This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/snRA2Lsi6QonDXK0buMMtLGBtCQ.roa File: snRA2Lsi6QonDXK0buMMtLGBtCQ.roa (raw, json) Hash identifier: CEtGFKSBGIGkhpLe+mF+hAVwXX4R7IDxR8o0N+EfDJQ= Subject key identifier: B2:74:40:D8:BB:22:E9:0A:27:0D:72:B4:6E:E3:0C:B4:B1:81:B4:24 Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019B7F14BE440F326F84DC0D648E088CF67D Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/snRA2Lsi6QonDXK0buMMtLGBtCQ.roa Signing time: Fri 02 Jan 2026 14:20:24 +0000 ROA not before: Fri 02 Jan 2026 14:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62904 IP address blocks: 31.172.69.0/24 maxlen: 24 31.172.79.0/24 maxlen: 24 81.85.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:be:44:0f:32:6f:84:dc:0d:64:8e:08:8c:f6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Jan 2 14:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b27440d8bb22e90a270d72b46ee30cb4b181b424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:0b:6d:d6:16:28:67:dd:3a:21:d6:41:d0: 54:09:75:52:c4:ca:a4:cc:1e:f5:97:bf:64:2a:bc: eb:d1:0a:10:1b:e3:9c:26:48:2d:c8:5d:d3:06:9d: fa:aa:e3:c1:65:47:f9:08:73:d8:38:e0:9e:37:5f: 80:6d:a7:a9:2f:8d:0f:9b:c6:bb:a5:21:80:41:34: a6:90:c3:3f:78:c4:42:95:a0:43:6f:fb:24:90:26: c0:92:78:36:42:9c:ce:ba:a2:b6:40:d1:49:d8:be: da:20:6c:ac:ff:41:37:3a:cc:0d:05:9c:31:94:6c: 85:72:0b:da:f7:3f:a1:ca:43:b4:7a:77:25:e9:f4: d0:68:cf:9d:c9:0d:02:32:a3:37:6d:e2:e5:8d:21: 4a:e3:40:76:57:37:ea:c6:dc:70:c2:de:cb:c9:ef: 0f:e3:b3:ff:1e:4b:41:2e:bc:e5:f1:b8:c8:83:1e: d3:b5:ed:68:fb:1a:57:31:f5:81:ec:fa:94:cd:5d: 6c:1d:fd:7b:28:38:9c:ba:ca:04:52:28:31:1f:d7: 53:98:97:35:8c:5e:c0:64:31:c5:34:2a:78:4b:b4: 6d:d7:ec:bf:3d:65:e3:a6:2f:03:7c:6a:30:ae:24: 36:9d:01:04:b4:93:66:4e:74:47:dd:20:fd:ba:07: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:74:40:D8:BB:22:E9:0A:27:0D:72:B4:6E:E3:0C:B4:B1:81:B4:24 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/snRA2Lsi6QonDXK0buMMtLGBtCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.69.0/24 31.172.79.0/24 81.85.77.0/24 Signature Algorithm: sha256WithRSAEncryption 87:46:35:43:24:37:18:ab:a9:30:2d:c9:d1:89:81:8f:d2:1d: 8c:0c:25:5b:b0:9f:6d:0a:2c:b7:da:59:38:e6:b1:49:86:7b: 15:99:23:3c:b8:fe:ae:20:be:7e:0d:67:6a:5c:40:45:48:28: 16:f1:69:e0:7b:35:6e:4e:be:1c:c2:3a:57:3d:fa:6a:55:52: e0:a9:ca:45:4e:e3:a0:62:44:30:75:b9:11:66:d9:24:f9:9a: 76:8f:fa:b7:dd:6d:e7:c4:83:d1:4a:7f:89:30:b1:c0:47:64: 6f:5e:12:1c:cf:ab:9c:b3:c0:1c:ad:f6:0a:53:84:59:a0:f9: ae:58:b1:8c:e3:b1:e7:f8:e6:cc:62:ea:83:2c:88:1a:80:ba: 78:12:b4:4d:1b:2d:2f:ff:a0:ad:9c:3a:bc:45:04:6d:f8:9b: 40:b6:e0:06:2e:23:35:62:0b:bc:d0:2f:c2:f6:21:8b:bb:f8: 3d:24:a1:29:52:fb:38:cd:dc:33:2f:fa:5f:5e:1a:38:bd:bd: 60:74:01:42:93:c0:79:ad:dd:c1:d8:e3:be:cf:97:7c:2b:74: 0a:a0:62:c0:18:f4:a9:87:d1:3c:33:87:93:3c:b0:09:79:49: 4b:4b:a4:82:7b:91:54:9e:4f:8c:c2:56:5a:5d:55:85:ed:ca: 28:36:a7:a7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FL5EDzJvhNwNZI4IjPZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjYwMTAyMTQyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjc0NDBkOGJiMjJlOTBhMjcwZDcyYjQ2ZWUzMGNiNGIxODFiNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYLbdYWKGfdOiHWQdBUCXVSxMqk zB71l79kKrzr0QoQG+OcJkgtyF3TBp36quPBZUf5CHPYOOCeN1+AbaepL40Pm8a7 pSGAQTSmkMM/eMRClaBDb/skkCbAkng2QpzOuqK2QNFJ2L7aIGys/0E3OswNBZwx lGyFcgva9z+hykO0encl6fTQaM+dyQ0CMqM3beLljSFK40B2Vzfqxtxwwt7Lye8P 47P/HktBLrzl8bjIgx7Tte1o+xpXMfWB7PqUzV1sHf17KDicusoEUigxH9dTmJc1 jF7AZDHFNCp4S7Rt1+y/PWXjpi8DfGowriQ2nQEEtJNmTnRH3SD9ugefjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLJ0QNi7IukKJw1ytG7jDLSxgbQkMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvc25SQTJMc2k2UW9uRFhLMGJ1TU10TEdCdENRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH6xFAwQA H6xPAwQAUVVNMA0GCSqGSIb3DQEBCwUAA4IBAQCHRjVDJDcYq6kwLcnRiYGP0h2M DCVbsJ9tCiy32lk45rFJhnsVmSM8uP6uIL5+DWdqXEBFSCgW8WngezVuTr4cwjpX PfpqVVLgqcpFTuOgYkQwdbkRZtkk+Zp2j/q33W3nxIPRSn+JMLHAR2RvXhIcz6uc s8AcrfYKU4RZoPmuWLGM47Hn+ObMYuqDLIgagLp4ErRNGy0v/6CtnDq8RQRt+JtA tuAGLiM1Ygu80C/C9iGLu/g9JKEpUvs4zdwzL/pfXho4vb1gdAFCk8B5rd3B2OO+ z5d8K3QKoGLAGPSph9E8M4eTPLAJeUlLS6SCe5FUnk+MwlZaXVWF7cooNqen -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:39 2026 by rpki-client