qnZJIAFTvK aLSlh+pctYQ3Tv0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:27 2026 by rpki-client