This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/e_3IlgWnDdhnd6pOmd963ncy9lA.roa File: e_3IlgWnDdhnd6pOmd963ncy9lA.roa (raw, json) Hash identifier: YvvkkYX8Yskyjd577k1DxZh93wW5GrkmgbH5Gk7/ftk= Subject key identifier: 7B:FD:C8:96:05:A7:0D:D8:67:77:AA:4E:99:DF:7A:DE:77:32:F6:50 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB5CD828AB92D15C296E139D90C723 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/e_3IlgWnDdhnd6pOmd963ncy9lA.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39153 IP address blocks: 31.24.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5c:d8:28:ab:92:d1:5c:29:6e:13:9d:90:c7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bfdc89605a70dd86777aa4e99df7ade7732f650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:68:fa:99:ed:01:8f:31:3c:c6:c4:4f:3b:5e: 45:4a:38:31:a0:e9:fb:2d:3a:60:77:9a:41:43:92: 20:16:15:7f:7e:fc:5c:0f:36:7c:bd:c1:08:f4:70: 10:30:57:92:9b:c5:03:d0:5c:82:93:25:fd:b2:b3: f4:a6:06:a3:e7:f8:78:e8:5b:20:27:14:b3:c4:0d: 3b:62:3a:74:a7:fd:63:71:e9:a9:ec:e3:e5:f0:8c: a3:c0:9a:b4:01:04:40:aa:50:f8:2c:24:5d:28:8d: 7d:c0:ca:4c:d8:5a:67:76:f5:ca:09:97:6a:f1:30: 90:fd:06:62:e4:aa:68:c6:9b:c8:48:77:08:9f:fa: 4c:2d:0f:5c:6f:10:34:ed:c9:c4:9d:25:7e:db:82: 17:cb:d2:7d:58:9f:48:b1:a2:2b:97:6e:15:92:42: 97:c4:2a:40:1b:4a:d7:48:51:51:f6:98:8d:b8:1a: 2f:8d:c7:00:16:26:b1:d3:ef:bb:49:9f:64:6c:20: 08:e9:8b:39:90:7b:a4:7e:3b:5e:55:5e:0e:82:38: de:ca:73:9d:99:d9:70:8a:99:90:72:14:a2:f9:96: 33:51:df:87:24:83:a6:50:7d:f2:e9:1b:af:d0:79: 6e:f4:7b:68:8b:7a:f3:40:c7:d3:0b:5b:4e:4a:03: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:C8:96:05:A7:0D:D8:67:77:AA:4E:99:DF:7A:DE:77:32:F6:50 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/e_3IlgWnDdhnd6pOmd963ncy9lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.255.0/24 Signature Algorithm: sha256WithRSAEncryption 31:99:70:3c:c2:24:8d:43:43:f2:67:8f:90:f2:92:27:5a:f6: 08:d5:d2:b9:e1:cc:44:17:36:b1:61:b5:23:24:86:62:25:b8: b4:5b:52:9a:f0:a7:84:8c:f3:e2:04:fb:9e:b0:95:de:c3:13: 42:60:64:fa:fc:7f:e9:cd:46:a1:57:cf:cf:28:b0:4f:50:5c: 9d:97:9d:a1:63:c7:9a:b0:4d:c3:36:9a:5d:26:13:2f:ef:7e: 13:60:d8:03:5e:68:cd:21:15:81:2b:e8:f1:bf:73:91:7a:84: ee:15:9e:0a:27:e2:54:ab:8d:b2:a2:04:d3:21:ab:e4:53:fa: 70:75:79:74:46:af:f4:d2:59:f1:2e:e0:fe:3c:7d:df:35:fb: 4b:e4:ab:6d:20:f1:f4:43:18:d7:ec:8d:72:d1:9c:92:e5:2f: 4a:40:f6:a0:b8:23:9d:8d:c9:7d:75:43:fa:38:dc:9d:19:a8: 3b:0f:e2:89:1b:34:6c:22:c7:d0:d1:bc:73:ee:50:14:75:96: e5:52:1c:e1:d1:26:d3:ab:64:22:69:bf:2c:34:05:d5:98:b5: 65:92:f2:eb:54:0c:3c:77:43:de:3a:e8:c7:98:d8:36:b4:3c: b0:f9:f8:52:88:48:af:c9:69:41:85:ab:a5:4f:7c:e8:fa:c7: 0f:a1:ab:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1zYKKuS0VwpbhOdkMcjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmZkYzg5NjA1YTcwZGQ4Njc3N2FhNGU5OWRmN2FkZTc3MzJmNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2j6me0BjzE8xsRPO15FSjgxoOn7 LTpgd5pBQ5IgFhV/fvxcDzZ8vcEI9HAQMFeSm8UD0FyCkyX9srP0pgaj5/h46Fsg JxSzxA07Yjp0p/1jcemp7OPl8IyjwJq0AQRAqlD4LCRdKI19wMpM2FpndvXKCZdq 8TCQ/QZi5KpoxpvISHcIn/pMLQ9cbxA07cnEnSV+24IXy9J9WJ9IsaIrl24VkkKX xCpAG0rXSFFR9piNuBovjccAFiax0++7SZ9kbCAI6Ys5kHukfjteVV4OgjjeynOd mdlwipmQchSi+ZYzUd+HJIOmUH3y6Ruv0Hlu9Htoi3rzQMfTC1tOSgPXUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHv9yJYFpw3YZ3eqTpnfet53MvZQMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvZV8zSWxnV25EZGhuZDZwT21kOTYzbmN5OWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxj/MA0G CSqGSIb3DQEBCwUAA4IBAQAxmXA8wiSNQ0PyZ4+Q8pInWvYI1dK54cxEFzaxYbUj JIZiJbi0W1Ka8KeEjPPiBPuesJXewxNCYGT6/H/pzUahV8/PKLBPUFydl52hY8ea sE3DNppdJhMv734TYNgDXmjNIRWBK+jxv3OReoTuFZ4KJ+JUq42yogTTIavkU/pw dXl0Rq/00lnxLuD+PH3fNftL5KttIPH0QxjX7I1y0ZyS5S9KQPaguCOdjcl9dUP6 ONydGag7D+KJGzRsIsfQ0bxz7lAUdZblUhzh0SbTq2Qiab8sNAXVmLVlkvLrVAw8 d0PeOujHmNg2tDyw+fhSiEivyWlBhaulT3zo+scPoauA -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client