This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/_biLnM_coqEwA_A8eVlJQZHQt48.roa File: _biLnM_coqEwA_A8eVlJQZHQt48.roa (raw, json) Hash identifier: 5mMri1uaYw577nOuv+pbuYsKwcFaxTbTyFZQFkO22x0= Subject key identifier: FD:B8:8B:9C:CF:DC:A2:A1:30:03:F0:3C:79:59:49:41:91:D0:B7:8F Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Certificate serial: 019B77C69B5FEF3D3AF18C65FAE572C34329 Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/_biLnM_coqEwA_A8eVlJQZHQt48.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 31.42.128.0/24 maxlen: 24 31.42.129.0/24 maxlen: 24 31.42.131.0/24 maxlen: 24 31.42.144.0/24 maxlen: 24 31.42.145.0/24 maxlen: 24 31.42.153.0/24 maxlen: 24 185.206.58.0/24 maxlen: 24 185.206.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9b:5f:ef:3d:3a:f1:8c:65:fa:e5:72:c3:43:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdb88b9ccfdca2a13003f03c7959494191d0b78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3d:ee:23:81:d6:60:5a:8c:50:d1:34:57:80: 6c:bb:b8:71:82:f8:fc:c6:63:88:9c:42:da:72:4f: c7:5b:81:ee:2f:0f:43:1d:f2:7e:da:c9:58:cf:a9: e0:1b:a7:63:10:09:9c:9f:65:ef:ea:90:06:5a:03: 2a:24:6d:a2:26:7f:0c:1f:9c:d5:9b:44:01:80:da: ed:a9:cc:ad:4b:f5:0b:a5:ad:c1:d6:08:f0:f8:de: c7:5f:c6:28:a5:d4:89:95:95:41:7d:40:2a:ad:c5: 51:18:a3:53:05:57:63:1f:dc:c0:30:87:8e:a2:36: d8:68:fc:fc:a5:6f:cb:75:2a:5d:d2:0e:55:8d:11: 61:b5:f6:05:1c:50:d9:c6:e4:06:f8:96:35:b1:ec: a8:db:fd:16:3e:81:3d:54:e6:2b:fc:ee:bb:16:6d: 5d:1f:f7:46:b2:79:07:65:78:be:03:84:c9:0b:c5: 2d:87:af:e2:87:1c:da:7d:82:f2:84:92:59:a4:30: 15:a1:af:a5:c1:b4:d1:7d:75:27:a1:6f:ff:f8:7d: a3:1d:e6:e4:01:d7:c0:a6:4e:ee:5f:70:8a:a8:7c: fe:47:50:fe:0b:d8:ad:f4:f5:c2:79:32:5e:83:d3: 3c:ee:05:5f:ea:bb:58:c9:5b:dc:44:d6:eb:43:e1: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B8:8B:9C:CF:DC:A2:A1:30:03:F0:3C:79:59:49:41:91:D0:B7:8F X509v3 Authority Key Identifier: keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/_biLnM_coqEwA_A8eVlJQZHQt48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.128.0/23 31.42.131.0/24 31.42.144.0/23 31.42.153.0/24 185.206.58.0/23 Signature Algorithm: sha256WithRSAEncryption 11:d6:25:f6:86:64:5b:c1:f1:db:cb:a9:73:f0:37:af:66:6e: 22:e3:78:ed:a9:ec:02:4f:23:21:a9:d8:77:ac:33:4a:14:b3: b0:ff:b7:5f:fe:b8:eb:19:03:6c:74:9a:5a:ca:fc:81:5d:b8: 8e:54:90:6f:0e:57:fa:8d:c4:73:9b:28:16:44:6c:bb:64:cd: e7:ac:f3:a3:be:1b:8b:af:e3:87:db:d1:93:8d:4d:1d:9d:83: b2:23:e2:01:17:78:ee:b6:1b:38:98:4d:67:61:34:ec:9c:5e: 5b:1a:01:23:9a:cf:7e:de:1a:8a:e8:b4:f4:e9:2c:df:e8:f8: ef:cb:08:6a:17:a1:22:17:93:04:16:aa:cd:f3:ef:c8:9b:8d: 18:9c:0a:6d:71:25:3e:15:4f:a9:23:f9:0e:25:db:9b:4f:c7: 7a:e3:08:33:4b:40:52:e1:67:77:58:f9:3f:da:29:db:f6:de: 49:bd:53:9d:a4:7f:d3:4f:e2:4a:2d:e2:59:98:0b:31:57:a4: 92:cb:b6:d2:b1:c2:da:30:00:bd:c8:dc:d6:f3:1c:a5:c8:7d: d0:c3:d2:f4:5f:e5:1a:5d:80:54:8f:86:cd:d1:10:05:71:15: a5:45:d8:19:33:32:46:35:44:d4:8b:95:03:75:52:95:a8:6a: fa:98:64:b6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xptf7z068Yxl+uVyw0MpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj MGZmOGMwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGI4OGI5Y2NmZGNhMmExMzAwM2YwM2M3OTU5NDk0MTkxZDBiNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz3uI4HWYFqMUNE0V4Bsu7hxgvj8 xmOInELack/HW4HuLw9DHfJ+2slYz6ngG6djEAmcn2Xv6pAGWgMqJG2iJn8MH5zV m0QBgNrtqcytS/ULpa3B1gjw+N7HX8YopdSJlZVBfUAqrcVRGKNTBVdjH9zAMIeO ojbYaPz8pW/LdSpd0g5VjRFhtfYFHFDZxuQG+JY1seyo2/0WPoE9VOYr/O67Fm1d H/dGsnkHZXi+A4TJC8Uth6/ihxzafYLyhJJZpDAVoa+lwbTRfXUnoW//+H2jHebk AdfApk7uX3CKqHz+R1D+C9it9PXCeTJeg9M87gVf6rtYyVvcRNbrQ+F5gQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFP24i5zP3KKhMAPwPHlZSUGR0LePMB8GA1UdIwQY MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt MjE3Y2Y5Mzg0NWJjLzEvX2JpTG5NX2NvcUV3QV9BOGVWbEpRWkhRdDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBHyqAAwQA HyqDAwQBHyqQAwQAHyqZAwQBuc46MA0GCSqGSIb3DQEBCwUAA4IBAQAR1iX2hmRb wfHby6lz8DevZm4i43jtqewCTyMhqdh3rDNKFLOw/7df/rjrGQNsdJpayvyBXbiO VJBvDlf6jcRzmygWRGy7ZM3nrPOjvhuLr+OH29GTjU0dnYOyI+IBF3juths4mE1n YTTsnF5bGgEjms9+3hqK6LT06Szf6PjvywhqF6EiF5MEFqrN8+/Im40YnAptcSU+ FU+pI/kOJdubT8d64wgzS0BS4Wd3WPk/2inb9t5JvVOdpH/TT+JKLeJZmAsxV6SS y7bSscLaMAC9yNzW8xylyH3Qw9L0X+UaXYBUj4bN0RAFcRWlRdgZMzJGNUTUi5UD dVKVqGr6mGS2 -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:00 2026 by rpki-client