This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa File: 2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa (raw, json) Hash identifier: Dwa67ru8l8X28sKKtvbdAV+bA3pDTfopqKgDja+YPG8= Subject key identifier: D9:E2:FB:18:03:90:06:78:D4:DA:F1:38:35:42:B5:3C:28:30:7D:68 Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B78A21DE7F415F9CA3CBE95107263F3E3 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 31.41.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1d:e7:f4:15:f9:ca:3c:be:95:10:72:63:f3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9e2fb1803900678d4daf1383542b53c28307d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2b:e2:20:69:ca:10:e5:85:78:5e:62:86:4e: 24:32:c7:9c:0b:54:d5:cc:31:e6:f2:11:20:d6:4d: e6:32:9c:9c:80:2f:3a:e9:bb:f7:c3:f5:37:a6:c3: 16:ef:6a:93:a4:04:72:c5:e0:cb:91:98:16:db:68: 80:0e:04:7b:4c:be:a5:14:50:e3:9f:fd:e5:f2:fa: db:06:b5:98:e4:ba:69:d7:77:73:d4:14:15:32:fe: 2c:fe:f2:a3:b1:a1:f2:60:ee:7e:87:c1:e0:bb:74: 7a:39:94:de:b7:ae:13:a3:e8:28:e3:3a:c2:8c:55: 86:f1:23:75:cd:9c:46:de:f7:b4:8f:f7:35:2b:4f: 71:7b:56:79:61:ee:fc:fc:08:4a:08:7e:b8:8e:46: 3d:7a:85:78:72:40:aa:a7:d5:d4:8f:c4:24:10:29: b1:0e:ae:30:39:48:12:d5:a0:1c:63:7a:35:cc:50: fc:c7:b9:b0:5d:ea:5d:df:5a:65:c7:60:ca:c9:56: e3:f9:59:b4:d5:e4:f6:dc:0b:d7:ac:3d:f8:3e:a8: 39:c4:c3:df:7a:93:ba:f1:bf:48:a1:a9:0a:cd:79: 76:2d:4d:98:cf:c6:13:29:81:20:58:44:e5:a2:fb: c2:a1:e5:dd:52:e0:1c:54:05:21:28:db:ca:b5:a4: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E2:FB:18:03:90:06:78:D4:DA:F1:38:35:42:B5:3C:28:30:7D:68 X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.248.0/24 Signature Algorithm: sha256WithRSAEncryption 20:b4:52:6f:8f:d6:4a:17:44:1e:48:ad:4f:91:0b:ec:88:c2: 63:ba:32:c2:e4:31:75:44:59:6d:f3:7d:aa:c9:a7:0d:a3:08: d1:7d:00:4c:f7:31:cf:98:35:02:ab:a3:f9:49:3a:ba:e4:2f: 3b:26:d9:7e:69:e8:96:16:78:a5:c2:17:b3:15:9b:3a:7d:9f: a8:38:03:74:2d:a1:0f:4c:ad:1e:11:dd:e6:74:81:ed:74:83: 07:81:07:28:4f:9b:9d:0b:52:3d:12:66:da:49:20:b3:63:88: 1a:21:dc:b3:22:29:81:03:c8:d7:f9:d1:00:32:ca:97:a4:14: aa:86:81:d6:fb:e7:a6:30:0a:fe:53:5e:b5:db:02:c3:c4:f1: ef:54:85:1d:e1:4c:0d:83:45:b7:ea:50:e8:f6:a2:46:c7:b1: df:b9:df:58:44:02:ac:74:cd:ae:52:b8:df:76:2a:92:bd:ee: 57:06:72:f7:1b:5e:a0:b8:3f:a5:c5:5b:8c:02:0d:1e:c5:2c: 28:95:05:ee:c7:6b:86:27:fa:c8:eb:73:e5:53:5a:95:6f:17: 71:c5:4a:55:68:e6:e5:21:37:08:18:81:0b:a4:1f:81:76:9b: 98:18:6e:f7:08:ff:f9:bf:3f:0a:c4:d3:0d:c5:66:e0:46:37: b9:22:27:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oh3n9BX5yjy+lRByY/PjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWUyZmIxODAzOTAwNjc4ZDRkYWYxMzgzNTQyYjUzYzI4MzA3ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyviIGnKEOWFeF5ihk4kMsecC1TV zDHm8hEg1k3mMpycgC866bv3w/U3psMW72qTpARyxeDLkZgW22iADgR7TL6lFFDj n/3l8vrbBrWY5Lpp13dz1BQVMv4s/vKjsaHyYO5+h8Hgu3R6OZTet64To+go4zrC jFWG8SN1zZxG3ve0j/c1K09xe1Z5Ye78/AhKCH64jkY9eoV4ckCqp9XUj8QkECmx Dq4wOUgS1aAcY3o1zFD8x7mwXepd31plx2DKyVbj+Vm01eT23AvXrD34Pqg5xMPf epO68b9IoakKzXl2LU2Yz8YTKYEgWETlovvCoeXdUuAcVAUhKNvKtaTyAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNni+xgDkAZ41NrxODVCtTwoMH1oMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvMmVMN0dBT1FCbmpVMnZFNE5VSzFQQ2d3ZldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyn4MA0G CSqGSIb3DQEBCwUAA4IBAQAgtFJvj9ZKF0QeSK1PkQvsiMJjujLC5DF1RFlt832q yacNowjRfQBM9zHPmDUCq6P5STq65C87Jtl+aeiWFnilwhezFZs6fZ+oOAN0LaEP TK0eEd3mdIHtdIMHgQcoT5udC1I9EmbaSSCzY4gaIdyzIimBA8jX+dEAMsqXpBSq hoHW++emMAr+U1612wLDxPHvVIUd4UwNg0W36lDo9qJGx7Hfud9YRAKsdM2uUrjf diqSve5XBnL3G16guD+lxVuMAg0exSwolQXux2uGJ/rI63PlU1qVbxdxxUpVaObl ITcIGIELpB+BdpuYGG73CP/5vz8KxNMNxWbgRje5Iifh -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:57 2026 by rpki-client