This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f2cntpaEDdLduLk3fz5B7jXE9A4.roa File: f2cntpaEDdLduLk3fz5B7jXE9A4.roa (raw, json) Hash identifier: 5jcrkYTpm+YZHZn9VX/v56Wr0DsaGDAxAPpPuRA7N3o= Subject key identifier: 7F:67:27:B6:96:84:0D:D2:DD:B8:B9:37:7F:3E:41:EE:35:C4:F4:0E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3193E34C0CB25A0310372F72CBB02 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f2cntpaEDdLduLk3fz5B7jXE9A4.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 151612 IP address blocks: 31.13.224.0/24 maxlen: 24 31.13.231.0/24 maxlen: 24 81.161.230.0/24 maxlen: 24 87.120.89.0/24 maxlen: 24 193.37.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:19:3e:34:c0:cb:25:a0:31:03:72:f7:2c:bb:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f6727b696840dd2ddb8b9377f3e41ee35c4f40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:e9:19:d3:50:4c:56:42:cf:97:24:cb:a2: a2:bd:5c:b9:d3:c4:97:4e:15:c9:ee:84:05:ac:e6: d4:32:d9:bc:83:ed:cc:81:8a:a1:6a:93:1a:0e:47: 6a:15:84:08:60:4a:90:e5:60:2c:71:33:db:5b:df: bd:bd:70:46:13:20:8f:b1:d2:a9:5b:0b:bf:e1:c6: 26:bc:c1:9e:b2:c8:fe:d1:02:95:9a:ce:64:fb:77: 28:29:98:3d:d1:4b:bc:52:61:7f:4d:4c:c8:29:71: ea:11:f1:c3:34:99:c6:a7:a8:b1:83:0a:d3:d6:29: 70:8e:c1:3b:0b:2a:67:a9:fd:f5:48:b4:15:20:fd: b6:1f:62:eb:ed:ce:22:9b:b8:00:28:a0:23:5f:eb: 15:ff:65:e7:45:d2:5b:46:94:00:a0:07:89:f1:ab: da:27:a7:8d:bb:24:6a:29:0c:6f:31:da:3f:bf:92: 0e:74:8a:6d:bc:30:20:ab:7c:a9:15:71:3b:a4:66: 25:da:6d:70:0e:e8:30:53:0d:1e:6a:a9:b6:f0:34: 04:fb:4d:6e:9e:d6:c7:d1:d2:6a:76:c7:27:5d:3c: a4:3c:3d:57:f0:a8:7c:07:37:c1:5a:46:99:c1:93: 68:4d:07:13:8a:21:43:3f:17:7a:db:6d:f4:a1:b6: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:67:27:B6:96:84:0D:D2:DD:B8:B9:37:7F:3E:41:EE:35:C4:F4:0E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f2cntpaEDdLduLk3fz5B7jXE9A4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.224.0/24 31.13.231.0/24 81.161.230.0/24 87.120.89.0/24 193.37.47.0/24 Signature Algorithm: sha256WithRSAEncryption 90:a1:41:6c:9d:22:29:2f:d8:2f:41:91:5b:0c:5e:27:e8:23: cc:9a:6d:39:23:45:76:1f:59:cf:5b:46:51:79:e5:70:15:8d: 6c:28:2a:30:84:3a:72:cc:ba:98:50:29:00:03:32:30:52:a9: dc:4e:3d:88:db:3f:1c:f4:db:0a:94:a0:6c:7f:98:d9:0f:97: a5:df:1a:34:0b:ea:ef:52:ff:af:a9:b9:f0:d6:75:15:e3:eb: 1a:6c:48:2c:44:b6:3f:2f:2b:90:02:8c:7f:88:08:63:01:91: a9:5d:22:56:52:b1:b8:e8:72:3c:d8:7d:d0:24:80:34:20:8b: 2e:31:49:a8:22:4b:db:da:60:d6:4e:58:f8:27:a0:82:b9:19: 6c:d0:be:46:b7:f1:3e:31:08:2e:7a:1d:cc:8d:fd:21:e3:1a: 6c:12:85:0f:d5:c6:ff:e3:2d:2f:5e:f1:a3:6b:d2:61:bd:66: 17:e3:c1:71:ce:50:48:2f:e0:8e:13:63:70:c4:36:8a:20:7b: cf:1d:b0:95:99:ca:70:fb:cf:23:a0:1e:b7:39:cb:ae:e5:ab: 81:4f:4e:c5:72:7f:0c:c4:00:13:17:39:a9:b0:ba:86:4a:fc: d8:09:b3:9a:31:3e:06:b5:f4:9b:e7:2a:96:f8:e9:82:e2:38: df:1e:c0:28 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4oxk+NMDLJaAxA3L3LLsCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjY3MjdiNjk2ODQwZGQyZGRiOGI5Mzc3ZjNlNDFlZTM1YzRmNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvjpGdNQTFZCz5cky6KivVy508SX ThXJ7oQFrObUMtm8g+3MgYqhapMaDkdqFYQIYEqQ5WAscTPbW9+9vXBGEyCPsdKp Wwu/4cYmvMGessj+0QKVms5k+3coKZg90Uu8UmF/TUzIKXHqEfHDNJnGp6ixgwrT 1ilwjsE7Cypnqf31SLQVIP22H2Lr7c4im7gAKKAjX+sV/2XnRdJbRpQAoAeJ8ava J6eNuyRqKQxvMdo/v5IOdIptvDAgq3ypFXE7pGYl2m1wDugwUw0eaqm28DQE+01u ntbH0dJqdscnXTykPD1X8Kh8BzfBWkaZwZNoTQcTiiFDPxd62230obZBSQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH9nJ7aWhA3S3bi5N38+Qe41xPQOMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZjJjbnRwYUVEZExkdUxrM2Z6NUI3alhFOUE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAHw3gAwQA Hw3nAwQAUaHmAwQAV3hZAwQAwSUvMA0GCSqGSIb3DQEBCwUAA4IBAQCQoUFsnSIp L9gvQZFbDF4n6CPMmm05I0V2H1nPW0ZReeVwFY1sKCowhDpyzLqYUCkAAzIwUqnc Tj2I2z8c9NsKlKBsf5jZD5el3xo0C+rvUv+vqbnw1nUV4+sabEgsRLY/LyuQAox/ iAhjAZGpXSJWUrG46HI82H3QJIA0IIsuMUmoIkvb2mDWTlj4J6CCuRls0L5Gt/E+ MQgueh3Mjf0h4xpsEoUP1cb/4y0vXvGja9JhvWYX48FxzlBIL+COE2NwxDaKIHvP HbCVmcpw+88joB63Ocuu5auBT07Fcn8MxAATFzmpsLqGSvzYCbOaMT4GtfSb5yqW +OmC4jjfHsAo -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:44 2026 by rpki-client