This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cYK-uT6bIecHI7P6_g6NVZTfQYo.roa File: cYK-uT6bIecHI7P6_g6NVZTfQYo.roa (raw, json) Hash identifier: o4Bgr3n7FvBubBbBgtDIrD3ZzuCpATKlkb20AtXAn8U= Subject key identifier: 71:82:BE:B9:3E:9B:21:E7:07:23:B3:FA:FE:0E:8D:55:94:DF:41:8A Certificate issuer: /CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Certificate serial: 019B7F13497E2FACCA306C078E1530606517 Authority key identifier: 72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cYK-uT6bIecHI7P6_g6NVZTfQYo.roa Signing time: Fri 02 Jan 2026 14:18:48 +0000 ROA not before: Fri 02 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197618 IP address blocks: 31.29.96.0/19 maxlen: 24 31.29.99.0/24 maxlen: 24 31.29.110.0/24 maxlen: 24 31.29.111.0/24 maxlen: 24 31.29.113.0/24 maxlen: 24 31.29.115.0/24 maxlen: 24 31.29.116.0/23 maxlen: 23 31.29.120.0/24 maxlen: 24 31.29.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.mft rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:49:7e:2f:ac:ca:30:6c:07:8e:15:30:60:65:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72633388a7a5cfe9a7ca19fd74c922dcb12569d3 Validity Not Before: Jan 2 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7182beb93e9b21e70723b3fafe0e8d5594df418a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:e2:04:e1:a4:d0:21:45:1e:dc:ab:7a:87: 03:e1:3d:d0:52:19:12:17:cc:6e:d8:31:f6:09:9f: bc:e2:14:75:5a:cf:40:d0:9d:71:1c:b0:3d:16:e5: c1:4b:c4:e9:b2:70:10:36:f6:c6:86:45:6e:fb:f1: e5:5f:ce:7b:4b:1a:22:f3:4b:3f:a2:bb:32:9e:5c: 66:e8:54:d1:5b:8b:a2:b6:24:ab:2a:90:ed:2f:db: ac:1c:e4:ee:7e:c9:58:9a:b2:7c:fe:5f:4e:bf:c1: f6:3d:b3:1f:ec:a2:c6:fc:d0:04:fa:9f:f4:10:32: 72:49:ed:ef:0f:dc:4d:8f:b2:e2:7f:9f:47:a6:e5: 39:17:06:1d:de:03:c0:0d:a9:e6:87:0f:e6:e1:10: 65:3b:64:15:87:02:02:fc:2c:f0:1a:8a:0e:a5:cc: 6b:22:74:3c:f5:2d:4d:68:82:00:43:26:b3:2a:60: 60:b4:41:43:9c:e8:cd:ee:a4:f6:a1:71:e8:81:69: a6:d7:5a:11:9e:1c:0b:6c:c2:c5:53:7a:40:ba:c6: f8:b0:c8:79:5c:2f:01:42:89:5c:46:24:c6:ec:b5: 19:77:85:db:7a:28:6c:76:c1:d8:6c:df:f7:b9:bd: 8f:83:29:73:5b:02:a5:9e:67:ef:91:f8:91:09:fa: 29:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:82:BE:B9:3E:9B:21:E7:07:23:B3:FA:FE:0E:8D:55:94:DF:41:8A X509v3 Authority Key Identifier: keyid:72:63:33:88:A7:A5:CF:E9:A7:CA:19:FD:74:C9:22:DC:B1:25:69:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmMziKelz-mnyhn9dMki3LEladM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cYK-uT6bIecHI7P6_g6NVZTfQYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8233f2-d3c0-4501-a9c7-138c8417ae93/1/cmMziKelz-mnyhn9dMki3LEladM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.29.96.0/19 