This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/1vfMjfU98JihI7cjsY_m-KdH6Bg.roa File: 1vfMjfU98JihI7cjsY_m-KdH6Bg.roa (raw, json) Hash identifier: r6p7VmyXM59qCU+W+xocByqtZYFZ5wLxY8dauK3wq7Q= Subject key identifier: D6:F7:CC:8D:F5:3D:F0:98:A1:23:B7:23:B1:8F:E6:F8:A7:47:E8:18 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B16CA36B8BE99FC919994C4989958617B Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/1vfMjfU98JihI7cjsY_m-KdH6Bg.roa Signing time: Sat 13 Dec 2025 08:18:29 +0000 ROA not before: Sat 13 Dec 2025 08:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212219 IP address blocks: 46.31.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:ca:36:b8:be:99:fc:91:99:94:c4:98:99:58:61:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 13 08:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d6f7cc8df53df098a123b723b18fe6f8a747e818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:35:30:fc:31:b2:78:2f:bc:d4:29:83:a8:41: 12:3b:1f:95:d4:0c:4c:4c:1b:95:73:cd:65:6f:c0: 15:d5:9d:39:61:a6:89:ca:fe:8f:13:c0:34:90:0a: c2:71:b5:ed:1f:ac:c5:44:8f:c8:69:5d:66:cb:9d: 80:47:86:d5:55:7e:30:4b:f9:95:36:27:e5:1d:75: 64:99:5b:57:4e:67:97:1a:d2:62:d3:e4:43:55:4f: 33:23:bf:6f:3c:a0:ba:50:78:3a:c3:b1:c3:00:e6: ea:1f:8d:ff:b9:22:bc:6e:b0:7f:13:7a:c9:73:0d: c4:79:51:76:50:c7:93:97:0f:18:88:40:d8:3c:90: 74:0f:8e:1e:9b:dc:38:09:7c:35:21:8a:f5:2b:eb: e0:c8:f9:88:ee:3f:7e:1e:e1:01:37:9e:dd:0e:29: e4:ca:52:1a:f3:d0:51:fa:2e:81:e5:59:45:f3:ae: 28:b1:0c:2c:c9:ae:f8:cc:b2:ec:7b:a9:3b:c2:15: 0b:ae:6b:2f:90:40:c4:6e:53:26:14:04:15:40:74: d5:05:9b:83:82:b1:0f:0b:08:eb:69:c2:e2:37:f9: fc:a3:a6:07:b9:04:6c:9f:d0:61:38:98:65:71:4a: 18:fe:3e:02:c0:e0:8e:a7:9d:0c:99:29:60:92:66: 1b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F7:CC:8D:F5:3D:F0:98:A1:23:B7:23:B1:8F:E6:F8:A7:47:E8:18 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/1vfMjfU98JihI7cjsY_m-KdH6Bg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.77.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f8:81:8d:39:b8:8f:57:43:11:d5:08:80:72:90:33:84:bf: bf:95:7a:aa:0d:f9:29:83:39:cd:6e:a9:b2:27:0c:5e:d9:2f: 64:ed:76:cb:c6:8a:8b:de:06:58:8d:3d:3b:46:0e:3c:29:fe: 35:85:33:99:b9:5b:60:14:0b:11:f5:b0:98:fc:44:70:cf:fe: a5:22:4a:70:5b:71:b9:76:cd:b1:ad:b7:bd:3f:40:b5:71:0d: 84:dd:b4:41:2e:ec:bf:2a:3a:de:12:7b:52:03:6d:c4:07:b2: d8:2a:45:0c:3b:56:82:c9:52:76:ff:a4:e4:dd:ce:c2:66:20: da:d7:0c:35:74:7f:83:6e:a6:2c:ef:4c:76:b4:37:52:6e:23: 1f:23:4c:68:00:02:2e:29:80:58:37:c9:5f:14:0c:ea:46:40: c1:44:ce:ad:8a:c6:71:cd:44:a5:2f:44:b0:18:c6:b6:ff:e0: 0e:46:3e:af:06:07:76:8f:5e:3a:7f:ec:5b:de:74:2b:13:7c: 81:d8:86:21:4c:17:74:2e:f1:b6:65:5f:c5:40:98:30:73:c6: b3:65:1b:26:42:a2:15:bf:16:ce:33:af:98:4c:9d:3c:3f:9f: 21:5a:5e:05:a4:e7:30:1b:26:b8:34:41:40:b3:ae:65:39:ca: 8f:87:b0:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWyja4vpn8kZmUxJiZWGF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjEzMDgxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmY3Y2M4ZGY1M2RmMDk4YTEyM2I3MjNiMThmZTZmOGE3NDdlODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TUw/DGyeC+81CmDqEESOx+V1AxM TBuVc81lb8AV1Z05YaaJyv6PE8A0kArCcbXtH6zFRI/IaV1my52AR4bVVX4wS/mV NiflHXVkmVtXTmeXGtJi0+RDVU8zI79vPKC6UHg6w7HDAObqH43/uSK8brB/E3rJ cw3EeVF2UMeTlw8YiEDYPJB0D44em9w4CXw1IYr1K+vgyPmI7j9+HuEBN57dDink ylIa89BR+i6B5VlF864osQwsya74zLLse6k7whULrmsvkEDEblMmFAQVQHTVBZuD grEPCwjracLiN/n8o6YHuQRsn9BhOJhlcUoY/j4CwOCOp50MmSlgkmYbiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNb3zI31PfCYoSO3I7GP5vinR+gYMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvMXZmTWpmVTk4SmloSTdjanNZX20tS2RINkJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh9NMA0G CSqGSIb3DQEBCwUAA4IBAQAs+IGNObiPV0MR1QiAcpAzhL+/lXqqDfkpgznNbqmy Jwxe2S9k7XbLxoqL3gZYjT07Rg48Kf41hTOZuVtgFAsR9bCY/ERwz/6lIkpwW3G5 ds2xrbe9P0C1cQ2E3bRBLuy/KjreEntSA23EB7LYKkUMO1aCyVJ2/6Tk3c7CZiDa 1ww1dH+DbqYs70x2tDdSbiMfI0xoAAIuKYBYN8lfFAzqRkDBRM6tisZxzUSlL0Sw GMa2/+AORj6vBgd2j146f+xb3nQrE3yB2IYhTBd0LvG2ZV/FQJgwc8azZRsmQqIV vxbOM6+YTJ08P58hWl4FpOcwGya4NEFAs65lOcqPh7AY -----END CERTIFICATE-----Generated at Wed Dec 17 01:13:56 2025 by rpki-client