This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/41j2vH6Y8r_zftlCfGgxMSpxCQU.roa File: 41j2vH6Y8r_zftlCfGgxMSpxCQU.roa (raw, json) Hash identifier: c1FXYY4xWUsx+H6TQLBUgA+LccYzjYS0aQe/VN+5ehM= Subject key identifier: E3:58:F6:BC:7E:98:F2:BF:F3:7E:D9:42:7C:68:31:31:2A:71:09:05 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019B164575FF2A37A597383E12DDF013B17C Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/41j2vH6Y8r_zftlCfGgxMSpxCQU.roa Signing time: Sat 13 Dec 2025 05:53:29 +0000 ROA not before: Sat 13 Dec 2025 05:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207459 IP address blocks: 46.31.76.0/24 maxlen: 24 46.31.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:45:75:ff:2a:37:a5:97:38:3e:12:dd:f0:13:b1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 13 05:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e358f6bc7e98f2bff37ed9427c6831312a710905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:b3:97:87:cc:76:2d:27:1d:14:7c:f3:38: 60:37:7d:e5:08:e9:1c:2c:ee:33:62:b3:81:3d:d0: 90:39:11:6a:c4:27:43:25:ec:3e:06:cc:38:40:66: 30:8d:47:95:8b:65:42:5c:a1:86:df:15:b5:e5:63: 4c:43:0d:39:c1:18:5d:12:aa:e5:76:61:65:ef:b3: a4:2d:8c:34:34:55:54:42:dc:16:93:ce:0e:6e:c1: 27:db:2a:97:93:7a:fd:51:2b:46:83:8a:27:58:a5: 75:d3:7e:b2:be:d1:f2:42:ae:b3:b8:98:f0:cd:25: 0b:80:57:ec:a1:96:5b:83:28:82:87:b0:e9:87:20: 7b:e1:66:0a:84:b4:ab:95:9a:a2:ff:b5:77:08:70: 8c:19:95:8a:ac:f3:0b:b1:0d:14:2c:25:2c:78:2d: a4:ac:dd:93:2e:c8:d0:f9:b6:f4:82:63:d8:ce:5d: 8c:86:c2:af:de:c4:0a:08:4e:a6:25:a4:68:fb:ad: 48:ba:50:e5:80:c2:36:fa:6a:dd:93:3b:98:44:29: d9:54:85:64:76:02:9b:9b:4f:80:cc:80:67:65:a6: 24:2f:3d:bb:d7:b2:72:b5:14:11:62:84:79:47:73: 36:97:19:78:28:55:c5:8e:28:83:9a:97:7c:8a:12: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:58:F6:BC:7E:98:F2:BF:F3:7E:D9:42:7C:68:31:31:2A:71:09:05 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/41j2vH6Y8r_zftlCfGgxMSpxCQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.76.0/24 46.31.79.0/24 Signature Algorithm: sha256WithRSAEncryption c3:7a:b7:55:ce:70:49:57:e8:74:6b:46:6b:d2:f1:0f:d7:2e: 1d:6f:63:41:94:ef:13:9b:66:08:17:62:16:8d:3a:27:43:ec: 9b:8d:c0:ec:0b:57:47:ed:3f:19:b2:39:5b:92:fb:82:52:ef: 4c:96:40:3d:38:0f:8a:cf:21:92:5d:95:f5:d6:13:b8:98:48: c1:c3:11:d7:88:b6:3f:03:61:26:19:f9:52:d0:ae:b1:33:9e: 60:c6:4d:6c:41:56:e1:bf:ee:9b:85:0a:c0:c1:b3:76:20:ce: ca:99:89:81:46:9b:63:7f:6e:08:38:0d:57:f8:7e:6d:d1:a4: 14:e6:eb:a2:df:7e:09:31:b0:d5:a8:67:60:46:7d:27:65:e7: cf:53:5a:74:56:6d:aa:b6:a8:9b:cd:8b:64:56:64:ec:e2:19: d5:86:e4:38:1c:29:90:3c:27:a0:d4:3d:9c:20:4c:61:70:5a: 9e:92:7d:66:60:c9:af:8e:e8:e0:9b:3b:9d:17:7a:26:9b:e0: 84:f5:3b:17:2a:49:f5:c9:9e:da:cb:7b:44:d4:da:5b:4d:1a: f7:ec:b8:d8:37:ff:12:1e:e1:cd:50:f3:c7:b7:18:be:69:8c: de:f2:4e:ab:08:c6:18:59:4d:ec:0a:f4:a9:35:7c:17:78:72: fc:01:19:fa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsWRXX/Kjellzg+Et3wE7F8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjEzMDU1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzU4ZjZiYzdlOThmMmJmZjM3ZWQ5NDI3YzY4MzEzMTJhNzEwOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq2zl4fMdi0nHRR88zhgN33lCOkc LO4zYrOBPdCQORFqxCdDJew+Bsw4QGYwjUeVi2VCXKGG3xW15WNMQw05wRhdEqrl dmFl77OkLYw0NFVUQtwWk84ObsEn2yqXk3r9UStGg4onWKV1036yvtHyQq6zuJjw zSULgFfsoZZbgyiCh7DphyB74WYKhLSrlZqi/7V3CHCMGZWKrPMLsQ0ULCUseC2k rN2TLsjQ+bb0gmPYzl2MhsKv3sQKCE6mJaRo+61IulDlgMI2+mrdkzuYRCnZVIVk dgKbm0+AzIBnZaYkLz2717JytRQRYoR5R3M2lxl4KFXFjiiDmpd8ihLrvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFONY9rx+mPK/837ZQnxoMTEqcQkFMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvNDFqMnZINlk4cl96ZnRsQ2ZHZ3hNU3B4Q1FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALh9MAwQA Lh9PMA0GCSqGSIb3DQEBCwUAA4IBAQDDerdVznBJV+h0a0Zr0vEP1y4db2NBlO8T m2YIF2IWjTonQ+ybjcDsC1dH7T8ZsjlbkvuCUu9MlkA9OA+KzyGSXZX11hO4mEjB wxHXiLY/A2EmGflS0K6xM55gxk1sQVbhv+6bhQrAwbN2IM7KmYmBRptjf24IOA1X +H5t0aQU5uui334JMbDVqGdgRn0nZefPU1p0Vm2qtqibzYtkVmTs4hnVhuQ4HCmQ PCeg1D2cIExhcFqekn1mYMmvjujgmzudF3omm+CE9TsXKkn1yZ7ay3tE1NpbTRr3 7LjYN/8SHuHNUPPHtxi+aYze8k6rCMYYWU3sCvSpNXwXeHL8ARn6 -----END CERTIFICATE-----Generated at Wed Dec 17 19:51:16 2025 by rpki-client