This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TtFqRomnH8j0VD4yTDrVO7uLCh4.roa File: TtFqRomnH8j0VD4yTDrVO7uLCh4.roa (raw, json) Hash identifier: PUv0bDt7s7xgj1DQSPsSn1QZtaSPE5Dvc4/Jw1ch86k= Subject key identifier: 4E:D1:6A:46:89:A7:1F:C8:F4:54:3E:32:4C:3A:D5:3B:BB:8B:0A:1E Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77593E3339052206E58C263B22BF12E2 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TtFqRomnH8j0VD4yTDrVO7uLCh4.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12302 IP address blocks: 31.14.34.0/24 maxlen: 24 31.14.49.0/24 maxlen: 24 86.104.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3e:33:39:05:22:06:e5:8c:26:3b:22:bf:12:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ed16a4689a71fc8f4543e324c3ad53bbb8b0a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:5d:98:1c:6d:5f:3f:20:dc:e6:4a:b5:85: d9:14:a2:0d:ed:53:8f:c7:e3:18:0e:68:d2:ed:8f: c4:06:71:f0:fe:82:37:7a:6d:57:c8:37:3b:b0:3e: ee:41:4f:20:22:e6:44:51:69:03:9a:68:38:9b:08: e8:4a:cb:47:4c:6e:af:2b:3e:ae:ef:4a:36:08:f3: 5b:84:44:c3:ee:c8:d8:5f:76:44:4c:c3:3a:72:7f: 38:18:d1:87:7d:0d:fc:dc:e8:f8:6f:24:c2:89:d3: ae:d0:e3:d7:4f:10:93:5b:61:dc:68:94:b0:b1:bb: ec:06:4b:30:28:e0:03:a0:b9:61:ef:a7:37:90:d1: 2f:d3:0a:ac:55:b2:f8:3f:09:2a:df:2f:31:d1:6f: 9f:91:d6:ea:6b:74:3c:3e:4b:b6:f0:88:8a:e9:9e: 7b:3e:af:bd:2e:90:c7:9f:d3:24:2f:36:e4:05:f3: 1b:bd:fa:07:b6:0f:2e:eb:2b:cf:92:e1:e6:45:7a: d5:6b:72:95:ca:5f:e0:8a:81:69:a2:53:bc:51:c4: 12:95:b6:93:6c:6e:73:ef:27:99:6b:a1:33:9c:0c: f3:6a:76:a3:a7:21:2b:40:bd:78:7a:0f:f4:1f:1e: 04:41:46:f2:e0:d3:7f:2a:76:d9:ad:58:a1:8c:ad: 9f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D1:6A:46:89:A7:1F:C8:F4:54:3E:32:4C:3A:D5:3B:BB:8B:0A:1E X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TtFqRomnH8j0VD4yTDrVO7uLCh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.34.0/24 31.14.49.0/24 86.104.193.0/24 Signature Algorithm: sha256WithRSAEncryption 38:0f:89:e3:f2:74:f9:6f:3d:37:05:29:7d:33:05:75:ee:11: a2:5a:9c:a0:26:ef:62:c2:70:f9:a0:c7:35:c6:bd:ac:45:b0: 95:f7:1c:d6:a6:d9:7e:9e:5b:79:8b:be:38:f5:1a:e2:b9:c7: ca:a8:e5:a8:bf:d6:52:1f:54:33:14:fc:b6:43:d7:54:36:bd: 54:23:bb:69:2d:f5:c9:b4:e4:3b:bb:cd:f3:2f:0d:5b:c8:63: e4:74:7a:8f:23:a2:61:bc:46:19:4e:81:dc:0a:9f:ea:03:76: f2:63:42:95:59:e1:b0:53:64:5d:80:72:09:4e:d4:72:d7:8f: 01:0c:62:a5:23:d8:bc:74:c8:09:42:9e:b1:70:23:ee:56:ea: 70:6f:2e:0f:fe:9d:90:db:bd:94:90:48:43:51:56:50:7d:e7: fd:ab:78:50:b8:b9:49:50:9a:be:69:29:11:f5:41:2a:77:ce: 46:7d:49:3a:3b:5a:f3:17:d3:fc:db:2b:ba:dd:bd:91:dd:79: c2:fd:0b:75:82:7f:31:79:b5:fa:15:29:9f:e7:5c:b3:8e:39: 74:ab:fa:6f:3e:8d:13:7c:2f:dc:73:a4:9a:87:4f:7f:87:b7: be:ee:28:be:53:1b:3b:ba:41:cf:17:2b:09:bd:5e:7a:b8:85: 94:83:4d:5d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3WT4zOQUiBuWMJjsivxLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWQxNmE0Njg5YTcxZmM4ZjQ1NDNlMzI0YzNhZDUzYmJiOGIwYTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlZdmBxtXz8g3OZKtYXZFKIN7VOP x+MYDmjS7Y/EBnHw/oI3em1XyDc7sD7uQU8gIuZEUWkDmmg4mwjoSstHTG6vKz6u 70o2CPNbhETD7sjYX3ZETMM6cn84GNGHfQ383Oj4byTCidOu0OPXTxCTW2HcaJSw sbvsBkswKOADoLlh76c3kNEv0wqsVbL4Pwkq3y8x0W+fkdbqa3Q8Pku28IiK6Z57 Pq+9LpDHn9MkLzbkBfMbvfoHtg8u6yvPkuHmRXrVa3KVyl/gioFpolO8UcQSlbaT bG5z7yeZa6EznAzzanajpyErQL14eg/0Hx4EQUby4NN/KnbZrVihjK2fwwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFE7RakaJpx/I9FQ+Mkw61Tu7iwoeMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1R0RnFSb21uSDhqMFZENHlURHJWTzd1TENoNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAAfDiID BAAfDjEDBABWaMEwDQYJKoZIhvcNAQELBQADggEBADgPiePydPlvPTcFKX0zBXXu EaJanKAm72LCcPmgxzXGvaxFsJX3HNam2X6eW3mLvjj1GuK5x8qo5ai/1lIfVDMU /LZD11Q2vVQju2kt9cm05Du7zfMvDVvIY+R0eo8jomG8RhlOgdwKn+oDdvJjQpVZ 4bBTZF2AcglO1HLXjwEMYqUj2Lx0yAlCnrFwI+5W6nBvLg/+nZDbvZSQSENRVlB9 5/2reFC4uUlQmr5pKRH1QSp3zkZ9STo7WvMX0/zbK7rdvZHdecL9C3WCfzF5tfoV KZ/nXLOOOXSr+m8+jRN8L9xzpJqHT3+Ht77uKL5TGzu6Qc8XKwm9Xnq4hZSDTV0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:29 2026 by rpki-client