This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa File: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (raw, json) Hash identifier: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE= Subject key identifier: AD:11:39:B9:3D:8F:7A:30:70:0F:86:42:22:22:8E:3B:14:41:6C:1C Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae Certificate serial: 019B7A5B84724A971DC6C89C1FC8A366D197 Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56635 IP address blocks: 31.7.192.0/19 maxlen: 19 45.147.136.0/22 maxlen: 22 2a03:a100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:84:72:4a:97:1d:c6:c8:9c:1f:c8:a3:66:d1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad1139b93d8f7a30700f864222228e3b14416c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:b3:7e:5b:fd:5a:e4:36:3f:ee:3c:df:0c: 30:04:4c:58:d7:9d:a8:48:23:28:29:31:12:b7:79: 2c:8d:7f:2d:c6:23:2a:fe:6b:f3:47:10:62:50:a3: 40:02:e1:54:31:1f:9f:85:a0:f8:8d:f6:87:91:83: 70:80:72:e8:d0:58:23:a5:8b:dd:e8:1a:88:d5:7b: 7b:41:b1:5b:08:23:0d:1f:34:f5:79:67:09:b7:50: da:b5:6b:38:e2:2a:36:b0:4d:ee:f4:2b:fc:91:fe: 11:a2:e6:6e:06:15:c2:2c:51:bd:2d:7b:95:f5:c2: 09:d4:ea:3f:e5:67:01:49:44:3f:05:71:da:ac:37: 39:1d:1b:fd:d9:d4:b3:07:e9:78:e8:bf:d3:02:5c: 5f:d9:5a:c7:76:01:ba:5a:c3:63:77:f6:73:14:3e: 6a:1d:74:6e:8d:1b:e9:2a:66:02:b8:00:e5:eb:92: 48:ae:4d:38:b9:14:ab:9f:1e:fb:32:cc:98:7d:e7: fb:55:01:a9:f8:75:89:a6:c7:e9:25:f5:9b:34:ee: 7a:39:9f:1e:fc:e8:10:eb:79:95:33:50:dd:49:b3: bb:65:8f:25:6e:5c:0e:c9:b4:85:15:b5:e5:79:ce: 8c:a0:24:89:24:ae:8c:96:bb:a9:6e:6e:0c:99:b9: 85:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:11:39:B9:3D:8F:7A:30:70:0F:86:42:22:22:8E:3B:14:41:6C:1C X509v3 Authority Key Identifier: keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.192.0/19 45.147.136.0/22 IPv6: 2a03:a100::/32 Signature Algorithm: sha256WithRSAEncryption 61:13:a8:ed:b2:8b:de:cc:c0:32:ee:7d:09:fd:69:20:3a:7f: 05:dd:ff:99:0a:23:29:72:8f:db:c7:ef:67:c3:fa:a9:cb:ea: 1f:3e:9e:ae:6c:3e:3e:be:1f:fe:94:c8:a0:06:f5:e4:66:90: 26:16:67:df:8a:c9:9e:be:eb:e5:02:e7:1b:30:8d:e5:a7:7e: fa:4f:49:d3:5f:72:7c:7d:0a:32:21:ee:ec:b7:c1:25:8b:fb: 64:05:00:26:f4:0d:af:eb:9d:e8:85:e4:f7:6a:63:89:2f:58: e3:bb:6f:ac:b0:bf:e5:60:99:45:4a:22:8c:a7:c4:62:d2:fd: 3f:ae:94:14:78:3a:2f:77:08:dd:b5:34:11:a1:56:08:06:b9: a1:3c:6b:d2:d1:0b:da:7b:9a:24:39:c7:58:46:ae:e5:d2:84: 24:36:d5:99:6f:71:e4:fd:ee:7e:70:ab:1e:32:66:e9:38:46: f1:d9:aa:05:89:47:2b:a7:42:d0:44:fe:24:1f:a1:51:7b:39: 64:2b:3a:fe:aa:c3:f9:ff:c6:ae:c2:28:09:8f:17:9d:d1:bf: 8f:e0:17:26:38:35:2e:ba:33:b2:19:a8:cc:46:d5:58:c0:e3: 70:aa:d2:2f:c5:02:15:7b:7f:c7:65:32:9d:da:e7:51:f0:91: fd:34:e4:07 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W4RySpcdxsicH8ijZtGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYWM5ZDI2ZjdhMDViNGQ5MjUyNDk4MDU3YTM4MTRhY2Fm N2QxYWUwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDExMzliOTNkOGY3YTMwNzAwZjg2NDIyMjIyOGUzYjE0NDE2YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBezflv9WuQ2P+483wwwBExY152o SCMoKTESt3ksjX8txiMq/mvzRxBiUKNAAuFUMR+fhaD4jfaHkYNwgHLo0FgjpYvd 6BqI1Xt7QbFbCCMNHzT1eWcJt1DatWs44io2sE3u9Cv8kf4RouZuBhXCLFG9LXuV 9cIJ1Oo/5WcBSUQ/BXHarDc5HRv92dSzB+l46L/TAlxf2VrHdgG6WsNjd/ZzFD5q HXRujRvpKmYCuADl65JIrk04uRSrnx77MsyYfef7VQGp+HWJpsfpJfWbNO56OZ8e /OgQ63mVM1DdSbO7ZY8lblwOybSFFbXlec6MoCSJJK6Mlrupbm4MmbmFswIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFK0RObk9j3owcA+GQiIijjsUQWwcMB8GA1UdIwQY MBaAFEusnSb3oFtNklJJgFejgUrK99GuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMt YmRiNjQ5Mjk5ODNmLzEvclJFNXVUMlBlakJ3RDRaQ0lpS09PeFJCYkJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMDhkN2UtMTlhNS00MmI5LTgwOGMtYmRiNjQ5Mjk5ODNm LzEvUzZ5ZEp2ZWdXMDJTVWttQVY2T0JTc3IzMGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFHwfAAwQC LZOIMA0EAgACMAcDBQAqA6EAMA0GCSqGSIb3DQEBCwUAA4IBAQBhE6jtsovezMAy 7n0J/WkgOn8F3f+ZCiMpco/bx+9nw/qpy+ofPp6ubD4+vh/+lMigBvXkZpAmFmff ismevuvlAucbMI3lp376T0nTX3J8fQoyIe7st8Eli/tkBQAm9A2v653oheT3amOJ L1jju2+ssL/lYJlFSiKMp8Ri0v0/rpQUeDovdwjdtTQRoVYIBrmhPGvS0Qvae5ok OcdYRq7l0oQkNtWZb3Hk/e5+cKseMmbpOEbx2aoFiUcrp0LQRP4kH6FRezlkKzr+ qsP5/8auwigJjxed0b+P4BcmODUuujOyGajMRtVYwONwqtIvxQIVe3/HZTKd2udR 8JH9NOQH -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:56 2026 by rpki-client