This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/Yaq2yQABZup3SrIC9V3Vg03XQQ4.roa File: Yaq2yQABZup3SrIC9V3Vg03XQQ4.roa (raw, json) Hash identifier: 7fM1bUhYaUT+C1cim42k75J0aN9dJ78xVp4HTMLxEag= Subject key identifier: 61:AA:B6:C9:00:01:66:EA:77:4A:B2:02:F5:5D:D5:83:4D:D7:41:0E Certificate issuer: /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d Certificate serial: 019B7CED714E20AC9F8D5E159425C41D4F2E Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/Yaq2yQABZup3SrIC9V3Vg03XQQ4.roa Signing time: Fri 02 Jan 2026 04:18:14 +0000 ROA not before: Fri 02 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 31.204.1.0/24 maxlen: 24 31.204.2.0/23 maxlen: 24 31.204.4.0/22 maxlen: 24 31.204.8.0/21 maxlen: 24 31.204.16.0/20 maxlen: 24 31.204.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:71:4e:20:ac:9f:8d:5e:15:94:25:c4:1d:4f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d Validity Not Before: Jan 2 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61aab6c9000166ea774ab202f55dd5834dd7410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:c6:5c:be:98:6b:1b:73:44:f2:e4:36:69: e5:7f:25:be:1b:10:48:0b:14:52:aa:ef:fe:0e:11: 53:e8:e1:c8:37:0c:86:6b:ea:a0:b9:3b:f0:06:80: 1b:fe:c2:fc:45:92:61:ee:47:5e:92:e1:29:8f:7e: ae:bb:7f:ef:d3:b3:d2:0e:80:3c:7c:dc:b0:d3:5c: 30:b0:11:b9:92:1e:eb:5a:a2:a2:12:46:8a:ec:48: bd:49:c4:96:d5:c7:72:73:9a:11:ec:a1:e0:27:a7: 2e:b6:45:f8:27:cd:bc:06:ab:cc:9c:2c:20:c5:21: 3a:88:78:51:cf:d0:68:5b:b4:a9:2e:75:01:97:3b: b9:24:77:a9:3a:f2:94:d3:5c:cb:29:58:0d:e6:ca: 15:49:59:c6:cc:ee:5c:0f:98:9d:cf:9a:f7:c5:6a: f2:47:3f:3c:4d:c6:b6:93:4b:ed:1c:e8:9f:2a:f4: bd:21:b9:e8:2f:a9:5b:ae:c3:5f:05:d3:c1:be:c4: 09:3c:6f:b5:21:cd:8f:b0:ca:51:89:1c:4f:c3:5b: 0b:60:83:5a:c5:a8:50:3a:e7:93:eb:27:8a:a6:06: a1:5d:16:fd:c0:ab:76:ed:bf:45:a5:14:d8:1f:6b: 59:07:3d:f6:06:e3:09:7c:87:27:57:6a:c7:0f:fd: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AA:B6:C9:00:01:66:EA:77:4A:B2:02:F5:5D:D5:83:4D:D7:41:0E X509v3 Authority Key Identifier: keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/Yaq2yQABZup3SrIC9V3Vg03XQQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.204.1.0-31.204.63.255 Signature Algorithm: sha256WithRSAEncryption 74:7f:41:bd:8b:67:ce:85:28:0c:b5:f1:6f:c8:84:60:85:c4: df:a5:07:43:22:07:bd:76:08:32:f6:5d:52:3e:9a:fc:b5:9a: db:84:2b:d4:f4:ff:62:3b:5a:aa:bc:fd:39:3e:22:86:c1:43: 69:95:3e:c7:31:61:3b:e9:6b:3f:d6:d4:60:79:fd:60:5a:0a: 27:ae:fc:e9:d5:ae:6d:6a:44:b3:35:c8:cf:e5:e5:ea:ec:3d: fa:8c:e7:0d:35:e6:90:e9:cc:cd:7e:16:78:5f:ac:82:c5:b1: 24:b4:2e:43:f1:4d:16:46:b6:c6:20:9a:07:82:5d:d7:92:e7: 8d:cf:68:3b:69:a1:82:0d:a5:2a:d1:20:a6:c5:c5:31:2a:57: da:7c:46:09:e7:20:d2:0d:a1:e6:0d:78:d7:f9:eb:b0:65:19: d2:09:39:e1:36:9f:07:e5:d7:8a:44:93:3e:13:ed:ce:f5:65: e1:56:97:e8:5c:f4:85:07:61:e2:23:d8:39:9b:de:9e:dd:2e: 30:c6:88:92:f8:7c:7e:9f:be:b3:67:34:c5:7a:92:86:5f:8c: 96:28:a4:74:3a:fc:61:4a:b0:8c:46:b4:0e:1b:d7:d1:8f:41: 51:dc:c4:2d:f9:21:61:03:c4:79:61:8c:76:40:dc:84:8e:87: 7d:a1:93:90 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87XFOIKyfjV4VlCXEHU8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNzgzNThhNmE5N2QxOWIyZjVhZmZmMWNmYzc5M2ZiYjRl YWZjOWQwHhcNMjYwMTAyMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWFhYjZjOTAwMDE2NmVhNzc0YWIyMDJmNTVkZDU4MzRkZDc0MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD/GXL6YaxtzRPLkNmnlfyW+GxBI CxRSqu/+DhFT6OHINwyGa+qguTvwBoAb/sL8RZJh7kdekuEpj36uu3/v07PSDoA8 fNyw01wwsBG5kh7rWqKiEkaK7Ei9ScSW1cdyc5oR7KHgJ6cutkX4J828BqvMnCwg xSE6iHhRz9BoW7SpLnUBlzu5JHepOvKU01zLKVgN5soVSVnGzO5cD5idz5r3xWry Rz88Tca2k0vtHOifKvS9IbnoL6lbrsNfBdPBvsQJPG+1Ic2PsMpRiRxPw1sLYINa xahQOueT6yeKpgahXRb9wKt27b9FpRTYH2tZBz32BuMJfIcnV2rHD/2z4QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGGqtskAAWbqd0qyAvVd1YNN10EOMB8GA1UdIwQY MBaAFOt4NYpql9GbL1r/8c/Hk/u06vydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQt NGE1ZWVkMWVlNWJjLzEvWWFxMnlRQUJadXAzU3JJQzlWM1ZnMDNYUVE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NjhiNzUtNTk5NC00OGZiLWE4NWQtNGE1ZWVkMWVlNWJj LzEvNjNnMWltcVgwWnN2V3ZfeHo4ZVQtN1RxX0owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAfzAED BAYfzAAwDQYJKoZIhvcNAQELBQADggEBAHR/Qb2LZ86FKAy18W/IhGCFxN+lB0Mi B712CDL2XVI+mvy1mtuEK9T0/2I7Wqq8/Tk+IobBQ2mVPscxYTvpaz/W1GB5/WBa Cieu/OnVrm1qRLM1yM/l5ersPfqM5w015pDpzM1+FnhfrILFsSS0LkPxTRZGtsYg mgeCXdeS543PaDtpoYINpSrRIKbFxTEqV9p8RgnnININoeYNeNf567BlGdIJOeE2 nwfl14pEkz4T7c71ZeFWl+hc9IUHYeIj2Dmb3p7dLjDGiJL4fH6fvrNnNMV6koZf jJYopHQ6/GFKsIxGtA4b19GPQVHcxC35IWEDxHlhjHZA3ISOh32hk5A= -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:32 2026 by rpki-client