This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/vG4PNdPCpmsHlpbXODU_YK6E-fc.roa File: vG4PNdPCpmsHlpbXODU_YK6E-fc.roa (raw, json) Hash identifier: mX5cRML8Dc4pk4M7hpiHQwZERgzsoyWou0tgh8xR65Q= Subject key identifier: BC:6E:0F:35:D3:C2:A6:6B:07:96:96:D7:38:35:3F:60:AE:84:F9:F7 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C69026E4D70BF491E4490008BDEF Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/vG4PNdPCpmsHlpbXODU_YK6E-fc.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 31.42.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c6:90:26:e4:d7:0b:f4:91:e4:49:00:08:bd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc6e0f35d3c2a66b079696d738353f60ae84f9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:cc:c7:98:22:8d:a6:7e:2e:62:80:d5:c7: 81:9e:4a:7a:4c:89:28:af:da:a6:6d:62:87:3c:d9: f5:53:d9:75:9f:da:8d:b4:f7:72:16:51:18:c1:82: 4f:c3:5a:ff:d5:3b:b7:6e:2b:84:e7:e7:f6:42:dd: 7c:47:b7:59:30:bb:e3:1e:d3:ed:6a:e4:88:d1:e4: ce:0d:b7:ac:5c:c3:8f:c0:f0:9a:2c:e8:0e:79:83: 26:27:c8:04:5a:4d:11:f6:30:c2:46:f5:47:89:7b: bd:b3:e6:91:d6:a1:52:a6:7d:b0:27:12:94:01:84: 47:4d:5e:10:e6:c3:ca:ea:eb:ad:5e:83:b1:f7:7c: a4:c5:e9:19:4a:5d:50:52:62:47:1a:0b:19:bc:5f: 45:7f:8f:16:27:ad:b7:f5:d5:20:28:57:27:fa:c5: 96:06:76:2b:c7:45:5b:61:5b:7d:37:a6:a7:30:c1: ce:bc:89:07:11:d6:17:e7:dd:3c:49:c3:93:e8:9c: 9c:d7:a6:d6:a5:01:64:be:74:63:88:6a:ac:60:a2: 3c:4f:29:d4:4f:3d:01:86:cb:74:66:2c:94:1b:bb: 0a:65:f3:c0:6e:a1:9b:6b:bf:79:d6:e7:6b:4e:61: bc:67:6f:b7:88:27:1f:95:1f:fd:e0:00:f7:9f:4c: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6E:0F:35:D3:C2:A6:6B:07:96:96:D7:38:35:3F:60:AE:84:F9:F7 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/vG4PNdPCpmsHlpbXODU_YK6E-fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.124.0/24 Signature Algorithm: sha256WithRSAEncryption 22:9f:f3:4f:9d:7c:1e:57:2c:ef:65:8a:00:85:5d:a3:eb:dd: 7c:c5:38:6a:7b:90:d7:ab:e9:02:07:15:63:64:93:44:ad:57: f3:fd:28:ca:f7:53:72:c1:a7:54:96:24:ff:db:94:5c:3a:8d: 43:df:74:5d:5d:19:91:37:cc:26:b6:52:c7:af:23:d2:fc:3a: 58:fd:e6:ca:1e:5d:e6:8a:14:d7:2e:36:65:c9:53:53:55:70: b4:f8:12:00:b2:c8:ed:1c:d3:3a:ee:2f:e2:a4:16:ef:d4:4f: ed:e8:f3:02:97:9a:b3:78:7c:8a:05:26:e2:2f:dd:d8:70:af: 11:89:b2:1c:37:94:54:72:0f:a8:66:41:97:8c:f0:b4:c9:9c: fc:d8:c8:7e:21:11:89:a5:a4:9c:23:2d:55:9d:f3:26:e5:35: 53:cb:30:cd:13:b4:83:2a:bf:18:7c:06:d8:6d:ff:96:74:f4: ff:9b:84:93:59:4f:6c:4d:8c:fe:f7:da:1c:7a:61:d5:f5:58: 2e:31:1e:94:e0:22:08:e5:6b:57:72:46:8c:9c:24:9b:6c:6e: e5:c7:e9:39:6f:0a:c6:9f:dd:b0:cf:b0:2f:63:72:50:15:7f: 94:2f:83:ab:6f:9e:21:0b:3d:6e:d3:fa:f2:64:c6:e6:7e:e0: e8:37:23:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMaQJuTXC/SR5EkACL3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzZlMGYzNWQzYzJhNjZiMDc5Njk2ZDczODM1M2Y2MGFlODRmOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXDMx5gijaZ+LmKA1ceBnkp6TIko r9qmbWKHPNn1U9l1n9qNtPdyFlEYwYJPw1r/1Tu3biuE5+f2Qt18R7dZMLvjHtPt auSI0eTODbesXMOPwPCaLOgOeYMmJ8gEWk0R9jDCRvVHiXu9s+aR1qFSpn2wJxKU AYRHTV4Q5sPK6uutXoOx93ykxekZSl1QUmJHGgsZvF9Ff48WJ6239dUgKFcn+sWW BnYrx0VbYVt9N6anMMHOvIkHEdYX5908ScOT6Jyc16bWpQFkvnRjiGqsYKI8TynU Tz0Bhst0ZiyUG7sKZfPAbqGba7951udrTmG8Z2+3iCcflR/94AD3n0xGNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLxuDzXTwqZrB5aW1zg1P2CuhPn3MB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvdkc0UE5kUENwbXNIbHBiWE9EVV9ZSzZFLWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyp8MA0G CSqGSIb3DQEBCwUAA4IBAQAin/NPnXweVyzvZYoAhV2j6918xThqe5DXq+kCBxVj ZJNErVfz/SjK91NywadUliT/25RcOo1D33RdXRmRN8wmtlLHryPS/DpY/ebKHl3m ihTXLjZlyVNTVXC0+BIAssjtHNM67i/ipBbv1E/t6PMCl5qzeHyKBSbiL93YcK8R ibIcN5RUcg+oZkGXjPC0yZz82Mh+IRGJpaScIy1VnfMm5TVTyzDNE7SDKr8YfAbY bf+WdPT/m4STWU9sTYz+99ocemHV9VguMR6U4CII5WtXckaMnCSbbG7lx+k5bwrG n92wz7AvY3JQFX+UL4Orb54hCz1u0/ryZMbmfuDoNyMU -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:48 2026 by rpki-client