This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/DY4whTo7KFMsapAbjbck9KXaN2Q.roa File: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (raw, json) Hash identifier: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU= Subject key identifier: 0D:8E:30:85:3A:3B:28:53:2C:6A:90:1B:8D:B7:24:F4:A5:DA:37:64 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F8246DFA37A7B2E258D253C575652AB Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/DY4whTo7KFMsapAbjbck9KXaN2Q.roa Signing time: Fri 02 Jan 2026 16:20:02 +0000 ROA not before: Fri 02 Jan 2026 16:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26931 IP address blocks: 31.186.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:46:df:a3:7a:7b:2e:25:8d:25:3c:57:56:52:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d8e30853a3b28532c6a901b8db724f4a5da3764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:d1:a4:0f:d1:fd:b8:c4:c5:c5:3e:19:e0: c1:38:bb:f3:e2:f3:7c:f7:e4:00:cb:f9:72:1a:21: b9:52:34:d1:f9:cd:9a:44:43:90:d4:1c:3c:b0:9d: 36:51:1a:09:99:d6:ef:83:83:9b:7d:0b:fb:49:6a: 6a:a7:37:42:e5:f9:9e:ca:e2:87:e7:06:5c:73:78: a4:7c:f5:4d:86:20:da:41:49:7b:cf:57:60:bf:fd: 8c:9e:76:93:ef:0b:43:a0:a5:b7:8d:56:17:a6:76: 08:00:49:b8:d7:a1:df:71:11:a0:ef:69:4c:0d:13: 6d:a5:44:42:ef:ed:89:87:be:8b:1b:e7:71:9a:65: 1c:b9:87:d3:3f:5c:01:0f:15:dd:10:ff:1e:56:97: 02:09:3e:0a:ce:27:27:0e:34:c9:13:34:7e:52:7f: 05:26:d6:c6:ea:0e:f0:13:a6:fa:2b:62:ce:83:1d: 0e:a5:ec:e7:d6:1d:be:10:e0:91:27:af:eb:b5:95: 24:b2:82:97:94:af:2a:fb:3a:8f:f3:20:a1:8b:5a: 6a:95:55:b9:d7:26:aa:42:77:fe:21:5b:7c:1a:60: d3:5b:17:68:78:dd:5e:e9:96:25:25:de:0c:17:5a: b5:a6:b0:d6:b8:10:1a:fd:88:ec:d4:e8:9e:5f:d3: 3e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8E:30:85:3A:3B:28:53:2C:6A:90:1B:8D:B7:24:F4:A5:DA:37:64 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/DY4whTo7KFMsapAbjbck9KXaN2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.235.0/24 Signature Algorithm: sha256WithRSAEncryption 86:da:b3:0e:a9:a4:38:b3:f6:1e:a4:6d:dd:ed:d5:27:4d:51: b1:98:5f:8b:83:97:21:bb:0b:10:f5:39:03:17:9c:82:4c:b7: 48:36:7c:af:1c:35:84:e0:4c:9e:08:9d:c4:4f:7b:af:b5:8c: c5:dd:05:38:3a:fb:16:ce:f5:37:a6:dc:02:c4:c2:90:2b:3a: 97:6c:bd:a8:a0:6a:49:32:ff:70:02:f7:48:07:02:a8:26:e0: 30:fa:5d:e8:08:3a:6b:4a:f4:b7:e6:63:43:7b:86:af:a7:f5: 46:01:0e:82:d9:ce:ad:cb:2b:fd:2d:88:dd:9c:3e:39:d7:44: b2:9e:5e:d5:b7:7f:3d:c4:4f:65:ae:df:94:f2:9d:d3:0c:10: fd:d9:ae:ac:b0:90:e6:88:be:c0:75:40:ed:41:f8:20:23:89: 2e:89:5e:cf:51:bd:e5:08:a3:8c:b2:bf:5f:f9:f5:c1:7b:e7: 5a:65:37:54:20:75:d6:b6:4b:a1:53:19:5c:1d:f3:7f:08:aa: 78:9f:ab:3d:41:c7:91:90:c7:cc:bb:eb:f9:b9:d9:b3:e5:63: a0:d5:a6:5b:0e:a8:bc:c5:05:c7:6d:76:e6:11:8e:db:4e:40: 25:65:9f:3e:1d:8e:59:b6:b5:a1:39:56:e3:52:8a:11:3f:04: 4b:25:4a:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkbfo3p7LiWNJTxXVlKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDhlMzA4NTNhM2IyODUzMmM2YTkwMWI4ZGI3MjRmNGE1ZGEzNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXHRpA/R/bjExcU+GeDBOLvz4vN8 9+QAy/lyGiG5UjTR+c2aREOQ1Bw8sJ02URoJmdbvg4ObfQv7SWpqpzdC5fmeyuKH 5wZcc3ikfPVNhiDaQUl7z1dgv/2MnnaT7wtDoKW3jVYXpnYIAEm416HfcRGg72lM DRNtpURC7+2Jh76LG+dxmmUcuYfTP1wBDxXdEP8eVpcCCT4KzicnDjTJEzR+Un8F JtbG6g7wE6b6K2LOgx0Opezn1h2+EOCRJ6/rtZUksoKXlK8q+zqP8yChi1pqlVW5 1yaqQnf+IVt8GmDTWxdoeN1e6ZYlJd4MF1q1prDWuBAa/Yjs1OieX9M+pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA2OMIU6OyhTLGqQG423JPSl2jdkMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvRFk0d2hUbzdLRk1zYXBBYmpiY2s5S1hhTjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7rrMA0G CSqGSIb3DQEBCwUAA4IBAQCG2rMOqaQ4s/YepG3d7dUnTVGxmF+Lg5chuwsQ9TkD F5yCTLdINnyvHDWE4EyeCJ3ET3uvtYzF3QU4OvsWzvU3ptwCxMKQKzqXbL2ooGpJ Mv9wAvdIBwKoJuAw+l3oCDprSvS35mNDe4avp/VGAQ6C2c6tyyv9LYjdnD4510Sy nl7Vt389xE9lrt+U8p3TDBD92a6ssJDmiL7AdUDtQfggI4kuiV7PUb3lCKOMsr9f +fXBe+daZTdUIHXWtkuhUxlcHfN/CKp4n6s9QceRkMfMu+v5udmz5WOg1aZbDqi8 xQXHbXbmEY7bTkAlZZ8+HY5ZtrWhOVbjUooRPwRLJUrh -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:21 2026 by rpki-client