This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/1qiR31b7CdS9Trli9AVTHEeogq4.roa File: 1qiR31b7CdS9Trli9AVTHEeogq4.roa (raw, json) Hash identifier: MOeY3wjDcl6db4aacGkO8F1pX14sP/Futaitk3A7SnY= Subject key identifier: D6:A8:91:DF:56:FB:09:D4:BD:4E:B9:62:F4:05:53:1C:47:A8:82:AE Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B0715380ED3AEF3D295DC66976BDCD1E3 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/1qiR31b7CdS9Trli9AVTHEeogq4.roa Signing time: Wed 10 Dec 2025 07:06:29 +0000 ROA not before: Wed 10 Dec 2025 07:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42831 IP address blocks: 5.56.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:15:38:0e:d3:ae:f3:d2:95:dc:66:97:6b:dc:d1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Dec 10 07:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d6a891df56fb09d4bd4eb962f405531c47a882ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:de:13:20:14:bb:20:83:1c:1f:74:9e:23: 2e:46:0b:87:7d:27:bb:d8:5e:62:08:7a:62:72:ca: 6f:01:72:e9:5d:5c:d8:f5:71:2a:cd:11:5b:ef:24: 4a:de:e4:8e:ff:1b:06:e2:6a:d6:c8:9b:e1:54:ad: da:8f:ac:9c:86:cb:50:93:3b:cc:39:6c:c1:50:0d: c1:69:da:b0:9b:82:85:2e:65:b2:d1:39:cc:be:89: b4:80:b1:9b:f3:8a:68:7c:40:1f:a9:24:15:6c:d5: 52:fe:52:9d:b6:23:64:5f:dc:04:39:f9:86:7b:61: 1c:74:64:12:7e:56:9c:b9:a8:5f:43:bb:92:e9:5c: ee:a6:04:09:c5:2e:54:c6:23:6d:0e:92:56:79:89: 4e:80:d6:2d:23:97:5f:ec:a8:d2:ff:ca:65:88:ce: e2:ca:3a:5b:ba:f6:bd:40:04:18:95:08:55:f8:ca: 90:e6:25:09:85:6c:1c:3d:b4:c9:dc:51:a9:91:6f: 6e:a0:dc:63:c8:f2:b8:05:fc:0d:9e:98:9d:ae:30: 39:eb:63:4d:ec:23:a6:fb:11:d7:39:b9:19:bd:d1: 62:19:cf:6f:13:bf:39:df:88:95:75:19:f8:30:0c: 3c:75:ae:ae:bd:f2:2a:b7:48:12:c0:f8:c1:13:e2: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A8:91:DF:56:FB:09:D4:BD:4E:B9:62:F4:05:53:1C:47:A8:82:AE X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/1qiR31b7CdS9Trli9AVTHEeogq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.31.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:27:4b:de:50:0c:c0:cd:be:00:41:79:d3:6a:b8:27:bc:1a: 74:da:0f:92:d4:97:34:7b:62:e9:6c:e1:02:b9:e6:d0:70:52: a5:af:89:ff:55:67:32:16:4a:af:ee:24:94:c7:d7:ae:e8:03: 12:da:71:14:44:dc:c6:6e:ed:2f:78:8e:ed:e4:ad:cf:cd:9c: 4c:b4:5f:eb:d2:e6:74:1c:13:3b:62:89:64:89:bd:63:41:2d: 45:c4:8c:63:a6:dc:25:3d:f1:7a:a2:4d:08:25:3f:a8:81:67: a6:9e:7d:4b:de:3d:8f:27:52:5f:e3:ba:92:5b:7a:2b:1f:9a: 73:76:55:39:9b:27:07:97:9f:4d:53:84:54:1d:b6:fc:73:bd: 05:a1:64:18:3e:c1:67:7d:6d:d9:52:82:27:9f:a8:d1:5d:87: ee:38:a4:b7:f1:fa:76:4a:22:52:9c:38:05:bf:2a:ad:fe:62: 06:4d:66:58:e9:f1:dd:65:ec:e6:1c:f1:a2:a7:ff:fe:44:07: 42:90:61:32:cb:90:6d:f3:44:c0:d0:42:fe:d1:17:c3:b2:bb: d6:73:6b:c9:4e:f1:c2:ce:36:93:85:5f:bf:82:b7:05:59:76: 39:d3:dc:20:f5:cd:7d:1e:ea:dc:a5:ed:9b:2d:29:9c:09:c6: 0f:67:34:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHFTgO067z0pXcZpdr3NHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMjEwMDcwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmE4OTFkZjU2ZmIwOWQ0YmQ0ZWI5NjJmNDA1NTMxYzQ3YTg4MmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl3eEyAUuyCDHB90niMuRguHfSe7 2F5iCHpicspvAXLpXVzY9XEqzRFb7yRK3uSO/xsG4mrWyJvhVK3aj6ychstQkzvM OWzBUA3Badqwm4KFLmWy0TnMvom0gLGb84pofEAfqSQVbNVS/lKdtiNkX9wEOfmG e2EcdGQSflacuahfQ7uS6VzupgQJxS5UxiNtDpJWeYlOgNYtI5df7KjS/8pliM7i yjpbuva9QAQYlQhV+MqQ5iUJhWwcPbTJ3FGpkW9uoNxjyPK4BfwNnpidrjA562NN 7COm+xHXObkZvdFiGc9vE78534iVdRn4MAw8da6uvfIqt0gSwPjBE+KzzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaokd9W+wnUvU65YvQFUxxHqIKuMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvMXFpUjMxYjdDZFM5VHJsaTlBVlRIRWVvZ3E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgfMA0G CSqGSIb3DQEBCwUAA4IBAQBcJ0veUAzAzb4AQXnTargnvBp02g+S1Jc0e2LpbOEC uebQcFKlr4n/VWcyFkqv7iSUx9eu6AMS2nEURNzGbu0veI7t5K3PzZxMtF/r0uZ0 HBM7Yolkib1jQS1FxIxjptwlPfF6ok0IJT+ogWemnn1L3j2PJ1Jf47qSW3orH5pz dlU5mycHl59NU4RUHbb8c70FoWQYPsFnfW3ZUoInn6jRXYfuOKS38fp2SiJSnDgF vyqt/mIGTWZY6fHdZezmHPGip//+RAdCkGEyy5Bt80TA0EL+0RfDsrvWc2vJTvHC zjaThV+/grcFWXY509wg9c19Hurcpe2bLSmcCcYPZzSZ -----END CERTIFICATE-----Generated at Wed Dec 10 18:02:54 2025 by rpki-client