This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/eiZ3dRoJQOY5In2On20-nf-q73k.roa File: eiZ3dRoJQOY5In2On20-nf-q73k.roa (raw, json) Hash identifier: GE2likVbzstV6xbMDw5q0Xw8FdnZheeQhcKCOGkCp1A= Subject key identifier: 7A:26:77:75:1A:09:40:E6:39:22:7D:8E:9F:6D:3E:9D:FF:AA:EF:79 Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d Certificate serial: 019B76EB5420BA2E8E6BBE071F9B8BF782E2 Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/eiZ3dRoJQOY5In2On20-nf-q73k.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56632 IP address blocks: 31.7.129.0/24 maxlen: 24 31.7.130.0/24 maxlen: 24 31.7.131.0/24 maxlen: 24 31.7.133.0/24 maxlen: 24 31.7.135.0/24 maxlen: 24 31.7.136.0/24 maxlen: 24 31.7.137.0/24 maxlen: 24 31.7.138.0/24 maxlen: 24 31.7.139.0/24 maxlen: 24 31.7.140.0/24 maxlen: 24 31.7.142.0/24 maxlen: 24 31.7.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:20:ba:2e:8e:6b:be:07:1f:9b:8b:f7:82:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd206b8bd221574c96592443195b9005769c724d Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a2677751a0940e639227d8e9f6d3e9dffaaef79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:57:f1:0f:2a:6c:cc:58:2c:04:cb:5b:4b: 4c:69:a7:67:fb:bb:fa:50:78:29:dd:0a:26:f0:a9: 3f:51:fa:93:a4:9b:cd:b2:59:88:60:a7:b2:4d:36: ab:3d:33:ce:0d:2c:0b:c1:6e:55:06:4c:41:e1:74: 43:d2:74:df:c4:b1:58:bd:81:38:13:95:be:fa:c6: ed:3e:dd:d6:21:0d:b3:2b:1c:9a:65:d1:5a:a9:43: 44:c9:8d:bf:94:31:66:1c:df:51:85:87:d4:fe:e1: 48:26:09:42:cd:57:41:49:77:ca:dc:dc:6e:c8:40: c7:0f:3a:17:47:9b:33:00:57:88:7c:64:1c:f8:f2: de:2c:36:9a:06:cd:62:ed:02:61:dd:dd:21:a6:d6: 10:f9:0b:7a:65:4f:0c:c7:98:fc:e8:17:5d:3d:92: 0f:fa:bb:1a:1e:ab:07:a9:d4:df:4a:81:dd:da:b9: 38:5e:a5:b3:66:51:fe:ab:65:54:76:a5:12:d2:51: 8e:6f:08:09:02:24:89:42:4c:e5:1e:15:f3:15:97: af:84:13:a2:76:2b:0b:eb:09:47:1c:fd:c8:0a:dd: b1:c0:91:a9:a6:fa:9c:6a:91:8d:03:36:a6:ff:1a: 87:d5:6b:e3:d1:af:fd:6e:81:8d:08:27:c3:6d:ac: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:26:77:75:1A:09:40:E6:39:22:7D:8E:9F:6D:3E:9D:FF:AA:EF:79 X509v3 Authority Key Identifier: keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/eiZ3dRoJQOY5In2On20-nf-q73k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.129.0-31.7.131.255 31.7.133.0/24 31.7.135.0-31.7.140.255 31.7.142.