This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa File: rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa (raw, json) Hash identifier: jMUOUB5MPfYCum5RcFFu1kpq8F6mGqOp/XYY8NGS/KY= Subject key identifier: AE:72:CC:FD:AF:0B:02:3C:22:5A:D1:2A:3B:2E:CC:86:5B:39:83:2D Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Certificate serial: 019B7C11B5C52E89F4821A184F5A1D3082AB Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa Signing time: Fri 02 Jan 2026 00:18:13 +0000 ROA not before: Fri 02 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57718 IP address blocks: 31.135.160.0/23 maxlen: 23 31.135.162.0/24 maxlen: 24 31.135.163.0/24 maxlen: 24 31.135.164.0/23 maxlen: 23 31.135.166.0/24 maxlen: 24 31.135.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b5:c5:2e:89:f4:82:1a:18:4f:5a:1d:30:82:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Validity Not Before: Jan 2 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae72ccfdaf0b023c225ad12a3b2ecc865b39832d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bb:9d:5b:15:68:fd:d0:9c:13:89:75:84:a9: 38:29:8e:7c:b5:00:a8:11:78:87:3b:63:01:50:21: 7f:2d:f3:73:bf:0d:72:3c:b7:5c:7c:ab:8a:c5:60: 98:7d:67:a9:f1:19:33:7e:90:ec:92:2f:2d:a8:db: 0e:e8:57:aa:36:38:c9:91:be:6a:3f:60:ae:83:a9: 0f:8b:e9:2e:4c:cb:5e:60:ab:71:c3:b9:69:ed:15: 65:43:46:64:6b:ff:55:fc:80:80:df:54:58:d1:cc: c8:82:81:42:58:db:da:52:0d:49:e3:84:76:3e:4e: 13:8e:8a:a6:c1:39:23:28:7c:e1:a2:38:c8:70:75: cf:e2:04:cd:ab:28:89:f9:69:13:77:4d:04:d6:16: 53:cb:b6:59:f8:31:6f:17:58:a3:89:a4:2c:c1:1b: c2:da:b5:1e:a3:27:2c:91:ac:fa:58:43:d8:b5:1b: ba:ed:58:4b:05:47:ed:57:9e:e9:98:be:cd:a3:99: 5e:a7:b4:df:16:9b:91:64:e3:39:27:ed:91:b3:43: df:84:ab:60:6c:57:5a:eb:fd:04:ea:8a:01:c5:15: 7d:91:97:9e:99:f3:46:8c:19:87:44:5e:4c:5c:07: fe:60:cd:75:90:cf:1a:3d:b2:be:be:cd:44:42:2f: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:72:CC:FD:AF:0B:02:3C:22:5A:D1:2A:3B:2E:CC:86:5B:39:83:2D X509v3 Authority Key Identifier: keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.160.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:e4:7d:0a:60:3c:be:27:98:0d:78:90:ac:ec:09:7c:90:66: 53:b6:13:61:73:df:24:9a:18:cf:b8:35:a6:4e:a8:31:10:59: cb:2a:8d:12:2a:cb:4c:d0:1a:68:65:90:1c:3b:97:9d:2b:30: d5:62:4e:82:56:a2:f6:aa:c6:27:f1:56:7a:76:d9:cc:a8:92: 94:89:09:56:00:af:80:56:7a:d3:2a:92:7f:19:f8:c6:bc:2d: 26:50:67:63:09:07:4f:f4:59:bd:05:68:40:71:8a:eb:43:9a: 69:f0:e8:b5:78:5d:cb:58:b6:b4:0e:66:cc:66:c4:8a:fb:fb: e9:a8:ed:df:b0:51:40:d2:f2:8a:11:ca:90:f1:68:56:f7:bf: 05:dd:16:55:ca:d9:a7:4e:b9:91:2c:4e:bd:52:d9:86:0c:ed: 78:7f:c4:a1:ac:b8:2c:f2:5a:47:6c:09:fc:00:d7:7e:c4:08: c5:a0:0f:85:f1:cf:f9:65:30:41:e3:fe:14:94:07:99:6f:f2: b8:23:eb:50:9d:15:57:ee:57:ab:40:ab:51:7a:65:6d:a6:f6: c1:88:35:ed:eb:f0:98:54:18:97:18:f1:e7:82:2d:96:dd:f0: 75:ce:b4:c4:b0:38:6b:87:b0:ac:5a:1b:94:59:c3:4b:2b:b2: 32:db:8e:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EbXFLon0ghoYT1odMIKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi NTFiZDkwHhcNMjYwMTAyMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTcyY2NmZGFmMGIwMjNjMjI1YWQxMmEzYjJlY2M4NjViMzk4MzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrudWxVo/dCcE4l1hKk4KY58tQCo EXiHO2MBUCF/LfNzvw1yPLdcfKuKxWCYfWep8RkzfpDski8tqNsO6FeqNjjJkb5q P2Cug6kPi+kuTMteYKtxw7lp7RVlQ0Zka/9V/ICA31RY0czIgoFCWNvaUg1J44R2 Pk4TjoqmwTkjKHzhojjIcHXP4gTNqyiJ+WkTd00E1hZTy7ZZ+DFvF1ijiaQswRvC 2rUeoycskaz6WEPYtRu67VhLBUftV57pmL7No5lep7TfFpuRZOM5J+2Rs0PfhKtg bFda6/0E6ooBxRV9kZeemfNGjBmHRF5MXAf+YM11kM8aPbK+vs1EQi8tRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5yzP2vCwI8IlrRKjsuzIZbOYMtMB8GA1UdIwQY MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt ZDMwYWViMWMyMGNhLzEvcm5MTV9hOExBandpV3RFcU95N01obHM1Z3kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4egMA0G CSqGSIb3DQEBCwUAA4IBAQBs5H0KYDy+J5gNeJCs7Al8kGZTthNhc98kmhjPuDWm TqgxEFnLKo0SKstM0BpoZZAcO5edKzDVYk6CVqL2qsYn8VZ6dtnMqJKUiQlWAK+A VnrTKpJ/GfjGvC0mUGdjCQdP9Fm9BWhAcYrrQ5pp8Oi1eF3LWLa0DmbMZsSK+/vp qO3fsFFA0vKKEcqQ8WhW978F3RZVytmnTrmRLE69UtmGDO14f8ShrLgs8lpHbAn8 ANd+xAjFoA+F8c/5ZTBB4/4UlAeZb/K4I+tQnRVX7lerQKtRemVtpvbBiDXt6/CY VBiXGPHngi2W3fB1zrTEsDhrh7CsWhuUWcNLK7Iy245q -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:51 2026 by rpki-client