This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/ixPSDov5is1CTdWPuI6nUpxYEdo.roa File: ixPSDov5is1CTdWPuI6nUpxYEdo.roa (raw, json) Hash identifier: j30+Tn85DLKw4a0VclBr/LX3MiFqXcwbshmPsr6R/Q0= Subject key identifier: 8B:13:D2:0E:8B:F9:8A:CD:42:4D:D5:8F:B8:8E:A7:52:9C:58:11:DA Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d Certificate serial: 019B7D5BE2CFC4C48610A5A3D75D0DD17551 Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/ixPSDov5is1CTdWPuI6nUpxYEdo.roa Signing time: Fri 02 Jan 2026 06:18:52 +0000 ROA not before: Fri 02 Jan 2026 06:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213558 IP address blocks: 31.186.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e2:cf:c4:c4:86:10:a5:a3:d7:5d:0d:d1:75:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b13d20e8bf98acd424dd58fb88ea7529c5811da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9d:06:46:bf:5f:59:61:1a:a1:b8:55:ed:12: 42:e3:b9:d4:79:93:63:20:8f:66:98:c3:e7:25:0a: e2:c2:6d:0d:34:7c:96:48:65:e3:55:f8:89:62:3c: d6:f9:64:f2:1e:c9:af:a7:14:50:4a:ad:c2:04:da: 08:fe:00:ad:4e:22:c6:2e:17:fd:5f:46:1e:43:d4: 46:58:3a:01:db:94:a3:c1:b2:b2:ad:9b:03:8a:59: 04:ce:7e:4f:c5:71:2d:fe:c2:ad:f4:c0:00:b5:48: e1:a4:bd:53:d8:44:c7:d7:dd:bf:d4:38:01:50:3b: 04:7a:5c:f4:b1:f9:b6:64:52:a6:a2:b4:2e:f2:07: 09:e8:9b:cd:05:37:d9:f2:01:bb:d1:5a:3e:53:9f: 73:72:de:3e:72:7e:bc:89:b8:e7:e6:2a:8d:4d:db: 96:ed:4f:4b:4d:03:36:10:c7:f5:85:ef:e9:1c:2c: f4:9f:a4:83:74:49:e7:86:ae:a4:df:cc:0a:b2:a8: 66:80:1f:bc:ed:a2:96:78:8f:45:53:dc:aa:18:0f: e0:55:09:89:a4:17:27:af:05:31:08:1f:8d:2b:e0: e9:91:15:cb:4f:a2:c4:ce:36:b6:6a:f0:0e:e0:72: e7:83:3e:9a:66:b6:ae:c1:71:e5:6f:ab:f1:80:ec: a3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:13:D2:0E:8B:F9:8A:CD:42:4D:D5:8F:B8:8E:A7:52:9C:58:11:DA X509v3 Authority Key Identifier: keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/ixPSDov5is1CTdWPuI6nUpxYEdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.189.0/24 Signature Algorithm: sha256WithRSAEncryption 48:cc:6b:08:58:a7:32:44:93:a9:29:5e:78:38:b4:95:8e:08: 64:99:46:8b:8c:bb:1f:e8:b2:b9:32:b7:9a:57:e5:85:89:31: c8:e7:80:51:16:b1:68:27:7e:0c:90:c2:8c:12:cc:05:30:05: 90:c2:6d:e4:0a:e8:a7:c8:4a:01:86:84:1a:e1:09:12:dd:e1: 9e:8b:b8:40:d8:db:4a:e5:4d:40:31:32:67:ca:d0:fe:18:55: 08:c3:a4:da:cd:ea:8f:19:08:e8:87:7d:c3:8d:55:96:81:3c: 0c:4b:ae:57:28:0a:dd:d0:a4:6c:5b:fb:b6:50:e9:e2:9a:7b: 46:71:6f:5b:27:9b:9c:78:ac:1e:d5:f7:19:83:f5:e7:4e:0d: 98:78:c8:32:fa:89:41:50:75:5a:86:19:d0:d8:91:7f:9e:75: 20:0f:83:1f:a7:c6:c2:55:22:52:96:87:e9:09:10:98:a9:94: 13:81:d4:61:48:e9:ce:74:88:d7:fa:f3:53:39:4e:5c:3a:15: e5:5d:ce:e8:fd:4e:13:58:16:14:6f:55:6d:73:6d:13:3a:af: 47:e8:50:fc:b9:4b:75:f9:90:d2:39:94:81:e5:16:73:63:66: 72:d7:f3:7e:e0:7e:17:0e:43:91:7a:63:77:75:02:3e:9a:49: 65:d7:22:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+LPxMSGEKWj110N0XVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl ZGI5MGQwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjEzZDIwZThiZjk4YWNkNDI0ZGQ1OGZiODhlYTc1MjljNTgxMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ0GRr9fWWEaobhV7RJC47nUeZNj II9mmMPnJQriwm0NNHyWSGXjVfiJYjzW+WTyHsmvpxRQSq3CBNoI/gCtTiLGLhf9 X0YeQ9RGWDoB25SjwbKyrZsDilkEzn5PxXEt/sKt9MAAtUjhpL1T2ETH192/1DgB UDsEelz0sfm2ZFKmorQu8gcJ6JvNBTfZ8gG70Vo+U59zct4+cn68ibjn5iqNTduW 7U9LTQM2EMf1he/pHCz0n6SDdEnnhq6k38wKsqhmgB+87aKWeI9FU9yqGA/gVQmJ pBcnrwUxCB+NK+DpkRXLT6LEzja2avAO4HLngz6aZrauwXHlb6vxgOyj2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsT0g6L+YrNQk3Vj7iOp1KcWBHaMB8GA1UdIwQY MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt Zjk5NDBmYTFlMTA4LzEvaXhQU0RvdjVpczFDVGRXUHVJNm5VcHhZRWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4 LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7q9MA0G CSqGSIb3DQEBCwUAA4IBAQBIzGsIWKcyRJOpKV54OLSVjghkmUaLjLsf6LK5Mrea V+WFiTHI54BRFrFoJ34MkMKMEswFMAWQwm3kCuinyEoBhoQa4QkS3eGei7hA2NtK 5U1AMTJnytD+GFUIw6TazeqPGQjoh33DjVWWgTwMS65XKArd0KRsW/u2UOnimntG cW9bJ5uceKwe1fcZg/XnTg2YeMgy+olBUHVahhnQ2JF/nnUgD4Mfp8bCVSJSlofp CRCYqZQTgdRhSOnOdIjX+vNTOU5cOhXlXc7o/U4TWBYUb1Vtc20TOq9H6FD8uUt1 +ZDSOZSB5RZzY2Zy1/N+4H4XDkORemN3dQI+mkll1yJc -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:58 2026 by rpki-client