This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/aRdy5QnQV3v2d0uJtbF46Ws7h78.roa File: aRdy5QnQV3v2d0uJtbF46Ws7h78.roa (raw, json) Hash identifier: 37a5ol8IAhliNl2qlQKI+vNHY/DP17QwOBCBEMnoWrU= Subject key identifier: 69:17:72:E5:09:D0:57:7B:F6:77:4B:89:B5:B1:78:E9:6B:3B:87:BF Certificate issuer: /CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621 Certificate serial: 019B7AC8D736D0DB6D85FF6885FDF9C87689 Authority key identifier: 09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/aRdy5QnQV3v2d0uJtbF46Ws7h78.roa Signing time: Thu 01 Jan 2026 18:19:01 +0000 ROA not before: Thu 01 Jan 2026 18:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41628 IP address blocks: 31.15.24.0/21 maxlen: 24 89.31.144.0/21 maxlen: 24 193.38.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.mft rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d7:36:d0:db:6d:85:ff:68:85:fd:f9:c8:76:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098b1c79bfae12a5b87f35c998bb60b3fa4e6621 Validity Not Before: Jan 1 18:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=691772e509d0577bf6774b89b5b178e96b3b87bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:5b:d6:91:46:2c:22:ee:53:53:c9:20:3f: 16:fc:e9:6b:09:cb:19:2c:bc:5d:80:55:0d:b5:56: f9:33:0c:3f:19:66:8d:3c:0d:3b:da:d0:56:76:c3: 18:dd:0c:c5:5f:c5:91:28:8d:ee:6f:2a:33:c1:a4: 27:b8:44:b4:a5:32:68:ff:ed:25:0f:13:bf:62:6c: 22:be:1b:97:2d:c7:73:44:93:3f:74:e7:a7:18:8a: cb:c7:21:3f:09:4f:2c:a7:5d:96:27:ef:8a:e7:8a: 2e:16:91:9d:b0:c1:01:86:7e:d5:95:e3:26:62:2e: f7:53:b6:15:48:88:6f:0c:3a:c1:46:c8:8e:df:3d: 0e:9a:f6:e0:08:cd:e0:92:e2:5b:1c:6d:42:8f:6a: d5:5b:df:ca:7b:a6:c7:66:92:79:00:53:00:5c:b5: a7:5b:3a:3e:9b:2b:45:75:cd:7b:76:84:4a:80:d0: 7c:08:c4:32:75:17:47:22:b7:f7:0c:b8:74:ec:cc: b5:67:b6:9c:2b:5a:d3:3d:64:d2:66:35:93:ef:a0: cb:2c:03:d1:fb:c2:35:44:a0:8f:f3:43:6a:a7:db: 6d:ec:fd:1a:23:67:72:ff:e8:e4:5d:5b:c7:5f:03: c8:52:6c:d0:5f:a2:10:9a:6f:7f:f2:23:5b:00:52: cd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:17:72:E5:09:D0:57:7B:F6:77:4B:89:B5:B1:78:E9:6B:3B:87:BF X509v3 Authority Key Identifier: keyid:09:8B:1C:79:BF:AE:12:A5:B8:7F:35:C9:98:BB:60:B3:FA:4E:66:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYsceb-uEqW4fzXJmLtgs_pOZiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/aRdy5QnQV3v2d0uJtbF46Ws7h78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8db002-9080-4f0b-845b-9b7c44dc193b/1/CYsceb-uEqW4fzXJmLtgs_pOZiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.15.24.0/21 89.31.144.0/21 193.38.128.