This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/1wppazJj04IlxRG1cXFWu1lK-oQ.roa File: 1wppazJj04IlxRG1cXFWu1lK-oQ.roa (raw, json) Hash identifier: VVZx8LiYZT++pEirpWM+qEA82qGQyu/0zqLlgJ3a9Vs= Subject key identifier: D7:0A:69:6B:32:63:D3:82:25:C5:11:B5:71:71:56:BB:59:4A:FA:84 Certificate issuer: /CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e Certificate serial: 019B7C804549C648063C47362C753B3B3F14 Authority key identifier: 15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/1wppazJj04IlxRG1cXFWu1lK-oQ.roa Signing time: Fri 02 Jan 2026 02:18:59 +0000 ROA not before: Fri 02 Jan 2026 02:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35625 IP address blocks: 31.172.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.mft rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:45:49:c6:48:06:3c:47:36:2c:75:3b:3b:3f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1597b9d73480ca22cbf31faaf0bccbed30b2095e Validity Not Before: Jan 2 02:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d70a696b3263d38225c511b5717156bb594afa84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:0d:7a:b1:7f:ac:8f:fd:d5:66:b7:61:fa: f2:d3:e9:78:09:62:8e:ad:f8:d9:c8:8f:61:3f:76: eb:e4:8d:6a:72:a8:85:3e:98:62:26:55:f6:ac:3b: 1a:69:df:b0:fa:c0:bc:f9:42:47:ee:be:43:a6:b0: b7:0c:f3:9c:09:13:13:ed:11:30:a6:d9:b4:e8:8d: df:22:bd:ca:23:ce:a4:0d:cc:75:80:8b:23:14:ae: b4:c2:7e:31:29:7c:12:ce:45:c2:08:b0:8e:84:b0: 73:ed:be:58:23:bb:2b:20:e7:7f:c1:20:ad:bd:d2: 9a:7c:08:8b:00:11:90:07:c9:d5:9a:22:d2:16:eb: 62:a3:63:82:db:12:29:b2:f0:0c:79:28:08:1c:71: 74:c6:8d:f2:d2:29:c4:cc:0b:8b:5c:ed:b2:4d:55: 68:5b:21:75:57:bf:86:8f:a8:d8:fb:17:70:d7:da: 35:dc:54:ee:9f:50:7e:80:b0:a5:bf:b4:a7:b3:8b: f7:60:9d:c7:fd:58:7f:89:96:0f:05:e4:72:90:bd: e8:85:9e:ea:fa:19:7e:95:4f:a2:2f:c6:8e:fd:6d: 0e:82:c2:9d:c7:50:15:66:4b:00:ea:92:7c:0b:79: 2d:07:95:78:be:f8:dd:ed:41:54:c6:9b:29:4d:a7: 25:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0A:69:6B:32:63:D3:82:25:C5:11:B5:71:71:56:BB:59:4A:FA:84 X509v3 Authority Key Identifier: keyid:15:97:B9:D7:34:80:CA:22:CB:F3:1F:AA:F0:BC:CB:ED:30:B2:09:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZe51zSAyiLL8x-q8LzL7TCyCV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/1wppazJj04IlxRG1cXFWu1lK-oQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75a6cb-5866-44a2-8bb0-a31ab64cfccb/1/FZe51zSAyiLL8x-q8LzL7TCyCV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.172.0/22 Signature Algorithm: sha256WithRSAEncryption 