This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/A7X8g3OhgGqnnbr-0WIRET4xYAw.roa File: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (raw, json) Hash identifier: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI= Subject key identifier: 03:B5:FC:83:73:A1:80:6A:A7:9D:BA:FE:D1:62:11:11:3E:31:60:0C Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Certificate serial: 019B7CED8B447387EBF5B362C7BAA619A66A Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/A7X8g3OhgGqnnbr-0WIRET4xYAw.roa Signing time: Fri 02 Jan 2026 04:18:20 +0000 ROA not before: Fri 02 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51333 IP address blocks: 31.15.96.0/21 maxlen: 21 217.174.128.0/20 maxlen: 20 2a0a:bfc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8b:44:73:87:eb:f5:b3:62:c7:ba:a6:19:a6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637 Validity Not Before: Jan 2 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03b5fc8373a1806aa79dbafed16211113e31600c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:e0:da:01:dd:4b:f0:3b:0c:01:dd:87:63: 93:ae:b0:65:45:2c:2e:60:7a:87:f5:16:3c:66:3f: b8:7e:33:17:b5:9e:6c:ed:57:f3:17:45:8c:ae:55: 2a:50:d6:c4:e2:5c:ff:8a:0d:61:e6:62:b6:9b:a7: 2e:7d:f4:89:a4:48:97:ad:89:a4:dc:83:7d:8b:2e: de:c6:96:40:4e:67:26:e0:93:4f:dc:fe:b1:70:44: 86:06:d0:4d:2e:77:ab:09:fe:7f:e6:c5:a1:78:ef: 1c:ea:87:9d:bb:3b:8c:52:2c:2c:dd:ee:24:97:e5: c8:52:46:72:cf:a9:74:57:bc:71:16:b8:4c:0d:5b: 5b:be:06:5f:ee:2a:46:49:3b:37:20:3e:7f:fe:26: 9c:f2:e8:8a:a7:8b:18:13:8d:bb:f1:a1:cb:d4:15: d5:00:b0:eb:a6:49:10:cd:5f:21:cf:8e:f6:1a:59: ec:f9:b0:c2:c9:a9:75:1f:59:0f:89:b4:55:39:bf: 0c:39:a5:b0:da:0c:85:b8:9d:89:04:33:0a:c4:1b: e5:16:21:7b:94:ff:77:6d:35:be:7e:97:c7:e1:59: 69:c9:f0:f0:6d:f1:d5:02:3a:19:0b:a6:26:03:79: e3:fc:b2:ff:5b:66:35:40:cc:c3:30:5c:24:26:cb: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B5:FC:83:73:A1:80:6A:A7:9D:BA:FE:D1:62:11:11:3E:31:60:0C X509v3 Authority Key Identifier: keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/A7X8g3OhgGqnnbr-0WIRET4xYAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.96.0/21 217.174.128.0/20 IPv6: 2a0a:bfc0::/29 Signature Algorithm: sha256WithRSAEncryption 52:94:53:4b:23:2b:a8:a2:48:f4:17:0a:36:fd:98:1c:15:01: f4:6e:4b:9c:2f:af:bd:1e:1a:27:6d:d9:0b:aa:f5:4c:0c:2f: 2e:26:3d:a8:09:b6:d8:fb:dc:d5:38:36:65:95:69:d8:80:75: 9a:d4:42:6c:ae:b0:fa:9b:02:34:d4:8e:27:e0:d7:16:e0:72: 41:27:2c:ae:b8:28:6c:78:07:e5:dd:64:3e:d5:f8:1b:ab:04: e2:e5:f2:6f:56:6f:64:d7:77:b9:24:32:46:2c:10:98:e2:04: 47:c0:c5:4c:b0:e2:de:da:dc:ab:2d:02:27:1f:e6:83:cf:23: d2:c5:e6:dd:84:f3:94:cf:f4:6b:6f:86:82:c5:1e:bc:77:ec: 07:8f:60:d4:23:45:ba:d2:61:49:10:ab:8c:f7:1c:76:97:1f: f4:28:0b:f4:9f:db:3c:0f:4d:f3:53:2c:db:23:bf:f5:b7:ea: 2c:6b:5e:7d:dc:30:99:6b:54:3b:46:ab:a9:53:40:7b:4e:9e: c8:bc:c6:f0:16:c9:e6:2d:85:90:e5:97:b2:2d:a0:09:fc:93: 64:88:4c:3e:46:68:3a:ef:a4:aa:50:69:7c:bf:57:f6:97:68: c8:70:17:4e:83:e5:5d:a8:1d:80:19:62:2c:16:39:ca:e6:7d: e7:20:31:93 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt87YtEc4fr9bNix7qmGaZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj MTI2MzcwHhcNMjYwMTAyMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2I1ZmM4MzczYTE4MDZhYTc5ZGJhZmVkMTYyMTExMTNlMzE2MDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdHg2gHdS/A7DAHdh2OTrrBlRSwu YHqH9RY8Zj+4fjMXtZ5s7VfzF0WMrlUqUNbE4lz/ig1h5mK2m6cuffSJpEiXrYmk 3IN9iy7expZATmcm4JNP3P6xcESGBtBNLnerCf5/5sWheO8c6oeduzuMUiws3e4k l+XIUkZyz6l0V7xxFrhMDVtbvgZf7ipGSTs3ID5//iac8uiKp4sYE4278aHL1BXV ALDrpkkQzV8hz472Glns+bDCyal1H1kPibRVOb8MOaWw2gyFuJ2JBDMKxBvlFiF7 lP93bTW+fpfH4VlpyfDwbfHVAjoZC6YmA3nj/LL/W2Y1QMzDMFwkJsuWKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAO1/INzoYBqp526/tFiERE+MWAMMB8GA1UdIwQY MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt NDIzODU4MjBmOGIzLzEvQTdYOGczT2hnR3FubmJyLTBXSVJFVDR4WUF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHw9gAwQE 2a6AMA0EAgACMAcDBQMqCr/AMA0GCSqGSIb3DQEBCwUAA4IBAQBSlFNLIyuookj0 Fwo2/ZgcFQH0bkucL6+9HhonbdkLqvVMDC8uJj2oCbbY+9zVODZllWnYgHWa1EJs rrD6mwI01I4n4NcW4HJBJyyuuChseAfl3WQ+1fgbqwTi5fJvVm9k13e5JDJGLBCY 4gRHwMVMsOLe2tyrLQInH+aDzyPSxebdhPOUz/Rrb4aCxR68d+wHj2DUI0W60mFJ EKuM9xx2lx/0KAv0n9s8D03zUyzbI7/1t+osa1593DCZa1Q7RqupU0B7Tp7IvMbw FsnmLYWQ5ZeyLaAJ/JNkiEw+Rmg676SqUGl8v1f2l2jIcBdOg+VdqB2AGWIsFjnK 5n3nIDGT -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:36 2026 by rpki-client