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:6c:65:cf:81:be:96:05:b3:37:9d:d1:7c:b8:cb:b7:64:f3: f1:93:86:13:e8:87:36:77:c0:c2:55:67:e9:20:77:27:71:14: 14:4a:be:9a:e1:73:8f:b1:e3:15:2e:78:b6:49:47:41:4c:a6: c6:3b:b3:ce:fa:ab:30:32:12:12:4f:5c:d8:1a:bf:24:44:36: 5a:9d:66:2d:47:b5:02:9a:43:26:51:90:b1:d0:43:1e:5b:36: 26:a5:1d:a3:03:70:88:fb:aa:f1:97:9c:2a:5b:d8:c1:1c:ba: 53:1b:5b:dc:3b:45:fa:89:b5:49:65:7e:af:bb:d2:21:df:0f: 28:8e:6d:e5:9d:1d:4e:82:5d:3d:22:34:1c:92:e9:bb:70:3f: 11:c6:03:15:55:35:a7:41:a9:7c:ed:cb:14:7b:40:62:a6:56: 30:3b:3d:8f:fc:e7:03:1f:c1:d1:a9:5e:73:e2:db:bd:1a:1b: 45:51:45:c5:06:4c:14:a7:be:10:2a:42:16:70:20:75:37:15: 1d:bc:06:fd:e8:1a:d0:20:d3:fe:87:a5:1e:40:52:64:66:10: 07:04:f4:1c:14:2f:40:d3:8e:8d:0d:49:3a:b3:69:46:45:99: a8:53:9c:bf:76:f7:77:c1:6e:42:9a:4a:1d:4b:1f:26:0e:b4: d8:8c:08:22 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt261Qgui6Oa74HH5uL94LiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjA2YjhiZDIyMTU3NGM5NjU5MjQ0MzE5NWI5MDA1NzY5 YzcyNGQwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTI2Nzc3NTFhMDk0MGU2MzkyMjdkOGU5ZjZkM2U5ZGZmYWFlZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt5X8Q8qbMxYLATLW0tMaadn+7v6 UHgp3Qom8Kk/UfqTpJvNslmIYKeyTTarPTPODSwLwW5VBkxB4XRD0nTfxLFYvYE4 E5W++sbtPt3WIQ2zKxyaZdFaqUNEyY2/lDFmHN9RhYfU/uFIJglCzVdBSXfK3Nxu yEDHDzoXR5szAFeIfGQc+PLeLDaaBs1i7QJh3d0hptYQ+Qt6ZU8Mx5j86BddPZIP +rsaHqsHqdTfSoHd2rk4XqWzZlH+q2VUdqUS0lGObwgJAiSJQkzlHhXzFZevhBOi disL6wlHHP3ICt2xwJGppvqcapGNAzam/xqH1Wvj0a/9boGNCCfDbazzBQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFHomd3UaCUDmOSJ9jp9tPp3/qu95MB8GA1UdIwQY MBaAFN0ga4vSIVdMllkkQxlbkAV2nHJNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUt ZTI5MTU3Njc5NjA0LzEvZWlaM2RSb0pRT1k1SW4yT24yMC1uZi1xNzNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lYmM3OGItNTc4Yy00YTRmLTlhNGUtZTI5MTU3Njc5NjA0 LzEvM1NCcmk5SWhWMHlXV1NSREdWdVFCWGFjY2swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAAfB4ED BAIfB4ADBAAfB4UwDAMEAB8HhwMEAB8HjAMEAR8HjjANBgkqhkiG9w0BAQsFAAOC AQEAOmxlz4G+lgWzN53RfLjLt2Tz8ZOGE+iHNnfAwlVn6SB3J3EUFEq+muFzj7Hj FS54tklHQUymxjuzzvqrMDISEk9c2Bq/JEQ2Wp1mLUe1AppDJlGQsdBDHls2JqUd owNwiPuq8ZecKlvYwRy6Uxtb3DtF+om1SWV+r7vSId8PKI5t5Z0dToJdPSI0HJLp u3A/EcYDFVU1p0GpfO3LFHtAYqZWMDs9j/znAx/B0alec+LbvRobRVFFxQZMFKe+ ECpCFnAgdTcVHbwG/ega0CDT/oelHkBSZGYQBwT0HBQvQNOOjQ1JOrNpRkWZqFOc v3b3d8FuQppKHUsfJg602IwIIg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:01 2026 by rpki-client