This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/rEDFh5ujO43qLcKIuBiAaEYm5zQ.roa File: rEDFh5ujO43qLcKIuBiAaEYm5zQ.roa (raw, json) Hash identifier: jDoaHTUvbIlrkljeNgDaQHnIX0sbOnqKY1BmDTfrFHU= Subject key identifier: AC:40:C5:87:9B:A3:3B:8D:EA:2D:C2:88:B8:18:80:68:46:26:E7:34 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381DF6595EF4B497CBA618CB36F681 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/rEDFh5ujO43qLcKIuBiAaEYm5zQ.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43696 IP address blocks: 31.184.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1d:f6:59:5e:f4:b4:97:cb:a6:18:cb:36:f6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac40c5879ba33b8dea2dc288b81880684626e734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:d4:d2:7c:fa:8a:55:d1:be:d0:9a:53:d6: 6d:13:03:d4:11:23:d4:83:38:f2:3a:08:4b:a2:84: ec:c2:66:d5:24:05:45:c3:55:55:3e:90:de:82:c8: 1b:1a:10:6b:96:91:62:de:d0:a1:1d:13:4e:1d:23: 78:7d:6b:96:99:5c:5f:86:d2:e5:63:c1:fb:a8:e2: 3b:e4:ad:80:a1:63:0f:47:04:1f:b7:82:d6:26:4f: 89:71:c2:b2:e4:30:28:7c:4f:11:6e:c9:f2:21:44: c8:69:33:e8:d5:13:f1:9b:47:b8:2c:7d:4a:34:79: 59:74:15:d9:29:d7:96:dd:52:39:a1:3c:6b:fa:b4: c2:31:51:16:2d:da:68:0d:50:f0:50:62:54:f9:cb: 23:01:31:ae:00:d2:2e:fe:c6:2e:3e:50:26:37:67: 80:1b:52:91:f6:21:e0:a2:f8:9a:dd:5d:ec:b6:71: 70:7e:1b:c1:9f:57:1d:4d:83:f9:75:22:e9:cb:9a: e3:51:1f:81:7f:ce:96:90:27:f6:96:53:e6:5d:57: f3:4f:ab:d1:8c:f8:b5:d9:cc:2c:ad:4c:4e:98:cc: cb:b2:0a:7b:43:15:03:50:60:f5:18:77:5e:1f:42: 3e:94:88:87:fb:ce:1f:d0:e9:0c:85:06:2b:31:2e: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:C5:87:9B:A3:3B:8D:EA:2D:C2:88:B8:18:80:68:46:26:E7:34 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/rEDFh5ujO43qLcKIuBiAaEYm5zQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.184.230.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:b8:04:00:e2:80:5c:1a:c2:02:0f:c7:df:8b:94:b3:ab:aa: 31:06:97:0c:10:67:0d:b4:76:44:cd:25:b4:c2:cf:35:2c:c5: 8d:ab:e4:45:4b:f9:cd:45:ee:2c:54:fb:fc:4d:c7:bb:6d:b7: 16:40:41:ec:85:15:9e:bf:76:0c:69:f2:b5:f7:bb:83:47:6d: ab:5b:5b:d0:48:73:b7:7a:12:37:b9:0b:58:20:e6:a9:5f:8a: 09:13:e9:5e:5e:0a:ec:56:46:50:8e:ca:1a:bf:70:b2:18:5f: c1:78:91:36:05:e4:44:39:ba:17:9d:79:29:6b:9a:08:9f:40: 1d:73:f7:d4:65:4b:6e:9f:42:5f:6d:f1:c9:5e:27:6b:5d:82: 07:e0:b8:98:68:8a:80:9f:0c:7b:28:3b:41:ef:e6:e6:f2:4d: ea:16:9b:12:0a:7e:41:f4:d2:eb:a8:68:45:f7:03:07:05:75: 9a:79:92:84:a5:ee:f9:5b:99:bd:da:f1:95:55:34:de:3a:44: ec:e6:79:e2:e5:4f:ae:c4:d2:d3:4c:6d:3f:5b:a0:de:19:e1: d9:06:71:9a:48:27:cb:55:ec:7e:93:30:56:c6:a5:de:79:2d: 7f:12:4e:81:8d:3b:92:21:8c:3c:51:ee:c5:17:9f:e9:05:4f: 56:b1:cd:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB32WV70tJfLphjLNvaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQwYzU4NzliYTMzYjhkZWEyZGMyODhiODE4ODA2ODQ2MjZlNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrrU0nz6ilXRvtCaU9ZtEwPUESPU gzjyOghLooTswmbVJAVFw1VVPpDegsgbGhBrlpFi3tChHRNOHSN4fWuWmVxfhtLl Y8H7qOI75K2AoWMPRwQft4LWJk+JccKy5DAofE8RbsnyIUTIaTPo1RPxm0e4LH1K NHlZdBXZKdeW3VI5oTxr+rTCMVEWLdpoDVDwUGJU+csjATGuANIu/sYuPlAmN2eA G1KR9iHgovia3V3stnFwfhvBn1cdTYP5dSLpy5rjUR+Bf86WkCf2llPmXVfzT6vR jPi12cwsrUxOmMzLsgp7QxUDUGD1GHdeH0I+lIiH+84f0OkMhQYrMS5gSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxAxYebozuN6i3CiLgYgGhGJuc0MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvckVERmg1dWpPNDNxTGNLSXVCaUFhRVltNXpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7jmMA0G CSqGSIb3DQEBCwUAA4IBAQAeuAQA4oBcGsICD8ffi5Szq6oxBpcMEGcNtHZEzSW0 ws81LMWNq+RFS/nNRe4sVPv8Tce7bbcWQEHshRWev3YMafK197uDR22rW1vQSHO3 ehI3uQtYIOapX4oJE+leXgrsVkZQjsoav3CyGF/BeJE2BeREOboXnXkpa5oIn0Ad c/fUZUtun0JfbfHJXidrXYIH4LiYaIqAnwx7KDtB7+bm8k3qFpsSCn5B9NLrqGhF 9wMHBXWaeZKEpe75W5m92vGVVTTeOkTs5nni5U+uxNLTTG0/W6DeGeHZBnGaSCfL Vex+kzBWxqXeeS1/Ek6BjTuSIYw8Ue7FF5/pBU9Wsc1T -----END CERTIFICATE-----Generated at Tue Jan 20 09:22:00 2026 by rpki-client