This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/fLhrOgEH14ZtDnY2a-kcypEw4TA.roa File: fLhrOgEH14ZtDnY2a-kcypEw4TA.roa (raw, json) Hash identifier: IrBPByCkmrLWzYOki6hhtel2dQO8ugJUMzMYgBXFBL8= Subject key identifier: 7C:B8:6B:3A:01:07:D7:86:6D:0E:76:36:6B:E9:1C:CA:91:30:E1:30 Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C146DD61FF88E1E5B587C4E63C6E Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/fLhrOgEH14ZtDnY2a-kcypEw4TA.roa Signing time: Fri 02 Jan 2026 10:20:07 +0000 ROA not before: Fri 02 Jan 2026 10:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 5.56.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c1:46:dd:61:ff:88:e1:e5:b5:87:c4:e6:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cb86b3a0107d7866d0e76366be91cca9130e130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:83:1c:7e:d8:54:ad:d6:9e:af:52:4a:13: 49:b7:24:1a:8d:f7:f1:94:eb:54:06:df:fc:0f:90: fb:9b:d8:9b:bd:de:41:fd:31:f2:5c:30:94:5c:75: 48:ca:7d:f7:04:2e:88:84:c3:5e:31:50:5d:1c:dc: b8:6c:ac:5f:d9:60:62:ee:d0:db:33:80:4c:63:f5: 9f:2a:e6:02:23:ca:4c:06:4f:7a:63:68:52:56:10: 7a:f7:63:e6:ce:3a:dd:48:04:f0:fe:75:22:61:02: 0d:34:df:34:28:ec:c3:1b:a4:78:d9:02:ee:3f:8e: c7:8f:43:0a:2c:39:ac:e2:79:4b:8b:13:3e:f0:90: f6:f0:98:b4:88:5a:18:02:41:99:6b:a0:92:fc:ec: fe:13:08:6a:e6:b2:58:76:bf:88:43:06:72:ac:f6: 78:90:66:b4:f6:c8:c6:de:2e:8f:01:92:8e:6e:d1: e6:66:21:7f:6c:3f:b1:c1:d8:fb:0f:48:9d:de:30: fb:1e:92:28:20:79:d4:77:d2:d7:7c:b1:53:7d:16: 5f:aa:e5:f4:52:f2:42:7d:08:4f:a2:3f:ac:05:02: 1e:28:f1:7d:5a:a6:ad:07:8e:2a:f5:e1:b0:c4:08: a8:25:e2:92:86:6a:e8:96:d4:c6:32:3c:10:8e:19: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B8:6B:3A:01:07:D7:86:6D:0E:76:36:6B:E9:1C:CA:91:30:E1:30 X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/fLhrOgEH14ZtDnY2a-kcypEw4TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.31.0/24 Signature Algorithm: sha256WithRSAEncryption c3:1d:b2:40:7c:ae:34:1f:10:97:ec:e4:b3:83:4d:28:ac:ed: 1b:b4:c4:55:d6:8f:00:79:46:e3:79:1c:b4:e7:5d:e2:c4:72: e9:b5:3b:4a:18:69:99:4c:6d:93:3c:05:8c:6e:77:e2:da:21: 0e:75:91:69:59:8f:3c:9d:7b:f5:ad:3c:da:10:f3:0d:35:b5: 0e:91:06:6b:eb:0d:8a:fa:be:3a:7b:3c:72:c4:a0:f8:45:9b: 40:a2:b0:6f:07:2c:10:99:ca:90:2c:e5:15:f6:92:ea:04:95: 21:20:48:f7:b3:38:40:90:6b:67:47:d9:19:5e:05:ba:6a:14: 3e:cd:ed:63:e7:c4:b9:99:4a:b2:13:a4:09:d3:d5:88:0f:a8: 92:1d:e2:97:a9:25:8e:97:3e:80:1e:08:f6:9c:49:e3:31:60: 23:cf:7d:7d:3d:44:bf:d4:10:6a:7b:c9:0a:d0:07:59:c6:98: 2b:c4:21:4c:ba:e5:42:75:43:cf:b9:33:c2:19:31:53:fd:e7: 78:87:8f:88:b8:86:12:2b:8c:ed:dd:76:12:35:dd:c3:e3:5f: f9:a7:a6:f5:48:69:4a:81:d4:eb:b5:01:98:fa:16:8d:b4:a4: 98:13:40:09:ec:87:b0:23:b9:f3:5f:5c:07:aa:9d:af:bc:f7: 27:d8:0e:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMFG3WH/iOHltYfE5jxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2I4NmIzYTAxMDdkNzg2NmQwZTc2MzY2YmU5MWNjYTkxMzBlMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliKDHH7YVK3Wnq9SShNJtyQajffx lOtUBt/8D5D7m9ibvd5B/THyXDCUXHVIyn33BC6IhMNeMVBdHNy4bKxf2WBi7tDb M4BMY/WfKuYCI8pMBk96Y2hSVhB692PmzjrdSATw/nUiYQINNN80KOzDG6R42QLu P47Hj0MKLDms4nlLixM+8JD28Ji0iFoYAkGZa6CS/Oz+Ewhq5rJYdr+IQwZyrPZ4 kGa09sjG3i6PAZKObtHmZiF/bD+xwdj7D0id3jD7HpIoIHnUd9LXfLFTfRZfquX0 UvJCfQhPoj+sBQIeKPF9WqatB44q9eGwxAioJeKShmroltTGMjwQjhnT3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHy4azoBB9eGbQ52NmvpHMqRMOEwMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvZkxock9nRUgxNFp0RG5ZMmEta2N5cEV3NFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgfMA0G CSqGSIb3DQEBCwUAA4IBAQDDHbJAfK40HxCX7OSzg00orO0btMRV1o8AeUbjeRy0 513ixHLptTtKGGmZTG2TPAWMbnfi2iEOdZFpWY88nXv1rTzaEPMNNbUOkQZr6w2K +r46ezxyxKD4RZtAorBvBywQmcqQLOUV9pLqBJUhIEj3szhAkGtnR9kZXgW6ahQ+ ze1j58S5mUqyE6QJ09WID6iSHeKXqSWOlz6AHgj2nEnjMWAjz319PUS/1BBqe8kK 0AdZxpgrxCFMuuVCdUPPuTPCGTFT/ed4h4+IuIYSK4zt3XYSNd3D41/5p6b1SGlK gdTrtQGY+haNtKSYE0AJ7IewI7nzX1wHqp2vvPcn2A4i -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:57 2026 by rpki-client