This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa File: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (raw, json) Hash identifier: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo= Subject key identifier: A7:C3:B8:64:DF:57:7A:57:6B:FD:0B:D8:B5:92:FD:46:49:0A:EA:B9 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019B7AC87DB531E94D372745AD83267DB43B Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa Signing time: Thu 01 Jan 2026 18:18:38 +0000 ROA not before: Thu 01 Jan 2026 18:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5400 IP address blocks: 31.95.0.0/16 maxlen: 16 31.95.0.0/21 maxlen: 21 31.95.14.0/23 maxlen: 23 31.95.16.0/20 maxlen: 20 31.95.48.0/21 maxlen: 21 31.95.56.0/24 maxlen: 24 31.95.58.0/23 maxlen: 23 31.95.64.0/21 maxlen: 21 31.95.72.0/22 maxlen: 22 31.95.80.0/22 maxlen: 22 31.95.96.0/19 maxlen: 19 31.95.128.0/20 maxlen: 20 31.95.160.0/20 maxlen: 20 31.95.176.0/22 maxlen: 22 31.95.184.0/21 maxlen: 21 31.95.208.0/21 maxlen: 21 31.95.218.0/23 maxlen: 23 31.95.220.0/22 maxlen: 22 31.95.228.0/22 maxlen: 22 31.95.232.0/22 maxlen: 22 31.95.238.0/23 maxlen: 23 31.95.240.0/22 maxlen: 22 31.95.246.0/23 maxlen: 23 31.95.248.0/22 maxlen: 22 31.95.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7d:b5:31:e9:4d:37:27:45:ad:83:26:7d:b4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Jan 1 18:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7c3b864df577a576bfd0bd8b592fd46490aeab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dd:ac:be:1d:a2:d6:ac:03:3a:8e:ed:c1:3e: 06:09:41:e8:d7:e4:cc:8a:e4:60:fb:ae:34:f3:f6: 45:51:2f:12:6b:12:4e:05:70:db:34:cf:a4:2e:ed: 17:f2:02:a0:86:e3:f2:96:9f:62:a2:c8:03:69:f8: da:bc:bf:28:bf:57:16:95:d0:24:ec:25:8c:e4:64: 18:95:59:72:41:ef:19:b7:0d:2b:7b:0a:0d:8a:82: ca:bd:26:3c:17:d9:62:4c:25:b6:8e:e3:78:d1:87: cb:f5:27:4d:7b:4e:a6:d8:60:92:f3:9d:f2:c6:76: 09:f4:61:49:3f:77:78:fe:6d:8a:5d:b2:b8:c1:80: 5d:20:56:c0:af:9e:f7:01:b1:4d:5c:ab:f7:f3:c1: 81:c1:0b:7a:4b:03:56:b7:5e:4c:7b:7e:a8:0d:63: f3:93:4b:06:9f:a0:3a:77:dc:60:5b:9b:8f:1a:fd: 96:83:2d:87:dc:97:3d:89:d0:17:68:ee:2f:7e:d5: 05:73:cb:45:08:2e:1a:8f:f8:c5:cb:72:72:d2:a6: 51:cc:11:ee:df:cb:f6:00:d3:6f:2b:f2:50:70:05: 7f:8a:cc:b5:61:d2:c5:37:0c:f2:ed:b0:5b:51:ff: ad:c5:a4:6d:97:09:ab:1c:29:b7:ac:a5:7a:54:48: af:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C3:B8:64:DF:57:7A:57:6B:FD:0B:D8:B5:92:FD:46:49:0A:EA:B9 X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:ab:64:d4:0b:33:a4:a1:3b:60:1b:21:bb:b6:bc:0b:c4:dd: b3:d3:20:c9:13:6f:a2:32:9f:ed:6d:e7:d1:81:5d:11:19:2d: 5e:48:58:70:36:71:71:90:1f:43:3f:64:d1:18:40:e7:91:c0: 64:76:31:c5:03:d0:a3:bc:b9:eb:d6:d6:25:ac:55:dc:9e:92: 1b:df:0a:08:ac:23:50:d4:f4:90:72:7a:01:50:3e:fd:c9:bb: b9:b3:31:79:c4:f3:21:03:85:a4:25:8e:00:97:91:3d:7d:ef: b4:d2:3a:ce:2c:52:68:b4:1b:94:61:5e:2c:63:8c:4f:59:8c: 5e:28:9b:28:b8:e8:77:bf:f2:03:5f:98:9c:ab:59:35:8d:76: 71:14:9a:61:85:6e:8a:64:8c:8c:d2:fa:9f:99:29:ab:7d:73: 1e:ad:78:9b:0b:05:81:4b:44:d6:60:11:9e:92:a5:d2:32:4b: f8:e1:9d:fa:44:bb:14:36:ea:cf:1b:a8:7e:2a:55:a1:d4:ec: 4b:bd:85:ce:64:8f:c2:43:93:67:14:3f:c7:17:13:60:27:85: 61:a2:20:40:7f:c3:da:74:0f:1f:e2:34:0f:a2:6c:ca:7d:2a: 9e:9f:d0:3b:30:c8:3b:c0:c5:45:f7:60:39:54:e0:25:8b:b9: a2:f0:0f:59 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6yH21MelNNydFrYMmfbQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjYwMTAxMTgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2MzYjg2NGRmNTc3YTU3NmJmZDBiZDhiNTkyZmQ0NjQ5MGFlYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt2svh2i1qwDOo7twT4GCUHo1+TM iuRg+6408/ZFUS8SaxJOBXDbNM+kLu0X8gKghuPylp9iosgDafjavL8ov1cWldAk 7CWM5GQYlVlyQe8Ztw0rewoNioLKvSY8F9liTCW2juN40YfL9SdNe06m2GCS853y xnYJ9GFJP3d4/m2KXbK4wYBdIFbAr573AbFNXKv388GBwQt6SwNWt15Me36oDWPz k0sGn6A6d9xgW5uPGv2Wgy2H3Jc9idAXaO4vftUFc8tFCC4aj/jFy3Jy0qZRzBHu 38v2ANNvK/JQcAV/isy1YdLFNwzy7bBbUf+txaRtlwmrHCm3rKV6VEivdQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFKfDuGTfV3pXa/0L2LWS/UZJCuq5MB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvcDhPNFpOOVhlbGRyX1F2WXRaTDlSa2tLNnJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAH18wDQYJ KoZIhvcNAQELBQADggEBAECrZNQLM6ShO2AbIbu2vAvE3bPTIMkTb6Iyn+1t59GB XREZLV5IWHA2cXGQH0M/ZNEYQOeRwGR2McUD0KO8uevW1iWsVdyekhvfCgisI1DU 9JByegFQPv3Ju7mzMXnE8yEDhaQljgCXkT1977TSOs4sUmi0G5RhXixjjE9ZjF4o myi46He/8gNfmJyrWTWNdnEUmmGFbopkjIzS+p+ZKat9cx6teJsLBYFLRNZgEZ6S pdIyS/jhnfpEuxQ26s8bqH4qVaHU7Eu9hc5kj8JDk2cUP8cXE2AnhWGiIEB/w9p0 Dx/iNA+ibMp9Kp6f0DswyDvAxUX3YDlU4CWLuaLwD1k= -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:39 2026 by rpki-client