This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa File: BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa (raw, json) Hash identifier: Jk587wQ/RfxSBQigyNcTI8jkJxFSiSHzC0v2gfYkHEo= Subject key identifier: 06:E4:54:38:5E:E6:30:E5:FD:2D:A1:6F:D5:5D:D0:84:0F:B9:BB:BC Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019B77C68A26646FC4E5CDAC2B5D5C3574C4 Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208685 IP address blocks: 31.3.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8a:26:64:6f:c4:e5:cd:ac:2b:5d:5c:35:74:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06e454385ee630e5fd2da16fd55dd0840fb9bbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:5c:88:70:f4:69:28:05:5b:0e:e3:83:0f: 80:dd:28:dd:41:77:10:08:34:c4:6e:27:ec:97:d0: 64:d7:9e:df:73:a9:6e:60:98:f4:3a:42:81:4b:8f: ac:87:dd:6d:1c:49:7e:ec:9d:5f:8e:69:d5:a7:a1: c5:97:8e:ce:e9:a3:5c:47:5e:92:70:1f:af:fe:ac: 85:17:8c:75:08:83:b3:ee:d7:a5:e1:00:b9:d0:49: ba:5c:2f:00:26:49:1c:2a:76:88:4a:54:fe:7e:62: 81:31:a9:fd:b7:7e:60:85:e6:8a:b0:7b:50:a7:e5: 50:b0:a1:70:5e:fb:14:be:fb:e6:58:85:2b:3d:73: 9b:50:ea:b4:47:7d:6a:32:6a:d5:78:7f:2c:1d:d3: 1b:9c:3c:5f:f1:d5:ed:be:d5:55:de:d7:a2:bb:4a: 8a:f7:e9:56:74:2c:23:c8:f8:e8:d1:c5:19:7c:0b: b5:62:e1:33:90:1f:2b:5a:b0:1a:a0:68:e1:34:81: 77:8c:20:50:cd:9f:e4:3b:3a:95:ac:14:79:ab:12: 61:67:71:6d:42:7e:7e:1b:a5:a7:18:d1:71:ec:25: 3c:14:7a:75:f2:bf:7e:ec:2f:1e:b7:85:74:95:08: 32:df:c7:c0:74:5e:52:e0:53:82:4d:31:a9:6a:94: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E4:54:38:5E:E6:30:E5:FD:2D:A1:6F:D5:5D:D0:84:0F:B9:BB:BC X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.156.0/24 Signature Algorithm: sha256WithRSAEncryption 54:41:34:3f:00:d1:01:27:94:10:c2:58:fc:ae:1f:17:d2:71: 39:39:97:62:f5:b3:47:a2:b7:b7:8a:a9:ff:be:8e:4d:42:77: d8:1f:c6:6d:5a:cb:bf:77:a8:fc:0b:e5:77:e2:58:3d:bf:ff: 31:d2:13:c2:55:68:95:ff:23:c3:d0:17:5a:3a:1f:9c:7b:ab: 9d:87:6a:1d:2f:2d:23:8a:72:44:eb:73:8e:8d:0c:e2:a7:f0: 2d:16:3e:00:f0:6d:7e:ac:9e:b3:d9:c9:b5:78:84:3c:7d:8f: 24:02:f3:10:cd:66:58:8a:c6:76:d4:77:95:6d:ab:01:73:65: 26:91:8f:03:11:d9:9f:6d:7b:cd:14:10:9e:5a:3c:e5:b6:cf: d9:a9:ec:8b:d2:99:3c:5b:ea:16:24:23:e6:ce:8b:0f:16:ee: d7:20:c1:1e:f5:a7:7f:29:a7:78:bf:74:3c:5e:55:ba:6f:21: 05:68:46:bf:11:42:0e:53:07:5c:98:1a:61:75:fa:0d:af:bd: 5f:4c:66:ba:c1:17:d2:77:38:1d:67:b9:3e:27:96:5c:2f:48: ce:34:7c:28:17:2d:65:e6:99:8d:00:b6:7f:e0:2e:9f:29:ab: a8:91:0e:bf:ce:ff:99:f4:25:ec:43:35:df:14:75:25:0e:0e: e9:ff:28:a8 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xoomZG/E5c2sK11cNXTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmU0NTQzODVlZTYzMGU1ZmQyZGExNmZkNTVkZDA4NDBmYjliYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWNciHD0aSgFWw7jgw+A3SjdQXcQ CDTEbifsl9Bk157fc6luYJj0OkKBS4+sh91tHEl+7J1fjmnVp6HFl47O6aNcR16S cB+v/qyFF4x1CIOz7tel4QC50Em6XC8AJkkcKnaISlT+fmKBMan9t35gheaKsHtQ p+VQsKFwXvsUvvvmWIUrPXObUOq0R31qMmrVeH8sHdMbnDxf8dXtvtVV3teiu0qK 9+lWdCwjyPjo0cUZfAu1YuEzkB8rWrAaoGjhNIF3jCBQzZ/kOzqVrBR5qxJhZ3Ft Qn5+G6WnGNFx7CU8FHp18r9+7C8et4V0lQgy38fAdF5S4FOCTTGpapR3jwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAbkVDhe5jDl/S2hb9Vd0IQPubu8MB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xL0J1UlVPRjdtTU9YOUxhRnYxVjNRaEEtNXU3dy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2VhLWJkMzdkYTBlNDQ3 Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfA5ww DQYJKoZIhvcNAQELBQADggEBAFRBND8A0QEnlBDCWPyuHxfScTk5l2L1s0eit7eK qf++jk1Cd9gfxm1ay793qPwL5XfiWD2//zHSE8JVaJX/I8PQF1o6H5x7q52Hah0v LSOKckTrc46NDOKn8C0WPgDwbX6snrPZybV4hDx9jyQC8xDNZliKxnbUd5VtqwFz ZSaRjwMR2Z9te80UEJ5aPOW2z9mp7IvSmTxb6hYkI+bOiw8W7tcgwR71p38pp3i/ dDxeVbpvIQVoRr8RQg5TB1yYGmF1+g2vvV9MZrrBF9J3OB1nuT4nllwvSM40fCgX LWXmmY0Atn/gLp8pq6iRDr/O/5n0JexDNd8UdSUODun/KKg= -----END CERTIFICATE-----Generated at Fri Jan 23 17:40:04 2026 by rpki-client