This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa File: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (raw, json) Hash identifier: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI= Subject key identifier: D3:1C:46:F0:D9:D0:D5:C1:C7:D9:5B:8C:9E:75:BB:6B:A6:45:C4:1C Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFC0F62B68C5CC39723081ACC915A Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199608 IP address blocks: 31.210.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fc:0f:62:b6:8c:5c:c3:97:23:08:1a:cc:91:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d31c46f0d9d0d5c1c7d95b8c9e75bb6ba645c41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:37:e6:f7:5a:92:2a:c7:08:3f:28:23:c5:b1: 6e:3f:8a:39:98:dc:59:b4:b2:3a:c4:58:e5:75:98: b7:8d:7d:1e:28:05:2a:c8:19:38:f0:08:ae:cb:56: c6:79:2b:42:69:9b:d7:78:99:19:6a:a6:5f:54:f1: cb:f7:7d:45:69:f1:d7:a5:62:e8:37:b9:d9:7b:93: f2:cd:ec:4b:48:4d:8d:d7:9e:4e:72:96:f7:b9:9d: 08:b6:8d:06:9c:2e:26:cf:67:a5:ee:71:1e:f9:b2: de:93:21:18:d5:4d:55:91:d7:cd:61:7a:ab:0f:32: f9:80:44:9f:e5:a9:64:54:06:b9:76:05:57:b4:02: 93:98:a8:9f:38:c7:1f:6f:78:5c:2e:2a:07:db:6a: 2d:22:26:f5:d1:1f:60:62:c1:ad:fc:3b:f0:23:9a: 6d:7b:55:14:71:d7:6a:6c:d7:94:88:b2:27:8f:dc: 0b:b0:ed:03:f1:4d:e5:d5:a2:b3:90:8f:9c:50:73: c7:e4:19:d9:e7:80:52:14:0c:91:3c:15:9f:f3:0e: 29:44:46:d9:ae:ef:02:d4:d4:9f:86:d7:e5:f1:2b: 15:0c:ff:8e:d7:1a:f7:09:2f:44:5a:49:93:67:b6: d4:5d:ff:d5:11:e1:70:ae:5b:ae:6e:d9:fc:7b:9e: 54:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1C:46:F0:D9:D0:D5:C1:C7:D9:5B:8C:9E:75:BB:6B:A6:45:C4:1C X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.156.0/24 Signature Algorithm: sha256WithRSAEncryption a3:72:77:26:aa:3e:31:e0:ed:17:2f:e5:f4:e6:97:13:d9:95: 16:49:4a:1f:50:eb:45:f5:ef:ea:d1:e6:47:39:d3:96:2c:46: 7a:0e:02:43:64:ec:34:86:af:e6:38:94:54:31:e6:ed:2a:d9: cf:5d:72:bc:82:41:bb:51:ea:5f:aa:1a:4f:df:ae:a5:f6:62: 9b:91:e1:45:d5:f4:f3:d5:95:73:c4:1f:ca:cb:a5:f5:81:80: 71:15:33:80:24:85:8a:4d:60:8e:5f:64:97:b5:e5:b4:0c:d4: b5:79:5c:14:5c:bf:83:ec:6f:d8:a6:58:8a:fa:07:87:85:9d: 18:11:b4:3d:92:7e:31:68:05:e0:0e:e3:6d:a1:b8:c6:60:f3: 18:c7:5c:b9:94:12:dc:95:59:bc:8e:c4:03:e0:46:02:3b:84: bf:e2:87:4c:b3:85:e0:e4:09:98:b0:59:4c:bd:d8:55:3b:d1: 7d:ed:34:fc:f2:09:3c:46:59:b1:7d:20:9d:c2:ff:e5:bf:f5: ab:42:93:6a:90:fb:db:21:0f:35:97:8e:b0:06:d3:5c:21:f9: c9:0e:75:6b:37:85:5d:b2:f0:9e:ac:0e:ba:f0:4d:15:ba:ec: df:ce:b1:27:cb:8d:a6:49:59:75:ff:ac:40:4c:63:9b:72:56: 42:0d:e5:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/wPYraMXMOXIwgazJFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzFjNDZmMGQ5ZDBkNWMxYzdkOTViOGM5ZTc1YmI2YmE2NDVjNDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjfm91qSKscIPygjxbFuP4o5mNxZ tLI6xFjldZi3jX0eKAUqyBk48Aiuy1bGeStCaZvXeJkZaqZfVPHL931FafHXpWLo N7nZe5PyzexLSE2N155Ocpb3uZ0Ito0GnC4mz2el7nEe+bLekyEY1U1VkdfNYXqr DzL5gESf5alkVAa5dgVXtAKTmKifOMcfb3hcLioH22otIib10R9gYsGt/DvwI5pt e1UUcddqbNeUiLInj9wLsO0D8U3l1aKzkI+cUHPH5BnZ54BSFAyRPBWf8w4pREbZ ru8C1NSfhtfl8SsVDP+O1xr3CS9EWkmTZ7bUXf/VEeFwrluubtn8e55UNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNMcRvDZ0NXBx9lbjJ51u2umRcQcMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvMHh4RzhOblExY0hIMlZ1TW5uVzdhNlpGeEJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9KcMA0G CSqGSIb3DQEBCwUAA4IBAQCjcncmqj4x4O0XL+X05pcT2ZUWSUofUOtF9e/q0eZH OdOWLEZ6DgJDZOw0hq/mOJRUMebtKtnPXXK8gkG7UepfqhpP366l9mKbkeFF1fTz 1ZVzxB/Ky6X1gYBxFTOAJIWKTWCOX2SXteW0DNS1eVwUXL+D7G/YpliK+geHhZ0Y EbQ9kn4xaAXgDuNtobjGYPMYx1y5lBLclVm8jsQD4EYCO4S/4odMs4Xg5AmYsFlM vdhVO9F97TT88gk8RlmxfSCdwv/lv/WrQpNqkPvbIQ81l46wBtNcIfnJDnVrN4Vd svCerA668E0VuuzfzrEny42mSVl1/6xATGObclZCDeXL -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:25 2026 by rpki-client