This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/mluJOfWwZzFEeKz8bUOCJi_KUTE.roa File: mluJOfWwZzFEeKz8bUOCJi_KUTE.roa (raw, json) Hash identifier: TYsIZABKLHMN4m/AD+A1HHFimUba3kA1ZtyQrdJjaTY= Subject key identifier: 9A:5B:89:39:F5:B0:67:31:44:78:AC:FC:6D:43:82:26:2F:CA:51:31 Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698 Certificate serial: 019B7BA51DC056156FC06C61A4A0EC84AAFF Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/mluJOfWwZzFEeKz8bUOCJi_KUTE.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 31.42.191.0/24 maxlen: 24 194.61.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1d:c0:56:15:6f:c0:6c:61:a4:a0:ec:84:aa:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a5b8939f5b067314478acfc6d4382262fca5131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:67:12:43:38:ec:8e:60:55:dc:a7:b2:2c: 64:11:42:f2:c8:92:e0:d4:5f:b1:6b:fc:94:6e:98: 16:bf:ba:ac:2f:e5:6d:f5:a6:b9:c1:af:84:af:69: 24:00:1d:ee:b2:84:d4:22:c5:15:75:7f:68:3a:19: bf:fa:c6:d2:dc:2f:c6:0c:f4:6e:01:0f:17:32:b8: 16:be:19:ac:50:92:ef:0c:cd:c1:87:69:fc:90:2f: 1a:37:c8:c0:58:82:81:49:b0:1c:34:76:fe:a1:a1: fe:35:05:f1:e7:7b:23:03:1b:60:a1:7f:05:31:66: be:85:ae:9e:12:00:a1:83:e5:aa:a2:04:f2:1b:7f: 37:99:aa:21:b3:93:57:b1:c8:48:62:46:91:73:ba: d5:07:29:54:fb:ee:d0:6d:a7:69:28:1e:3c:54:82: f4:09:5d:1b:68:22:15:d4:f5:2a:f3:27:1f:1e:cc: 1c:ef:bf:6c:e0:dd:0c:bb:c0:fa:67:fa:44:b2:76: 37:d9:8a:3b:a8:6c:b8:f7:ca:6b:03:da:a5:9e:b2: a7:72:6a:64:f4:a6:4b:f5:6f:46:7f:c7:58:72:71: 5d:6e:f1:2c:84:29:fa:dc:a1:d5:02:a3:f5:5f:1d: 64:31:50:94:c3:b2:c4:b1:03:08:39:8a:71:4c:6b: 1f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5B:89:39:F5:B0:67:31:44:78:AC:FC:6D:43:82:26:2F:CA:51:31 X509v3 Authority Key Identifier: keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/mluJOfWwZzFEeKz8bUOCJi_KUTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.191.0/24 194.61.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:c8:da:b8:b7:2a:23:48:80:ea:f8:3e:6c:46:5c:26:97:be: 62:f7:f3:58:64:89:72:36:d6:8a:73:93:0e:6c:46:4f:19:ab: 36:f3:a9:c1:58:bb:0e:50:89:42:a0:e5:c0:a0:d3:61:70:b2: 56:29:65:2b:55:e0:9a:5e:57:79:3e:ad:23:66:35:64:e9:75: 5c:96:8f:ce:de:41:f2:60:91:19:a6:88:15:45:81:0c:61:77: 7e:73:d2:e1:82:59:bd:16:e2:c0:ae:3b:68:d9:f9:21:ef:a9: 3c:64:63:e3:97:8e:05:3b:c0:04:4d:b2:2b:20:e9:06:22:39: 7c:a4:3e:18:65:7c:1d:c7:69:04:4d:f6:6c:5c:30:7c:23:2b: ed:40:de:2b:8a:52:27:8f:eb:41:eb:99:e6:45:f8:38:2d:73: e1:d7:3f:8e:3b:51:43:c8:e5:e9:2b:64:3d:a4:a6:64:b8:36: ec:22:cd:9f:f2:ac:d8:d2:ac:bb:a5:47:80:dd:56:46:8d:7e: ec:bc:d6:4c:1c:e9:fd:cf:bd:67:1d:d8:34:57:0f:40:27:0d: 83:64:53:90:24:a4:0d:60:8d:9c:59:7f:b4:a5:9d:0f:5b:ce: 81:25:f4:3b:3b:62:fb:0a:2a:b1:59:4d:b9:53:1b:65:58:bc: 87:fe:50:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pR3AVhVvwGxhpKDshKr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh Mzk2OTgwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTViODkzOWY1YjA2NzMxNDQ3OGFjZmM2ZDQzODIyNjJmY2E1MTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/pnEkM47I5gVdynsixkEULyyJLg 1F+xa/yUbpgWv7qsL+Vt9aa5wa+Er2kkAB3usoTUIsUVdX9oOhm/+sbS3C/GDPRu AQ8XMrgWvhmsUJLvDM3Bh2n8kC8aN8jAWIKBSbAcNHb+oaH+NQXx53sjAxtgoX8F MWa+ha6eEgChg+WqogTyG383maohs5NXschIYkaRc7rVBylU++7QbadpKB48VIL0 CV0baCIV1PUq8ycfHswc779s4N0Mu8D6Z/pEsnY32Yo7qGy498prA9qlnrKncmpk 9KZL9W9Gf8dYcnFdbvEshCn63KHVAqP1Xx1kMVCUw7LEsQMIOYpxTGsfsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJpbiTn1sGcxRHis/G1DgiYvylExMB8GA1UdIwQY MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It MTEzNzA3M2ZhOGY2LzEvbWx1Sk9mV3daekZFZUt6OGJVT0NKaV9LVVRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2 LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyq/AwQA wj03MA0GCSqGSIb3DQEBCwUAA4IBAQCKyNq4tyojSIDq+D5sRlwml75i9/NYZIly NtaKc5MObEZPGas286nBWLsOUIlCoOXAoNNhcLJWKWUrVeCaXld5Pq0jZjVk6XVc lo/O3kHyYJEZpogVRYEMYXd+c9Lhglm9FuLArjto2fkh76k8ZGPjl44FO8AETbIr IOkGIjl8pD4YZXwdx2kETfZsXDB8IyvtQN4rilInj+tB65nmRfg4LXPh1z+OO1FD yOXpK2Q9pKZkuDbsIs2f8qzY0qy7pUeA3VZGjX7svNZMHOn9z71nHdg0Vw9AJw2D ZFOQJKQNYI2cWX+0pZ0PW86BJfQ7O2L7CiqxWU25UxtlWLyH/lBH -----END CERTIFICATE-----Generated at Sun Jan 11 22:46:44 2026 by rpki-client