This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/tEM3cdsPlnnUtLjCCZyMoawWAtg.roa File: tEM3cdsPlnnUtLjCCZyMoawWAtg.roa (raw, json) Hash identifier: 6h53cAP7YwqSOqXrW0Uk5ZovRw+2Dyi+jtBDIPvi2c0= Subject key identifier: B4:43:37:71:DB:0F:96:79:D4:B4:B8:C2:09:9C:8C:A1:AC:16:02:D8 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019B7F8369BBF1B2D39CC892FAB13F089051 Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/tEM3cdsPlnnUtLjCCZyMoawWAtg.roa Signing time: Fri 02 Jan 2026 16:21:17 +0000 ROA not before: Fri 02 Jan 2026 16:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57679 IP address blocks: 31.40.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:69:bb:f1:b2:d3:9c:c8:92:fa:b1:3f:08:90:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Jan 2 16:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4433771db0f9679d4b4b8c2099c8ca1ac1602d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:a3:11:1c:23:7c:0a:66:3e:b4:a1:55:a4: 88:ca:30:d3:2b:68:32:0a:c2:9e:09:92:9c:55:f3: a8:bd:d9:21:3f:49:98:7f:61:9b:5d:a7:87:c7:55: d6:bc:34:e0:2c:45:62:78:64:d4:2b:fc:ca:21:04: e5:90:6f:96:22:99:6d:b7:dd:8e:af:59:23:fb:fa: d7:e6:f3:39:e6:d5:d1:b5:cf:a5:1c:27:f2:30:63: 31:8f:33:dc:ed:ad:4e:fd:2c:22:9a:e3:90:a6:87: c1:c8:aa:60:1c:5e:81:85:b8:ee:6d:20:24:a5:70: 5f:51:74:74:9a:51:23:e1:f3:41:49:4d:f3:e5:b8: d9:91:9b:b1:2b:ef:d5:b1:f5:cb:4b:a9:a3:f4:e1: a2:f5:c4:b9:1e:bb:a6:44:8a:7b:3b:0d:8a:94:c3: 4b:9e:36:c5:b9:f3:ec:05:51:19:32:07:da:97:53: 80:b2:4d:cf:1c:eb:cb:a7:23:22:8f:f9:1a:02:f0: 28:30:b8:04:b2:76:07:62:50:f0:47:89:b9:be:ba: f2:23:1b:89:f3:56:1f:aa:19:a7:e4:53:82:86:c2: b4:c2:d9:ee:89:b9:23:24:89:4e:c4:e8:38:df:25: 0a:cc:05:33:9f:bb:f0:5e:01:08:67:19:02:52:81: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:43:37:71:DB:0F:96:79:D4:B4:B8:C2:09:9C:8C:A1:AC:16:02:D8 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/tEM3cdsPlnnUtLjCCZyMoawWAtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.159.0/24 Signature Algorithm: sha256WithRSAEncryption 26:c6:e8:44:91:cf:d6:d1:ba:da:1e:b6:be:0b:22:a9:7e:e3: 47:3a:91:f4:32:9f:3e:f8:76:09:af:8d:39:42:56:f6:fd:7b: 59:45:e9:bb:2c:22:d6:4c:2e:21:db:9a:08:51:c2:2a:ce:14: c0:f9:30:03:89:41:ed:cd:f9:f1:b2:a1:5b:51:95:01:cf:59: 41:13:e3:24:87:86:0e:51:55:8a:c8:82:bc:24:d5:06:8a:b6: 69:29:9a:3d:a2:72:03:40:ef:33:e5:d7:99:4e:f6:90:20:23: a0:a9:2f:f4:cf:8a:68:26:a5:f9:80:90:1b:e2:ed:13:6e:a1: cb:ee:b0:a6:90:8e:bc:53:c0:ba:54:48:66:48:83:ca:ab:7c: 03:e4:55:9b:75:75:85:6b:75:01:94:ed:84:33:cf:d4:5a:95: 23:ad:0d:cf:69:be:bf:a5:84:83:23:3d:aa:b4:31:a5:6c:d6: 33:63:b9:d6:85:8c:72:29:84:5e:b4:57:9c:0f:32:ec:b7:a6: 2f:8d:18:38:41:eb:53:a5:f0:58:6d:a8:a0:45:90:80:a3:86: c0:0e:87:1c:3f:95:e0:69:97:50:cb:d5:d6:5c:11:3b:48:2c: be:be:f3:2c:43:ea:d6:7f:c0:8e:d6:9a:ad:c8:5b:52:6a:c5: 04:66:27:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2m78bLTnMiS+rE/CJBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjYwMTAyMTYyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQzMzc3MWRiMGY5Njc5ZDRiNGI4YzIwOTljOGNhMWFjMTYwMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulGjERwjfApmPrShVaSIyjDTK2gy CsKeCZKcVfOovdkhP0mYf2GbXaeHx1XWvDTgLEVieGTUK/zKIQTlkG+WIpltt92O r1kj+/rX5vM55tXRtc+lHCfyMGMxjzPc7a1O/SwimuOQpofByKpgHF6BhbjubSAk pXBfUXR0mlEj4fNBSU3z5bjZkZuxK+/VsfXLS6mj9OGi9cS5HrumRIp7Ow2KlMNL njbFufPsBVEZMgfal1OAsk3PHOvLpyMij/kaAvAoMLgEsnYHYlDwR4m5vrryIxuJ 81Yfqhmn5FOChsK0wtnuibkjJIlOxOg43yUKzAUzn7vwXgEIZxkCUoGqiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRDN3HbD5Z51LS4wgmcjKGsFgLYMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvdEVNM2Nkc1Bsbm5VdExqQ0NaeU1vYXdXQXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyifMA0G CSqGSIb3DQEBCwUAA4IBAQAmxuhEkc/W0braHra+CyKpfuNHOpH0Mp8++HYJr405 Qlb2/XtZRem7LCLWTC4h25oIUcIqzhTA+TADiUHtzfnxsqFbUZUBz1lBE+Mkh4YO UVWKyIK8JNUGirZpKZo9onIDQO8z5deZTvaQICOgqS/0z4poJqX5gJAb4u0TbqHL 7rCmkI68U8C6VEhmSIPKq3wD5FWbdXWFa3UBlO2EM8/UWpUjrQ3Pab6/pYSDIz2q tDGlbNYzY7nWhYxyKYRetFecDzLst6YvjRg4QetTpfBYbaigRZCAo4bADoccP5Xg aZdQy9XWXBE7SCy+vvMsQ+rWf8CO1pqtyFtSasUEZifm -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:34 2026 by rpki-client