This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/a4QitiFkvHlyADqZPe61hq4QSJo.roa File: a4QitiFkvHlyADqZPe61hq4QSJo.roa (raw, json) Hash identifier: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ= Subject key identifier: 6B:84:22:B6:21:64:BC:79:72:00:3A:99:3D:EE:B5:86:AE:10:48:9A Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5D0185524457DAD752608F1F9B4D47 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/a4QitiFkvHlyADqZPe61hq4QSJo.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211421 IP address blocks: 31.7.64.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:85:52:44:57:da:d7:52:60:8f:1f:9b:4d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b8422b62164bc7972003a993deeb586ae10489a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:75:d9:c0:1e:48:ce:61:e2:8b:a5:0d:c6: 57:c4:09:23:53:5c:dc:29:5f:d2:ca:c7:82:0a:79: 10:1e:fb:18:69:39:57:87:d5:d2:7f:b8:db:e5:c8: d2:dd:84:b5:8e:a9:a4:d1:81:7a:4d:9e:07:ae:5f: 4b:b2:18:45:d2:de:ed:05:e4:14:8e:52:f0:d0:d1: e3:ce:bc:df:40:57:e5:97:de:1a:8f:5a:1b:ad:d8: 5c:33:17:11:cc:f4:ad:f1:20:5e:a3:36:a4:d7:dd: 52:14:1f:35:13:fc:d8:52:9e:97:11:43:dd:65:39: e2:2b:17:c8:b8:08:b9:6a:50:25:27:38:b4:d6:b5: c4:67:4e:89:0a:72:29:4c:89:ad:66:b5:08:60:8d: 93:ad:0c:8b:8e:5b:22:0b:ac:70:17:1b:b8:bc:51: 49:79:38:6b:53:4a:93:a6:6a:5b:d2:b7:04:8e:8e: 46:16:c1:9a:df:f3:f5:d7:d3:ba:b8:47:68:fb:af: 87:ed:f8:a0:c1:8c:4c:63:33:5b:cf:93:cb:cd:c9: 4f:5d:57:bb:09:97:13:be:d6:d2:59:4b:38:8c:a1: 32:58:8f:83:54:92:fc:88:41:f5:22:b9:02:d7:89: 94:dd:cf:5a:94:ef:45:e2:05:06:f0:d8:d5:53:25: 55:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:22:B6:21:64:BC:79:72:00:3A:99:3D:EE:B5:86:AE:10:48:9A X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/a4QitiFkvHlyADqZPe61hq4QSJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.64.0/24 Signature Algorithm: sha256WithRSAEncryption 51:b9:4f:37:51:c8:08:17:58:66:3c:ec:9a:a8:06:d0:52:fc: 14:79:b0:07:4b:4a:97:6a:06:24:7c:40:f1:e2:30:1c:e4:34: 41:07:02:f5:ee:1e:16:bf:af:04:92:38:c4:45:34:a3:e1:5b: 1d:27:b6:51:48:05:23:ab:31:52:6b:8d:1b:53:1c:ac:67:3f: c9:8a:57:61:35:ea:f5:28:88:d3:e4:22:dc:ce:3e:5f:d3:78: 2f:d1:1c:0e:2e:3e:6b:19:1f:cb:74:a8:9f:c5:20:a4:2a:28: 70:ee:20:7f:c6:89:f2:b6:70:e8:75:16:c1:33:b7:9b:88:44: 13:f1:98:98:7e:21:e2:9e:f2:18:1f:dd:36:2f:df:b0:0a:94: 55:35:1d:07:3a:5f:d2:b4:44:fc:bb:d2:25:41:41:da:5d:ee: 8e:6e:8f:77:55:3c:14:22:41:45:08:a2:1b:38:f7:f4:81:b4: 84:d6:93:e6:ae:5a:a9:28:54:20:a7:5b:db:d0:b5:45:09:bb: 45:76:dd:85:8f:fa:eb:27:3d:5b:52:23:50:22:f0:4d:3e:60: b7:f5:3f:20:23:e3:89:02:bb:39:78:5d:81:d5:d0:f2:72:61: 91:23:b4:0f:2a:8e:57:22:39:3f:76:fc:59:70:3f:e7:b8:97: c0:c8:4d:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQGFUkRX2tdSYI8fm01HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yjg0MjJiNjIxNjRiYzc5NzIwMDNhOTkzZGVlYjU4NmFlMTA0ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAx12cAeSM5h4oulDcZXxAkjU1zc KV/SyseCCnkQHvsYaTlXh9XSf7jb5cjS3YS1jqmk0YF6TZ4Hrl9LshhF0t7tBeQU jlLw0NHjzrzfQFfll94aj1obrdhcMxcRzPSt8SBeozak191SFB81E/zYUp6XEUPd ZTniKxfIuAi5alAlJzi01rXEZ06JCnIpTImtZrUIYI2TrQyLjlsiC6xwFxu4vFFJ eThrU0qTpmpb0rcEjo5GFsGa3/P119O6uEdo+6+H7figwYxMYzNbz5PLzclPXVe7 CZcTvtbSWUs4jKEyWI+DVJL8iEH1IrkC14mU3c9alO9F4gUG8NjVUyVVswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGuEIrYhZLx5cgA6mT3utYauEEiaMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvYTRRaXRpRmt2SGx5QURxWlBlNjFocTRRU0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwdAMA0G CSqGSIb3DQEBCwUAA4IBAQBRuU83UcgIF1hmPOyaqAbQUvwUebAHS0qXagYkfEDx 4jAc5DRBBwL17h4Wv68EkjjERTSj4VsdJ7ZRSAUjqzFSa40bUxysZz/JildhNer1 KIjT5CLczj5f03gv0RwOLj5rGR/LdKifxSCkKihw7iB/xonytnDodRbBM7ebiEQT 8ZiYfiHinvIYH902L9+wCpRVNR0HOl/StET8u9IlQUHaXe6Obo93VTwUIkFFCKIb OPf0gbSE1pPmrlqpKFQgp1vb0LVFCbtFdt2Fj/rrJz1bUiNQIvBNPmC39T8gI+OJ Ars5eF2B1dDycmGRI7QPKo5XIjk/dvxZcD/nuJfAyE2g -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:00 2026 by rpki-client