This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lMbrVRARiCtxbw4rV7uiKYJABbQ.roa File: lMbrVRARiCtxbw4rV7uiKYJABbQ.roa (raw, json) Hash identifier: ArJG5NTDy7CYItxIRIVnQaO1q2a53EHq1s7L+RB3qkw= Subject key identifier: 94:C6:EB:55:10:11:88:2B:71:6F:0E:2B:57:BB:A2:29:82:40:05:B4 Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Certificate serial: 019B7BA392D3945D1B16EC2989A2973E6D84 Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lMbrVRARiCtxbw4rV7uiKYJABbQ.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 31.216.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:92:d3:94:5d:1b:16:ec:29:89:a2:97:3e:6d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94c6eb551011882b716f0e2b57bba229824005b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:aa:29:36:bd:36:16:9b:9e:a2:c5:e4:a8: 29:46:2a:88:b4:dd:f8:71:7c:96:03:56:b7:ca:ad: 7f:5e:da:4c:59:71:6e:13:2b:8e:33:91:5d:ba:65: ba:9e:93:7d:50:86:1e:81:45:f6:81:34:05:d7:ff: f0:fb:0f:bc:64:94:6c:f3:5a:10:5f:51:91:72:cb: 6d:ff:cb:c3:d5:33:09:51:ef:ae:d2:7f:3e:e7:23: 31:e6:27:50:4f:8a:18:a5:b0:77:f5:f2:62:a7:e4: 1f:2a:d8:57:0d:31:85:78:8f:11:f8:c0:c6:00:1b: d7:dc:1e:f5:c5:16:fb:6b:be:01:c4:d4:b4:14:a0: ba:28:cb:e4:23:1b:ab:e4:cd:05:e0:5b:11:56:40: 5b:65:bc:6c:7f:28:7d:fd:7a:d1:58:7d:02:02:d0: 6d:8a:a8:bf:a0:e3:0d:a2:23:42:82:eb:08:ba:83: 2f:8a:cb:9e:6a:ca:b5:37:3d:3a:52:cb:c3:02:da: 97:67:bf:cb:50:c0:f8:c5:97:3d:6c:e6:3b:af:1a: b0:c4:9a:3c:3c:56:07:87:bb:2b:4c:c2:57:78:bc: ca:6c:8d:c1:4a:da:56:3f:01:4e:22:24:ed:cc:a7: 98:ed:f1:1f:df:89:5a:df:8c:d9:95:e5:11:f4:7c: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C6:EB:55:10:11:88:2B:71:6F:0E:2B:57:BB:A2:29:82:40:05:B4 X509v3 Authority Key Identifier: keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lMbrVRARiCtxbw4rV7uiKYJABbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.216.62.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f2:fd:43:54:3b:50:b4:cf:12:01:c7:ef:24:dd:dc:7c:57: 87:2a:77:f0:bc:e1:a8:d9:d0:4a:8d:7f:47:93:b4:1f:97:84: 42:9a:99:a1:c5:b9:ea:44:e8:9c:b6:76:7b:4b:b4:88:52:7b: 40:a8:96:88:dd:c4:de:14:2c:d3:44:fa:d6:98:61:f5:e3:d6: 17:5c:6d:a2:69:a6:52:39:91:94:79:52:82:8b:eb:a9:3c:7e: 06:41:3b:9d:1a:85:6a:4f:3c:65:5a:2a:23:6f:56:47:bc:03: 33:43:7d:fc:44:0a:a3:b5:8a:72:f9:7a:54:1c:79:50:39:f2: d6:df:bb:da:6c:2f:ee:d4:53:4f:6f:6a:4a:1b:b2:e4:55:63: 43:c7:9d:14:07:40:98:9c:36:01:45:63:0f:e4:68:1e:9d:5a: b3:0b:16:59:9a:33:24:1e:85:f4:ba:e9:fa:96:6c:40:cc:12: 89:42:4d:4a:2d:15:dc:29:56:79:50:76:e7:f0:51:29:91:fd: ef:4f:35:8d:15:3e:c3:2c:71:6e:fb:6a:f9:0c:a6:7b:56:85: cb:f3:93:82:16:cb:ff:46:65:5b:33:9d:90:6d:62:95:21:ad: 57:0b:86:c7:83:4c:6b:69:47:e3:1c:95:bf:c8:56:d5:27:6e: 25:99:ec:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5LTlF0bFuwpiaKXPm2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi MjliOWMwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGM2ZWI1NTEwMTE4ODJiNzE2ZjBlMmI1N2JiYTIyOTgyNDAwNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30+qKTa9NhabnqLF5KgpRiqItN34 cXyWA1a3yq1/XtpMWXFuEyuOM5FdumW6npN9UIYegUX2gTQF1//w+w+8ZJRs81oQ X1GRcstt/8vD1TMJUe+u0n8+5yMx5idQT4oYpbB39fJip+QfKthXDTGFeI8R+MDG ABvX3B71xRb7a74BxNS0FKC6KMvkIxur5M0F4FsRVkBbZbxsfyh9/XrRWH0CAtBt iqi/oOMNoiNCgusIuoMvisueasq1Nz06UsvDAtqXZ7/LUMD4xZc9bOY7rxqwxJo8 PFYHh7srTMJXeLzKbI3BStpWPwFOIiTtzKeY7fEf34la34zZleUR9HyeOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJTG61UQEYgrcW8OK1e7oimCQAW0MB8GA1UdIwQY MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt M2E1ZTE4ZDAwZGRjLzEvbE1iclZSQVJpQ3R4Ync0clY3dWlLWUpBQmJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9g+MA0G CSqGSIb3DQEBCwUAA4IBAQAg8v1DVDtQtM8SAcfvJN3cfFeHKnfwvOGo2dBKjX9H k7Qfl4RCmpmhxbnqROictnZ7S7SIUntAqJaI3cTeFCzTRPrWmGH149YXXG2iaaZS OZGUeVKCi+upPH4GQTudGoVqTzxlWiojb1ZHvAMzQ338RAqjtYpy+XpUHHlQOfLW 37vabC/u1FNPb2pKG7LkVWNDx50UB0CYnDYBRWMP5GgenVqzCxZZmjMkHoX0uun6 lmxAzBKJQk1KLRXcKVZ5UHbn8FEpkf3vTzWNFT7DLHFu+2r5DKZ7VoXL85OCFsv/ RmVbM52QbWKVIa1XC4bHg0xraUfjHJW/yFbVJ24lmewz -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:24 2026 by rpki-client