This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/14ynEoJXV6cGESEueCUwh87gUXg.roa File: 14ynEoJXV6cGESEueCUwh87gUXg.roa (raw, json) Hash identifier: JZTxhgcbHYTEiHxAG17P9Cv6dpEw0XIS5Wi97I1GPsQ= Subject key identifier: D7:8C:A7:12:82:57:57:A7:06:11:21:2E:78:25:30:87:CE:E0:51:78 Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316 Certificate serial: 019B7D5C7F4BFD59A7CD3E94751690D566C5 Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/14ynEoJXV6cGESEueCUwh87gUXg.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57491 IP address blocks: 31.47.198.0/23 maxlen: 23 31.47.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7f:4b:fd:59:a7:cd:3e:94:75:16:90:d5:66:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d78ca712825757a70611212e78253087cee05178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:63:0d:1b:a9:71:de:b4:b5:10:a9:66:26: 01:d1:01:b4:99:74:95:16:30:ed:76:0f:50:3b:4d: ad:5c:15:1e:29:d4:20:30:f0:c6:2e:92:1d:ef:da: 27:cd:84:df:bf:8b:79:77:be:9e:2d:54:34:a6:f9: 28:e5:f3:49:af:d9:6e:19:7e:09:ec:a9:76:17:4e: 1a:fa:a4:f2:47:cd:19:6f:9a:7e:bc:70:4d:8e:94: 03:b7:e1:37:4c:2f:e5:c7:4e:a9:14:3a:fb:e0:b3: 50:46:bb:88:37:b0:7b:fe:9d:f3:83:54:ee:22:1b: d4:9b:06:b8:ca:2c:58:62:75:ea:99:de:2e:b5:bd: 2c:bb:8f:54:20:61:ea:08:71:ee:6a:90:dd:cb:ed: b4:ce:9d:b3:ab:2a:b2:ad:fe:51:1d:3b:08:97:73: d7:7a:d6:6a:c4:ab:3c:a9:63:8c:cc:a0:d4:25:c8: 5e:e5:82:e3:e3:03:24:a9:e1:80:8e:62:41:2e:3e: 0d:ab:79:08:fe:2d:f8:42:1c:b6:8e:7d:b5:e9:d3: 58:40:a9:92:a8:dc:99:07:02:e9:95:bd:7e:e1:66: 9c:f7:2a:6a:9a:5f:26:3c:f0:09:cc:a7:0b:46:4a: 4b:bb:cb:91:c3:2b:d2:d3:67:24:9a:e2:2f:11:c9: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8C:A7:12:82:57:57:A7:06:11:21:2E:78:25:30:87:CE:E0:51:78 X509v3 Authority Key Identifier: keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/14ynEoJXV6cGESEueCUwh87gUXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.198.0/23 Signature Algorithm: sha256WithRSAEncryption a5:ed:ce:8e:aa:5e:f6:50:70:04:57:59:19:59:6b:0e:4f:57: b5:a8:4b:68:07:2d:6e:8d:50:e9:ec:03:72:15:41:e3:11:82: 83:72:e4:4f:ba:f0:06:93:15:a2:2d:b3:3c:7f:3d:8d:2b:b7: d6:e2:b4:88:95:8b:47:30:f5:ce:ee:8f:cb:ff:9d:87:51:2c: e7:4a:cd:96:f0:e6:0a:1a:44:df:03:84:07:ea:d1:5d:0f:43: 91:6f:4d:8f:95:00:ce:37:67:a0:6c:67:5b:ad:0a:be:5f:d8: 23:72:1a:79:d2:59:31:0a:39:87:27:6d:84:7a:54:b5:de:cd: 1a:9d:d0:44:4c:3d:18:4e:a2:03:2c:45:05:d0:d4:64:2e:12: 49:18:79:15:ce:e4:3f:1a:9f:b3:f4:33:7b:59:f9:f1:de:b3: c4:e4:66:52:ad:ee:53:d8:84:b5:58:87:16:f6:b5:0c:7c:fe: c6:98:3d:ca:ab:07:41:c2:91:27:7f:6c:c7:4a:9e:51:38:ea: 26:ac:f6:ce:e1:7b:c5:79:0d:44:84:47:5f:37:dc:60:52:60: de:cb:af:77:5d:04:7a:c2:c1:35:80:00:9b:e8:11:00:a0:10: 21:1e:57:ac:76:9e:9f:f6:b9:98:8f:77:60:16:f9:7b:8d:55: 45:4d:c3:1d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XH9L/VmnzT6UdRaQ1WbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi Y2UzMTYwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzhjYTcxMjgyNTc1N2E3MDYxMTIxMmU3ODI1MzA4N2NlZTA1MTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MFjDRupcd60tRCpZiYB0QG0mXSV FjDtdg9QO02tXBUeKdQgMPDGLpId79onzYTfv4t5d76eLVQ0pvko5fNJr9luGX4J 7Kl2F04a+qTyR80Zb5p+vHBNjpQDt+E3TC/lx06pFDr74LNQRruIN7B7/p3zg1Tu IhvUmwa4yixYYnXqmd4utb0su49UIGHqCHHuapDdy+20zp2zqyqyrf5RHTsIl3PX etZqxKs8qWOMzKDUJche5YLj4wMkqeGAjmJBLj4Nq3kI/i34Qhy2jn216dNYQKmS qNyZBwLplb1+4Wac9ypqml8mPPAJzKcLRkpLu8uRwyvS02ckmuIvEcmeBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeMpxKCV1enBhEhLnglMIfO4FF4MB8GA1UdIwQY MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct YTRlOTkxYjBmMTQ0LzEvMTR5bkVvSlhWNmNHRVNFdWVDVXdoODdnVVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODctYTRlOTkxYjBmMTQ0 LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHy/GMA0G CSqGSIb3DQEBCwUAA4IBAQCl7c6Oql72UHAEV1kZWWsOT1e1qEtoBy1ujVDp7ANy FUHjEYKDcuRPuvAGkxWiLbM8fz2NK7fW4rSIlYtHMPXO7o/L/52HUSznSs2W8OYK GkTfA4QH6tFdD0ORb02PlQDON2egbGdbrQq+X9gjchp50lkxCjmHJ22EelS13s0a ndBETD0YTqIDLEUF0NRkLhJJGHkVzuQ/Gp+z9DN7Wfnx3rPE5GZSre5T2IS1WIcW 9rUMfP7GmD3KqwdBwpEnf2zHSp5ROOomrPbO4XvFeQ1EhEdfN9xgUmDey693XQR6 wsE1gACb6BEAoBAhHlesdp6f9rmYj3dgFvl7jVVFTcMd -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:10 2026 by rpki-client