This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/t5f9uZebkbDVSowLOTLeEPd0h2Q.roa File: t5f9uZebkbDVSowLOTLeEPd0h2Q.roa (raw, json) Hash identifier: 0xEPrMrVD89X+wGNKbD1d1Cor+K8kwVUKbsyOrl9tUI= Subject key identifier: B7:97:FD:B9:97:9B:91:B0:D5:4A:8C:0B:39:32:DE:10:F7:74:87:64 Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Certificate serial: 019B79EC38A62FE0A88CACB560FFF1484B0C Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/t5f9uZebkbDVSowLOTLeEPd0h2Q.roa Signing time: Thu 01 Jan 2026 14:18:02 +0000 ROA not before: Thu 01 Jan 2026 14:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48737 IP address blocks: 31.210.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:38:a6:2f:e0:a8:8c:ac:b5:60:ff:f1:48:4b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b797fdb9979b91b0d54a8c0b3932de10f7748764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:cd:f0:e7:76:7c:d5:61:9a:5f:ec:88:d9: f1:64:f2:c2:8c:60:ab:f3:96:a3:dd:42:39:a2:03: 66:70:2d:cc:12:84:f8:d8:19:6a:99:68:7f:ab:67: da:96:d9:f3:12:0e:76:e9:f7:cc:95:ee:ce:46:73: 9f:be:56:31:0a:22:84:1c:8b:d8:ce:f8:9d:82:6e: 73:0e:c0:29:b5:2e:ff:89:b5:28:27:d8:0e:c2:ef: 12:e7:96:74:8c:9d:7c:0a:e4:2b:1d:d0:29:3b:83: ae:e5:17:c6:2f:bb:1a:1a:e1:7d:7b:7d:ac:89:69: ac:00:4b:0b:c1:54:81:3d:97:80:a8:df:41:d2:36: ea:ac:f7:8b:cd:9f:f4:d8:92:37:3a:51:4b:b1:6b: 83:cd:97:03:82:18:8f:c1:b4:5d:4b:45:5c:b2:42: 3d:b2:84:2c:7e:4a:eb:00:d6:ee:d2:75:ac:c7:2c: 56:33:40:d6:6b:8e:f9:d1:c8:33:00:23:e3:28:25: eb:21:be:af:82:40:7e:25:a3:05:34:dc:90:d4:f2: d4:3c:b5:38:7b:3f:bd:23:4f:07:b1:61:c9:d1:2c: 53:e4:5e:54:b9:59:5f:15:bb:e1:f2:6c:6b:c4:b4: 84:77:78:bc:1a:5c:03:41:9c:b9:8f:5b:dd:51:b1: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:97:FD:B9:97:9B:91:B0:D5:4A:8C:0B:39:32:DE:10:F7:74:87:64 X509v3 Authority Key Identifier: keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/t5f9uZebkbDVSowLOTLeEPd0h2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.62.0/23 Signature Algorithm: sha256WithRSAEncryption 61:35:b6:a1:87:53:d3:81:bf:3c:de:e6:28:13:f9:e8:0b:59: cf:ea:18:84:43:d2:73:19:64:0a:31:e0:8b:09:ef:48:89:9e: a5:63:f9:79:f6:3f:4a:a0:76:f0:04:30:e8:f0:07:98:ce:99: 68:b6:a8:35:4c:0c:21:2f:df:e8:bb:8e:66:cb:bd:53:91:2b: d7:ca:c5:c9:7d:a6:2d:8b:b9:03:b1:7f:28:37:c3:5a:b2:c4: f5:f0:1e:cf:7c:a1:57:81:d2:ce:c9:09:89:ad:60:de:6f:dd: e5:b9:0c:27:ea:ed:7b:04:f9:19:38:fc:99:09:dd:bf:eb:4e: b5:5c:12:ea:34:90:00:f0:2b:ce:f5:18:6f:3f:5c:19:d2:79: 38:1f:7e:40:92:f7:8a:86:82:10:46:8d:38:de:c4:2b:f9:ec: e9:ea:33:bd:ef:38:31:01:c0:53:a1:60:19:aa:96:0b:67:d6: 44:1d:05:b6:f3:8d:59:25:1b:66:14:97:33:33:16:d0:1c:ff: e9:92:87:9a:ad:c9:59:6e:c5:f3:26:a5:a4:7d:3e:9a:ba:ec: 18:ef:b0:1d:76:2e:5b:f1:bc:66:3f:c3:ec:30:ba:c7:b0:4d: cc:34:66:35:6d:bb:b9:e1:da:5e:9e:fa:56:0a:97:96:75:7c: 8c:4b:6a:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57DimL+CojKy1YP/xSEsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzNmYTY4NDI5NzNlZGY2MmQ1NzliNGVmZWMyZmE2NGZk YmY4YzgwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzk3ZmRiOTk3OWI5MWIwZDU0YThjMGIzOTMyZGUxMGY3NzQ4NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNrN8Od2fNVhml/siNnxZPLCjGCr 85aj3UI5ogNmcC3MEoT42BlqmWh/q2faltnzEg526ffMle7ORnOfvlYxCiKEHIvY zvidgm5zDsAptS7/ibUoJ9gOwu8S55Z0jJ18CuQrHdApO4Ou5RfGL7saGuF9e32s iWmsAEsLwVSBPZeAqN9B0jbqrPeLzZ/02JI3OlFLsWuDzZcDghiPwbRdS0VcskI9 soQsfkrrANbu0nWsxyxWM0DWa4750cgzACPjKCXrIb6vgkB+JaMFNNyQ1PLUPLU4 ez+9I08HsWHJ0SxT5F5UuVlfFbvh8mxrxLSEd3i8GlwDQZy5j1vdUbGa2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLeX/bmXm5Gw1UqMCzky3hD3dIdkMB8GA1UdIwQY MBaAFFZz+mhClz7fYtV5tO/sL6ZP2/jIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTkt ODk4OTk2Yzg2MWRmLzEvdDVmOXVaZWJrYkRWU293TE9UTGVFUGQwaDJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTktODk4OTk2Yzg2MWRm LzEvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH9I+MA0G CSqGSIb3DQEBCwUAA4IBAQBhNbahh1PTgb883uYoE/noC1nP6hiEQ9JzGWQKMeCL Ce9IiZ6lY/l59j9KoHbwBDDo8AeYzplotqg1TAwhL9/ou45my71TkSvXysXJfaYt i7kDsX8oN8NassT18B7PfKFXgdLOyQmJrWDeb93luQwn6u17BPkZOPyZCd2/6061 XBLqNJAA8CvO9RhvP1wZ0nk4H35AkveKhoIQRo043sQr+ezp6jO97zgxAcBToWAZ qpYLZ9ZEHQW2841ZJRtmFJczMxbQHP/pkoearclZbsXzJqWkfT6auuwY77Addi5b 8bxmP8PsMLrHsE3MNGY1bbu54dpenvpWCpeWdXyMS2ri -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:52 2026 by rpki-client