This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa File: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (raw, json) Hash identifier: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA= Subject key identifier: 2C:8D:2C:55:FA:14:CC:AD:73:F5:83:93:E7:E1:42:8D:C2:46:43:42 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B79EBB9DBB6CAF86738AD2FB2E1D7CBDF Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa Signing time: Thu 01 Jan 2026 14:17:30 +0000 ROA not before: Thu 01 Jan 2026 14:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215950 IP address blocks: 31.128.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b9:db:b6:ca:f8:67:38:ad:2f:b2:e1:d7:cb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Jan 1 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2c8d2c55fa14ccad73f58393e7e1428dc2464342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:ef:92:56:4c:a3:d7:40:d8:58:a3:5d:3a: f5:9a:2b:0a:37:42:38:87:05:9d:c1:9f:eb:0b:02: e6:ee:89:ec:e4:0b:78:a7:91:4c:a4:1c:a6:cf:80: a9:5a:82:41:6e:17:95:8b:93:08:87:04:08:18:d0: 7a:5d:85:70:51:ca:df:02:75:1b:7d:d1:9b:9f:52: cf:62:c1:75:7a:1f:9b:85:29:ef:7c:50:6d:f9:76: 75:21:f3:6d:15:e3:52:95:e9:9a:ef:07:6f:f3:ea: 7a:8c:62:0b:e0:7d:03:58:6d:06:dd:96:59:d3:78: 58:cf:83:0b:d4:ea:84:0e:f1:ac:2d:af:1d:48:bb: 7c:a8:66:f6:1d:22:4c:6c:69:86:25:63:41:6e:1b: 03:17:3e:44:1d:16:ec:b3:eb:04:e3:26:f0:a4:9e: 84:42:34:d7:36:be:65:e1:d1:8c:19:4d:0c:18:76: 34:bc:0d:0a:4c:ca:8a:a8:c7:a4:6f:52:71:06:e0: c5:04:fa:6a:8b:63:41:35:fe:2b:ac:75:2f:bc:db: 15:48:7c:e3:92:2e:96:37:08:92:ad:4e:9e:9c:85: 72:92:21:b1:ea:31:ef:bf:42:cf:17:c9:7a:fb:b5: e9:38:b9:b6:d5:20:52:71:af:f9:c4:f9:7c:8d:75: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8D:2C:55:FA:14:CC:AD:73:F5:83:93:E7:E1:42:8D:C2:46:43:42 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.173.0/24 Signature Algorithm: sha256WithRSAEncryption c4:63:d5:32:14:2a:be:f3:c2:4c:6b:10:c6:3d:03:7e:75:4b: db:7f:bc:a9:d0:f6:17:20:f3:f0:8d:02:e8:3f:53:78:0d:7c: dc:85:e0:16:0a:a2:ab:29:d3:cf:ae:22:41:cb:b0:6c:26:3d: b5:23:f6:ec:dd:b7:b6:86:8e:a2:58:0b:48:c9:83:57:88:c4: 45:1e:3b:0a:3f:32:74:64:8d:1d:d1:0e:b3:5d:21:54:7b:81: c5:35:f0:33:68:65:6c:c6:63:8e:fd:ce:a0:51:e5:f9:ae:e2: 82:78:2e:83:39:cc:11:72:52:d3:98:49:54:12:a8:30:5c:77: a5:33:ef:de:aa:bc:4d:89:61:2b:94:8c:17:42:6f:56:34:3c: 73:79:48:c3:bc:d4:21:7c:9c:90:dc:36:e4:af:f1:dd:d4:fa: e7:ff:25:d2:fe:d4:74:61:1c:1b:e7:7f:fa:f8:81:1f:ac:fa: b7:94:70:85:67:e2:13:c3:3e:9f:c3:da:3c:d7:80:d6:77:79: 45:ae:57:a1:e0:a1:1e:3c:0a:5b:e4:62:d7:63:e5:bb:29:fe: 78:03:1e:b4:a6:c9:15:0c:05:2d:02:cb:05:df:f3:3f:5e:25: a1:19:b9:80:aa:26:a3:18:b1:4a:46:aa:f2:fd:54:b6:eb:14: 61:18:66:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt567nbtsr4ZzitL7Lh18vfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjYwMTAxMTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYzhkMmM1NWZhMTRjY2FkNzNmNTgzOTNlN2UxNDI4ZGMyNDY0MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdXvklZMo9dA2FijXTr1misKN0I4 hwWdwZ/rCwLm7ons5At4p5FMpBymz4CpWoJBbheVi5MIhwQIGNB6XYVwUcrfAnUb fdGbn1LPYsF1eh+bhSnvfFBt+XZ1IfNtFeNSlema7wdv8+p6jGIL4H0DWG0G3ZZZ 03hYz4ML1OqEDvGsLa8dSLt8qGb2HSJMbGmGJWNBbhsDFz5EHRbss+sE4ybwpJ6E QjTXNr5l4dGMGU0MGHY0vA0KTMqKqMekb1JxBuDFBPpqi2NBNf4rrHUvvNsVSHzj ki6WNwiSrU6enIVykiGx6jHvv0LPF8l6+7XpOLm21SBSca/5xPl8jXW28QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCyNLFX6FMytc/WDk+fhQo3CRkNCMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvTEkwc1Zmb1V6SzF6OVlPVDUtRkNqY0pHUTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4CtMA0G CSqGSIb3DQEBCwUAA4IBAQDEY9UyFCq+88JMaxDGPQN+dUvbf7yp0PYXIPPwjQLo P1N4DXzcheAWCqKrKdPPriJBy7BsJj21I/bs3be2ho6iWAtIyYNXiMRFHjsKPzJ0 ZI0d0Q6zXSFUe4HFNfAzaGVsxmOO/c6gUeX5ruKCeC6DOcwRclLTmElUEqgwXHel M+/eqrxNiWErlIwXQm9WNDxzeUjDvNQhfJyQ3Dbkr/Hd1Prn/yXS/tR0YRwb53/6 +IEfrPq3lHCFZ+ITwz6fw9o814DWd3lFrleh4KEePApb5GLXY+W7Kf54Ax60pskV DAUtAssF3/M/XiWhGbmAqiajGLFKRqry/VS26xRhGGZ6 -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:15 2026 by rpki-client