This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/iN3PbeV3-UffGNWyXfh7JHJfK74.roa File: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (raw, json) Hash identifier: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8= Subject key identifier: 88:DD:CF:6D:E5:77:F9:47:DF:18:D5:B2:5D:F8:7B:24:72:5F:2B:BE Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Certificate serial: 019B7EA579002BECFA97B5E91E298B6E2B65 Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/iN3PbeV3-UffGNWyXfh7JHJfK74.roa Signing time: Fri 02 Jan 2026 12:18:52 +0000 ROA not before: Fri 02 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31333 IP address blocks: 31.15.64.0/21 maxlen: 24 79.140.32.0/20 maxlen: 24 80.244.240.0/20 maxlen: 24 83.151.16.0/20 maxlen: 24 2001:4d88::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:79:00:2b:ec:fa:97:b5:e9:1e:29:8b:6e:2b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ddcf6de577f947df18d5b25df87b24725f2bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:66:25:5d:6c:ec:e4:85:b7:d3:51:fa:9e: 4c:87:04:64:52:a8:40:06:f0:44:cf:6a:17:1b:34: 0d:1b:58:59:95:73:f6:2c:3f:94:07:b4:70:2c:97: 48:87:bc:5a:71:6c:0f:34:de:b9:7a:2f:31:90:91: 3c:db:5b:fb:23:d7:61:ef:c6:2c:0c:d8:9a:16:02: 68:38:36:b4:26:96:17:fe:d5:fb:b7:b2:fd:67:f8: d3:6d:f6:5c:43:f7:47:90:e6:e7:e9:1c:21:42:10: 7d:d1:bd:39:e9:00:f5:c1:cc:6f:d8:d9:95:81:c9: f7:cc:e3:77:84:6a:c5:3f:1c:37:48:f1:52:8e:21: 31:85:18:69:9a:6e:c1:17:ff:2f:9d:b5:82:22:9b: c8:69:6a:d6:c3:b2:e7:62:f9:b1:ae:74:d4:21:8f: 37:dd:1f:f3:a3:80:90:67:2a:7f:ed:7b:3b:9a:81: 42:d1:a8:6c:12:82:a7:09:c5:9f:5f:89:74:93:e3: b6:d0:52:21:40:e6:7d:24:96:aa:6d:40:a4:51:f8: 6f:31:61:6c:45:65:76:cd:59:34:f3:04:8f:b3:fe: e8:aa:b6:bd:89:b0:f1:d8:ec:a3:b8:57:53:ad:03: 67:de:3c:cf:bd:46:d8:25:f6:c0:af:8b:52:41:16: f3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DD:CF:6D:E5:77:F9:47:DF:18:D5:B2:5D:F8:7B:24:72:5F:2B:BE X509v3 Authority Key Identifier: keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/iN3PbeV3-UffGNWyXfh7JHJfK74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.64.0/21 79.140.32.0/20 80.244.240.0/20 83.151.16.0/20 IPv6: 2001:4d88::/32 Signature Algorithm: sha256WithRSAEncryption b2:c7:81:77:56:ae:0b:79:68:02:9d:68:47:75:c2:21:b1:9b: c5:21:26:27:66:8a:c8:6c:75:e7:7b:38:c2:5d:aa:65:9c:df: 4f:0b:35:a7:0c:4d:53:96:ee:92:3c:b7:58:fd:68:b8:c0:45: 34:5c:1c:33:71:5f:03:52:28:8f:17:2c:46:4e:dc:e9:4a:dd: b1:b9:c3:0d:f0:25:cf:46:80:e7:1f:7e:a2:2a:ad:6f:79:d5: b8:77:09:dd:44:6f:9f:ea:2e:cc:e1:b0:d6:56:0d:b2:e0:72: 01:70:9d:2d:fe:01:20:6f:e1:5d:d9:b8:aa:64:b4:4b:9e:43: eb:69:a0:95:ec:90:fd:dd:5b:cb:da:5e:dc:41:ff:67:ae:03: 34:92:9c:53:57:9c:cf:dd:75:99:d9:1d:5a:d2:0a:0c:d0:cf: b2:3b:3a:99:58:b2:67:eb:9d:f5:99:a1:da:b8:9f:05:90:83: 17:e9:82:29:fd:cb:a3:c6:2f:46:2b:9d:ee:84:ec:79:84:ff: e8:c4:01:75:bf:99:95:82:5b:d8:3e:fd:f1:08:f4:a3:88:99: ec:8e:85:1c:05:d4:73:cd:e8:4a:b2:29:fe:ad:d2:60:bb:a0: 2f:f5:31:af:23:f7:1e:2c:3e:25:ba:e7:cd:8c:6c:98:b2:c7: 5a:f3:87:60 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+pXkAK+z6l7XpHimLbitlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4 NTE4YmUwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGRkY2Y2ZGU1NzdmOTQ3ZGYxOGQ1YjI1ZGY4N2IyNDcyNWYyYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ERmJV1s7OSFt9NR+p5MhwRkUqhA BvBEz2oXGzQNG1hZlXP2LD+UB7RwLJdIh7xacWwPNN65ei8xkJE821v7I9dh78Ys DNiaFgJoODa0JpYX/tX7t7L9Z/jTbfZcQ/dHkObn6RwhQhB90b056QD1wcxv2NmV gcn3zON3hGrFPxw3SPFSjiExhRhpmm7BF/8vnbWCIpvIaWrWw7LnYvmxrnTUIY83 3R/zo4CQZyp/7Xs7moFC0ahsEoKnCcWfX4l0k+O20FIhQOZ9JJaqbUCkUfhvMWFs RWV2zVk08wSPs/7oqra9ibDx2OyjuFdTrQNn3jzPvUbYJfbAr4tSQRbzDQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIjdz23ld/lH3xjVsl34eyRyXyu+MB8GA1UdIwQY MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt MGUyZDY5N2IyN2UzLzEvaU4zUGJlVjMtVWZmR05XeVhmaDdKSEpmSzc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDHw9AAwQE T4wgAwQEUPTwAwQEU5cQMA0EAgACMAcDBQAgAU2IMA0GCSqGSIb3DQEBCwUAA4IB AQCyx4F3Vq4LeWgCnWhHdcIhsZvFISYnZorIbHXnezjCXaplnN9PCzWnDE1Tlu6S PLdY/Wi4wEU0XBwzcV8DUiiPFyxGTtzpSt2xucMN8CXPRoDnH36iKq1vedW4dwnd RG+f6i7M4bDWVg2y4HIBcJ0t/gEgb+Fd2biqZLRLnkPraaCV7JD93VvL2l7cQf9n rgM0kpxTV5zP3XWZ2R1a0goM0M+yOzqZWLJn6531maHauJ8FkIMX6YIp/cujxi9G K53uhOx5hP/oxAF1v5mVglvYPv3xCPSjiJnsjoUcBdRzzehKsin+rdJgu6Av9TGv I/ceLD4luufNjGyYssda84dg -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:53 2026 by rpki-client