This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/ATFqvKQfCzg1eIhHj9ilysnZYnE.roa File: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (raw, json) Hash identifier: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8= Subject key identifier: 01:31:6A:BC:A4:1F:0B:38:35:78:88:47:8F:D8:A5:CA:C9:D9:62:71 Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a Certificate serial: 019B7C7EF536E614DC87A021F9852ECF073A Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/ATFqvKQfCzg1eIhHj9ilysnZYnE.roa Signing time: Fri 02 Jan 2026 02:17:33 +0000 ROA not before: Fri 02 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 141.98.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f5:36:e6:14:dc:87:a0:21:f9:85:2e:cf:07:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a Validity Not Before: Jan 2 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01316abca41f0b38357888478fd8a5cac9d96271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0e:52:78:f8:21:6a:c3:1f:4b:21:7a:8d:5c: 26:5a:81:74:9d:29:08:8c:75:ec:89:71:77:6c:b3: dd:92:f7:e5:9b:68:ec:bf:3f:d5:f0:f7:ca:2f:7c: 5b:0e:ac:12:5b:9f:d3:b3:52:57:3f:b7:e0:99:c2: 83:55:ec:cb:bf:6b:fb:32:d0:9f:9b:d5:fd:3a:b5: 9c:77:6f:04:f9:66:3f:f5:b2:bd:58:98:72:ad:2b: c2:b0:21:36:82:ff:66:59:2c:c1:7e:48:f4:b0:5f: 98:3c:7c:8a:a7:5e:2c:e7:db:eb:e4:75:6a:bc:70: b3:c8:f8:b4:09:c3:a3:a7:d6:2a:82:3a:b5:5c:4a: 67:17:cf:0c:2f:9e:c1:3f:4a:06:f6:22:36:49:05: ac:18:af:fe:f0:cf:01:eb:d5:7e:9b:fb:7f:d4:72: 6c:44:63:93:74:49:0a:3c:e9:c9:50:e0:e9:a7:c0: cb:20:89:63:72:5c:38:b2:4e:c5:8b:ee:d6:46:d6: 90:55:77:e0:29:3f:57:33:6c:55:46:9d:b6:68:05: 08:ab:c8:cb:3c:19:65:eb:1a:13:df:1b:42:4c:a8: 0e:98:da:60:78:52:37:34:39:e3:96:3a:87:46:cc: 19:df:36:2f:18:8c:04:d4:5c:9c:94:3e:2e:3c:d7: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:6A:BC:A4:1F:0B:38:35:78:88:47:8F:D8:A5:CA:C9:D9:62:71 X509v3 Authority Key Identifier: keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/ATFqvKQfCzg1eIhHj9ilysnZYnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.69.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ef:c1:7d:4a:b1:e9:1c:04:3d:af:57:66:b8:25:f9:8f:e6: ed:cf:41:c7:ef:a3:4f:c9:17:f7:62:9f:0a:7f:d4:e9:df:00: fd:3b:bd:d0:ab:da:f7:bd:41:20:68:db:96:3a:04:d9:15:b4: 5e:bd:7d:54:f6:b8:4b:87:20:9b:ad:aa:be:61:fe:19:b5:aa: 28:18:99:41:fe:8c:06:2d:6f:79:1a:01:31:ba:7e:e3:fe:f7: c9:f6:e9:fd:67:44:ec:02:f2:c9:5f:7b:3f:03:29:d6:d2:1c: 6d:04:14:71:80:73:aa:7e:af:c0:5a:11:d1:c4:a1:36:c6:8d: 24:a9:53:d5:bb:07:7f:fb:43:12:ee:88:64:7e:8e:e3:80:18: 1b:c8:80:1f:bf:f5:30:90:89:39:d7:b1:0c:a7:fc:17:f8:53: 2a:26:1e:b1:e4:e4:6a:d7:d9:03:c5:9f:19:8e:f3:a6:ef:c6: 3e:c7:80:74:1f:17:5c:be:5a:70:ea:e4:24:b6:fa:5c:fd:f4: f9:84:d0:bf:d9:45:95:33:91:a1:8a:41:36:53:60:6a:e2:44: 1e:21:06:62:26:32:5c:1a:41:b2:48:16:2c:34:4a:4f:d2:31: 0b:ab:fa:54:86:63:2a:44:f7:4e:f8:39:be:38:40:a2:a6:24: ee:55:8b:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvU25hTch6Ah+YUuzwc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx MGU5MWEwHhcNMjYwMTAyMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTMxNmFiY2E0MWYwYjM4MzU3ODg4NDc4ZmQ4YTVjYWM5ZDk2MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw5SePghasMfSyF6jVwmWoF0nSkI jHXsiXF3bLPdkvflm2jsvz/V8PfKL3xbDqwSW5/Ts1JXP7fgmcKDVezLv2v7MtCf m9X9OrWcd28E+WY/9bK9WJhyrSvCsCE2gv9mWSzBfkj0sF+YPHyKp14s59vr5HVq vHCzyPi0CcOjp9Yqgjq1XEpnF88ML57BP0oG9iI2SQWsGK/+8M8B69V+m/t/1HJs RGOTdEkKPOnJUODpp8DLIIljclw4sk7Fi+7WRtaQVXfgKT9XM2xVRp22aAUIq8jL PBll6xoT3xtCTKgOmNpgeFI3NDnjljqHRswZ3zYvGIwE1FyclD4uPNcDlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAExarykHws4NXiIR4/YpcrJ2WJxMB8GA1UdIwQY MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt YTM0N2I1NmYzYjlhLzEvQVRGcXZLUWZDemcxZUloSGo5aWx5c25aWW5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWJFMA0G CSqGSIb3DQEBCwUAA4IBAQC178F9SrHpHAQ9r1dmuCX5j+btz0HH76NPyRf3Yp8K f9Tp3wD9O73Qq9r3vUEgaNuWOgTZFbRevX1U9rhLhyCbraq+Yf4ZtaooGJlB/owG LW95GgExun7j/vfJ9un9Z0TsAvLJX3s/AynW0hxtBBRxgHOqfq/AWhHRxKE2xo0k qVPVuwd/+0MS7ohkfo7jgBgbyIAfv/UwkIk517EMp/wX+FMqJh6x5ORq19kDxZ8Z jvOm78Y+x4B0Hxdcvlpw6uQktvpc/fT5hNC/2UWVM5GhikE2U2Bq4kQeIQZiJjJc GkGySBYsNEpP0jELq/pUhmMqRPdO+Dm+OECipiTuVYup -----END CERTIFICATE-----Generated at Sun Jan 18 12:12:50 2026 by rpki-client