This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dapK3ZCZ0VR8qULDfX2V9Zqy5p8.roa File: dapK3ZCZ0VR8qULDfX2V9Zqy5p8.roa (raw, json) Hash identifier: mkP8eQDIpAA7mAE2Ei1GwkoRga1swHgLEW3CG0f2Xcs= Subject key identifier: 75:AA:4A:DD:90:99:D1:54:7C:A9:42:C3:7D:7D:95:F5:9A:B2:E6:9F Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F7D537FE5106054381B4D15DE70B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dapK3ZCZ0VR8qULDfX2V9Zqy5p8.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42794 IP address blocks: 31.13.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f7:d5:37:fe:51:06:05:43:81:b4:d1:5d:e7:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75aa4add9099d1547ca942c37d7d95f59ab2e69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:db:81:4b:d7:eb:83:ab:45:87:1e:dd:63:33: 64:e5:8c:9c:ce:85:2d:b9:17:c7:28:7f:57:90:56: 11:93:f1:d0:9d:af:b7:fd:96:b3:ad:02:19:32:d0: fc:a7:0f:69:f0:68:f7:a5:58:ca:d8:f9:29:fc:b6: 63:34:8f:22:a3:58:f2:b6:da:16:6c:1a:b1:eb:06: bd:fd:ea:d1:f7:55:68:20:78:2a:f1:20:02:4d:48: 48:62:aa:84:1b:9b:83:d7:ab:d8:37:4c:da:96:df: 11:df:62:05:bd:b1:07:72:82:98:a7:00:3a:12:8c: aa:95:70:4f:58:66:60:97:50:46:fb:44:65:da:18: a0:6b:98:8e:c7:0d:57:96:70:73:76:e1:fb:2b:ca: d4:62:f2:1d:f0:d4:9c:71:15:c4:eb:0c:94:a5:f9: ee:6b:c2:e8:56:12:6f:33:94:7d:a6:ae:07:bf:72: b7:3a:8b:14:18:e5:9f:f4:c4:5c:58:72:b3:79:2f: e1:a7:1d:7e:d3:ca:9d:33:4b:3e:f7:ae:cf:71:57: f0:75:22:7d:f4:a8:77:a9:3f:84:1c:10:0b:8e:a9: 1b:08:56:95:e0:41:a5:37:29:81:6d:5f:08:7c:83: 8c:51:a3:7a:cd:e1:67:2c:35:5e:38:5d:52:4b:85: f4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AA:4A:DD:90:99:D1:54:7C:A9:42:C3:7D:7D:95:F5:9A:B2:E6:9F X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dapK3ZCZ0VR8qULDfX2V9Zqy5p8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.198.0/24 Signature Algorithm: sha256WithRSAEncryption 24:9a:62:96:ad:0a:fb:22:06:7e:05:14:35:60:6f:cb:3c:ae: 82:c6:23:e3:fb:70:52:92:9e:95:61:08:e8:a7:fb:85:11:96: 80:9f:ab:ba:d0:54:c7:7b:8c:13:ad:eb:e5:78:6e:45:41:eb: 96:a6:6a:a3:9f:b1:9b:ba:36:d1:7f:d7:50:c4:13:d4:a4:97: 92:1d:8c:4d:b5:a3:83:71:98:c4:75:68:8d:68:0f:ec:e6:09: ce:ef:b5:9b:d1:6d:5a:ec:ad:f1:ff:36:3e:9c:6d:bb:60:a4: 7c:86:e4:99:df:9e:7d:db:4b:02:06:bf:99:de:12:6f:5b:76: bd:80:cd:99:2e:9b:32:36:4c:d1:64:c6:14:4e:bd:9a:2d:58: 03:d8:cd:4a:36:c1:1d:7e:08:f8:07:7f:ac:12:b4:4b:67:11: 6b:d1:53:7e:76:ab:6d:04:ca:b0:db:c7:a3:5d:d9:cd:81:ef: 84:8d:66:f8:14:93:f4:06:e1:27:5a:14:70:4a:72:e8:7a:da: d9:d7:e0:5b:3f:e1:56:ad:4d:aa:4a:4b:ee:fb:67:59:84:1c: 14:e3:ab:1f:95:cc:ac:eb:4c:bc:71:67:eb:18:a9:0b:db:20: 99:d9:a6:f7:01:38:38:a1:b5:84:1f:26:30:71:5c:60:48:9c: 20:3d:d7:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovfVN/5RBgVDgbTRXecLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWFhNGFkZDkwOTlkMTU0N2NhOTQyYzM3ZDdkOTVmNTlhYjJlNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59uBS9frg6tFhx7dYzNk5YyczoUt uRfHKH9XkFYRk/HQna+3/ZazrQIZMtD8pw9p8Gj3pVjK2Pkp/LZjNI8io1jyttoW bBqx6wa9/erR91VoIHgq8SACTUhIYqqEG5uD16vYN0zalt8R32IFvbEHcoKYpwA6 EoyqlXBPWGZgl1BG+0Rl2higa5iOxw1XlnBzduH7K8rUYvId8NSccRXE6wyUpfnu a8LoVhJvM5R9pq4Hv3K3OosUGOWf9MRcWHKzeS/hpx1+08qdM0s+967PcVfwdSJ9 9Kh3qT+EHBALjqkbCFaV4EGlNymBbV8IfIOMUaN6zeFnLDVeOF1SS4X0DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWqSt2QmdFUfKlCw319lfWasuafMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZGFwSzNaQ1owVlI4cVVMRGZYMlY5WnF5NXA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw3GMA0G CSqGSIb3DQEBCwUAA4IBAQAkmmKWrQr7IgZ+BRQ1YG/LPK6CxiPj+3BSkp6VYQjo p/uFEZaAn6u60FTHe4wTrevleG5FQeuWpmqjn7GbujbRf9dQxBPUpJeSHYxNtaOD cZjEdWiNaA/s5gnO77Wb0W1a7K3x/zY+nG27YKR8huSZ355920sCBr+Z3hJvW3a9 gM2ZLpsyNkzRZMYUTr2aLVgD2M1KNsEdfgj4B3+sErRLZxFr0VN+dqttBMqw28ej XdnNge+EjWb4FJP0BuEnWhRwSnLoetrZ1+BbP+FWrU2qSkvu+2dZhBwU46sflcys 60y8cWfrGKkL2yCZ2ab3ATg4obWEHyYwcVxgSJwgPdc8 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:20 2026 by rpki-client