This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa File: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (raw, json) Hash identifier: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko= Subject key identifier: B6:FB:E1:8D:C3:4F:4F:3B:BC:10:9F:DE:82:82:0C:5D:16:19:04:9F Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74 Certificate serial: 019B7B353DE8A64AC21480BDDEAF94350DAA Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31082 IP address blocks: 31.207.91.0/24 maxlen: 24 93.189.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:e8:a6:4a:c2:14:80:bd:de:af:94:35:0d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6fbe18dc34f4f3bbc109fde82820c5d1619049f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c7:7a:5c:e1:a6:9a:57:46:59:56:7d:fc:88: e1:3e:3e:3a:e0:3c:c0:b9:62:dc:1f:45:ef:1b:79: 07:38:35:c7:66:02:6c:96:c0:fd:b3:42:fb:92:87: c6:c1:e6:0e:59:c3:ed:2b:89:60:35:3d:cb:45:fc: 04:03:27:15:20:17:97:73:9d:ac:09:8c:40:09:a7: 4b:e6:05:9c:ce:eb:bc:c0:d7:2c:b5:83:6d:2e:34: c5:eb:4e:28:02:3f:a3:db:c1:64:6d:2e:45:0c:5b: 09:09:6f:11:a3:1c:72:01:2e:4f:d1:3e:67:7d:ef: 82:42:63:e2:7c:b2:d4:cc:fe:a7:3b:cb:4f:9f:67: 54:26:cc:33:60:98:54:59:e4:8b:8c:ba:b6:7f:bf: 3f:21:fd:42:10:f2:ab:c1:74:f1:95:8e:9f:7d:3e: e8:a7:d8:48:1d:0d:a6:ae:21:d5:87:55:80:e1:e1: 34:1a:2f:5f:b4:92:7c:df:57:86:56:73:9f:0a:90: 40:12:32:a7:ea:26:c8:03:c4:76:06:d7:a8:8b:19: 0b:8d:67:b8:97:ce:0b:2d:93:2e:85:cd:25:44:a3: 81:dd:b2:2b:97:5f:8a:de:7c:43:89:d9:7f:18:48: ac:1a:85:8f:cf:1e:ad:36:fa:07:d4:9a:1a:0d:34: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FB:E1:8D:C3:4F:4F:3B:BC:10:9F:DE:82:82:0C:5D:16:19:04:9F X509v3 Authority Key Identifier: keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.91.0/24 93.189.39.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c9:b8:ef:bb:9a:ed:aa:29:a8:ad:08:9b:2f:ce:14:89:fe: 58:3f:a9:d5:20:c1:e2:b2:48:e5:0a:c3:9d:83:9f:89:ce:07: ca:c8:3a:4f:3d:e2:df:75:0d:03:70:40:1c:00:d6:98:a7:77: 35:60:9e:cf:fc:77:41:73:01:03:34:38:8c:9b:1f:c9:70:50: 7c:c2:bd:30:9b:36:48:b0:bd:38:d6:80:d5:72:1a:8d:cb:91: 91:74:18:23:ee:7c:83:53:4c:e6:1f:4e:64:ef:f3:db:3f:89: af:ba:23:d9:b8:6e:4c:15:4e:52:8d:e9:de:74:ae:4d:cb:8b: 55:f2:fb:70:65:38:0a:d4:d0:44:31:46:e0:d1:30:3a:6a:5c: 88:f4:aa:58:7c:0e:2b:3f:b1:33:8e:b5:b8:3c:f8:5e:4e:47: f2:d0:e5:b2:9d:f1:86:ac:16:0f:07:95:d6:d0:29:49:51:9e: 4e:6d:4f:c7:55:55:f2:3a:14:55:42:1d:72:1b:5a:1e:df:dd: af:51:c6:ca:04:f5:9c:de:28:bd:c8:11:c9:16:56:d9:7a:a4: 9e:8b:14:cb:7b:31:23:43:0d:08:e8:ba:47:0f:62:3b:6c:88: e0:77:9d:23:c3:58:06:41:95:f9:ed:ba:fa:5a:94:b0:36:dd: 54:7a:0f:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NT3opkrCFIC93q+UNQ2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj ZmZkNzQwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmZiZTE4ZGMzNGY0ZjNiYmMxMDlmZGU4MjgyMGM1ZDE2MTkwNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8d6XOGmmldGWVZ9/IjhPj464DzA uWLcH0XvG3kHODXHZgJslsD9s0L7kofGweYOWcPtK4lgNT3LRfwEAycVIBeXc52s CYxACadL5gWczuu8wNcstYNtLjTF604oAj+j28FkbS5FDFsJCW8RoxxyAS5P0T5n fe+CQmPifLLUzP6nO8tPn2dUJswzYJhUWeSLjLq2f78/If1CEPKrwXTxlY6ffT7o p9hIHQ2mriHVh1WA4eE0Gi9ftJJ831eGVnOfCpBAEjKn6ibIA8R2BteoixkLjWe4 l84LLZMuhc0lRKOB3bIrl1+K3nxDidl/GEisGoWPzx6tNvoH1JoaDTQj+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLb74Y3DT087vBCf3oKCDF0WGQSfMB8GA1UdIwQY MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt Y2Q2NmFkNTM0ODEyLzEvdHZ2aGpjTlBUenU4RUpfZWdvSU1YUllaQko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH89bAwQA Xb0nMA0GCSqGSIb3DQEBCwUAA4IBAQBXybjvu5rtqimorQibL84Uif5YP6nVIMHi skjlCsOdg5+JzgfKyDpPPeLfdQ0DcEAcANaYp3c1YJ7P/HdBcwEDNDiMmx/JcFB8 wr0wmzZIsL041oDVchqNy5GRdBgj7nyDU0zmH05k7/PbP4mvuiPZuG5MFU5Sjene dK5Ny4tV8vtwZTgK1NBEMUbg0TA6alyI9KpYfA4rP7EzjrW4PPheTkfy0OWynfGG rBYPB5XW0ClJUZ5ObU/HVVXyOhRVQh1yG1oe392vUcbKBPWc3ii9yBHJFlbZeqSe ixTLezEjQw0I6LpHD2I7bIjgd50jw1gGQZX57br6WpSwNt1Ueg/O -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:15 2026 by rpki-client