This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/ZozBgriq6kWUkB3EEMv0zuDMpg0.roa File: ZozBgriq6kWUkB3EEMv0zuDMpg0.roa (raw, json) Hash identifier: TLlTKsaLK/1ufozvAabU7oKR7zYU0p22HLkLEedOcsQ= Subject key identifier: 66:8C:C1:82:B8:AA:EA:45:94:90:1D:C4:10:CB:F4:CE:E0:CC:A6:0D Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2 Certificate serial: 019B7E381610BC23FA1E3E7FF2F0372F22BF Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/ZozBgriq6kWUkB3EEMv0zuDMpg0.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56495 IP address blocks: 31.40.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:16:10:bc:23:fa:1e:3e:7f:f2:f0:37:2f:22:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=668cc182b8aaea4594901dc410cbf4cee0cca60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:22:6c:95:e6:d0:f2:55:86:bf:c8:94:0a: ef:14:18:7a:35:f4:6d:f3:79:72:bf:50:11:e8:92: 18:fc:3e:67:ff:4f:42:ee:28:23:e3:25:31:af:fa: 51:e0:5f:66:69:4d:1e:d2:82:99:cc:ed:aa:76:48: 57:6c:1b:eb:02:45:41:db:6d:46:1c:7c:77:d0:53: 73:33:66:fe:64:32:c0:26:f6:7b:8f:85:7a:eb:d0: 74:c9:86:55:7b:cb:41:d6:d1:ef:0f:fc:08:bd:21: a2:56:31:73:a1:bc:df:d8:3b:8c:f3:0b:59:68:4f: c0:a0:8c:b6:e5:c3:90:ba:49:72:d5:df:d0:be:91: fe:ca:09:2a:be:de:2b:80:9e:23:de:8a:ce:f1:92: e8:76:49:e1:e8:66:c3:6c:90:da:70:27:bd:a7:ca: 85:82:a1:48:23:e7:d3:9a:b2:80:8d:9c:80:a3:ee: 88:dd:05:6f:ce:5f:8b:09:0c:7f:a0:cb:63:d4:85: 2a:da:e6:b0:06:36:50:31:42:39:30:0b:ea:0e:69: 69:9f:03:a8:77:bb:fc:fa:b1:ea:71:cb:3a:be:32: ac:18:a8:5a:fd:e3:77:69:f5:c5:b1:c4:ad:89:74: 69:c2:43:0e:54:ec:08:ea:f7:d2:de:1c:8a:37:0e: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8C:C1:82:B8:AA:EA:45:94:90:1D:C4:10:CB:F4:CE:E0:CC:A6:0D X509v3 Authority Key Identifier: keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/ZozBgriq6kWUkB3EEMv0zuDMpg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.7.0/24 Signature Algorithm: sha256WithRSAEncryption 07:68:37:b7:23:29:77:2b:d9:9c:e0:cd:ad:8c:6e:4a:b4:2d: 19:9b:a1:ed:b9:c5:d7:6f:db:35:b9:64:84:73:a5:91:e8:ac: 24:c9:97:fe:d5:17:d6:65:ed:13:8e:f5:20:0a:84:75:dc:3b: 91:39:06:0b:73:60:7a:dc:a9:6d:d2:eb:0b:64:5b:3f:0c:db: b7:21:eb:0a:57:b8:37:aa:bc:4f:c7:f5:fe:6e:15:43:a0:21: 0e:04:31:12:61:33:8b:45:4b:7b:0f:30:76:5b:4f:82:97:03: 99:36:42:ba:90:37:b4:a5:8a:64:21:82:bf:35:e1:40:a6:8b: 65:23:1b:73:76:92:25:84:42:45:83:92:ec:a8:ca:73:f2:34: 70:e0:a5:f4:a1:73:05:ba:d5:37:56:c5:da:cc:f9:05:1d:28: 18:cd:d8:eb:d4:71:46:81:c3:92:63:9b:23:b1:e6:4f:a5:52: e9:42:6c:2f:26:84:19:37:66:43:36:28:2e:bd:28:e2:71:4f: 5a:ee:72:f5:82:96:76:ba:eb:ba:e6:23:13:5d:64:68:8b:ce: d0:b5:61:b3:5c:a5:bc:d5:20:b7:da:bf:6d:4e:ef:77:14:d4: 1e:e7:95:a1:e1:9c:6a:d7:5c:b0:bf:37:2c:d0:c7:31:96:ee: cd:45:9b:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBYQvCP6Hj5/8vA3LyK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmZTAyYjdlZWRmZmMzOGFiNWVhYjQ0MTYxNzJlN2Q4OGU5 YWQxZTIwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjhjYzE4MmI4YWFlYTQ1OTQ5MDFkYzQxMGNiZjRjZWUwY2NhNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0EibJXm0PJVhr/IlArvFBh6NfRt 83lyv1AR6JIY/D5n/09C7igj4yUxr/pR4F9maU0e0oKZzO2qdkhXbBvrAkVB221G HHx30FNzM2b+ZDLAJvZ7j4V669B0yYZVe8tB1tHvD/wIvSGiVjFzobzf2DuM8wtZ aE/AoIy25cOQukly1d/QvpH+ygkqvt4rgJ4j3orO8ZLodknh6GbDbJDacCe9p8qF gqFII+fTmrKAjZyAo+6I3QVvzl+LCQx/oMtj1IUq2uawBjZQMUI5MAvqDmlpnwOo d7v8+rHqccs6vjKsGKha/eN3afXFscStiXRpwkMOVOwI6vfS3hyKNw4CeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGaMwYK4qupFlJAdxBDL9M7gzKYNMB8GA1UdIwQY MBaAFI/gK37t/8OKteq0QWFy59iOmtHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYt NTE0NmYxM2I3MWExLzEvWm96QmdyaXE2a1dVa0IzRUVNdjB6dURNcGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kMmMyMzUtYTFmNS00OTg0LWFhZGYtNTE0NmYxM2I3MWEx LzEvai1BcmZ1M193NHExNnJSQllYTG4ySTZhMGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHygHMA0G CSqGSIb3DQEBCwUAA4IBAQAHaDe3Iyl3K9mc4M2tjG5KtC0Zm6HtucXXb9s1uWSE c6WR6KwkyZf+1RfWZe0TjvUgCoR13DuROQYLc2B63Klt0usLZFs/DNu3IesKV7g3 qrxPx/X+bhVDoCEOBDESYTOLRUt7DzB2W0+ClwOZNkK6kDe0pYpkIYK/NeFApotl IxtzdpIlhEJFg5LsqMpz8jRw4KX0oXMFutU3VsXazPkFHSgYzdjr1HFGgcOSY5sj seZPpVLpQmwvJoQZN2ZDNiguvSjicU9a7nL1gpZ2uuu65iMTXWRoi87QtWGzXKW8 1SC32r9tTu93FNQe55Wh4Zxq11ywvzcs0Mcxlu7NRZuJ -----END CERTIFICATE-----Generated at Tue Jan 27 08:34:23 2026 by rpki-client