This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/NotYCgUHoY2zetpjr5kSm9qBY_k.roa File: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (raw, json) Hash identifier: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE= Subject key identifier: 36:8B:58:0A:05:07:A1:8D:B3:7A:DA:63:AF:99:12:9B:DA:81:63:F9 Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Certificate serial: 019B7F82F92EA51B91F885F19FD66EB00FB1 Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/NotYCgUHoY2zetpjr5kSm9qBY_k.roa Signing time: Fri 02 Jan 2026 16:20:48 +0000 ROA not before: Fri 02 Jan 2026 16:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56623 IP address blocks: 31.133.112.0/24 maxlen: 24 31.133.113.0/24 maxlen: 24 31.133.114.0/24 maxlen: 24 31.133.115.0/24 maxlen: 24 31.133.117.0/24 maxlen: 24 31.133.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f9:2e:a5:1b:91:f8:85:f1:9f:d6:6e:b0:0f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=368b580a0507a18db37ada63af99129bda8163f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:7e:fb:0f:fe:3b:68:96:73:8b:ca:1e:6f: cc:c4:43:55:7b:2d:5d:73:d2:4d:0d:27:80:18:b7: fb:95:f4:a2:28:ef:50:7b:14:b8:91:27:02:10:32: 2a:91:a5:c1:21:96:3e:f5:1c:ae:fc:59:06:c2:e8: c6:0d:8d:5d:fa:fa:8f:39:90:56:e0:48:7e:44:5f: 4e:30:ea:f2:9c:72:63:b0:95:5b:35:5b:6b:6b:62: dc:74:32:44:42:c3:77:d3:4c:51:76:6d:be:70:87: 79:eb:8d:36:21:8c:fb:10:af:4c:f8:e9:c2:9f:93: 66:16:10:df:e8:12:a7:c6:cf:65:f9:86:c4:74:55: 99:9e:58:be:61:a5:32:8f:c1:35:ba:08:98:92:c5: 3a:2f:c6:c3:db:d6:ca:37:ab:f5:97:cc:4b:fd:b3: 67:d0:da:28:d1:f3:a8:18:97:89:82:a9:fc:8a:85: da:16:c0:cc:73:57:07:5e:96:c9:85:f4:c6:81:1b: 8c:bf:ed:72:72:41:e7:7c:8f:df:f1:ea:54:4e:37: 93:06:16:51:b5:a2:40:33:5d:6e:ad:08:81:08:9f: 68:d6:f8:34:a6:72:4a:4b:d4:e6:ad:5c:d1:6d:f7: 8d:96:1d:bf:16:a3:65:99:59:72:92:09:0f:08:aa: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8B:58:0A:05:07:A1:8D:B3:7A:DA:63:AF:99:12:9B:DA:81:63:F9 X509v3 Authority Key Identifier: keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/NotYCgUHoY2zetpjr5kSm9qBY_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.112.0/22 31.133.117.0-31.133.118.255 Signature Algorithm: sha256WithRSAEncryption 5a:93:c2:d9:e0:96:7b:8c:5d:cf:7f:dd:6d:03:ca:e8:4a:b3: 61:1b:7d:cf:b6:c9:82:b8:1d:96:2f:5a:79:74:c1:83:e9:43: 63:92:9b:8d:cb:5f:99:2a:f1:e7:d3:ec:18:3e:f6:63:45:f4: 34:46:64:7f:39:0b:2a:9c:c9:61:6e:60:01:df:5e:92:2d:7a: 1d:8c:2f:f7:28:92:68:32:c1:8d:8f:40:5b:04:89:e1:ff:6c: 76:eb:94:0f:0d:51:52:92:fa:c6:da:a1:0a:9b:76:14:4c:fd: eb:25:af:94:f0:8e:95:21:27:9f:ad:e1:6b:17:08:fa:f7:01: 44:32:41:c3:c3:e1:c6:72:19:d7:3d:90:3d:8f:d2:c6:b5:9a: 28:e6:14:23:46:80:4a:b4:a5:ce:e3:3d:f6:2e:48:05:fe:cf: 5d:75:14:ff:5b:62:dc:d0:44:af:ba:d8:10:db:84:cf:ad:48: f9:97:a8:e0:2c:a8:16:b9:5a:b4:10:19:0a:2b:99:7d:5c:b0: 6b:8a:d6:4a:2b:67:98:5f:5f:60:ff:0a:70:e5:01:86:40:83: 8f:06:59:7d:44:1b:7b:71:63:a4:61:56:1c:6a:14:e6:28:c4: 85:db:f1:23:69:db:c9:ba:c8:9b:d8:d0:58:9f:2d:6c:69:1f: 03:9e:a5:11 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/gvkupRuR+IXxn9ZusA+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm ZDI4MjcwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjhiNTgwYTA1MDdhMThkYjM3YWRhNjNhZjk5MTI5YmRhODE2M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqt++w/+O2iWc4vKHm/MxENVey1d c9JNDSeAGLf7lfSiKO9QexS4kScCEDIqkaXBIZY+9Ryu/FkGwujGDY1d+vqPOZBW 4Eh+RF9OMOrynHJjsJVbNVtra2LcdDJEQsN300xRdm2+cId56402IYz7EK9M+OnC n5NmFhDf6BKnxs9l+YbEdFWZnli+YaUyj8E1ugiYksU6L8bD29bKN6v1l8xL/bNn 0Noo0fOoGJeJgqn8ioXaFsDMc1cHXpbJhfTGgRuMv+1yckHnfI/f8epUTjeTBhZR taJAM11urQiBCJ9o1vg0pnJKS9TmrVzRbfeNlh2/FqNlmVlykgkPCKpIYQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFDaLWAoFB6GNs3raY6+ZEpvagWP5MB8GA1UdIwQY MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt YjA2MTk0ZDEzYzZiLzEvTm90WUNnVUhvWTJ6ZXRwanI1a1NtOXFCWV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCH4VwMAwD BAAfhXUDBAAfhXYwDQYJKoZIhvcNAQELBQADggEBAFqTwtnglnuMXc9/3W0DyuhK s2Ebfc+2yYK4HZYvWnl0wYPpQ2OSm43LX5kq8efT7Bg+9mNF9DRGZH85CyqcyWFu YAHfXpIteh2ML/cokmgywY2PQFsEieH/bHbrlA8NUVKS+sbaoQqbdhRM/eslr5Tw jpUhJ5+t4WsXCPr3AUQyQcPD4cZyGdc9kD2P0sa1mijmFCNGgEq0pc7jPfYuSAX+ z111FP9bYtzQRK+62BDbhM+tSPmXqOAsqBa5WrQQGQormX1csGuK1korZ5hfX2D/ CnDlAYZAg48GWX1EG3txY6RhVhxqFOYoxIXb8SNp28m6yJvY0FifLWxpHwOepRE= -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:18 2026 by rpki-client