This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/DuYZ-H2sVttInwcrjvBsEkIUdds.roa File: DuYZ-H2sVttInwcrjvBsEkIUdds.roa (raw, json) Hash identifier: Lhr2x7vqwrufK/M/sxNyImyNWEig+QhwP0mdSLVXqow= Subject key identifier: 0E:E6:19:F8:7D:AC:56:DB:48:9F:07:2B:8E:F0:6C:12:42:14:75:DB Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63 Certificate serial: 019B7BA50187D7792DA53348AF49D28B67E2 Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/DuYZ-H2sVttInwcrjvBsEkIUdds.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206446 IP address blocks: 31.222.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:01:87:d7:79:2d:a5:33:48:af:49:d2:8b:67:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ee619f87dac56db489f072b8ef06c12421475db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:07:70:07:ed:aa:bd:ab:e2:9b:31:d8:e5: f6:2a:12:6c:e1:5a:ff:43:8f:24:20:1f:49:89:56: e1:ef:7e:ae:05:88:ce:43:7d:e3:1c:ee:91:0b:f8: 6f:bb:4e:35:cf:53:6d:09:58:f3:c6:5c:00:38:09: 15:98:9f:eb:d7:23:aa:dc:d4:08:a4:2e:f4:ca:94: 58:6f:8f:2c:f6:5e:b0:bb:fc:57:60:02:e9:8e:44: 05:fd:9b:ae:82:f2:bd:89:04:70:13:48:7e:65:06: d5:a8:3d:90:0d:63:b2:06:b2:74:f1:25:75:71:35: f8:91:6c:99:48:f0:e3:08:8d:d8:2d:09:28:f9:45: 85:16:2f:69:57:dc:9d:23:26:c6:0d:83:db:b4:0f: f0:72:1d:05:54:b2:49:4e:8e:49:86:7f:94:d4:85: 27:7c:60:0f:56:02:ac:c4:8d:40:e1:62:aa:dd:4a: 79:09:9b:0e:ac:95:af:19:8e:59:c8:78:d8:3a:1e: 9f:d7:a8:59:2c:9e:f9:ad:67:64:8d:13:bf:80:08: ff:64:12:fb:82:04:b9:c5:87:a7:eb:7d:a5:75:58: bb:41:3b:be:91:7f:01:19:9c:7d:ac:bb:76:4e:4a: f5:f2:23:58:d8:53:f1:eb:ac:13:de:41:f1:2d:bd: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E6:19:F8:7D:AC:56:DB:48:9F:07:2B:8E:F0:6C:12:42:14:75:DB X509v3 Authority Key Identifier: keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/DuYZ-H2sVttInwcrjvBsEkIUdds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.204.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:79:0e:5b:33:cb:d8:7d:76:37:d9:24:88:ae:31:4e:d3:72: e0:1e:ab:91:a1:85:54:81:a5:5d:a4:b7:7a:22:b4:cf:d6:61: be:15:c9:00:ab:de:94:9a:03:2b:35:da:32:e0:51:d0:ce:93: 3b:9c:97:9b:e3:21:5e:75:bf:51:62:eb:bc:49:38:44:21:69: e0:07:1c:fd:d4:3a:3a:18:17:e4:1f:fc:c6:d8:ef:3a:b0:f0: 18:e0:1a:60:39:b1:e0:cc:bb:2e:4d:c7:6d:61:51:62:4c:97: ec:74:69:64:ee:04:57:e9:5f:71:25:80:22:16:6c:b5:19:69: 73:4e:90:33:fc:be:8a:65:fa:bf:cc:c9:24:99:49:dc:c1:75: 77:69:d6:e0:6a:78:90:cb:93:30:07:dd:3f:ea:b7:4e:c5:91: 2c:9a:93:99:c8:5a:a5:76:97:87:cb:25:3f:5f:31:6f:ee:47: 09:d4:28:01:ac:c6:97:22:23:2f:ab:39:66:21:2d:82:0a:f6: 0e:3c:2a:83:0e:2d:ff:e1:f3:eb:c2:89:44:cd:a9:d1:ac:99: 94:70:c6:b3:66:58:3a:95:e8:2f:45:8e:6e:8d:3d:55:a0:5a: 3c:da:30:ca:66:b6:29:93:b2:ac:84:7c:31:95:30:55:4c:1d: c4:23:ff:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQGH13ktpTNIr0nSi2fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1 NGRmNjMwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWU2MTlmODdkYWM1NmRiNDg5ZjA3MmI4ZWYwNmMxMjQyMTQ3NWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxsHcAftqr2r4psx2OX2KhJs4Vr/ Q48kIB9JiVbh736uBYjOQ33jHO6RC/hvu041z1NtCVjzxlwAOAkVmJ/r1yOq3NQI pC70ypRYb48s9l6wu/xXYALpjkQF/ZuugvK9iQRwE0h+ZQbVqD2QDWOyBrJ08SV1 cTX4kWyZSPDjCI3YLQko+UWFFi9pV9ydIybGDYPbtA/wch0FVLJJTo5Jhn+U1IUn fGAPVgKsxI1A4WKq3Up5CZsOrJWvGY5ZyHjYOh6f16hZLJ75rWdkjRO/gAj/ZBL7 ggS5xYen632ldVi7QTu+kX8BGZx9rLt2Tkr18iNY2FPx66wT3kHxLb3bRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA7mGfh9rFbbSJ8HK47wbBJCFHXbMB8GA1UdIwQY MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt OTQ2NDA0ZWMxYWE0LzEvRHVZWi1IMnNWdHRJbndjcmp2QnNFa0lVZGRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0 LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH97MMA0G CSqGSIb3DQEBCwUAA4IBAQBbeQ5bM8vYfXY32SSIrjFO03LgHquRoYVUgaVdpLd6 IrTP1mG+FckAq96UmgMrNdoy4FHQzpM7nJeb4yFedb9RYuu8SThEIWngBxz91Do6 GBfkH/zG2O86sPAY4BpgObHgzLsuTcdtYVFiTJfsdGlk7gRX6V9xJYAiFmy1GWlz TpAz/L6KZfq/zMkkmUncwXV3adbganiQy5MwB90/6rdOxZEsmpOZyFqldpeHyyU/ XzFv7kcJ1CgBrMaXIiMvqzlmIS2CCvYOPCqDDi3/4fPrwolEzanRrJmUcMazZlg6 legvRY5ujT1VoFo82jDKZrYpk7KshHwxlTBVTB3EI//J -----END CERTIFICATE-----Generated at Tue Jan 20 12:10:21 2026 by rpki-client