This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/Su31KPktHrFLkChT839zTFn3AuI.roa File: Su31KPktHrFLkChT839zTFn3AuI.roa (raw, json) Hash identifier: GbFfc/EFmP9DxZo0ut8vt6TPNx0g+x1F1pn5dExPpXM= Subject key identifier: 4A:ED:F5:28:F9:2D:1E:B1:4B:90:28:53:F3:7F:73:4C:59:F7:02:E2 Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19 Certificate serial: 019B76EB99A214E33667AE75379C45819087 Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/Su31KPktHrFLkChT839zTFn3AuI.roa Signing time: Thu 01 Jan 2026 00:18:30 +0000 ROA not before: Thu 01 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 553 IP address blocks: 141.47.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:99:a2:14:e3:36:67:ae:75:37:9c:45:81:90:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19 Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4aedf528f92d1eb14b902853f37f734c59f702e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:4c:d1:93:c7:f4:6c:06:4f:0d:30:23:e2: ff:78:40:2d:0c:e0:e5:f2:ac:45:71:75:9c:28:6c: 06:1e:4f:2d:2a:ee:1e:32:ad:53:64:3d:ca:d4:e8: 49:fb:1c:ab:75:b8:db:e3:88:a7:27:78:b7:1a:de: 0d:7c:df:26:00:9b:94:44:70:6e:a4:91:db:b0:31: eb:8f:57:b9:64:12:97:55:3a:8a:6c:f6:74:00:8f: b8:c7:e2:22:43:4e:bb:8f:6a:da:b0:e5:ec:60:f0: d1:41:18:11:8b:6d:a5:d1:11:8b:51:13:07:35:08: db:44:24:0b:56:1f:4c:90:c6:70:c2:23:4d:f7:b0: 2e:aa:14:38:c6:be:fc:68:41:50:b0:54:89:c5:85: 18:28:62:20:04:85:32:78:9b:3c:19:56:73:c9:b8: 56:f1:73:1a:a0:01:c3:44:40:6a:44:87:cf:4b:2f: a3:48:cd:ae:ab:9f:e3:e4:7e:ca:33:dd:ab:73:22: 5a:b8:7a:3e:28:16:cc:48:10:26:fa:a6:53:56:fb: b7:15:d4:88:fb:3e:88:c4:3c:d9:72:f5:01:e5:97: 2e:0f:f6:e0:b0:97:c4:89:68:b7:80:2d:92:2f:93: 99:23:12:ad:d0:17:ec:42:29:9a:3d:aa:77:af:a4: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:ED:F5:28:F9:2D:1E:B1:4B:90:28:53:F3:7F:73:4C:59:F7:02:E2 X509v3 Authority Key Identifier: keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/Su31KPktHrFLkChT839zTFn3AuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.47.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:e3:75:79:59:b6:41:6d:e7:85:f7:7d:7a:d9:a3:b3:a1:3b: 4a:79:ee:d0:ac:9f:63:20:8d:12:b1:dc:9c:9b:b9:d8:00:4b: 53:38:63:fa:d4:de:45:6c:27:0c:7f:e4:84:7b:a0:84:07:c5: d9:85:33:f3:18:f2:0d:fc:8c:e6:8e:cc:33:9b:b6:7e:c6:2c: 3d:0d:e0:69:3c:e5:76:d8:f9:28:f6:82:1e:20:94:b6:69:96: b6:43:c3:2c:d1:a5:77:b4:4d:da:23:e2:89:df:fc:20:00:b5: c3:83:17:6f:01:4d:63:63:bc:d9:d8:30:2c:33:35:f4:3a:83: 39:17:dc:44:18:8a:50:a2:78:95:30:07:d6:e3:08:d6:a3:fd: 4d:3d:11:59:42:28:f8:dc:4d:89:2b:2a:6c:5f:a1:f9:ec:41: 82:0b:4e:58:04:0c:f5:91:b3:7c:81:1b:37:05:e5:30:41:b5: 68:a0:22:e3:59:ee:88:3b:c4:ae:11:5a:7f:09:90:e9:3c:98: b2:64:0e:f3:2e:68:36:98:62:b4:6f:cc:d1:50:96:cd:9a:a4: 5c:34:34:3c:33:06:05:8d:ab:14:e7:58:7c:3f:ef:60:d7:36: 3c:91:aa:ee:6e:10:1d:0d:ea:ce:70:5f:d5:6c:eb:0f:ae:e3: 04:66:95:1b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt265miFOM2Z651N5xFgZCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NmNiMTc5YjNkYjVjNmIzNmNkMzMwODM0MDgwMWZlZGIy YjdkMTkwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWVkZjUyOGY5MmQxZWIxNGI5MDI4NTNmMzdmNzM0YzU5ZjcwMmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16JM0ZPH9GwGTw0wI+L/eEAtDODl 8qxFcXWcKGwGHk8tKu4eMq1TZD3K1OhJ+xyrdbjb44inJ3i3Gt4NfN8mAJuURHBu pJHbsDHrj1e5ZBKXVTqKbPZ0AI+4x+IiQ067j2rasOXsYPDRQRgRi22l0RGLURMH NQjbRCQLVh9MkMZwwiNN97AuqhQ4xr78aEFQsFSJxYUYKGIgBIUyeJs8GVZzybhW 8XMaoAHDREBqRIfPSy+jSM2uq5/j5H7KM92rcyJauHo+KBbMSBAm+qZTVvu3FdSI +z6IxDzZcvUB5ZcuD/bgsJfEiWi3gC2SL5OZIxKt0BfsQimaPap3r6ThjQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFErt9Sj5LR6xS5AoU/N/c0xZ9wLiMB8GA1UdIwQY MBaAFLVssXmz21xrNs0zCDQIAf7bK30ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAt NmU5ZDNiNzMyYjA4LzEvU3UzMUtQa3RIckZMa0NoVDgzOXpURm4zQXVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy82NDlhOTgtMzM5YS00ZjRiLTg3NTAtNmU5ZDNiNzMyYjA4 LzEvdFd5eGViUGJYR3MyelRNSU5BZ0JfdHNyZlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjS8wDQYJ KoZIhvcNAQELBQADggEBAHrjdXlZtkFt54X3fXrZo7OhO0p57tCsn2MgjRKx3Jyb udgAS1M4Y/rU3kVsJwx/5IR7oIQHxdmFM/MY8g38jOaOzDObtn7GLD0N4Gk85XbY +Sj2gh4glLZplrZDwyzRpXe0Tdoj4onf/CAAtcODF28BTWNjvNnYMCwzNfQ6gzkX 3EQYilCieJUwB9bjCNaj/U09EVlCKPjcTYkrKmxfofnsQYILTlgEDPWRs3yBGzcF 5TBBtWigIuNZ7og7xK4RWn8JkOk8mLJkDvMuaDaYYrRvzNFQls2apFw0NDwzBgWN qxTnWHw/72DXNjyRqu5uEB0N6s5wX9Vs6w+u4wRmlRs= -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:32 2026 by rpki-client