This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/61izMdx4K5w2Yla0rQzOhl-Jw1A.roa File: 61izMdx4K5w2Yla0rQzOhl-Jw1A.roa (raw, json) Hash identifier: fNzEqt5koPkjq88xvL9hB79eFzgidRn2Ox1b/3zNCKo= Subject key identifier: EB:58:B3:31:DC:78:2B:9C:36:62:56:B4:AD:0C:CE:86:5F:89:C3:50 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82E49F8D62658D720B97A73842D5E3 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/61izMdx4K5w2Yla0rQzOhl-Jw1A.roa Signing time: Fri 02 Jan 2026 16:20:43 +0000 ROA not before: Fri 02 Jan 2026 16:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 194.31.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e4:9f:8d:62:65:8d:72:0b:97:a7:38:42:d5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb58b331dc782b9c366256b4ad0cce865f89c350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f8:c3:05:90:6c:75:18:b2:b7:4a:dd:ed:f8: c8:55:ea:12:8b:a8:75:7b:6a:b8:7c:56:4e:33:5d: af:2e:2c:34:da:c9:bb:b0:3d:be:85:e0:a6:0d:26: e0:d4:37:68:ec:05:a3:f4:26:70:e7:3d:ef:e8:10: d2:d9:6c:94:fb:ee:2a:b2:d4:45:d5:ed:3f:75:f0: fc:f4:d0:90:ed:13:f1:b5:41:a3:8a:06:3e:84:13: 81:7a:65:37:87:af:79:0c:7b:e8:5b:d4:75:ad:45: f7:83:11:d0:ab:a6:06:63:31:b6:77:b9:56:68:45: 1c:47:00:83:0d:85:c7:5e:b5:4f:ce:1d:b4:cf:96: f8:72:5e:0e:03:42:50:3d:29:f0:c4:a3:74:2c:ed: 27:2a:3e:07:0b:58:6d:08:78:63:67:36:05:26:3c: 87:ed:21:5b:ec:d5:8b:19:cf:bd:91:16:ad:8b:88: 0f:75:e8:33:f5:1f:ff:f7:76:08:17:6f:28:0e:63: 66:9e:13:ce:3b:dc:d8:7f:1d:ce:3c:f3:1d:db:ce: 59:67:31:cc:69:5d:3e:e6:1a:9d:dc:cd:06:d5:c2: ba:d5:7c:52:3d:17:6f:7b:48:8b:9c:7e:fd:d8:58: 2b:d9:2d:6c:a5:38:8d:e8:b7:ee:84:6c:45:69:86: fb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:58:B3:31:DC:78:2B:9C:36:62:56:B4:AD:0C:CE:86:5F:89:C3:50 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/61izMdx4K5w2Yla0rQzOhl-Jw1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.142.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:11:72:c4:9e:51:28:4c:6e:ed:c9:12:42:14:ef:3f:e6:91: 1d:5b:dd:a4:8d:ea:57:70:c0:c7:2b:25:08:81:33:8e:9b:9e: ca:71:fa:23:c4:ed:d2:9b:0e:2d:86:ba:31:44:5c:76:28:59: 75:bb:4c:c5:c1:cb:af:e0:12:f5:bc:8e:59:8b:99:85:fd:f6: 4d:55:42:1d:0b:59:86:46:a7:84:20:52:77:86:3c:6c:e0:c9: 9c:20:1a:f5:5b:b2:80:d1:c4:ca:27:96:b4:54:21:7d:69:23: e3:51:96:80:9d:8a:2e:31:89:69:a3:da:47:32:bc:dd:d8:5f: 0b:0f:ab:bb:1f:35:46:c4:5a:65:b7:dd:9e:a8:86:1b:01:42: 2c:18:4e:01:68:58:5d:45:e2:04:54:6e:8f:31:1a:77:0e:51: 00:8a:46:3d:e9:a6:1e:35:e1:a3:7f:fc:2a:fe:36:8e:83:2f: f5:7e:34:ab:9d:33:33:38:fb:4a:e7:f2:04:e5:d3:82:19:5e: 31:8a:9b:41:ff:01:11:45:6a:d2:07:db:6a:de:a5:46:fd:81: b4:60:40:b9:d1:ec:fc:af:49:15:c4:42:40:21:0d:9d:39:a7: a2:5a:0e:0a:6d:e6:20:bb:1a:7b:66:f5:1d:cb:64:ce:ed:ad: 2b:ba:c9:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/guSfjWJljXILl6c4QtXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjU4YjMzMWRjNzgyYjljMzY2MjU2YjRhZDBjY2U4NjVmODljMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPjDBZBsdRiyt0rd7fjIVeoSi6h1 e2q4fFZOM12vLiw02sm7sD2+heCmDSbg1Ddo7AWj9CZw5z3v6BDS2WyU++4qstRF 1e0/dfD89NCQ7RPxtUGjigY+hBOBemU3h695DHvoW9R1rUX3gxHQq6YGYzG2d7lW aEUcRwCDDYXHXrVPzh20z5b4cl4OA0JQPSnwxKN0LO0nKj4HC1htCHhjZzYFJjyH 7SFb7NWLGc+9kRati4gPdegz9R//93YIF28oDmNmnhPOO9zYfx3OPPMd285ZZzHM aV0+5hqd3M0G1cK61XxSPRdve0iLnH792Fgr2S1spTiN6LfuhGxFaYb7XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtYszHceCucNmJWtK0MzoZficNQMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvNjFpek1keDRLNXcyWWxhMHJRek9obC1KdzFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh+OMA0G CSqGSIb3DQEBCwUAA4IBAQAKEXLEnlEoTG7tyRJCFO8/5pEdW92kjepXcMDHKyUI gTOOm57KcfojxO3Smw4throxRFx2KFl1u0zFwcuv4BL1vI5Zi5mF/fZNVUIdC1mG RqeEIFJ3hjxs4MmcIBr1W7KA0cTKJ5a0VCF9aSPjUZaAnYouMYlpo9pHMrzd2F8L D6u7HzVGxFplt92eqIYbAUIsGE4BaFhdReIEVG6PMRp3DlEAikY96aYeNeGjf/wq /jaOgy/1fjSrnTMzOPtK5/IE5dOCGV4xiptB/wERRWrSB9tq3qVG/YG0YEC50ez8 r0kVxEJAIQ2dOaeiWg4KbeYguxp7ZvUdy2TO7a0rusl/ -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:15 2026 by rpki-client