This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/s2ybeZT5rNVQIBebgD5HdN1AWlw.roa File: s2ybeZT5rNVQIBebgD5HdN1AWlw.roa (raw, json) Hash identifier: QrYBLYtzcPg8r33UGPdDC/yuaM0LspPms6lZA29qbO0= Subject key identifier: B3:6C:9B:79:94:F9:AC:D5:50:20:17:9B:80:3E:47:74:DD:40:5A:5C Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B7E38C5306D5B8DB92716FC37F5738428 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/s2ybeZT5rNVQIBebgD5HdN1AWlw.roa Signing time: Fri 02 Jan 2026 10:20:08 +0000 ROA not before: Fri 02 Jan 2026 10:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210538 IP address blocks: 31.42.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c5:30:6d:5b:8d:b9:27:16:fc:37:f5:73:84:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Jan 2 10:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b36c9b7994f9acd55020179b803e4774dd405a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:34:00:56:cf:96:4f:4e:f2:d9:5c:19:d7: ad:53:3c:18:f4:b7:85:95:f8:56:db:3e:32:17:ce: 0a:31:94:4b:a7:4e:b7:1c:78:ef:cf:19:27:70:67: 48:89:32:de:1c:5c:67:42:06:6c:b5:9c:44:51:e2: 03:6b:a3:fa:53:07:06:1c:57:e7:70:a6:8a:f1:0f: 5f:2d:55:eb:6d:13:b4:d9:f7:bf:f4:c4:83:3f:09: 73:3e:a9:a7:13:75:ea:d2:db:a7:f7:1b:19:f8:dc: db:65:79:46:7f:cf:5f:4d:28:02:bb:83:dc:01:ac: 8e:4b:50:45:60:e5:a6:81:2b:43:82:7b:81:e0:42: 39:63:d7:3d:bd:c2:ef:42:3f:75:0d:04:30:dc:25: af:7c:d2:2a:a7:37:38:f3:26:d3:79:35:1c:db:8d: 8e:40:20:21:a2:2e:8c:a3:36:d2:81:e2:6f:a1:99: b9:ff:67:9e:86:a1:0d:bb:0f:97:8c:c2:88:d5:e3: 22:8b:c5:45:ea:14:90:ed:4a:2c:97:37:2e:fc:9b: 9f:1e:1c:13:29:39:98:1b:e4:c8:3e:06:2c:af:82: 7e:6c:78:0e:e5:37:77:3c:79:a6:75:62:d2:04:56: 46:45:18:48:04:15:e6:ba:18:5c:09:fe:85:96:dd: bd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6C:9B:79:94:F9:AC:D5:50:20:17:9B:80:3E:47:74:DD:40:5A:5C X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/s2ybeZT5rNVQIBebgD5HdN1AWlw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.127.0/24 Signature Algorithm: sha256WithRSAEncryption 34:0e:a1:9e:a2:fd:82:2a:9b:62:63:e9:86:5a:d8:9a:e2:04: 0d:25:e9:c7:e3:23:b5:82:e0:3a:05:6a:dd:fc:66:e4:14:b5: 29:1d:1e:db:41:c3:14:8e:8c:1c:0f:fa:c0:5a:04:95:2b:7f: 49:20:42:e3:ae:ab:ea:3e:b9:8b:33:d0:3c:4b:b4:a9:74:cc: 35:51:a3:46:ff:05:3c:c7:be:4e:1d:8c:d5:30:60:91:e5:3f: 60:cf:bd:79:c4:8c:b6:0f:e3:b5:e6:c7:2e:e0:2c:af:bd:38: b5:ae:13:60:07:5f:b9:1f:9a:a3:cb:4f:15:37:61:8a:37:b1: 82:db:93:b8:50:f9:e0:87:96:ae:e7:d3:4d:6f:4c:3c:fd:3f: c9:d2:ff:ae:30:12:0e:aa:73:13:f1:ce:bc:d4:fc:b9:a8:09: 6a:5f:55:58:26:b7:ee:31:f9:d1:35:58:03:91:ee:5f:ca:5c: c8:6e:33:56:38:a0:9e:9c:cc:c9:e9:2a:ee:81:85:03:b6:e3: d7:26:a3:20:cc:09:af:5f:16:fb:ba:07:61:b2:e9:f0:af:b9: 93:4b:03:e3:87:58:26:59:3f:87:22:88:86:b8:cd:87:b5:db: a1:63:68:c0:ad:e8:c1:c6:6d:4d:59:69:42:19:79:b6:8e:ae: 1a:16:7a:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMUwbVuNuScW/Df1c4QoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjYwMTAyMTAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzZjOWI3OTk0ZjlhY2Q1NTAyMDE3OWI4MDNlNDc3NGRkNDA1YTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJI0AFbPlk9O8tlcGdetUzwY9LeF lfhW2z4yF84KMZRLp063HHjvzxkncGdIiTLeHFxnQgZstZxEUeIDa6P6UwcGHFfn cKaK8Q9fLVXrbRO02fe/9MSDPwlzPqmnE3Xq0tun9xsZ+NzbZXlGf89fTSgCu4Pc AayOS1BFYOWmgStDgnuB4EI5Y9c9vcLvQj91DQQw3CWvfNIqpzc48ybTeTUc242O QCAhoi6MozbSgeJvoZm5/2eehqENuw+XjMKI1eMii8VF6hSQ7Uoslzcu/JufHhwT KTmYG+TIPgYsr4J+bHgO5Td3PHmmdWLSBFZGRRhIBBXmuhhcCf6Flt29ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNsm3mU+azVUCAXm4A+R3TdQFpcMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvczJ5YmVaVDVyTlZRSUJlYmdENUhkTjFBV2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyp/MA0G CSqGSIb3DQEBCwUAA4IBAQA0DqGeov2CKptiY+mGWtia4gQNJenH4yO1guA6BWrd /GbkFLUpHR7bQcMUjowcD/rAWgSVK39JIELjrqvqPrmLM9A8S7SpdMw1UaNG/wU8 x75OHYzVMGCR5T9gz715xIy2D+O15scu4CyvvTi1rhNgB1+5H5qjy08VN2GKN7GC 25O4UPngh5au59NNb0w8/T/J0v+uMBIOqnMT8c681Py5qAlqX1VYJrfuMfnRNVgD ke5fylzIbjNWOKCenMzJ6SrugYUDtuPXJqMgzAmvXxb7ugdhsunwr7mTSwPjh1gm WT+HIoiGuM2HtduhY2jArejBxm1NWWlCGXm2jq4aFnop -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:58 2026 by rpki-client