This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/eO3-g7U61h0ccc-x6QHzUKRJkTk.roa File: eO3-g7U61h0ccc-x6QHzUKRJkTk.roa (raw, json) Hash identifier: KqA0EvSsu65ptGstGaeCpGc6svNQ5hpNKKATkhQOBQ8= Subject key identifier: 78:ED:FE:83:B5:3A:D6:1D:1C:71:CF:B1:E9:01:F3:50:A4:49:91:39 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019BF076B6EA3BEA43484E68AF4B0CF6D9B2 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/eO3-g7U61h0ccc-x6QHzUKRJkTk.roa Signing time: Sat 24 Jan 2026 14:44:30 +0000 ROA not before: Sat 24 Jan 2026 14:44:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204208 IP address blocks: 31.42.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f0:76:b6:ea:3b:ea:43:48:4e:68:af:4b:0c:f6:d9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 24 14:44:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78edfe83b53ad61d1c71cfb1e901f350a4499139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ea:d6:df:1b:1b:68:25:cd:dc:01:cd:31:86: 8b:fc:3b:cf:bf:e3:8c:f7:aa:60:3f:4b:f5:43:62: 0d:83:5e:da:69:8e:b4:2a:a1:59:30:68:1e:92:9e: c8:ec:b0:02:f8:e4:a8:e3:62:c5:bc:70:9b:21:c0: 56:3e:7a:54:b2:35:92:e5:3b:d6:67:0f:39:83:8d: 3f:86:9d:52:68:88:b2:54:93:8b:72:15:fb:81:43: aa:1e:a9:96:0e:1f:f3:6b:eb:cb:d7:dc:d4:93:df: 6b:10:e0:d9:e7:39:4f:6d:13:60:34:88:8b:09:64: 13:98:e0:04:b7:12:70:86:ec:d0:71:81:fd:71:9f: 9c:ca:95:c1:b3:ac:e5:7e:f8:66:5b:16:34:c5:52: 92:f0:7b:53:18:a9:ef:3e:1f:1f:f3:b3:39:7c:73: d9:c0:c9:48:6e:6b:b7:47:42:86:29:8f:20:9f:60: fc:e8:a2:64:e3:f6:87:fa:a5:06:bd:70:82:93:64: 26:88:c3:26:d7:cc:e8:6e:42:c6:56:bd:ef:f1:99: 1e:5e:36:1a:01:07:41:0e:a5:ca:53:10:52:04:d4: 85:d9:85:77:1b:20:bd:78:3e:b2:d2:18:51:6d:da: ab:3c:b7:41:37:5b:d2:13:9a:f6:03:44:eb:7d:e8: dc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:ED:FE:83:B5:3A:D6:1D:1C:71:CF:B1:E9:01:F3:50:A4:49:91:39 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/eO3-g7U61h0ccc-x6QHzUKRJkTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.123.0/24 Signature Algorithm: sha256WithRSAEncryption 82:db:a6:68:d5:77:49:7f:74:62:3d:c3:70:8c:44:4f:46:f6: ae:5c:b8:43:67:f6:c9:2d:07:68:59:65:be:2a:a9:41:df:f3: e1:2d:cf:0a:49:82:8b:e7:12:92:a8:07:14:2f:cc:47:f1:82: fa:05:0a:84:fb:c7:71:58:3d:ca:2d:1c:49:54:4c:70:9c:16: c4:12:dd:bc:f4:4b:f6:bc:5b:30:56:b4:f0:81:f5:b4:2c:a8: 77:33:cd:fc:41:74:60:66:fe:42:87:b5:36:51:c5:51:f2:ec: 74:90:f3:55:2f:5f:29:b3:b2:f3:45:3a:b5:d1:15:56:03:e8: 3f:af:46:41:94:60:10:4b:78:6c:0d:b7:cf:10:23:1a:8c:41: 7d:0a:c5:58:9e:c1:54:e2:63:77:d4:f0:3b:b6:80:fd:49:cd: 36:08:19:f5:8a:02:19:2b:3c:27:4a:41:70:65:15:50:18:ba: 1b:b8:02:2f:2a:4f:28:2c:ac:0f:de:dd:ec:3c:6e:5a:eb:ec: d0:71:7b:71:58:23:b1:1c:64:14:63:d4:80:5d:bc:40:89:13: 19:00:04:04:65:ad:22:f4:a4:41:3c:68:a4:cf:96:a9:03:a5: 1e:11:94:1d:4a:a0:cf:19:0d:23:ac:2d:e4:3d:0b:1e:3f:da: ea:b4:42:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvwdrbqO+pDSE5or0sM9tmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTI0MTQ0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGVkZmU4M2I1M2FkNjFkMWM3MWNmYjFlOTAxZjM1MGE0NDk5MTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOrW3xsbaCXN3AHNMYaL/DvPv+OM 96pgP0v1Q2INg17aaY60KqFZMGgekp7I7LAC+OSo42LFvHCbIcBWPnpUsjWS5TvW Zw85g40/hp1SaIiyVJOLchX7gUOqHqmWDh/za+vL19zUk99rEODZ5zlPbRNgNIiL CWQTmOAEtxJwhuzQcYH9cZ+cypXBs6zlfvhmWxY0xVKS8HtTGKnvPh8f87M5fHPZ wMlIbmu3R0KGKY8gn2D86KJk4/aH+qUGvXCCk2QmiMMm18zobkLGVr3v8ZkeXjYa AQdBDqXKUxBSBNSF2YV3GyC9eD6y0hhRbdqrPLdBN1vSE5r2A0TrfejcpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHjt/oO1OtYdHHHPsekB81CkSZE5MB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvZU8zLWc3VTYxaDBjY2MteDZRSHpVS1JKa1RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyp7MA0G CSqGSIb3DQEBCwUAA4IBAQCC26Zo1XdJf3RiPcNwjERPRvauXLhDZ/bJLQdoWWW+ KqlB3/PhLc8KSYKL5xKSqAcUL8xH8YL6BQqE+8dxWD3KLRxJVExwnBbEEt289Ev2 vFswVrTwgfW0LKh3M838QXRgZv5Ch7U2UcVR8ux0kPNVL18ps7LzRTq10RVWA+g/ r0ZBlGAQS3hsDbfPECMajEF9CsVYnsFU4mN31PA7toD9Sc02CBn1igIZKzwnSkFw ZRVQGLobuAIvKk8oLKwP3t3sPG5a6+zQcXtxWCOxHGQUY9SAXbxAiRMZAAQEZa0i 9KRBPGikz5apA6UeEZQdSqDPGQ0jrC3kPQseP9rqtEI+ -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:25 2026 by rpki-client