This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa File: rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa (raw, json) Hash identifier: JY8aR7gymzRVW+zZjreC+9drKDyPLMEiDLQuy04AC5I= Subject key identifier: AD:9E:43:61:43:05:75:A6:18:F0:0E:1D:AF:3E:84:D5:F3:55:A3:34 Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed Certificate serial: 019B7F83CCA30AF1A9595BF5032B2C5C6DF9 Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48641 IP address blocks: 31.133.96.0/23 maxlen: 23 2a04:d040::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cc:a3:0a:f1:a9:59:5b:f5:03:2b:2c:5c:6d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad9e4361430575a618f00e1daf3e84d5f355a334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d5:e8:3d:93:7f:f2:05:b4:99:09:e8:05:85: 7f:94:1a:0c:4e:94:89:ab:10:96:9f:2b:ab:1f:b8: ff:3f:3d:4e:7d:8f:2e:1d:c6:d9:75:cf:d6:5c:79: 34:a7:26:1c:b9:57:21:38:ad:23:c9:be:59:f4:ab: ae:53:a9:5e:c5:39:88:5e:82:e2:eb:7f:84:52:f4: b0:5f:9f:f5:20:73:70:d8:ee:37:b0:25:f9:01:f7: 47:87:a7:75:00:c8:05:86:70:7d:19:81:e6:91:d5: 64:53:c5:e5:2d:67:42:8c:b5:3e:dc:ca:3a:c7:24: cf:e5:58:a4:2e:77:41:7a:10:50:b1:de:e6:d2:82: db:b5:c4:70:3a:01:dc:5d:d7:b4:91:e7:b4:ba:22: de:0d:b5:5f:8d:0f:a7:2d:32:e3:33:b1:eb:53:e5: b7:0f:96:64:e1:77:c9:10:9a:e4:79:2f:8c:c6:fb: 11:df:c5:d8:af:5c:47:57:43:a7:d0:fe:46:37:c2: 1d:61:97:b4:bf:a8:06:d1:ba:9b:4f:69:5c:03:2e: 2e:1d:34:31:03:75:80:c4:b0:34:6e:7c:9c:d4:17: 07:8b:7f:f1:1b:73:f0:d6:5d:d2:18:a6:1e:03:8a: 38:a1:c9:3c:d3:a7:21:b0:57:86:f0:08:48:7e:1e: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9E:43:61:43:05:75:A6:18:F0:0E:1D:AF:3E:84:D5:F3:55:A3:34 X509v3 Authority Key Identifier: keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/rZ5DYUMFdaYY8A4drz6E1fNVozQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.133.96.0/23 IPv6: 2a04:d040::/29 Signature Algorithm: sha256WithRSAEncryption 84:4b:d4:be:6d:c9:1a:5e:2e:c1:89:75:45:67:7c:2d:fd:bb: 22:2f:c8:e1:ba:3a:f3:14:11:89:f2:91:fb:ab:2d:6f:d4:81: 9e:1c:0f:36:e4:a2:13:bb:90:e3:da:8b:03:a9:af:75:a6:c8: f0:d0:2a:6d:a0:b5:7d:63:06:b8:ff:25:a9:f6:e8:36:44:b4: ab:94:c2:03:64:88:05:a7:b0:1d:ca:2f:0c:b8:1f:7f:8a:b0: b2:d2:86:78:03:d6:b7:8c:1c:f1:12:9c:9c:26:a5:a4:a0:ba: 30:c0:bd:6b:51:b3:61:80:34:45:56:ae:0f:bd:44:22:99:af: a9:d6:5c:9b:8c:71:9a:8b:c8:92:56:ff:cf:87:e7:1b:ff:b9: 10:69:a0:e1:c5:24:91:d1:91:0f:d4:c6:fb:c9:49:fb:a3:8e: b1:41:b2:c2:32:30:9e:95:29:2a:c8:43:19:69:82:34:90:f0: a5:3c:6b:ff:e6:50:03:e4:41:6e:b6:d2:b6:2a:89:b2:81:7f: 55:d4:1e:de:a4:59:3f:67:3d:13:11:d7:f0:78:cf:38:0e:25: 4e:24:98:15:1c:d0:8b:4f:72:bf:40:7b:03:7c:15:81:07:a2: 12:9a:e1:b9:16:da:9a:9b:6e:31:1c:48:62:7a:95:7b:18:64: 8a:d9:27:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g8yjCvGpWVv1AyssXG35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZmFkOTZkZDA1YWY4YzJkMjYxOTJjODQxMTMxZjJmOTc0 NTlmZWQwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDllNDM2MTQzMDU3NWE2MThmMDBlMWRhZjNlODRkNWYzNTVhMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29XoPZN/8gW0mQnoBYV/lBoMTpSJ qxCWnyurH7j/Pz1OfY8uHcbZdc/WXHk0pyYcuVchOK0jyb5Z9KuuU6lexTmIXoLi 63+EUvSwX5/1IHNw2O43sCX5AfdHh6d1AMgFhnB9GYHmkdVkU8XlLWdCjLU+3Mo6 xyTP5VikLndBehBQsd7m0oLbtcRwOgHcXde0kee0uiLeDbVfjQ+nLTLjM7HrU+W3 D5Zk4XfJEJrkeS+MxvsR38XYr1xHV0On0P5GN8IdYZe0v6gG0bqbT2lcAy4uHTQx A3WAxLA0bnyc1BcHi3/xG3Pw1l3SGKYeA4o4ock806chsFeG8AhIfh7nVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK2eQ2FDBXWmGPAOHa8+hNXzVaM0MB8GA1UdIwQY MBaAFFX62W3QWvjC0mGSyEETHy+XRZ/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAt MzBmZjJjODNmMDAxLzEvclo1RFlVTUZkYVlZOEE0ZHJ6NkUxZk5Wb3pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8zMGU1ODItNDQ0OC00OTUyLTk0YTAtMzBmZjJjODNmMDAx LzEvVmZyWmJkQmEtTUxTWVpMSVFSTWZMNWRGbi0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBH4VgMA0E AgACMAcDBQMqBNBAMA0GCSqGSIb3DQEBCwUAA4IBAQCES9S+bckaXi7BiXVFZ3wt /bsiL8jhujrzFBGJ8pH7qy1v1IGeHA825KITu5Dj2osDqa91psjw0CptoLV9Ywa4 /yWp9ug2RLSrlMIDZIgFp7Adyi8MuB9/irCy0oZ4A9a3jBzxEpycJqWkoLowwL1r UbNhgDRFVq4PvUQima+p1lybjHGai8iSVv/Ph+cb/7kQaaDhxSSR0ZEP1Mb7yUn7 o46xQbLCMjCelSkqyEMZaYI0kPClPGv/5lAD5EFuttK2KomygX9V1B7epFk/Zz0T EdfweM84DiVOJJgVHNCLT3K/QHsDfBWBB6ISmuG5Ftqam24xHEhiepV7GGSK2Scz -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:35 2026 by rpki-client