This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fMRDZ0TTEqnZqKpNCej9zi7wNFM.roa File: fMRDZ0TTEqnZqKpNCej9zi7wNFM.roa (raw, json) Hash identifier: 3lAW5zhRgZXkrGUqrkxqTT0IZzY6+AVzmJum8nSGtwk= Subject key identifier: 7C:C4:43:67:44:D3:12:A9:D9:A8:AA:4D:09:E8:FD:CE:2E:F0:34:53 Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37F08A818F9D6E2D4171B47352CACC Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fMRDZ0TTEqnZqKpNCej9zi7wNFM.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60146 IP address blocks: 31.206.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f0:8a:81:8f:9d:6e:2d:41:71:b4:73:52:ca:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc4436744d312a9d9a8aa4d09e8fdce2ef03453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:de:16:4a:8e:72:e4:04:59:c0:a6:1a:5d: 14:c0:1e:8b:c6:10:71:b3:f7:22:25:d7:90:c0:6b: 44:58:48:2f:28:5f:84:ce:ec:78:4a:9b:51:c0:f5: de:0c:92:22:4c:31:eb:30:89:9c:b0:6e:54:ec:77: bd:7a:5c:36:0c:6c:b2:36:7b:3a:5d:54:aa:f9:b6: ac:ef:ae:1e:01:9f:79:d6:65:41:df:0e:44:c0:7b: c0:48:05:94:26:02:0f:14:e3:c8:26:ce:46:9a:6d: 9b:f6:aa:9d:38:67:25:59:53:ff:32:da:1c:ab:2b: 6b:89:23:61:24:98:26:01:de:c7:3b:d5:41:56:47: 56:27:82:a8:2a:37:e1:c8:e4:63:30:1e:c3:89:70: 6e:25:bd:91:19:bd:88:22:b1:8f:66:13:c6:67:e1: 60:1c:a7:91:37:85:f9:46:25:f5:e2:fa:bc:1c:fa: 48:b4:c3:6a:26:b1:b4:b1:80:8d:07:a9:37:6f:5d: 52:a1:46:a5:ee:c0:d9:3b:92:e9:b5:2c:68:7f:b3: 7c:b0:d4:f9:d9:81:8c:b4:3c:8e:ac:cb:41:97:d3: 59:b9:8e:50:73:c0:d3:27:11:5d:23:2a:69:22:b6: 04:78:5c:6d:49:19:2a:1f:42:37:4b:c2:a1:20:cd: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C4:43:67:44:D3:12:A9:D9:A8:AA:4D:09:E8:FD:CE:2E:F0:34:53 X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fMRDZ0TTEqnZqKpNCej9zi7wNFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.206.40.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b6:58:d9:16:f0:98:2e:61:32:88:24:f7:28:7d:21:f0:6c: 7f:c9:e9:54:51:f6:c1:fd:67:6e:a6:91:2e:4c:83:b3:ad:2b: 2b:fd:48:3b:a1:f0:98:f4:cf:c1:0a:4d:84:ac:75:b6:d0:ca: 37:da:40:e2:b9:e7:1e:05:ec:0b:47:d6:2b:32:90:b0:9f:7d: 61:c7:0e:0e:6b:39:99:b3:ea:02:a2:24:96:7b:81:bc:46:3e: f2:dd:e7:37:d5:56:1b:32:ee:95:3e:45:b6:2b:3b:31:cf:77: ae:a5:f0:41:e8:30:56:48:8c:db:7c:8c:8d:9b:0e:b9:8c:47: 1c:06:e2:73:52:e1:84:b3:ff:69:b8:dc:10:32:f0:10:37:e1: 1b:bc:d7:3a:a5:43:a1:a7:7b:81:8c:4e:8d:28:29:3b:1a:cd: 6b:3d:9a:0b:bf:63:34:aa:db:09:4f:91:b2:74:07:0e:c4:c2: 13:a6:20:16:45:cf:c2:06:d5:32:b0:b0:c8:fe:cf:3b:e3:f8: 8c:c9:b5:42:db:e8:a9:9d:49:70:58:e7:67:b5:7f:25:3c:0a: 52:bb:82:bf:b4:f2:98:9d:05:c3:ed:76:0a:2c:bb:1e:fe:75: 66:d8:05:8c:d8:36:e2:8c:ea:d8:87:96:65:ac:29:1d:79:d6: 0c:18:95:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/CKgY+dbi1BcbRzUsrMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2M0NDM2NzQ0ZDMxMmE5ZDlhOGFhNGQwOWU4ZmRjZTJlZjAzNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQneFkqOcuQEWcCmGl0UwB6LxhBx s/ciJdeQwGtEWEgvKF+Ezux4SptRwPXeDJIiTDHrMImcsG5U7He9elw2DGyyNns6 XVSq+bas764eAZ951mVB3w5EwHvASAWUJgIPFOPIJs5Gmm2b9qqdOGclWVP/Mtoc qytriSNhJJgmAd7HO9VBVkdWJ4KoKjfhyORjMB7DiXBuJb2RGb2IIrGPZhPGZ+Fg HKeRN4X5RiX14vq8HPpItMNqJrG0sYCNB6k3b11SoUal7sDZO5LptSxof7N8sNT5 2YGMtDyOrMtBl9NZuY5Qc8DTJxFdIyppIrYEeFxtSRkqH0I3S8KhIM2LcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzEQ2dE0xKp2aiqTQno/c4u8DRTMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvZk1SRFowVFRFcW5acUtwTkNlajl6aTd3TkZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH84oMA0G CSqGSIb3DQEBCwUAA4IBAQCStljZFvCYLmEyiCT3KH0h8Gx/yelUUfbB/WduppEu TIOzrSsr/Ug7ofCY9M/BCk2ErHW20Mo32kDiueceBewLR9YrMpCwn31hxw4OazmZ s+oCoiSWe4G8Rj7y3ec31VYbMu6VPkW2Kzsxz3eupfBB6DBWSIzbfIyNmw65jEcc BuJzUuGEs/9puNwQMvAQN+EbvNc6pUOhp3uBjE6NKCk7Gs1rPZoLv2M0qtsJT5Gy dAcOxMITpiAWRc/CBtUysLDI/s874/iMybVC2+ipnUlwWOdntX8lPApSu4K/tPKY nQXD7XYKLLse/nVm2AWM2DbijOrYh5ZlrCkdedYMGJWT -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:07 2026 by rpki-client