This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/cR-Inx2FPQAFHMTBAFcIV-g96qI.roa File: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (raw, json) Hash identifier: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8= Subject key identifier: 71:1F:88:9F:1D:85:3D:00:05:1C:C4:C1:00:57:08:57:E8:3D:EA:A2 Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978 Certificate serial: 019B7F83FB11C44DB89030086F290373EEB4 Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/cR-Inx2FPQAFHMTBAFcIV-g96qI.roa Signing time: Fri 02 Jan 2026 16:21:54 +0000 ROA not before: Fri 02 Jan 2026 16:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201401 IP address blocks: 31.14.11.0/24 maxlen: 24 31.14.32.0/24 maxlen: 24 31.14.44.0/24 maxlen: 24 31.14.48.0/24 maxlen: 24 45.157.76.0/22 maxlen: 22 89.31.56.0/21 maxlen: 21 185.76.88.0/22 maxlen: 22 185.76.168.0/22 maxlen: 22 2a05:52a0::/30 maxlen: 30 2a10:c240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:fb:11:c4:4d:b8:90:30:08:6f:29:03:73:ee:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978 Validity Not Before: Jan 2 16:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=711f889f1d853d00051cc4c100570857e83deaa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:54:f3:5f:a2:92:fc:77:5c:9f:cd:6f:c0:d5: 76:88:c7:88:11:07:62:1f:93:22:0a:10:b3:24:03: 87:66:67:1c:18:b2:a9:f0:bc:71:26:db:82:c7:b8: 2d:58:49:d8:0f:54:4b:bb:9b:77:71:62:07:0f:6e: 7b:ab:35:53:13:8c:28:02:4e:2b:4c:62:bd:84:28: 91:f1:82:2d:7e:dd:5f:a2:f4:92:e0:99:41:03:2f: a6:3c:25:38:12:88:6b:90:8d:71:b0:58:ff:1a:bd: a6:a6:f0:e3:77:b0:42:01:48:c2:02:f4:23:6e:e5: a5:da:3e:20:2a:4c:58:ff:d4:38:ed:fb:31:2d:e9: fe:93:03:75:ba:6c:10:c6:42:f2:10:d8:ed:85:90: a1:f9:07:9c:47:c6:96:c0:7e:5c:32:d5:6d:28:4c: ec:e9:10:42:0d:20:e6:ac:f1:0b:81:a7:2a:14:94: 79:99:70:78:d5:90:7b:af:49:bd:f7:7f:4d:b7:85: 66:90:4d:8d:fe:dc:47:da:28:f1:6d:20:8a:8f:f8: b4:b0:fd:83:f2:df:ec:3b:7d:e5:e2:a2:6e:f1:0b: db:ce:b2:9c:0e:da:2d:94:d1:99:76:d1:f3:91:ef: a7:a3:7a:47:7d:2d:18:6e:41:67:85:72:fe:af:fb: 0a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1F:88:9F:1D:85:3D:00:05:1C:C4:C1:00:57:08:57:E8:3D:EA:A2 X509v3 Authority Key Identifier: keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/cR-Inx2FPQAFHMTBAFcIV-g96qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.11.0/24 31.14.32.0/24 31.14.44.0/24 31.14.48.0/24 45.157.76.0/22 89.31.56.0/21 185.76.88.0/22 185.76.168.0/22 IPv6: 2a05:52a0::/30 2a10:c240::/32 Signature Algorithm: sha256WithRSAEncryption 80:4a:be:8e:b1:fd:9f:3e:cd:e0:b8:bd:d2:29:57:6a:cf:8d: f1:f2:8d:b6:05:64:3c:c0:cf:e6:6b:85:1c:c1:04:9e:5d:aa: 6f:0b:6f:60:19:4b:e4:90:fe:e6:51:36:03:43:c9:22:7f:13: 97:16:ea:a0:34:1b:e0:60:55:8a:f3:48:c7:b5:d0:62:37:e4: 6d:25:ad:ce:63:97:fc:07:65:29:13:a8:45:6c:dd:dc:c4:3c: 31:4a:d1:dd:7d:cf:65:8b:65:49:72:8d:e5:95:9e:ee:3a:30: f4:f1:d1:4a:79:b8:93:ee:f5:8f:0e:de:e9:7a:e9:da:0c:c6: 5b:8d:57:27:16:c1:4d:59:d9:3f:c0:32:46:da:47:f8:f4:d5: c1:83:c0:b5:fc:45:1b:26:45:95:c7:ff:bf:18:97:dd:72:ac: 20:f5:d4:78:e9:cd:06:3a:58:75:06:2f:4e:d1:21:23:88:17: a6:d4:67:3c:02:3a:7f:80:9d:71:73:d9:9a:1b:e9:25:85:15: 76:7e:0a:8c:5a:16:ed:8b:b3:ce:ea:35:98:50:bc:c2:c1:65: d2:ec:2e:98:06:d9:c1:1c:ac:0c:46:67:ca:56:62:e4:e3:fb: 9c:07:20:52:f3:18:18:58:a7:21:8f:f1:40:1d:37:9a:27:fa: 53:cf:b5:c3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt/g/sRxE24kDAIbykDc+60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm NDI5NzgwHhcNMjYwMTAyMTYyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTFmODg5ZjFkODUzZDAwMDUxY2M0YzEwMDU3MDg1N2U4M2RlYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31TzX6KS/Hdcn81vwNV2iMeIEQdi H5MiChCzJAOHZmccGLKp8LxxJtuCx7gtWEnYD1RLu5t3cWIHD257qzVTE4woAk4r TGK9hCiR8YItft1fovSS4JlBAy+mPCU4EohrkI1xsFj/Gr2mpvDjd7BCAUjCAvQj buWl2j4gKkxY/9Q47fsxLen+kwN1umwQxkLyENjthZCh+QecR8aWwH5cMtVtKEzs 6RBCDSDmrPELgacqFJR5mXB41ZB7r0m9939Nt4VmkE2N/txH2ijxbSCKj/i0sP2D 8t/sO33l4qJu8QvbzrKcDtotlNGZdtHzke+no3pHfS0YbkFnhXL+r/sKqQIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHEfiJ8dhT0ABRzEwQBXCFfoPeqiMB8GA1UdIwQY MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt YWYxZTZkMDc3ZTBjLzEvY1ItSW54MkZQUUFGSE1UQkFGY0lWLWc5NnFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQAHw4LAwQA Hw4gAwQAHw4sAwQAHw4wAwQCLZ1MAwQDWR84AwQCuUxYAwQCuUyoMBQEAgACMA4D BQIqBVKgAwUAKhDCQDANBgkqhkiG9w0BAQsFAAOCAQEAgEq+jrH9nz7N4Li90ilX as+N8fKNtgVkPMDP5muFHMEEnl2qbwtvYBlL5JD+5lE2A0PJIn8TlxbqoDQb4GBV ivNIx7XQYjfkbSWtzmOX/AdlKROoRWzd3MQ8MUrR3X3PZYtlSXKN5ZWe7jow9PHR Snm4k+71jw7e6Xrp2gzGW41XJxbBTVnZP8AyRtpH+PTVwYPAtfxFGyZFlcf/vxiX 3XKsIPXUeOnNBjpYdQYvTtEhI4gXptRnPAI6f4CdcXPZmhvpJYUVdn4KjFoW7Yuz zuo1mFC8wsFl0uwumAbZwRysDEZnylZi5OP7nAcgUvMYGFinIY/xQB03mif6U8+1 ww== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:26 2026 by rpki-client