Signature Algorithm: sha256WithRSAEncryption 5b:55:25:89:92:84:69:c6:dc:a0:93:77:4c:e3:7f:4e:5f:3b: 70:a9:c9:ec:48:63:87:ef:ee:66:1d:1b:bf:62:63:46:a9:2a: b8:9b:fc:f0:aa:69:51:da:9a:57:4d:24:ca:81:16:e6:1c:75: 32:61:74:9e:3d:3c:ab:de:89:5e:dc:60:ce:eb:39:a3:92:4f: b6:ea:e7:64:ec:f6:6b:c8:19:ed:68:27:6d:24:4e:55:cd:d7: b0:16:a6:b7:26:5f:a2:45:f7:5d:82:1f:95:3c:3e:e9:ce:c7: a5:6b:12:88:b2:6c:ef:76:4d:9c:8b:57:b8:8a:8a:88:ad:f1: 67:45:ac:f1:34:89:4c:de:98:16:8e:bc:70:87:3f:98:6a:2e: fc:8d:63:cf:fc:cd:22:f4:52:95:fd:53:91:34:e8:5b:a0:7c: 4c:c6:21:de:0f:b4:39:71:0b:16:af:7f:fc:09:63:2e:dd:e2: cd:5d:76:dd:34:c0:13:72:3d:d5:d0:1d:1a:c7:c4:52:cb:ea: 6c:b7:21:e5:ae:21:bb:93:84:6d:25:98:bc:55:d4:ff:ff:47: 67:cc:77:cb:da:b8:31:11:c9:71:4f:a3:c1:83:1a:c3:8a:f1: 48:0d:fc:e5:c3:b8:99:26:b3:2b:e7:3d:74:1b:b6:dc:bb:59: c5:a9:07:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E0l+L6zKMGwHjhUwYGUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNjMzMzg4YTdhNWNmZTlhN2NhMTlmZDc0YzkyMmRjYjEy NTY5ZDMwHhcNMjYwMTAyMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTgyYmViOTNlOWIyMWU3MDcyM2IzZmFmZTBlOGQ1NTk0ZGY0MThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9XiBOGk0CFFHtyreocD4T3QUhkS F8xu2DH2CZ+84hR1Ws9A0J1xHLA9FuXBS8TpsnAQNvbGhkVu+/HlX857Sxoi80s/ orsynlxm6FTRW4uitiSrKpDtL9usHOTufslYmrJ8/l9Ov8H2PbMf7KLG/NAE+p/0 EDJySe3vD9xNj7Lif59HpuU5FwYd3gPADanmhw/m4RBlO2QVhwIC/CzwGooOpcxr InQ89S1NaIIAQyazKmBgtEFDnOjN7qT2oXHogWmm11oRnhwLbMLFU3pAusb4sMh5 XC8BQolcRiTG7LUZd4XbeihsdsHYbN/3ub2PgylzWwKlnmfvkfiRCfopTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGCvrk+myHnByOz+v4OjVWU30GKMB8GA1UdIwQY MBaAFHJjM4inpc/pp8oZ/XTJItyxJWnTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5Yzct MTM4Yzg0MTdhZTkzLzEvY1lLLXVUNmJJZWNISTdQNl9nNk5WWlRmUVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84MjMzZjItZDNjMC00NTAxLWE5YzctMTM4Yzg0MTdhZTkz LzEvY21NemlLZWx6LW1ueWhuOWRNa2kzTEVsYWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFHx1gMA0G CSqGSIb3DQEBCwUAA4IBAQBbVSWJkoRpxtygk3dM439OXztwqcnsSGOH7+5mHRu/ YmNGqSq4m/zwqmlR2ppXTSTKgRbmHHUyYXSePTyr3ole3GDO6zmjkk+26udk7PZr yBntaCdtJE5VzdewFqa3Jl+iRfddgh+VPD7pzselaxKIsmzvdk2ci1e4ioqIrfFn RazxNIlM3pgWjrxwhz+Yai78jWPP/M0i9FKV/VORNOhboHxMxiHeD7Q5cQsWr3/8 CWMu3eLNXXbdNMATcj3V0B0ax8RSy+pstyHlriG7k4RtJZi8VdT//0dnzHfL2rgx EclxT6PBgxrDivFIDfzlw7iZJrMr5z10G7bcu1nFqQcC -----END CERTIFICATE-----Generated at Mon Jan 26 06:27:51 2026 by rpki-client