This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa File: Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa (raw, json) Hash identifier: /FxgAbi8I7vPSlBbA8CC8JKUPY+Ke1erbxjqyBpdNek= Subject key identifier: 3E:4D:48:98:E3:55:35:E1:FB:71:78:F8:A6:7E:B3:2A:EF:E8:32:A0 Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86 Certificate serial: 019B7B369D83C8561CFCAB0F790A588688F9 Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197923 IP address blocks: 31.135.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:83:c8:56:1c:fc:ab:0f:79:0a:58:86:88:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e4d4898e35535e1fb7178f8a67eb32aefe832a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:25:56:4a:c7:2d:5c:a3:1f:fe:8e:39:3a:b7: 9c:b0:50:c4:3b:bc:55:14:dc:4b:23:43:46:13:5f: b5:5a:9a:bf:4a:a9:08:cd:a8:8d:b3:a0:e6:9d:42: d9:f6:44:de:3d:b0:5a:93:22:20:11:f1:4f:d1:b2: f0:a4:3c:3e:53:7d:85:6e:4d:db:f9:fb:ff:3d:31: fb:65:fc:d2:1f:6d:03:37:bc:0a:a4:47:60:fd:54: 04:51:43:50:ec:99:68:fc:60:fd:f9:22:b8:fd:b7: 22:e2:e3:82:c9:95:0c:3f:61:1f:f6:c5:8e:63:df: fa:80:2c:06:e0:8e:47:8e:fa:7c:6e:3e:b2:ed:49: 17:b4:b0:da:ba:83:47:6a:dd:25:9d:00:17:f4:6a: 9a:60:df:3e:cf:6d:f9:5a:bf:37:3c:c3:8a:d9:f2: 30:78:0f:c5:81:47:19:84:2d:ce:22:d4:7c:56:32: 3f:bd:2d:64:34:23:72:1f:37:e0:06:07:20:0d:ac: 03:9e:4f:7f:ee:72:82:21:8c:c8:bd:8f:a9:4e:30: d8:5d:f8:82:8b:88:3e:8b:8d:1f:1d:87:37:6d:9c: d8:62:09:9f:f2:8f:c9:d9:b2:df:eb:c7:f1:c4:46: 0c:f6:e5:a4:53:1d:3d:ed:29:d3:84:e1:f5:52:0b: e7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:48:98:E3:55:35:E1:FB:71:78:F8:A6:7E:B3:2A:EF:E8:32:A0 X509v3 Authority Key Identifier: keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/Pk1ImONVNeH7cXj4pn6zKu_oMqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.178.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:75:68:69:15:9e:0f:da:19:09:73:98:8a:71:6a:f7:1c:4c: ce:61:16:2c:a7:d5:16:62:8b:ea:77:b2:63:87:ee:40:b1:78: 93:1f:36:8e:d8:fd:43:2e:f5:6c:1d:89:3c:b6:05:0a:ff:93: 62:3e:96:f2:e7:2d:aa:74:5b:07:e6:45:5a:31:11:8c:7a:2a: 41:c3:48:5c:d8:36:52:63:16:59:f0:f4:fb:79:3f:1a:e8:28: e2:0b:c3:5c:4a:bd:47:cc:18:a0:7b:da:d2:a9:99:6f:1a:1f: 1e:98:fd:f9:aa:e3:84:9b:2c:3c:18:fd:bf:f4:cb:83:53:60: 63:0a:08:82:69:7f:90:51:51:97:53:16:ca:92:82:33:2a:26: 85:be:71:b0:52:48:42:25:d1:07:f0:a3:d5:c5:11:fd:73:54: a5:fe:23:c5:24:a5:40:3e:c4:96:0d:2d:5b:f5:5d:88:db:94: eb:dd:7e:72:8f:bf:be:01:d7:c7:e6:7b:9c:6f:df:e1:54:9e: ef:30:9f:95:bb:67:59:e1:ff:a6:14:88:c1:3b:6a:4c:90:c1: e6:c3:2e:1b:6c:d6:86:df:79:2b:04:a5:24:2c:26:37:9d:e4: 89:9b:7c:b2:1a:5d:5d:7c:4e:a3:3d:e3:6f:05:3d:5e:86:36: 32:7c:c5:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Np2DyFYc/KsPeQpYhoj5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl NWZlODYwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTRkNDg5OGUzNTUzNWUxZmI3MTc4ZjhhNjdlYjMyYWVmZTgzMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yVWSsctXKMf/o45OrecsFDEO7xV FNxLI0NGE1+1Wpq/SqkIzaiNs6DmnULZ9kTePbBakyIgEfFP0bLwpDw+U32Fbk3b +fv/PTH7ZfzSH20DN7wKpEdg/VQEUUNQ7Jlo/GD9+SK4/bci4uOCyZUMP2Ef9sWO Y9/6gCwG4I5Hjvp8bj6y7UkXtLDauoNHat0lnQAX9GqaYN8+z235Wr83PMOK2fIw eA/FgUcZhC3OItR8VjI/vS1kNCNyHzfgBgcgDawDnk9/7nKCIYzIvY+pTjDYXfiC i4g+i40fHYc3bZzYYgmf8o/J2bLf68fxxEYM9uWkUx097SnThOH1UgvnuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5NSJjjVTXh+3F4+KZ+syrv6DKgMB8GA1UdIwQY MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt NmQxYzliMTUzY2YwLzEvUGsxSW1PTlZOZUg3Y1hqNHBuNnpLdV9vTXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4eyMA0G CSqGSIb3DQEBCwUAA4IBAQB+dWhpFZ4P2hkJc5iKcWr3HEzOYRYsp9UWYovqd7Jj h+5AsXiTHzaO2P1DLvVsHYk8tgUK/5NiPpby5y2qdFsH5kVaMRGMeipBw0hc2DZS YxZZ8PT7eT8a6CjiC8NcSr1HzBige9rSqZlvGh8emP35quOEmyw8GP2/9MuDU2Bj CgiCaX+QUVGXUxbKkoIzKiaFvnGwUkhCJdEH8KPVxRH9c1Sl/iPFJKVAPsSWDS1b 9V2I25Tr3X5yj7++AdfH5nucb9/hVJ7vMJ+Vu2dZ4f+mFIjBO2pMkMHmwy4bbNaG 33krBKUkLCY3neSJm3yyGl1dfE6jPeNvBT1ehjYyfMUv -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:20 2026 by rpki-client