This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/01pMTB9H_IwKe_41u_Yemdlsd-4.roa File: 01pMTB9H_IwKe_41u_Yemdlsd-4.roa (raw, json) Hash identifier: Z8ZcvT07dlke1kZo+pUd6GB+mxG2pNXlCopx1+iWvv4= Subject key identifier: D3:5A:4C:4C:1F:47:FC:8C:0A:7B:FE:35:BB:F6:1E:99:D9:6C:77:EE Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106ED716899E33C0D4441699E41D95 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/01pMTB9H_IwKe_41u_Yemdlsd-4.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213332 IP address blocks: 31.210.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6e:d7:16:89:9e:33:c0:d4:44:16:99:e4:1d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d35a4c4c1f47fc8c0a7bfe35bbf61e99d96c77ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:b9:3f:8e:d7:47:eb:9e:1f:a8:0f:8d:55: ca:6c:1f:b1:ff:3a:74:ed:8e:4f:74:83:df:bb:c6: 07:71:7a:a5:cf:42:23:eb:fc:5a:4d:d1:15:4a:23: 68:bd:3d:91:18:eb:c9:4d:eb:63:db:a8:c9:af:65: 35:57:3d:a1:9c:b4:74:41:b2:c5:fd:9f:4e:f2:d4: 84:22:ec:8b:2b:89:a7:97:69:1a:35:3f:a6:65:27: d3:19:f8:07:14:cb:ea:a1:b6:89:55:1d:5c:7c:0b: df:8b:aa:fd:7c:68:6a:69:b3:f8:e1:58:c7:b0:6e: ca:50:1a:21:b4:64:bd:80:64:05:01:6f:37:15:b7: 33:bb:e6:f6:07:b3:8b:23:5a:9a:f5:fb:91:46:98: 7e:d7:63:5c:20:81:08:59:ea:dc:d2:45:7d:78:8a: 0b:0b:af:80:9c:78:19:d2:63:8b:7e:cf:da:76:1b: 20:d6:cd:16:6a:ce:44:1e:46:92:e2:d8:e7:71:c5: 3b:eb:5b:c2:23:a2:46:ac:1d:05:42:6d:de:9f:bb: 22:86:52:89:0c:36:c5:5e:3f:33:88:42:f8:e4:d7: 9a:be:b4:37:d0:cf:14:9b:d9:26:71:13:6c:03:bb: 94:ba:7a:14:bd:c7:09:41:6c:29:ee:39:a3:f0:30: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5A:4C:4C:1F:47:FC:8C:0A:7B:FE:35:BB:F6:1E:99:D9:6C:77:EE X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/01pMTB9H_IwKe_41u_Yemdlsd-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.35.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d7:68:e7:83:c5:b4:b2:af:fa:00:5f:9c:91:d6:2c:28:f7: 08:d9:41:a8:a6:ae:78:1a:49:9c:8e:5a:ec:49:c7:82:3d:ba: d3:54:23:fc:cc:74:29:e8:a2:c6:f8:fd:51:40:34:69:8c:90: 81:d6:6d:ba:20:a3:a8:f8:63:9e:e1:26:e8:58:f4:3f:9c:f0: 36:59:b1:75:b6:20:4d:0f:e6:e3:9b:f8:65:47:bb:76:d1:e8: b7:1a:1b:e7:d4:5a:5e:18:bc:aa:65:51:fd:c4:00:22:21:76: cc:81:83:15:8c:ce:53:7b:a9:fe:ec:95:00:98:fe:b8:e7:4a: 5c:3a:a9:c1:76:d7:01:72:59:1d:cc:d6:87:1a:23:28:73:8e: c9:09:57:78:db:39:ad:e8:42:00:2f:b6:3c:d1:47:50:70:87: af:aa:6b:d1:3b:47:3f:cd:22:2e:1c:93:c7:06:d9:58:74:23: 0f:ef:c6:ef:ad:d8:5f:a6:b9:b8:ca:00:0c:f8:a7:ec:f6:77: 8b:20:47:49:1c:be:a2:22:29:2a:ea:1b:d6:07:01:55:86:13: 6e:cd:20:02:56:3e:15:59:d8:be:aa:30:13:5e:88:ce:01:ce: 53:71:0d:08:e2:43:c6:31:13:52:ad:bf:a9:4c:c6:68:33:46: 60:eb:31:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG7XFomeM8DURBaZ5B2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzVhNGM0YzFmNDdmYzhjMGE3YmZlMzViYmY2MWU5OWQ5NmM3N2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSu5P47XR+ueH6gPjVXKbB+x/zp0 7Y5PdIPfu8YHcXqlz0Ij6/xaTdEVSiNovT2RGOvJTetj26jJr2U1Vz2hnLR0QbLF /Z9O8tSEIuyLK4mnl2kaNT+mZSfTGfgHFMvqobaJVR1cfAvfi6r9fGhqabP44VjH sG7KUBohtGS9gGQFAW83Fbczu+b2B7OLI1qa9fuRRph+12NcIIEIWerc0kV9eIoL C6+AnHgZ0mOLfs/adhsg1s0Was5EHkaS4tjnccU761vCI6JGrB0FQm3en7sihlKJ DDbFXj8ziEL45NeavrQ30M8Um9kmcRNsA7uUunoUvccJQWwp7jmj8DDXLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNaTEwfR/yMCnv+Nbv2HpnZbHfuMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMDFwTVRCOUhfSXdLZV80MXVfWWVtZGxzZC00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IjMA0G CSqGSIb3DQEBCwUAA4IBAQBt12jng8W0sq/6AF+ckdYsKPcI2UGopq54Gkmcjlrs SceCPbrTVCP8zHQp6KLG+P1RQDRpjJCB1m26IKOo+GOe4SboWPQ/nPA2WbF1tiBN D+bjm/hlR7t20ei3Ghvn1FpeGLyqZVH9xAAiIXbMgYMVjM5Te6n+7JUAmP6450pc OqnBdtcBclkdzNaHGiMoc47JCVd42zmt6EIAL7Y80UdQcIevqmvRO0c/zSIuHJPH BtlYdCMP78bvrdhfprm4ygAM+Kfs9neLIEdJHL6iIikq6hvWBwFVhhNuzSACVj4V Wdi+qjATXojOAc5TcQ0I4kPGMRNSrb+pTMZoM0Zg6zFC -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:55 2026 by rpki-client