This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/FDadFeqXdB-4hSls4tkk3SxPK0c.roa File: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (raw, json) Hash identifier: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA= Subject key identifier: 14:36:9D:15:EA:97:74:1F:B8:85:29:6C:E2:D9:24:DD:2C:4F:2B:47 Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019B7BA41489F55244B400BC4A2D76D46ACD Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/FDadFeqXdB-4hSls4tkk3SxPK0c.roa Signing time: Thu 01 Jan 2026 22:18:29 +0000 ROA not before: Thu 01 Jan 2026 22:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 31.169.80.0/24 maxlen: 24 31.169.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:14:89:f5:52:44:b4:00:bc:4a:2d:76:d4:6a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jan 1 22:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14369d15ea97741fb885296ce2d924dd2c4f2b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:aa:61:aa:92:9b:98:e0:37:f2:e8:f6:f6: 35:4c:58:8f:54:a1:f1:90:43:fc:c7:51:29:27:89: f1:56:b7:78:b8:18:4b:7c:5d:c7:7e:95:f3:06:6e: 06:37:2f:78:2b:82:97:f6:d4:67:25:f7:e6:e2:ad: 6b:e4:1c:fe:10:e2:e0:d2:59:ee:0c:9d:bf:6a:4b: 4a:b8:58:1a:7c:29:a8:61:f5:3c:50:15:33:52:24: 8a:a8:60:74:69:16:47:be:fe:35:a0:a9:76:a7:e7: c6:b2:6a:e8:58:c3:14:b7:a1:0e:20:91:c3:d1:e4: 81:4e:61:b1:3b:cc:05:0f:e4:29:c2:18:86:f6:d4: 8e:f8:0a:cd:56:13:38:82:dc:ef:ca:97:1f:c9:30: 12:8f:94:e6:5c:25:34:52:8c:01:80:d1:53:c5:a1: e8:8a:6c:1e:ef:d1:56:e0:a3:f0:56:da:10:4f:f9: 9a:0a:06:97:64:02:3c:d4:f8:29:50:e0:88:65:c8: 7b:06:89:83:e4:c8:1f:9a:3a:0a:c5:17:c5:b3:31: 88:1e:4c:23:be:f3:5f:86:70:dd:ff:fd:1d:16:66: 7a:fd:5b:0c:99:70:66:e5:ca:af:49:34:eb:e6:de: e9:1e:ba:b8:a3:9b:d6:0a:14:5b:8c:6d:26:38:05: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:36:9D:15:EA:97:74:1F:B8:85:29:6C:E2:D9:24:DD:2C:4F:2B:47 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/FDadFeqXdB-4hSls4tkk3SxPK0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.169.80.0/24 31.169.83.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a0:bd:2b:c3:f1:54:6d:f2:cb:4c:d1:44:f7:c1:7e:39:1d: f4:a0:9d:cf:ca:55:e6:8b:0e:a1:65:fb:18:a1:08:cb:b7:5f: 78:9e:b2:26:c4:e4:99:03:7a:23:6e:47:f2:d3:ba:ec:8f:64: 3d:f2:8d:be:ce:8a:19:bf:a9:f1:f3:c9:84:ff:eb:e8:f9:98: 45:13:eb:74:db:69:6b:94:88:6a:73:1a:6f:35:3b:66:df:40: 27:2e:69:19:72:72:2d:48:07:35:b1:06:e3:da:c6:e4:0c:e7: 20:a6:f8:50:76:1c:d2:d2:0e:fb:91:1b:d7:07:fb:b7:14:db: 16:d0:e1:fd:23:0b:23:cb:95:7d:fc:0f:0e:a7:07:d4:a2:9a: 2f:18:5e:60:01:a9:1d:a9:bb:c8:c8:ec:95:52:92:9a:e9:16: 23:12:26:50:a8:33:31:fc:86:7e:10:39:de:88:84:d2:f1:8f: 09:e8:06:fb:61:1d:51:03:0e:8a:ba:72:c9:d6:eb:75:08:3f: c7:77:50:4c:b5:c8:4f:53:a7:35:4a:57:7f:0b:00:4e:1f:90: f8:aa:51:5b:1f:81:05:e5:5b:d0:dc:36:c7:f8:8a:f4:8c:f3: d4:d9:41:6d:8e:6e:7d:36:3c:59:f0:2a:6c:e8:5c:5f:47:a4: 8a:53:55:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pBSJ9VJEtAC8Si121GrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwMTAxMjIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDM2OWQxNWVhOTc3NDFmYjg4NTI5NmNlMmQ5MjRkZDJjNGYyYjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyaqYaqSm5jgN/Lo9vY1TFiPVKHx kEP8x1EpJ4nxVrd4uBhLfF3HfpXzBm4GNy94K4KX9tRnJffm4q1r5Bz+EOLg0lnu DJ2/aktKuFgafCmoYfU8UBUzUiSKqGB0aRZHvv41oKl2p+fGsmroWMMUt6EOIJHD 0eSBTmGxO8wFD+QpwhiG9tSO+ArNVhM4gtzvypcfyTASj5TmXCU0UowBgNFTxaHo imwe79FW4KPwVtoQT/maCgaXZAI81PgpUOCIZch7BomD5MgfmjoKxRfFszGIHkwj vvNfhnDd//0dFmZ6/VsMmXBm5cqvSTTr5t7pHrq4o5vWChRbjG0mOAWG6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBQ2nRXql3QfuIUpbOLZJN0sTytHMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvRkRhZEZlcVhkQi00aFNsczR0a2szU3hQSzBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH6lQAwQA H6lTMA0GCSqGSIb3DQEBCwUAA4IBAQBLoL0rw/FUbfLLTNFE98F+OR30oJ3PylXm iw6hZfsYoQjLt194nrImxOSZA3ojbkfy07rsj2Q98o2+zooZv6nx88mE/+vo+ZhF E+t022lrlIhqcxpvNTtm30AnLmkZcnItSAc1sQbj2sbkDOcgpvhQdhzS0g77kRvX B/u3FNsW0OH9Iwsjy5V9/A8OpwfUopovGF5gAakdqbvIyOyVUpKa6RYjEiZQqDMx /IZ+EDneiITS8Y8J6Ab7YR1RAw6KunLJ1ut1CD/Hd1BMtchPU6c1Sld/CwBOH5D4 qlFbH4EF5VvQ3DbH+Ir0jPPU2UFtjm59NjxZ8Cps6FxfR6SKU1W+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:23 2026 by rpki-client