This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1-5hlvMiawPJhDesGa1hua0Z8BCA.roa File: 1-5hlvMiawPJhDesGa1hua0Z8BCA.roa (raw, json) Hash identifier: BfnuRMvzsKjw1r6Bbn0LN0nj8+jvf67Ex6NtuxitDqQ= Subject key identifier: FB:98:65:BC:C8:9A:C0:F2:61:0D:EB:06:6B:58:6E:6B:46:7C:04:20 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D1F8FB922544FD69B442725FB7270 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1-5hlvMiawPJhDesGa1hua0Z8BCA.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51120 IP address blocks: 31.46.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1f:8f:b9:22:54:4f:d6:9b:44:27:25:fb:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb9865bcc89ac0f2610deb066b586e6b467c0420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:e8:a0:2b:b1:88:f7:36:a5:93:27:44:30: 99:a4:73:63:6f:19:d7:64:21:2f:3f:58:05:99:c4: be:ff:ce:f3:00:37:6e:b9:4b:f5:47:e5:13:62:ed: 9c:91:a8:26:ea:70:a6:e7:51:cb:29:16:99:48:15: 09:f9:cc:b7:41:0b:92:4a:b0:c3:19:c5:fd:a2:65: 94:ec:fc:ee:8b:82:5e:de:54:9b:48:d0:5d:e3:72: ca:09:f1:95:df:db:bd:3a:d1:ac:08:90:36:67:7d: d5:01:b9:70:9e:59:f4:7b:07:e5:bf:d7:f9:39:c2: 4f:96:05:93:56:cf:45:a0:19:96:fa:1b:1e:53:74: 1d:bc:db:71:bc:75:bd:d8:9c:0c:91:a8:50:67:91: a0:52:54:7d:8a:cb:58:a8:6e:fb:6e:66:c3:d3:36: 23:3e:36:67:35:76:42:da:bc:a2:73:a6:fa:83:d3: a4:9b:de:e2:08:40:00:95:8f:03:be:84:78:ff:a5: 82:19:a4:84:06:b2:fe:c3:6f:e7:75:60:74:90:38: b7:39:77:ff:76:74:3a:74:8c:32:a9:68:17:cf:fe: 05:5c:fa:4d:ac:3a:2a:de:d6:a1:74:ad:ed:f4:73: 3a:7d:bc:6e:8f:cf:f9:80:00:52:17:f4:d3:8e:92: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:65:BC:C8:9A:C0:F2:61:0D:EB:06:6B:58:6E:6B:46:7C:04:20 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/1-5hlvMiawPJhDesGa1hua0Z8BCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.46.23.0/24 Signature Algorithm: sha256WithRSAEncryption 85:67:fd:6e:21:d5:76:85:6c:51:ad:bb:73:37:9c:19:07:41: fc:5f:96:17:d3:07:5f:76:e6:87:8e:ba:eb:96:30:cf:5b:49: f9:7e:d6:db:21:2e:69:a6:b0:08:dc:d0:b8:7e:30:f1:6f:8e: 81:b5:4f:33:1e:f2:f6:c2:da:b2:74:86:1b:77:08:5e:f8:42: 16:86:55:a0:24:73:eb:fa:ff:aa:4c:03:78:a8:d8:9e:ec:80: 6d:85:76:45:32:5b:b1:1d:fa:85:73:3d:4e:6f:9b:18:9f:b8: 1a:27:21:d9:5d:27:fd:dd:8a:01:f6:b1:1f:40:f3:37:d0:ea: 22:b2:d4:46:2d:5e:ec:92:05:ee:28:fc:07:ae:06:68:7e:30: aa:d2:47:1b:3f:10:81:c2:c0:84:98:9f:78:3d:78:5f:84:27: 68:e0:d4:75:a8:6a:f7:bd:ca:fe:d3:2c:91:e1:86:87:e7:df: e4:f3:1a:12:82:3f:69:2c:75:df:07:67:17:20:21:cd:f4:1b: 7e:e3:51:a0:4a:74:e2:68:69:a7:33:ae:e7:25:7f:9c:8f:e0: 1e:e4:fd:28:1f:a9:be:42:bb:1d:22:cd:2a:32:70:9d:72:c4: c8:d0:12:56:7e:77:8b:0d:d3:39:91:8d:aa:01:c7:55:5f:55: 0f:10:67:9c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XR+PuSJUT9abRCcl+3JwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjk4NjViY2M4OWFjMGYyNjEwZGViMDY2YjU4NmU2YjQ2N2MwNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKLooCuxiPc2pZMnRDCZpHNjbxnX ZCEvP1gFmcS+/87zADduuUv1R+UTYu2ckagm6nCm51HLKRaZSBUJ+cy3QQuSSrDD GcX9omWU7Pzui4Je3lSbSNBd43LKCfGV39u9OtGsCJA2Z33VAblwnln0ewflv9f5 OcJPlgWTVs9FoBmW+hseU3QdvNtxvHW92JwMkahQZ5GgUlR9istYqG77bmbD0zYj PjZnNXZC2ryic6b6g9Okm97iCEAAlY8DvoR4/6WCGaSEBrL+w2/ndWB0kDi3OXf/ dnQ6dIwyqWgXz/4FXPpNrDoq3tahdK3t9HM6fbxuj8/5gABSF/TTjpLWjwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPuYZbzImsDyYQ3rBmtYbmtGfAQgMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvMS01aGx2TWlhd1BKaERlc0dhMWh1YTBaOEJDQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGQvZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMw Mi8xLzhDMnNZRjlHV1hHTUNoWGg5ekxMMVBTS3Jucy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAB8uFzAN BgkqhkiG9w0BAQsFAAOCAQEAhWf9biHVdoVsUa27czecGQdB/F+WF9MHX3bmh466 65Ywz1tJ+X7W2yEuaaawCNzQuH4w8W+OgbVPMx7y9sLasnSGG3cIXvhCFoZVoCRz 6/r/qkwDeKjYnuyAbYV2RTJbsR36hXM9Tm+bGJ+4Gich2V0n/d2KAfaxH0DzN9Dq IrLURi1e7JIF7ij8B64GaH4wqtJHGz8QgcLAhJifeD14X4QnaODUdahq973K/tMs keGGh+ff5PMaEoI/aSx13wdnFyAhzfQbfuNRoEp04mhppzOu5yV/nI/gHuT9KB+p vkK7HSLNKjJwnXLEyNASVn53iw3TOZGNqgHHVV9VDxBnnA== -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:11 2026 by rpki-client