This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/FhIJYPne7gPWVQQPlSNOQDYojyw.roa File: FhIJYPne7gPWVQQPlSNOQDYojyw.roa (raw, json) Hash identifier: K6YwsovdJ/O0GUapO1LURNQtSxCoIhGALa7CIvhy8bI= Subject key identifier: 16:12:09:60:F9:DE:EE:03:D6:55:04:0F:95:23:4E:40:36:28:8F:2C Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b Certificate serial: 019B77C7669DB9018AABBC771FA69017F3E4 Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/FhIJYPne7gPWVQQPlSNOQDYojyw.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60443 IP address blocks: 31.185.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:9d:b9:01:8a:ab:bc:77:1f:a6:90:17:f3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16120960f9deee03d655040f95234e4036288f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:56:64:a2:99:eb:b4:cc:18:1d:0a:b4:31: 21:e9:48:95:06:a0:5c:0c:0c:44:44:fc:7b:d6:e3: d7:d1:9f:27:99:2b:4f:52:92:a0:dd:91:e6:c8:9a: 70:0c:0d:51:87:28:ea:c8:cf:98:16:79:15:a8:bb: 4e:33:48:d9:23:08:67:57:a4:6d:7d:04:98:21:a3: fb:78:6a:f7:3a:bf:63:69:9e:1a:85:16:c8:de:2c: 6f:c8:f3:f7:82:a9:7e:a6:ab:40:04:83:3f:2c:46: 20:56:5c:bd:eb:07:df:5c:80:44:4e:45:2f:b9:55: 44:67:48:b5:ab:bb:f4:63:1b:86:b9:8f:f1:01:bb: ca:1e:fb:b6:f1:94:96:7e:02:f2:8f:01:5d:b0:dc: 89:b0:81:27:d0:79:18:85:b7:48:ff:9b:f1:06:80: 57:10:01:89:fb:59:64:e6:95:af:09:dc:ad:09:05: c6:01:6c:b5:b0:2b:70:2d:b7:54:4e:d0:44:08:21: f1:59:9f:7a:3f:25:62:54:47:c5:cd:72:68:47:d2: a7:84:ae:17:9f:b8:d0:1f:6d:61:92:7c:a9:81:ca: 69:9b:89:d7:9c:a3:72:79:66:89:c8:00:b2:90:ee: 5b:b2:f4:a9:03:18:be:b8:ce:f5:6b:2d:92:b6:53: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:12:09:60:F9:DE:EE:03:D6:55:04:0F:95:23:4E:40:36:28:8F:2C X509v3 Authority Key Identifier: keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/FhIJYPne7gPWVQQPlSNOQDYojyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.101.0/24 Signature Algorithm: sha256WithRSAEncryption 49:e4:da:4a:f2:86:eb:22:3b:9e:78:49:f2:f0:09:f5:64:b0: 69:e4:e8:3a:74:e1:5e:e5:05:1d:08:66:f8:b9:1c:1d:53:cc: cf:39:18:11:2c:c7:c1:c9:6f:72:17:61:61:a7:bd:a9:4f:93: 7a:9a:ea:64:70:ee:2d:e9:7d:b6:7a:39:d9:e5:8a:54:a4:52: a2:24:bb:6b:8c:4e:ac:bb:19:a1:7e:09:76:47:6e:b9:84:ef: 6d:d5:8b:4a:13:cb:22:13:d3:6d:2e:70:c9:0b:f1:fb:17:a1: e9:f9:d4:7a:15:be:84:70:94:e8:88:5c:23:84:4d:c3:c8:fa: 1e:8f:00:79:ba:f1:cc:a2:ca:fa:1d:6f:53:cf:68:97:26:e4: 69:1f:e7:b5:9b:34:fe:92:80:81:a8:d8:47:5b:53:7a:86:26: c3:69:bb:ae:50:14:0b:af:74:bb:51:0c:f6:97:06:1b:d1:5e: f5:0e:e7:52:2a:de:f6:09:ae:d0:b1:83:23:cd:56:c4:4e:96: 5e:5e:7a:7d:06:c6:e5:38:b5:6d:fb:e8:cd:26:64:a2:b1:ba: dd:99:da:93:44:56:2d:e5:e4:b6:65:2c:14:05:c1:94:41:38: ba:8a:44:3e:ca:39:de:be:9e:48:be:0d:90:c0:7b:db:04:30: 6c:2f:46:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2aduQGKq7x3H6aQF/PkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MzI3NjJhNWU4NjFlOTc2ZGU1M2QxNDc4NmYzOWUzYTY2 OTY4MWIwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjEyMDk2MGY5ZGVlZTAzZDY1NTA0MGY5NTIzNGU0MDM2Mjg4ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8lWZKKZ67TMGB0KtDEh6UiVBqBc DAxERPx71uPX0Z8nmStPUpKg3ZHmyJpwDA1RhyjqyM+YFnkVqLtOM0jZIwhnV6Rt fQSYIaP7eGr3Or9jaZ4ahRbI3ixvyPP3gql+pqtABIM/LEYgVly96wffXIBETkUv uVVEZ0i1q7v0YxuGuY/xAbvKHvu28ZSWfgLyjwFdsNyJsIEn0HkYhbdI/5vxBoBX EAGJ+1lk5pWvCdytCQXGAWy1sCtwLbdUTtBECCHxWZ96PyViVEfFzXJoR9KnhK4X n7jQH21hknypgcppm4nXnKNyeWaJyACykO5bsvSpAxi+uM71ay2StlPsTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBYSCWD53u4D1lUED5UjTkA2KI8sMB8GA1UdIwQY MBaAFLcydipehh6XbeU9FHhvOeOmaWgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDct NjNiNTJhYTdmOGRhLzEvRmhJSllQbmU3Z1BXVlFRUGxTTk9RRFlvanl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81YWMyMWQtNzYxNi00ZWVmLTg1ZDctNjNiNTJhYTdmOGRh LzEvdHpKMktsNkdIcGR0NVQwVWVHODU0NlpwYUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7llMA0G CSqGSIb3DQEBCwUAA4IBAQBJ5NpK8obrIjueeEny8An1ZLBp5Og6dOFe5QUdCGb4 uRwdU8zPORgRLMfByW9yF2Fhp72pT5N6mupkcO4t6X22ejnZ5YpUpFKiJLtrjE6s uxmhfgl2R265hO9t1YtKE8siE9NtLnDJC/H7F6Hp+dR6Fb6EcJToiFwjhE3DyPoe jwB5uvHMosr6HW9Tz2iXJuRpH+e1mzT+koCBqNhHW1N6hibDabuuUBQLr3S7UQz2 lwYb0V71DudSKt72Ca7QsYMjzVbETpZeXnp9BsblOLVt++jNJmSisbrdmdqTRFYt 5eS2ZSwUBcGUQTi6ikQ+yjnevp5Ivg2QwHvbBDBsL0bK -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:10 2026 by rpki-client