This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7TDWyr5P0SFkG_1wE_zPclx-LJY.roa File: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (raw, json) Hash identifier: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E= Subject key identifier: ED:30:D6:CA:BE:4F:D1:21:64:1B:FD:70:13:FC:CF:72:5C:7E:2C:96 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F8243120A7B1BE57F713E97E4A96F15 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7TDWyr5P0SFkG_1wE_zPclx-LJY.roa Signing time: Fri 02 Jan 2026 16:20:01 +0000 ROA not before: Fri 02 Jan 2026 16:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2639 IP address blocks: 31.186.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:43:12:0a:7b:1b:e5:7f:71:3e:97:e4:a9:6f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed30d6cabe4fd121641bfd7013fccf725c7e2c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:33:10:49:5e:7a:40:d7:4a:0f:20:1c:7f: 4a:c4:45:b2:05:36:cd:b0:23:e4:01:c5:7d:0c:52: 25:ba:ad:47:de:be:ae:6b:c5:59:83:1c:b4:b5:ee: 4c:b6:68:bf:b7:8c:7b:4e:57:48:c4:20:05:bf:30: 56:c8:6e:02:a5:57:ef:0e:f4:1d:ab:a5:1d:61:59: 7c:ca:5f:32:dc:f5:81:01:04:4f:ad:83:15:e2:c6: aa:5d:3e:2c:b8:a1:e0:f2:bf:c2:88:cb:b0:84:74: 18:ef:ff:62:89:36:d2:15:58:84:77:02:2c:30:fd: bd:f3:23:2e:30:82:38:21:f6:b7:5a:fd:ce:c1:52: 5f:e0:38:71:6b:33:08:98:e3:9f:65:71:a4:a2:a1: 0a:f2:90:22:6f:e4:1d:31:0d:48:53:c1:9c:82:11: 9c:79:a9:b2:ad:bc:f0:80:ce:94:42:62:92:4e:c2: 0a:ea:82:43:e5:6b:93:ae:49:46:12:e6:04:73:90: b6:d4:07:72:04:e2:d3:49:9d:49:96:d1:bc:75:51: 5d:5a:65:62:4b:b2:ce:e3:b8:73:84:10:1e:f4:45: 3d:cc:2c:29:31:96:12:04:73:f7:3b:83:78:b4:89: e7:db:95:d9:17:01:0e:39:4a:72:aa:c0:18:49:24: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:30:D6:CA:BE:4F:D1:21:64:1B:FD:70:13:FC:CF:72:5C:7E:2C:96 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/7TDWyr5P0SFkG_1wE_zPclx-LJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.243.0/24 Signature Algorithm: sha256WithRSAEncryption a0:17:d9:4d:b3:b2:e1:55:2e:88:d6:ed:73:69:4c:21:53:2d: 38:42:fb:33:da:f9:70:fc:8f:f4:a2:07:0c:3e:68:66:01:90: 78:5f:33:e5:e0:ef:53:1f:98:7e:b3:d6:6f:3b:26:52:2f:16: 06:9b:69:ca:1b:10:f6:5d:99:5f:47:97:69:ad:dc:a6:b5:1a: 0a:39:af:4e:ec:34:20:c9:69:22:2a:14:30:c0:5d:76:da:74: 02:44:2a:b2:d2:b7:2f:6b:f1:79:4d:01:3e:81:07:ea:b0:e2: 00:65:4c:5d:00:64:98:7a:10:9a:ab:5e:15:22:5a:60:09:b8: de:fd:14:b0:b3:9e:b7:0b:f3:50:8b:42:9a:97:dd:ac:d7:6f: 30:95:e3:4e:99:db:30:5b:5f:f2:04:23:09:1c:f7:71:ed:f7: 34:8b:c8:29:2c:dd:56:24:b2:a1:57:e3:42:67:3b:72:6a:ae: 9b:5a:5f:94:88:26:41:4d:34:aa:e1:d9:b7:d0:3d:89:05:b5: 25:79:23:76:f4:8b:21:50:1f:1a:b4:c9:42:9d:f4:d6:40:fb: 98:ea:92:43:9e:77:de:61:66:d5:d7:6c:ab:cd:a7:88:1b:48: 37:27:01:58:85:60:f7:9c:e6:77:ea:92:67:a3:e0:e8:fc:8c: 80:b7:1b:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkMSCnsb5X9xPpfkqW8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDMwZDZjYWJlNGZkMTIxNjQxYmZkNzAxM2ZjY2Y3MjVjN2UyYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv0zEEleekDXSg8gHH9KxEWyBTbN sCPkAcV9DFIluq1H3r6ua8VZgxy0te5Mtmi/t4x7TldIxCAFvzBWyG4CpVfvDvQd q6UdYVl8yl8y3PWBAQRPrYMV4saqXT4suKHg8r/CiMuwhHQY7/9iiTbSFViEdwIs MP298yMuMII4Ifa3Wv3OwVJf4DhxazMImOOfZXGkoqEK8pAib+QdMQ1IU8GcghGc eamyrbzwgM6UQmKSTsIK6oJD5WuTrklGEuYEc5C21AdyBOLTSZ1JltG8dVFdWmVi S7LO47hzhBAe9EU9zCwpMZYSBHP3O4N4tInn25XZFwEOOUpyqsAYSSQ2wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0w1sq+T9EhZBv9cBP8z3JcfiyWMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvN1REV3lyNVAwU0ZrR18xd0VfelBjbHgtTEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7rzMA0G CSqGSIb3DQEBCwUAA4IBAQCgF9lNs7LhVS6I1u1zaUwhUy04Qvsz2vlw/I/0ogcM PmhmAZB4XzPl4O9TH5h+s9ZvOyZSLxYGm2nKGxD2XZlfR5dprdymtRoKOa9O7DQg yWkiKhQwwF122nQCRCqy0rcva/F5TQE+gQfqsOIAZUxdAGSYehCaq14VIlpgCbje /RSws563C/NQi0Kal92s128wleNOmdswW1/yBCMJHPdx7fc0i8gpLN1WJLKhV+NC Zztyaq6bWl+UiCZBTTSq4dm30D2JBbUleSN29IshUB8atMlCnfTWQPuY6pJDnnfe YWbV12yrzaeIG0g3JwFYhWD3nOZ36pJno+Do/IyAtxua -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:34 2026 by rpki-client