This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d5igUYFmWF9M6flx8rqXPb4BgAY.roa File: d5igUYFmWF9M6flx8rqXPb4BgAY.roa (raw, json) Hash identifier: 5I5jKGtWOlaUN4zmNmKX67QHGrdRJBYCBLY81l/efgQ= Subject key identifier: 77:98:A0:51:81:66:58:5F:4C:E9:F9:71:F2:BA:97:3D:BE:01:80:06 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A315016E350CC03F2FCE0CB965A593 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d5igUYFmWF9M6flx8rqXPb4BgAY.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61437 IP address blocks: 31.13.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:15:01:6e:35:0c:c0:3f:2f:ce:0c:b9:65:a5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7798a0518166585f4ce9f971f2ba973dbe018006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:14:00:77:98:35:93:e3:02:f6:47:fd:36: 85:e8:97:2a:cd:5a:ce:68:32:2f:98:12:cf:80:95: 67:45:a6:22:b6:34:62:e2:ab:24:6f:a5:62:f5:dd: 83:b9:33:1d:0b:4c:32:74:3f:2b:c2:d5:29:98:67: 11:09:b8:af:2c:49:de:83:1b:6e:47:57:88:0f:f9: 7e:6a:8b:5d:9f:dc:84:6a:91:14:87:e7:27:29:ba: 30:1a:f6:7f:37:0c:69:0a:19:ac:9f:d7:15:fd:2f: ca:2e:a5:0f:0c:39:c1:0b:cc:e5:82:21:62:cd:84: e8:e5:64:8e:12:61:02:73:79:9c:ed:62:66:86:90: 76:01:3e:77:63:65:e1:0c:89:12:c5:c9:f0:de:32: d7:ce:7f:38:d2:67:30:3a:16:be:4a:8b:d3:93:16: 6e:eb:8e:0f:36:d7:97:54:72:bf:af:b3:19:40:69: aa:34:76:9d:af:00:46:2c:06:cf:9f:5f:dc:5c:e2: 80:2f:31:3f:66:05:2b:8d:30:a8:3b:b9:41:f8:9f: 3f:bc:a5:7d:c1:d4:f0:6c:54:1f:b2:27:af:d6:84: fc:84:22:33:e9:e5:3f:b5:ab:e5:e2:0d:32:72:30: 5e:8a:b7:f1:ff:11:34:cb:cc:1b:9b:2f:3d:96:be: 59:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:A0:51:81:66:58:5F:4C:E9:F9:71:F2:BA:97:3D:BE:01:80:06 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d5igUYFmWF9M6flx8rqXPb4BgAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.232.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:e7:50:91:79:7e:2c:4e:46:59:2f:80:8c:ad:fb:5c:f3:74: 65:b6:f6:d1:ba:59:a4:2b:29:f7:4d:44:21:d7:c2:58:39:19: 3c:91:ea:3c:17:6d:c9:45:96:c2:45:ca:43:13:92:a1:7f:97: 48:d8:98:45:4a:54:b5:f1:44:df:a9:15:ef:d3:f3:7f:19:e7: 2e:cb:85:60:4f:a2:75:51:32:a2:69:7e:d1:9f:ff:78:f7:a2: e7:e0:a7:d6:45:56:d2:b9:0b:f3:db:7a:d0:9c:83:5e:9d:8b: 76:38:19:ea:4c:d5:19:60:a8:07:de:d6:55:da:ee:1f:2f:53: aa:02:67:69:a9:66:8b:ac:40:80:d8:31:5c:08:96:ac:4e:2a: f1:a4:6c:e6:f0:d3:f5:50:fd:be:05:32:d3:28:7b:d9:fe:de: 72:68:bc:c9:47:b5:38:0b:5e:35:0d:70:f5:e4:7d:be:c0:df: aa:22:cd:cd:09:03:c2:9d:54:58:bc:dd:f3:e7:7e:dd:ce:01: 00:03:71:ba:1c:84:e4:e2:f3:c3:40:ef:f5:d5:10:35:62:4d: 54:3c:c3:bf:16:d1:23:87:c0:fa:3b:69:cb:2f:99:58:a7:d4: 3c:84:d7:48:2a:1a:57:28:c6:0f:36:8d:1a:55:31:69:c2:6b: fe:72:e7:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxUBbjUMwD8vzgy5ZaWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Nzk4YTA1MTgxNjY1ODVmNGNlOWY5NzFmMmJhOTczZGJlMDE4MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWMUAHeYNZPjAvZH/TaF6JcqzVrO aDIvmBLPgJVnRaYitjRi4qskb6Vi9d2DuTMdC0wydD8rwtUpmGcRCbivLEnegxtu R1eID/l+aotdn9yEapEUh+cnKbowGvZ/NwxpChmsn9cV/S/KLqUPDDnBC8zlgiFi zYTo5WSOEmECc3mc7WJmhpB2AT53Y2XhDIkSxcnw3jLXzn840mcwOha+SovTkxZu 644PNteXVHK/r7MZQGmqNHadrwBGLAbPn1/cXOKALzE/ZgUrjTCoO7lB+J8/vKV9 wdTwbFQfsiev1oT8hCIz6eU/tavl4g0ycjBeirfx/xE0y8wbmy89lr5Z1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeYoFGBZlhfTOn5cfK6lz2+AYAGMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZDVpZ1VZRm1XRjlNNmZseDhycVhQYjRCZ0FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCHw3oMA0G CSqGSIb3DQEBCwUAA4IBAQAs51CReX4sTkZZL4CMrftc83RltvbRulmkKyn3TUQh 18JYORk8keo8F23JRZbCRcpDE5Khf5dI2JhFSlS18UTfqRXv0/N/Gecuy4VgT6J1 UTKiaX7Rn/9496Ln4KfWRVbSuQvz23rQnINenYt2OBnqTNUZYKgH3tZV2u4fL1Oq AmdpqWaLrECA2DFcCJasTirxpGzm8NP1UP2+BTLTKHvZ/t5yaLzJR7U4C141DXD1 5H2+wN+qIs3NCQPCnVRYvN3z537dzgEAA3G6HITk4vPDQO/11RA1Yk1UPMO/FtEj h8D6O2nLL5lYp9Q8hNdIKhpXKMYPNo0aVTFpwmv+cueX -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:03 2026 by rpki-client