This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/cVMPfkbG6UOsNH5plxFAqn0XkEQ.roa File: cVMPfkbG6UOsNH5plxFAqn0XkEQ.roa (raw, json) Hash identifier: IZdQT+U93+RrywPuq81fYi7D3L8Bi21y4Bobjb9uAxw= Subject key identifier: 71:53:0F:7E:46:C6:E9:43:AC:34:7E:69:97:11:40:AA:7D:17:90:44 Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654 Certificate serial: 019B797EE34935E7330E4F8D0B1574B26F17 Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/cVMPfkbG6UOsNH5plxFAqn0XkEQ.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 31.88.0.0/15 maxlen: 24 218.254.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e3:49:35:e7:33:0e:4f:8d:0b:15:74:b2:6f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26c672da72a34cc282adc40f282676de75117654 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71530f7e46c6e943ac347e69971140aa7d179044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:45:93:5c:51:e8:22:57:3b:c9:1c:35:a9:d3: 41:9d:7a:a5:82:9c:66:f2:a5:16:d2:43:14:ec:48: f7:85:df:9d:b5:d7:17:65:4b:2f:e0:ba:fb:2a:78: a2:2d:6c:e1:ed:be:16:17:aa:8c:48:a6:6a:17:d7: f3:23:ae:61:4a:b0:35:78:21:24:31:2d:00:93:9a: 17:64:91:17:ff:fa:b7:3d:fd:78:f8:68:d7:2d:bb: 4e:e7:67:84:50:80:b9:d1:8b:fa:4e:a0:b1:8a:84: 8a:ec:cd:65:0f:d5:b2:f4:7d:e9:92:af:d8:e9:0a: 76:12:db:86:b4:dc:1b:34:73:65:6d:f0:c5:30:ee: c5:53:77:5d:df:8e:ab:8c:1a:f5:9d:b6:74:74:99: 37:3e:63:31:76:d0:f3:3e:f6:5e:72:ae:ab:aa:27: fa:05:71:1e:15:91:2c:6a:63:d2:90:82:be:c9:d2: 2d:ef:dc:6f:47:57:d6:88:31:43:3c:44:9f:28:10: 9f:e7:f4:85:b0:d4:58:08:49:7d:8b:52:00:4e:51: 5a:fe:42:7e:ec:85:a9:b8:76:07:20:03:69:c9:94: 4f:bb:63:c4:3e:bb:47:6c:92:9c:88:63:b1:06:ea: c0:2f:26:d1:4a:b5:cb:31:31:59:aa:9d:b4:95:8e: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:53:0F:7E:46:C6:E9:43:AC:34:7E:69:97:11:40:AA:7D:17:90:44 X509v3 Authority Key Identifier: keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/cVMPfkbG6UOsNH5plxFAqn0XkEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.88.0.0/15 218.254.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:10:6a:e5:30:5e:37:c5:dc:5a:13:00:9c:82:c7:ad:1a:bd: 99:00:c2:9f:aa:41:15:95:f3:67:33:24:56:58:0e:61:65:aa: e2:9e:c7:8c:5f:ea:00:c3:fa:89:95:68:d8:62:6f:f8:22:6c: 56:55:52:a4:55:f3:f0:62:8f:a5:c0:95:17:f8:99:2e:a9:01: 98:59:50:93:14:6b:0d:40:53:14:93:b9:05:8e:66:35:d7:b6: 8f:d2:e8:84:c9:6d:5a:e2:4d:41:de:c8:98:20:c7:b1:4a:ed: 1a:4f:6a:77:d2:82:02:ba:34:31:25:9e:fc:b4:0c:5b:a0:b0: f8:ac:ee:7e:42:e9:43:29:64:1a:6a:1e:1e:a7:da:73:13:d5: e6:6b:be:3a:83:f2:bd:d1:e2:5e:2b:9a:f0:15:a1:55:3e:e9: 6c:c9:23:18:c6:25:37:40:64:88:de:13:34:7e:f9:05:e5:8e: 47:3c:22:10:39:34:8b:7e:39:c9:55:d0:db:9b:e0:6a:f6:3f: 7b:ed:e9:9b:d8:d0:0e:7d:41:04:53:36:ea:bd:6f:53:34:c9: be:93:36:2d:17:f8:b5:98:a9:97:7e:00:4a:40:7e:c2:39:a3: 70:87:60:73:fa:ed:f1:77:5c:29:3a:f4:69:63:e0:b6:22:de: 7e:1d:cf:71 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt5fuNJNeczDk+NCxV0sm8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YzY3MmRhNzJhMzRjYzI4MmFkYzQwZjI4MjY3NmRlNzUx MTc2NTQwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTUzMGY3ZTQ2YzZlOTQzYWMzNDdlNjk5NzExNDBhYTdkMTc5MDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kWTXFHoIlc7yRw1qdNBnXqlgpxm 8qUW0kMU7Ej3hd+dtdcXZUsv4Lr7KniiLWzh7b4WF6qMSKZqF9fzI65hSrA1eCEk MS0Ak5oXZJEX//q3Pf14+GjXLbtO52eEUIC50Yv6TqCxioSK7M1lD9Wy9H3pkq/Y 6Qp2EtuGtNwbNHNlbfDFMO7FU3dd346rjBr1nbZ0dJk3PmMxdtDzPvZecq6rqif6 BXEeFZEsamPSkIK+ydIt79xvR1fWiDFDPESfKBCf5/SFsNRYCEl9i1IATlFa/kJ+ 7IWpuHYHIANpyZRPu2PEPrtHbJKciGOxBurALybRSrXLMTFZqp20lY5uZQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFHFTD35GxulDrDR+aZcRQKp9F5BEMB8GA1UdIwQY MBaAFCbGctpyo0zCgq3EDygmdt51EXZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2Qt MjJkMDI3MTk3NzEyLzEvY1ZNUGZrYkc2VU9zTkg1cGx4RkFxbjBYa0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2QtMjJkMDI3MTk3NzEy LzEvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBH1gDAwDa /jANBgkqhkiG9w0BAQsFAAOCAQEAoRBq5TBeN8XcWhMAnILHrRq9mQDCn6pBFZXz ZzMkVlgOYWWq4p7HjF/qAMP6iZVo2GJv+CJsVlVSpFXz8GKPpcCVF/iZLqkBmFlQ kxRrDUBTFJO5BY5mNde2j9LohMltWuJNQd7ImCDHsUrtGk9qd9KCAro0MSWe/LQM W6Cw+KzufkLpQylkGmoeHqfacxPV5mu+OoPyvdHiXiua8BWhVT7pbMkjGMYlN0Bk iN4TNH75BeWORzwiEDk0i345yVXQ25vgavY/e+3pm9jQDn1BBFM26r1vUzTJvpM2 LRf4tZipl34ASkB+wjmjcIdgc/rt8XdcKTr0aWPgtiLefh3PcQ== -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:45 2026 by rpki-client