This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vC8tk2ZhTYj7uq72yc2FgWPo-6k.roa File: vC8tk2ZhTYj7uq72yc2FgWPo-6k.roa (raw, json) Hash identifier: NntxUKy1pE+J5Twbe3r46JkphUlaCfghwFBnJ4iWRz4= Subject key identifier: BC:2F:2D:93:66:61:4D:88:FB:BA:AE:F6:C9:CD:85:81:63:E8:FB:A9 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB57F2160802F92FEC19A46D3A75B1 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vC8tk2ZhTYj7uq72yc2FgWPo-6k.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15672 IP address blocks: 31.24.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:f2:16:08:02:f9:2f:ec:19:a4:6d:3a:75:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc2f2d9366614d88fbbaaef6c9cd858163e8fba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:cb:12:9f:f2:4a:0c:54:52:3b:b6:25:82: 76:bb:89:70:b2:a0:24:3f:15:13:d8:ae:37:71:be: 01:b8:3d:48:1a:1b:31:dd:6d:fa:03:2a:85:81:95: df:f2:9c:15:22:46:45:b1:a8:4c:be:8b:77:db:4d: 6a:8d:4d:53:6a:fe:62:c3:bd:9b:b0:51:f2:3f:5f: 1b:64:70:d7:04:5d:04:d3:73:9a:5a:8d:a7:76:d6: 73:f8:e1:a4:cd:66:0b:6c:38:95:58:cb:33:41:c1: 87:df:a3:39:65:42:53:45:65:8f:f7:a7:cb:38:55: 54:8a:12:18:b1:ad:7b:74:94:0c:a4:90:4b:d1:2c: 89:f0:ab:b8:c6:77:41:69:e8:67:7d:e3:cc:2a:8b: c9:6e:31:e2:91:56:c1:d7:69:35:f5:4a:ce:06:d8: 5b:c6:2c:0f:64:0d:3d:2d:01:96:a6:c4:e9:61:86: 0a:18:50:e0:31:f4:36:47:3c:c8:4f:9d:b1:83:02: e1:f3:35:8e:87:ec:ff:fe:f7:de:1c:89:60:38:b2: 80:23:bf:4a:29:69:f8:a2:d8:da:77:08:23:5a:d7: 74:1f:44:23:7a:8e:4b:a0:46:7d:50:fc:8c:d4:1d: 02:61:8e:bd:48:67:0d:cd:67:08:04:98:cd:90:59: 79:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2F:2D:93:66:61:4D:88:FB:BA:AE:F6:C9:CD:85:81:63:E8:FB:A9 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vC8tk2ZhTYj7uq72yc2FgWPo-6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.255.0/24 Signature Algorithm: sha256WithRSAEncryption 87:ab:d8:d5:72:f6:1e:dc:5b:41:a0:89:84:01:5e:65:7a:48: fc:43:61:f2:ae:ed:56:8b:db:1e:a5:26:1e:db:b0:e2:5e:85: ac:14:68:70:19:4a:d7:26:be:25:1a:90:4e:0b:17:e3:65:ac: 2d:ac:6e:f6:ed:b7:2a:5e:9e:7c:80:08:55:60:0a:c1:22:0a: 89:9e:13:82:54:b1:76:9e:f1:d2:03:9b:27:04:b3:ea:a6:33: 10:30:33:b7:6d:e0:6c:37:f1:00:f4:43:1f:e1:bd:69:d7:e6: 1f:7c:ac:92:87:7d:79:f2:cb:09:3a:e3:ea:46:74:d8:41:2f: ec:eb:a2:d8:36:fd:05:2e:1c:d3:f9:d9:70:b2:ec:83:92:a5: 33:e1:26:2c:f0:2e:e6:52:7a:6c:f8:89:55:2a:ac:01:2c:8d: 98:e9:6a:7f:6d:92:5f:2d:c0:16:41:c2:81:2f:4f:0d:4e:26: 4c:3a:b8:14:e5:ce:03:d6:fa:f3:83:6c:d1:14:5c:51:6e:3c: 5e:27:33:a9:37:81:90:2e:c5:b2:78:e8:28:dc:e6:14:93:b1: 5c:ca:65:c9:cb:c4:14:a6:6d:48:8c:cb:87:ed:a0:99:35:9e: fe:7c:60:45:54:ab:b6:f6:dd:e8:c5:8a:d9:f2:35:3e:08:b7: eb:42:62:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1fyFggC+S/sGaRtOnWxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzJmMmQ5MzY2NjE0ZDg4ZmJiYWFlZjZjOWNkODU4MTYzZThmYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fHLEp/ySgxUUju2JYJ2u4lwsqAk PxUT2K43cb4BuD1IGhsx3W36AyqFgZXf8pwVIkZFsahMvot3201qjU1Tav5iw72b sFHyP18bZHDXBF0E03OaWo2ndtZz+OGkzWYLbDiVWMszQcGH36M5ZUJTRWWP96fL OFVUihIYsa17dJQMpJBL0SyJ8Ku4xndBaehnfePMKovJbjHikVbB12k19UrOBthb xiwPZA09LQGWpsTpYYYKGFDgMfQ2RzzIT52xgwLh8zWOh+z//vfeHIlgOLKAI79K KWn4otjadwgjWtd0H0Qjeo5LoEZ9UPyM1B0CYY69SGcNzWcIBJjNkFl50QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLwvLZNmYU2I+7qu9snNhYFj6PupMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvdkM4dGsyWmhUWWo3dXE3MnljMkZnV1BvLTZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxj/MA0G CSqGSIb3DQEBCwUAA4IBAQCHq9jVcvYe3FtBoImEAV5lekj8Q2Hyru1Wi9sepSYe 27DiXoWsFGhwGUrXJr4lGpBOCxfjZawtrG727bcqXp58gAhVYArBIgqJnhOCVLF2 nvHSA5snBLPqpjMQMDO3beBsN/EA9EMf4b1p1+YffKySh3158ssJOuPqRnTYQS/s 66LYNv0FLhzT+dlwsuyDkqUz4SYs8C7mUnps+IlVKqwBLI2Y6Wp/bZJfLcAWQcKB L08NTiZMOrgU5c4D1vrzg2zRFFxRbjxeJzOpN4GQLsWyeOgo3OYUk7FcymXJy8QU pm1IjMuH7aCZNZ7+fGBFVKu29t3oxYrZ8jU+CLfrQmJI -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:52 2026 by rpki-client