26:93:21:e8:60:71:2e:fa:44:40:cc:45:69:93:2c:81:1d:68: 34:95:96:60:fc:b9:22:3c:69:f4:da:02:72:b4:e3:80:7f:1f: be:21:e7:72:fe:76:7b:8a:6a:5f:7f:d0:dc:ea:56:ea:62:89: fd:8a:b4:47:f2:4e:7b:97:09:7b:9b:cd:34:ee:44:35:ab:82: 3a:b5:e2:e6:a4:a2:ba:8e:da:ac:84:df:28:96:6b:fe:42:ba: bb:53:50:23:24:1b:51:e0:e8:3b:1c:df:93:50:f7:18:26:29: 58:e3:08:e4:8f:85:f4:d7:8a:7e:28:ff:62:50:42:54:c6:01: d7:3e:fc:f6:12:99:a7:cb:9f:0a:53:8b:96:fb:1b:9c:5d:ad: b4:b1:a6:a4:03:6b:2d:5e:cf:17:37:ec:0d:31:eb:f3:59:5f: 07:6a:ec:0d:01:a9:b6:a3:de:c0:74:8c:7e:ec:81:c4:d8:ea: c4:e2:22:01:c2:09:43:ba:0a:33:fb:69:ff:5b:7d:ae:64:9c: fb:2a:ad:13:d9:a6:52:29:7b:7d:ae:06:22:12:d1:08:2f:9f: 68:4d:85:a7:3f:f4:f1:98:ce:0a:00:00:a3:b7:a8:6c:57:11: 5a:ca:f0:87:c4:60:2c:c2:42:6f:7b:0c:4a:b3:7d:bb:f6:2f: 52:c8:9b:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEVJxkgGPEc2LHU7Oz8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTdiOWQ3MzQ4MGNhMjJjYmYzMWZhYWYwYmNjYmVkMzBi MjA5NWUwHhcNMjYwMTAyMDIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzBhNjk2YjMyNjNkMzgyMjVjNTExYjU3MTcxNTZiYjU5NGFmYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNkNerF/rI/91Wa3Yfry0+l4CWKO rfjZyI9hP3br5I1qcqiFPphiJlX2rDsaad+w+sC8+UJH7r5DprC3DPOcCRMT7REw ptm06I3fIr3KI86kDcx1gIsjFK60wn4xKXwSzkXCCLCOhLBz7b5YI7srIOd/wSCt vdKafAiLABGQB8nVmiLSFutio2OC2xIpsvAMeSgIHHF0xo3y0inEzAuLXO2yTVVo WyF1V7+Gj6jY+xdw19o13FTun1B+gLClv7Sns4v3YJ3H/Vh/iZYPBeRykL3ohZ7q +hl+lU+iL8aO/W0OgsKdx1AVZksA6pJ8C3ktB5V4vvjd7UFUxpspTaclvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcKaWsyY9OCJcURtXFxVrtZSvqEMB8GA1UdIwQY MBaAFBWXudc0gMoiy/MfqvC8y+0wsgleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlplNTF6U0F5aUxMOHgtcThMekw3VEN5Q1Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NWE2Y2ItNTg2Ni00NGEyLThiYjAt YTMxYWI2NGNmY2NiLzEvMXdwcGF6SmowNElseFJHMWNYRld1MWxLLW9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83NWE2Y2ItNTg2Ni00NGEyLThiYjAtYTMxYWI2NGNmY2Ni LzEvRlplNTF6U0F5aUxMOHgtcThMekw3VEN5Q1Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH6ysMA0G CSqGSIb3DQEBCwUAA4IBAQAmkyHoYHEu+kRAzEVpkyyBHWg0lZZg/LkiPGn02gJy tOOAfx++Iedy/nZ7impff9Dc6lbqYon9irRH8k57lwl7m8007kQ1q4I6teLmpKK6 jtqshN8olmv+Qrq7U1AjJBtR4Og7HN+TUPcYJilY4wjkj4X014p+KP9iUEJUxgHX Pvz2Epmny58KU4uW+xucXa20saakA2stXs8XN+wNMevzWV8HauwNAam2o97AdIx+ 7IHE2OrE4iIBwglDugoz+2n/W32uZJz7Kq0T2aZSKXt9rgYiEtEIL59oTYWnP/Tx mM4KAACjt6hsVxFayvCHxGAswkJvewxKs3279i9SyJvj -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:25 2026 by rpki-client