This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/w71z6e1nnczS-eMiXSgzScyOD6k.roa File: w71z6e1nnczS-eMiXSgzScyOD6k.roa (raw, json) Hash identifier: IC3JerQQwAfGduvYY+qJSAnye5COvgk3vpfNs1yG+I4= Subject key identifier: C3:BD:73:E9:ED:67:9D:CC:D2:F9:E3:22:5D:28:33:49:CC:8E:0F:A9 Certificate issuer: /CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1 Certificate serial: 019B7CED3C62D6A13FA415C31EA64E5D22C2 Authority key identifier: 26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/w71z6e1nnczS-eMiXSgzScyOD6k.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13237 IP address blocks: 31.204.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.mft rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3c:62:d6:a1:3f:a4:15:c3:1e:a6:4e:5d:22:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2688ef373f8f00e01c25cf924b4f2e8ec6a219d1 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3bd73e9ed679dccd2f9e3225d283349cc8e0fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:ea:90:db:8d:b2:8b:d6:6c:c9:5d:02:44: fb:b2:a6:79:74:fd:45:39:f6:23:96:98:5b:ac:59: 25:69:d9:78:0e:5a:89:fa:af:39:11:fb:9f:57:7a: dc:46:af:20:9b:de:5c:8b:ea:7c:88:72:bf:98:15: d6:c6:85:e6:b0:20:e8:35:ef:16:88:12:db:52:d7: e1:5b:b7:c5:ce:7c:61:73:78:5c:c5:f8:d4:67:d0: ea:ec:dd:08:65:ac:db:4e:be:76:af:b7:cf:2e:63: 68:fa:98:98:31:28:3f:69:36:18:3b:f5:6a:dd:f2: a6:bd:73:af:8f:ce:8d:f0:d6:d6:42:95:bb:37:4c: 89:b0:e4:89:32:ed:0a:1f:77:e8:82:cd:91:59:c4: 41:6c:1e:ac:55:eb:6f:75:19:aa:e3:d6:00:de:5e: 77:36:b9:50:37:10:9b:b6:02:ce:5a:17:3a:55:b6: c8:62:8b:3d:9f:04:de:ca:24:2f:0a:37:cb:71:01: 84:b1:ae:95:14:82:c2:bc:67:0e:55:b5:90:30:dc: b9:38:32:72:da:d9:ae:12:c9:db:6f:66:dd:fc:30: 3c:0f:ba:ae:7e:21:3a:d5:12:e4:12:23:7a:db:8d: 2c:0b:ca:e9:e9:d2:4a:6f:f5:98:81:98:13:b6:79: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BD:73:E9:ED:67:9D:CC:D2:F9:E3:22:5D:28:33:49:CC:8E:0F:A9 X509v3 Authority Key Identifier: keyid:26:88:EF:37:3F:8F:00:E0:1C:25:CF:92:4B:4F:2E:8E:C6:A2:19:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JojvNz-PAOAcJc-SS08ujsaiGdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/w71z6e1nnczS-eMiXSgzScyOD6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f6f339-8455-4db4-a650-7f78a3baa7c1/1/JojvNz-PAOAcJc-SS08ujsaiGdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.124.0/22 Signature Algorithm: sha256WithRSAEncryption 62:58:9d:45:2f:ee:74:5d:be:bb:a5:24:41:82:ab:0a:cb:26: 0a:2b:08:3c:a9:5f:51:bb:55:19:62:41:be:90:65:a3:44:45: bd:3f:58:ec:e2:7e:24:46:b0:00:41:c3:f1:8f:c5:db:1f:0e: 93:78:2b:83:3e:d9:09:e0:8b:25:45:f6:d8:a3:60:f4:8b:37: 55:81:a9:3e:c3:42:d1:85:42:ce:af:cb:e3:69:e2:0e:74:54: ab:8f:5c:b3:f5:d9:3f:1e:21:07:3b:54:df:7d:0f:23:49:e2: c4:73:1e:ff:b9:68:15:cd:85:f9:b0:9e:d8:de:37:2e:63:24: cd:a4:0f:b3:38:75:20:a2:42:52:62:c9:db:c6:f0:1a:1b:06: ba:64:7b:81:95:59:02:c0:e0:05:e2:01:f0:22:62:c7:58:69: 6e:9c:1d:e8:1e:7c:4e:c0:70:d8:13:48:9f:ba:3f:a4:eb:75: 37:1c:51:2c:9e:b4:29:21:5b:35:02:62:c8:cf:2e:5c:93:6a: e4:89:69:c6:63:b8:41:ac:ee:2d:7b:26:6f:a3:fe:f8:09:6a: 2c:53:8c:08:da:ad:18:33:22:96:91:9c:73:e2:84:ae:75:58: 29:69:b2:22:86:53:81:5d:99:9b:c2:8a:54:fe:f7:85:1b:48: 91:37:78:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Txi1qE/pBXDHqZOXSLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2ODhlZjM3M2Y4ZjAwZTAxYzI1Y2Y5MjRiNGYyZThlYzZh MjE5ZDEwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JkNzNlOWVkNjc5ZGNjZDJmOWUzMjI1ZDI4MzM0OWNjOGUwZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUfqkNuNsovWbMldAkT7sqZ5dP1F OfYjlphbrFkladl4DlqJ+q85EfufV3rcRq8gm95ci+p8iHK/mBXWxoXmsCDoNe8W iBLbUtfhW7fFznxhc3hcxfjUZ9Dq7N0IZazbTr52r7fPLmNo+piYMSg/aTYYO/Vq 3fKmvXOvj86N8NbWQpW7N0yJsOSJMu0KH3fogs2RWcRBbB6sVetvdRmq49YA3l53 NrlQNxCbtgLOWhc6VbbIYos9nwTeyiQvCjfLcQGEsa6VFILCvGcOVbWQMNy5ODJy 2tmuEsnbb2bd/DA8D7qufiE61RLkEiN6240sC8rp6dJKb/WYgZgTtnn7RwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMO9c+ntZ53M0vnjIl0oM0nMjg+pMB8GA1UdIwQY MBaAFCaI7zc/jwDgHCXPkktPLo7GohnRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAt N2Y3OGEzYmFhN2MxLzEvdzcxejZlMW5uY3pTLWVNaVhTZ3pTY3lPRDZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9mNmYzMzktODQ1NS00ZGI0LWE2NTAtN2Y3OGEzYmFhN2Mx LzEvSm9qdk56LVBBT0FjSmMtU1MwOHVqc2FpR2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH8x8MA0G CSqGSIb3DQEBCwUAA4IBAQBiWJ1FL+50Xb67pSRBgqsKyyYKKwg8qV9Ru1UZYkG+ kGWjREW9P1js4n4kRrAAQcPxj8XbHw6TeCuDPtkJ4IslRfbYo2D0izdVgak+w0LR hULOr8vjaeIOdFSrj1yz9dk/HiEHO1TffQ8jSeLEcx7/uWgVzYX5sJ7Y3jcuYyTN pA+zOHUgokJSYsnbxvAaGwa6ZHuBlVkCwOAF4gHwImLHWGlunB3oHnxOwHDYE0if uj+k63U3HFEsnrQpIVs1AmLIzy5ck2rkiWnGY7hBrO4teyZvo/74CWosU4wI2q0Y MyKWkZxz4oSudVgpabIihlOBXZmbwopU/veFG0iRN3jr -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:42 2026 by rpki-client