This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/IDpslbcDriUFsYX-TmbeGovsaLQ.roa File: IDpslbcDriUFsYX-TmbeGovsaLQ.roa (raw, json) Hash identifier: cPSmDVUEQwcs3c3RUxKiz7Kiswc6P29foMyjSSIWLdE= Subject key identifier: 20:3A:6C:95:B7:03:AE:25:05:B1:85:FE:4E:66:DE:1A:8B:EC:68:B4 Certificate issuer: /CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Certificate serial: 019B7A5AA881E6589F96059EA581DC8984F0 Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/IDpslbcDriUFsYX-TmbeGovsaLQ.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34929 IP address blocks: 31.7.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.mft rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a8:81:e6:58:9f:96:05:9e:a5:81:dc:89:84:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7 Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=203a6c95b703ae2505b185fe4e66de1a8bec68b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bf:a2:43:64:51:05:4a:4d:f5:e8:0a:f9:7b: 80:48:a9:45:1e:fc:39:f2:5c:cd:39:89:69:46:66: 70:e7:a5:85:13:b9:e3:ab:63:d4:ae:d7:2c:de:15: c0:98:49:90:86:5e:90:ec:7c:2c:79:d3:81:74:f6: 45:ef:6c:0f:e0:c9:1a:c6:6a:01:1d:20:91:76:4b: d7:10:a4:ae:a7:e4:84:94:ce:39:a9:0a:83:b8:e2: ff:c8:50:b7:7c:4e:3c:65:99:70:eb:2a:c8:01:dd: b6:09:0d:f0:4d:ca:6f:ab:41:a8:5f:8e:19:97:63: 60:e8:32:33:d4:f0:c7:18:d2:37:bc:f4:68:a9:48: 17:a4:84:d9:80:41:92:41:e7:8a:95:36:50:b2:97: 7f:e9:eb:f6:bd:c4:64:5c:dd:38:9d:7c:48:06:f0: 44:02:1f:58:1b:52:45:fa:3d:48:f6:c1:5e:85:7b: 03:41:65:d3:a6:8e:f3:59:52:ad:89:c8:47:d7:13: a9:5e:f6:bb:db:80:e7:05:7b:1a:2c:b1:61:49:6d: 99:13:67:98:2f:f6:17:6d:71:5f:61:27:32:28:b3: df:a3:14:39:b1:c1:04:84:1d:14:20:6c:86:2e:71: 0c:53:57:4c:48:c9:02:e6:53:65:9c:bc:b8:0b:5a: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3A:6C:95:B7:03:AE:25:05:B1:85:FE:4E:66:DE:1A:8B:EC:68:B4 X509v3 Authority Key Identifier: keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/IDpslbcDriUFsYX-TmbeGovsaLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.83.0/24 Signature Algorithm: sha256WithRSAEncryption 56:21:a9:07:fa:e0:80:d1:27:2f:91:fb:b5:1f:0d:fa:39:1a: 07:f8:30:99:30:ee:72:73:75:6f:c2:00:ca:ca:87:be:d7:ed: 97:81:57:b7:6f:b3:9a:51:be:0f:e2:49:34:3a:d3:e2:b2:32: a2:4a:b6:3c:d5:97:42:2c:30:85:aa:cd:2a:7c:d9:02:45:dd: ef:49:9d:b2:27:c2:74:0d:e6:4d:c7:7c:a1:2a:15:a6:4a:57: ca:0b:83:4d:22:31:ba:31:47:30:d5:35:0b:db:8e:2a:8e:81: 7f:c9:7d:c7:b5:fc:fe:a1:6b:4d:88:16:f0:b9:be:61:8c:bc: dc:2e:36:c1:00:4a:71:3f:2b:89:ef:e3:bd:c2:0d:65:fa:2a: 59:f3:a6:f7:00:47:0b:e6:89:9f:4d:7e:50:29:0f:44:1a:24: 84:fd:11:df:5f:31:63:4d:de:1c:e8:97:f0:f8:54:59:19:37: 52:34:45:f4:34:33:e7:92:ce:3b:d5:be:64:30:88:84:77:b8: ac:3c:20:6f:56:c6:84:15:ac:49:3d:2d:7d:f4:b0:f8:3d:fe: 95:94:33:17:ed:12:59:d4:95:f2:91:4a:34:23:b4:c4:25:20: b5:dc:11:67:b3:07:eb:8b:17:35:8a:75:69:cd:d7:e1:97:bf: 57:29:65:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqiB5liflgWepYHciYTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYmJkNGY4NjVhMTJkNzlhMDlhMDM0NDg2Y2U2MWJhMDIz ODgyYzcwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDNhNmM5NWI3MDNhZTI1MDViMTg1ZmU0ZTY2ZGUxYThiZWM2OGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb+iQ2RRBUpN9egK+XuASKlFHvw5 8lzNOYlpRmZw56WFE7njq2PUrtcs3hXAmEmQhl6Q7HwsedOBdPZF72wP4MkaxmoB HSCRdkvXEKSup+SElM45qQqDuOL/yFC3fE48ZZlw6yrIAd22CQ3wTcpvq0GoX44Z l2Ng6DIz1PDHGNI3vPRoqUgXpITZgEGSQeeKlTZQspd/6ev2vcRkXN04nXxIBvBE Ah9YG1JF+j1I9sFehXsDQWXTpo7zWVKtichH1xOpXva724DnBXsaLLFhSW2ZE2eY L/YXbXFfYScyKLPfoxQ5scEEhB0UIGyGLnEMU1dMSMkC5lNlnLy4C1oRvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCA6bJW3A64lBbGF/k5m3hqL7Gi0MB8GA1UdIwQY MBaAFAK71PhloS15oJoDRIbOYboCOILHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUt MGE5ODA0OGNkZjcyLzEvSURwc2xiY0RyaVVGc1lYLVRtYmVHb3ZzYUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9jYjgzYjItMzNiNS00NTYwLTg5MzUtMGE5ODA0OGNkZjcy LzEvQXJ2VS1HV2hMWG1nbWdORWhzNWh1Z0k0Z3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwdTMA0G CSqGSIb3DQEBCwUAA4IBAQBWIakH+uCA0Scvkfu1Hw36ORoH+DCZMO5yc3VvwgDK yoe+1+2XgVe3b7OaUb4P4kk0OtPisjKiSrY81ZdCLDCFqs0qfNkCRd3vSZ2yJ8J0 DeZNx3yhKhWmSlfKC4NNIjG6MUcw1TUL244qjoF/yX3Htfz+oWtNiBbwub5hjLzc LjbBAEpxPyuJ7+O9wg1l+ipZ86b3AEcL5omfTX5QKQ9EGiSE/RHfXzFjTd4c6Jfw +FRZGTdSNEX0NDPnks471b5kMIiEd7isPCBvVsaEFaxJPS199LD4Pf6VlDMX7RJZ 1JXykUo0I7TEJSC13BFnswfrixc1inVpzdfhl79XKWXX -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:56 2026 by rpki-client