This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/a-dU26j7iOlaYGBqtBFeQib2N4k.roa File: a-dU26j7iOlaYGBqtBFeQib2N4k.roa (raw, json) Hash identifier: bGjDUMwQTpY/iBOq3TZpdUgiLau4L3chQH75WxPpoxA= Subject key identifier: 6B:E7:54:DB:A8:FB:88:E9:5A:60:60:6A:B4:11:5E:42:26:F6:37:89 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019AEAFBEB8310C84192A718FEC83EC1812B Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/a-dU26j7iOlaYGBqtBFeQib2N4k.roa Signing time: Thu 04 Dec 2025 20:09:29 +0000 ROA not before: Thu 04 Dec 2025 20:09:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39529 IP address blocks: 31.40.144.0/24 maxlen: 24 31.40.147.0/24 maxlen: 24 31.40.148.0/24 maxlen: 24 31.40.149.0/24 maxlen: 24 31.40.155.0/24 maxlen: 24 91.214.81.0/24 maxlen: 24 91.214.82.0/24 maxlen: 24 91.214.83.0/24 maxlen: 24 194.50.9.0/24 maxlen: 24 2a09:acc0::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:fb:eb:83:10:c8:41:92:a7:18:fe:c8:3e:c1:81:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Dec 4 20:09:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6be754dba8fb88e95a60606ab4115e4226f63789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0b:14:a4:ad:5c:86:9e:c5:73:4b:0a:8e:3f: f2:de:4f:05:08:d1:45:e6:1f:e5:24:8e:05:36:d2: 04:22:59:72:3d:f0:48:d2:af:e9:3c:c7:9e:96:f4: 48:6a:d8:2c:a5:da:f4:a8:0d:77:7b:80:7e:f1:c0: fb:6a:81:cf:59:8b:83:d4:23:24:a6:47:1d:13:fe: 85:33:ca:00:c0:cd:d1:01:d3:47:59:42:55:5d:f7: 3a:cd:a1:89:c4:9a:e0:3a:8f:47:4a:07:85:5f:29: bf:07:bc:1b:5d:7d:9e:3f:3e:f3:37:b9:58:c4:ca: 9f:e7:07:35:32:f9:26:97:65:3a:52:93:9c:0a:96: 4d:5b:61:79:40:a2:0a:75:4a:36:56:41:62:9d:99: bc:6a:fb:42:3d:44:1e:0d:0d:31:c9:e9:3d:63:7a: 6a:18:ea:79:b3:3c:f7:47:aa:14:74:fe:1f:a4:8f: d9:c0:c4:4d:f0:99:41:f1:7e:cb:b2:b3:eb:e5:19: bf:30:e8:8f:b7:4e:c6:a7:9b:42:56:2c:5f:a0:73: 94:b1:bb:bd:cf:39:2a:4a:fd:66:f8:82:56:b9:7a: 30:46:f5:67:a6:68:b7:4e:de:f3:98:d3:b3:9d:20: 40:d9:ca:5b:c8:42:f1:2e:5e:a3:a5:df:99:31:5d: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E7:54:DB:A8:FB:88:E9:5A:60:60:6A:B4:11:5E:42:26:F6:37:89 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/a-dU26j7iOlaYGBqtBFeQib2N4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.144.0/24 31.40.147.0-31.40.149.255 31.40.155.0/24 91.214.81.0-91.214.83.255 194.50.9.0/24 IPv6: 2a09:acc0::/30 Signature Algorithm: sha256WithRSAEncryption 74:c7:d4:85:f5:f1:91:31:c2:30:7d:e9:a6:3c:d0:c8:0c:00: 9d:69:ce:36:9c:33:10:71:3f:f8:75:68:18:17:12:89:52:85: fa:0d:2c:c4:1f:84:c9:0e:5b:e0:c7:3e:b5:0e:5a:23:b0:dd: 58:86:dd:95:c6:ae:8e:f5:41:65:8c:c9:fd:53:ff:2c:f3:71: 5f:5e:65:50:10:c6:d4:88:cb:a7:38:a2:eb:1e:43:9f:cd:58: a6:86:aa:9d:10:0e:24:65:e5:87:58:e0:86:06:c8:df:d3:0d: 2a:7d:3f:15:25:25:1c:0c:2a:14:d8:cf:34:76:10:a5:a7:d9: 43:24:26:7c:3f:9e:06:c8:29:a1:78:54:72:8e:78:41:a7:af: 6f:12:0a:1e:6e:b5:9b:3e:c1:1b:a5:5d:3b:94:ff:01:c5:89: 57:5d:e6:eb:08:f4:1f:5e:ba:ae:c9:8f:c4:92:ef:56:2b:34: 81:42:79:f4:28:de:28:c3:db:48:8d:b6:39:72:1c:8a:48:a2: 37:cc:75:cb:c6:22:80:d5:09:aa:61:4f:dd:c6:cb:ac:32:5a: 5b:f5:2c:b1:50:52:75:6e:9b:1e:f3:d8:bb:d7:18:4f:b4:bc: 4a:0d:93:fd:fb:d4:15:91:b0:e9:b4:e8:3e:1a:4b:95:b5:41: 12:61:94:3d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZrq++uDEMhBkqcY/sg+wYErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUxMjA0MjAwOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmU3NTRkYmE4ZmI4OGU5NWE2MDYwNmFiNDExNWU0MjI2ZjYzNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QsUpK1chp7Fc0sKjj/y3k8FCNFF 5h/lJI4FNtIEIllyPfBI0q/pPMeelvRIatgspdr0qA13e4B+8cD7aoHPWYuD1CMk pkcdE/6FM8oAwM3RAdNHWUJVXfc6zaGJxJrgOo9HSgeFXym/B7wbXX2ePz7zN7lY xMqf5wc1Mvkml2U6UpOcCpZNW2F5QKIKdUo2VkFinZm8avtCPUQeDQ0xyek9Y3pq GOp5szz3R6oUdP4fpI/ZwMRN8JlB8X7LsrPr5Rm/MOiPt07Gp5tCVixfoHOUsbu9 zzkqSv1m+IJWuXowRvVnpmi3Tt7zmNOznSBA2cpbyELxLl6jpd+ZMV2IrwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFGvnVNuo+4jpWmBgarQRXkIm9jeJMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvYS1kVTI2ajdpT2xhWUdCcXRCRmVRaWIyTjRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQAHyiQMAwD BAAfKJMDBAEfKJQDBAAfKJswDAMEAFvWUQMEAlvWUAMEAMIyCTANBAIAAjAHAwUC KgmswDANBgkqhkiG9w0BAQsFAAOCAQEAdMfUhfXxkTHCMH3ppjzQyAwAnWnONpwz EHE/+HVoGBcSiVKF+g0sxB+EyQ5b4Mc+tQ5aI7DdWIbdlcaujvVBZYzJ/VP/LPNx X15lUBDG1IjLpzii6x5Dn81YpoaqnRAOJGXlh1jghgbI39MNKn0/FSUlHAwqFNjP NHYQpafZQyQmfD+eBsgpoXhUco54QaevbxIKHm61mz7BG6VdO5T/AcWJV13m6wj0 H166rsmPxJLvVis0gUJ59CjeKMPbSI22OXIcikiiN8x1y8YigNUJqmFP3cbLrDJa W/UssVBSdW6bHvPYu9cYT7S8Sg2T/fvUFZGw6bToPhpLlbVBEmGUPQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:04:07 2025 by rpki-client