This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa File: nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa (raw, json) Hash identifier: uD3UBbB/9frHLtpYcWN79dWwtH4FQubxDI1VloEZ5ko= Subject key identifier: 9D:3C:AA:9C:94:D7:07:55:45:13:7B:FF:BA:34:48:11:89:79:3D:84 Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d Certificate serial: 019B78354C909F9FF4AB1FA8198547F343D7 Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 31.14.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4c:90:9f:9f:f4:ab:1f:a8:19:85:47:f3:43:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d3caa9c94d7075545137bffba34481189793d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:dd:c9:d7:e4:a3:7e:dd:ff:67:b9:2e:9f: c1:e1:9e:f4:a5:5e:e5:98:14:24:67:19:78:9c:51: f2:3f:54:72:8d:8f:39:a0:f5:72:58:cc:25:59:be: a2:44:24:7b:d8:fa:e6:26:6c:35:ca:d6:11:35:b3: fe:67:09:d0:84:77:52:d6:1d:75:2c:0b:70:3b:5e: 6e:26:d9:6e:25:c6:fe:7e:b6:7b:ce:cc:8c:80:62: a1:bc:36:30:e6:22:77:cd:6c:d1:dc:64:88:39:08: ca:ef:c7:b9:95:03:31:68:64:da:19:cc:e9:35:c2: 74:af:bb:22:13:c5:35:bd:74:63:42:60:ba:81:23: 06:7e:c2:e6:60:5a:37:8e:0f:59:6f:59:a5:c3:73: 70:f7:d7:46:7b:b4:21:16:44:45:cf:a2:7a:a2:e4: 2a:f1:77:75:a0:d9:0d:68:4d:ae:88:db:8b:90:0b: 21:a2:20:45:42:95:50:5a:b4:02:8d:76:99:6d:b1: 15:eb:f9:80:7c:f6:2e:0b:4c:aa:cb:2d:4c:9f:4a: 15:28:f3:12:11:6d:32:9d:5c:0e:f0:07:ba:8e:6b: 57:b0:84:00:78:d7:ed:fe:f6:22:16:f4:f7:ab:af: e7:b4:4d:c5:7c:4d:0c:96:06:6f:76:b2:af:fe:9e: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3C:AA:9C:94:D7:07:55:45:13:7B:FF:BA:34:48:11:89:79:3D:84 X509v3 Authority Key Identifier: keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/nTyqnJTXB1VFE3v_ujRIEYl5PYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:f5:dd:d9:38:07:bc:b1:38:b9:81:0a:0f:b2:59:5b:1c:b4: a2:ea:59:69:61:59:8a:8b:ff:24:42:68:df:6a:bd:f2:fe:3e: b9:6d:59:98:5c:d5:c4:30:34:1a:6a:01:88:ee:05:2f:84:ce: 9b:36:20:b2:10:fc:df:87:04:48:04:de:40:8a:73:fe:35:71: 33:1c:e3:a0:7c:0f:10:93:37:f4:3b:d1:df:ba:a3:4e:57:20: 2a:d6:fd:1f:f8:47:07:26:42:8a:ea:81:2d:00:1a:f8:94:fb: 5b:95:12:5c:99:0b:cd:44:f7:5b:6f:39:1d:6d:4c:c1:da:b8: a0:bb:a7:74:54:35:be:b0:6a:c7:ec:e5:82:80:5b:b5:ec:da: 6a:10:1b:bf:31:5a:6e:ad:2a:cc:de:04:24:76:b5:fa:3b:38: 49:7e:57:2c:f5:0c:7c:bd:fd:3d:e3:6a:c7:d9:fd:63:18:5e: 97:22:6e:dc:c0:71:1b:f4:9a:3c:87:21:63:bc:37:d5:dc:a9: 65:15:8f:b9:33:cd:e4:db:da:1c:06:08:20:3e:75:5f:8f:1b: 38:00:ff:2c:68:bd:01:f0:15:36:9d:67:39:fa:43:36:4c:d5: 05:ce:70:72:90:76:45:a4:0c:45:77:40:65:4f:b0:60:0d:5a: 7b:d0:d3:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUyQn5/0qx+oGYVH80PXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDkwODlhOGUzMjhkMzJkNmRlMTZkN2RhMjU3YjgxMWIw NTIzOWQwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDNjYWE5Yzk0ZDcwNzU1NDUxMzdiZmZiYTM0NDgxMTg5NzkzZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtejdydfko37d/2e5Lp/B4Z70pV7l mBQkZxl4nFHyP1RyjY85oPVyWMwlWb6iRCR72PrmJmw1ytYRNbP+ZwnQhHdS1h11 LAtwO15uJtluJcb+frZ7zsyMgGKhvDYw5iJ3zWzR3GSIOQjK78e5lQMxaGTaGczp NcJ0r7siE8U1vXRjQmC6gSMGfsLmYFo3jg9Zb1mlw3Nw99dGe7QhFkRFz6J6ouQq 8Xd1oNkNaE2uiNuLkAshoiBFQpVQWrQCjXaZbbEV6/mAfPYuC0yqyy1Mn0oVKPMS EW0ynVwO8Ae6jmtXsIQAeNft/vYiFvT3q6/ntE3FfE0MlgZvdrKv/p6rHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ08qpyU1wdVRRN7/7o0SBGJeT2EMB8GA1UdIwQY MBaAFJLZCJqOMo0y1t4W19ole4EbBSOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2It ZGYzYzA3ZjM0MTFlLzEvblR5cW5KVFhCMVZGRTN2X3VqUklFWWw1UFlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80MzE2MzQtMzVjYi00NTQ1LTg3N2ItZGYzYzA3ZjM0MTFl LzEva3RrSW1vNHlqVExXM2hiWDJpVjdnUnNGSTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw4fMA0G CSqGSIb3DQEBCwUAA4IBAQA79d3ZOAe8sTi5gQoPsllbHLSi6llpYVmKi/8kQmjf ar3y/j65bVmYXNXEMDQaagGI7gUvhM6bNiCyEPzfhwRIBN5AinP+NXEzHOOgfA8Q kzf0O9HfuqNOVyAq1v0f+EcHJkKK6oEtABr4lPtblRJcmQvNRPdbbzkdbUzB2rig u6d0VDW+sGrH7OWCgFu17NpqEBu/MVpurSrM3gQkdrX6OzhJflcs9Qx8vf0942rH 2f1jGF6XIm7cwHEb9Jo8hyFjvDfV3KllFY+5M83k29ocBgggPnVfjxs4AP8saL0B 8BU2nWc5+kM2TNUFznBykHZFpAxFd0BlT7BgDVp70NOL -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:05 2026 by rpki-client