This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/1-bmufN-XpCnOZovUT1MR41BEvYc.roa File: 1-bmufN-XpCnOZovUT1MR41BEvYc.roa (raw, json) Hash identifier: QyP6RbLW1JK4g3OkQkBwocjwcbA0t5gS2AtE58Z646c= Subject key identifier: F9:B9:AE:7C:DF:97:A4:29:CE:66:8B:D4:4F:53:11:E3:50:44:BD:87 Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3 Certificate serial: 019B7BA4B3A69885B1A05F64E9DD3A58000A Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/1-bmufN-XpCnOZovUT1MR41BEvYc.roa Signing time: Thu 01 Jan 2026 22:19:10 +0000 ROA not before: Thu 01 Jan 2026 22:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204311 IP address blocks: 31.217.255.0/24 maxlen: 24 92.255.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b3:a6:98:85:b1:a0:5f:64:e9:dd:3a:58:00:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3 Validity Not Before: Jan 1 22:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9b9ae7cdf97a429ce668bd44f5311e35044bd87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:12:fe:32:cb:5d:65:85:a3:24:61:e1:f1:f6: 43:61:1b:3a:0d:df:5e:f7:97:3b:ee:a9:ec:56:69: a5:a0:e8:1e:15:04:8b:10:9c:d7:52:90:8a:da:3c: 33:34:08:63:0b:5b:cd:b7:28:5f:5f:85:36:13:de: 27:ea:89:e1:23:e1:b5:b9:11:fe:5b:8f:d5:86:ea: 46:50:83:da:a7:c7:37:cd:69:fa:e4:e3:c0:b9:f2: 7e:61:b3:84:8b:8a:eb:21:51:31:18:0d:f6:4b:b8: 05:3c:d3:16:e4:c8:18:03:82:07:ac:eb:c3:de:8f: a5:18:d4:9e:4d:af:f8:bf:45:4d:4b:a5:cf:27:af: 32:bc:52:43:dd:55:83:44:ba:65:28:5d:f8:af:d5: 8a:84:20:8a:6a:00:6d:40:91:2c:d1:8e:27:6e:6a: 6c:7c:c7:5c:f5:c1:d5:5c:08:6b:eb:52:97:90:7b: 1d:c4:2b:e1:dc:79:68:f1:6c:ee:48:e8:28:3a:56: c8:c1:88:2e:92:4f:5d:34:80:e4:96:72:6e:81:c5: a1:fa:dc:e4:52:6c:e1:62:d9:1e:0f:51:79:99:81: ad:cd:4d:07:d4:3e:10:a6:c5:3b:fc:4b:86:26:2a: 8d:06:1b:3a:b4:16:0e:a7:e6:27:4c:b8:8b:de:15: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:B9:AE:7C:DF:97:A4:29:CE:66:8B:D4:4F:53:11:E3:50:44:BD:87 X509v3 Authority Key Identifier: keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/1-bmufN-XpCnOZovUT1MR41BEvYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.255.0/24 92.255.48.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d2:0a:d1:36:1d:ae:0a:68:13:e1:10:ca:fc:cd:a8:73:d5: 62:e5:0c:fd:1c:e2:d7:49:fb:97:0f:8c:cf:b9:52:9f:9a:b2: 2a:21:df:1e:5e:1c:50:8b:e0:65:98:46:10:6b:f3:d5:05:73: 25:d6:d5:b2:33:43:5b:10:89:80:de:10:eb:56:77:4a:8b:2e: 63:7b:ec:7b:ee:89:43:c5:22:9e:f4:f2:88:2d:11:95:e4:bc: 66:6b:c4:c0:b0:bc:66:b4:30:a4:b5:a0:f2:b1:87:30:8f:b8: 6f:93:52:4b:b7:ff:78:0f:7b:80:8e:09:f0:0e:54:60:42:e2: 83:95:c4:b1:25:f4:c1:b9:4b:db:9c:ee:e5:51:cd:2e:2c:62: 58:74:77:a5:84:31:61:33:2f:ea:fe:56:04:c9:d3:bb:8e:f3: 3e:18:8a:eb:6c:62:db:ce:74:f0:2e:b8:56:bc:2b:30:39:63: 0f:53:b8:f4:c3:d2:50:a9:47:d8:ff:5c:9f:d3:5d:82:2d:c4: 09:10:ec:48:e7:36:32:04:56:5a:56:c4:5a:f1:1b:18:fe:a9: 86:a6:7d:8b:83:89:4f:e7:65:29:78:ba:3f:4a:e6:13:e3:37: c6:68:fe:7f:8b:79:af:ad:dd:bf:22:2e:2b:47:57:56:e8:ff: 36:c0:74:63 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt7pLOmmIWxoF9k6d06WAAKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZDA2YWZkMjZkMjUyMjM0MjdhN2EwZDVmOWUzMTU5MDYz ZmJjYTMwHhcNMjYwMTAxMjIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWI5YWU3Y2RmOTdhNDI5Y2U2NjhiZDQ0ZjUzMTFlMzUwNDRiZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xL+MstdZYWjJGHh8fZDYRs6Dd9e 95c77qnsVmmloOgeFQSLEJzXUpCK2jwzNAhjC1vNtyhfX4U2E94n6onhI+G1uRH+ W4/VhupGUIPap8c3zWn65OPAufJ+YbOEi4rrIVExGA32S7gFPNMW5MgYA4IHrOvD 3o+lGNSeTa/4v0VNS6XPJ68yvFJD3VWDRLplKF34r9WKhCCKagBtQJEs0Y4nbmps fMdc9cHVXAhr61KXkHsdxCvh3Hlo8WzuSOgoOlbIwYgukk9dNIDklnJugcWh+tzk UmzhYtkeD1F5mYGtzU0H1D4QpsU7/EuGJiqNBhs6tBYOp+YnTLiL3hVEeQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPm5rnzfl6QpzmaL1E9TEeNQRL2HMB8GA1UdIwQY MBaAFFXQav0m0lIjQnp6DV+eMVkGP7yjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmRCcV9TYlNVaU5DZW5vTlg1NHhXUVlfdktNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNWU5OTQtMzE4ZC00YTU0LWI2Mjkt MTczZjAwOTZiZDg1LzEvMS1ibXVmTi1YcENuT1pvdlVUMU1SNDFCRXZZYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzQvMDVlOTk0LTMxOGQtNGE1NC1iNjI5LTE3M2YwMDk2YmQ4 NS8xL1ZkQnFfU2JTVWlOQ2Vub05YNTR4V1FZX3ZLTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAB/Z/wME AFz/MDANBgkqhkiG9w0BAQsFAAOCAQEAR9IK0TYdrgpoE+EQyvzNqHPVYuUM/Rzi 10n7lw+Mz7lSn5qyKiHfHl4cUIvgZZhGEGvz1QVzJdbVsjNDWxCJgN4Q61Z3Sosu Y3vse+6JQ8UinvTyiC0RleS8ZmvEwLC8ZrQwpLWg8rGHMI+4b5NSS7f/eA97gI4J 8A5UYELig5XEsSX0wblL25zu5VHNLixiWHR3pYQxYTMv6v5WBMnTu47zPhiK62xi 28508C64VrwrMDljD1O49MPSUKlH2P9cn9Ndgi3ECRDsSOc2MgRWWlbEWvEbGP6p hqZ9i4OJT+dlKXi6P0rmE+M3xmj+f4t5r63dvyIuK0dXVuj/NsB0Yw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:28 2026 by rpki-client