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:3e:89:0a:31:08:74:a2:62:cc:5f:b3:c5:32:76:55:26:c5: 24:ad:73:bd:f4:83:fd:15:02:ca:5a:29:61:9c:83:92:2c:33: 39:b6:1a:b0:84:55:fb:14:c6:19:d6:84:aa:ab:2b:68:f2:71: f5:04:4e:38:e5:1a:c5:fa:75:63:76:b4:72:39:8e:14:c3:4e: b4:28:ac:f4:dd:12:7c:00:a8:50:12:97:68:ca:2d:dc:35:1c: 3a:e1:2d:9e:7b:b3:ca:89:c4:6f:11:38:a1:01:32:20:14:b8: 15:18:28:ec:19:2f:74:5a:b2:35:66:b2:b5:7f:fd:2f:87:ca: c7:e8:c4:3d:76:19:bc:4a:9c:a1:b4:d4:52:a9:e0:60:cd:1c: 84:9e:31:31:3d:3c:a1:c9:cb:92:40:da:7e:6f:af:c9:9c:f3: 28:28:f7:c5:46:cb:96:13:b7:12:a5:c5:81:f1:bd:9e:4e:eb: a7:10:1d:3d:53:16:8d:0a:dd:09:e0:b4:01:16:f1:e2:0a:fd: 66:7f:f5:26:8c:01:de:16:c9:59:f1:0f:63:ef:a6:0b:97:9c: 21:6d:95:96:49:6a:c6:67:d9:d8:a3:c0:50:40:a9:ee:d3:71: 4e:bb:f2:93:2f:34:8b:cb:60:dc:06:3f:0c:b5:8d:9e:00:3b: 93:94:25:38 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yNc20Ntthf9ohf35yHaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGIxYzc5YmZhZTEyYTViODdmMzVjOTk4YmI2MGIzZmE0 ZTY2MjEwHhcNMjYwMTAxMTgxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTE3NzJlNTA5ZDA1NzdiZjY3NzRiODliNWIxNzhlOTZiM2I4N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnENb1pFGLCLuU1PJID8W/OlrCcsZ LLxdgFUNtVb5Mww/GWaNPA072tBWdsMY3QzFX8WRKI3ubyozwaQnuES0pTJo/+0l DxO/YmwivhuXLcdzRJM/dOenGIrLxyE/CU8sp12WJ++K54ouFpGdsMEBhn7VleMm Yi73U7YVSIhvDDrBRsiO3z0OmvbgCM3gkuJbHG1Cj2rVW9/Ke6bHZpJ5AFMAXLWn Wzo+mytFdc17doRKgNB8CMQydRdHIrf3DLh07My1Z7acK1rTPWTSZjWT76DLLAPR +8I1RKCP80Nqp9tt7P0aI2dy/+jkXVvHXwPIUmzQX6IQmm9/8iNbAFLNlQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGkXcuUJ0Fd79ndLibWxeOlrO4e/MB8GA1UdIwQY MBaAFAmLHHm/rhKluH81yZi7YLP6TmYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWIt OWI3YzQ0ZGMxOTNiLzEvYVJkeTVRblFWM3YyZDB1SnRiRjQ2V3M3aDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC84ZGIwMDItOTA4MC00ZjBiLTg0NWItOWI3YzQ0ZGMxOTNi LzEvQ1lzY2ViLXVFcVc0ZnpYSm1MdGdzX3BPWmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDHw8YAwQD WR+QAwQCwSaAMA0GCSqGSIb3DQEBCwUAA4IBAQA6PokKMQh0omLMX7PFMnZVJsUk rXO99IP9FQLKWilhnIOSLDM5thqwhFX7FMYZ1oSqqyto8nH1BE445RrF+nVjdrRy OY4Uw060KKz03RJ8AKhQEpdoyi3cNRw64S2ee7PKicRvETihATIgFLgVGCjsGS90 WrI1ZrK1f/0vh8rH6MQ9dhm8SpyhtNRSqeBgzRyEnjExPTyhycuSQNp+b6/JnPMo KPfFRsuWE7cSpcWB8b2eTuunEB09UxaNCt0J4LQBFvHiCv1mf/UmjAHeFslZ8Q9j 76YLl5whbZWWSWrGZ9nYo8BQQKnu03FOu/KTLzSLy2DcBj8MtY2eADuTlCU4 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:56 2026 by rpki-client