This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/jIASpROSIV_qZhR1JMZmDWlpQjE.roa File: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (raw, json) Hash identifier: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM= Subject key identifier: 8C:80:12:A5:13:92:21:5F:EA:66:14:75:24:C6:66:0D:69:69:42:31 Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Certificate serial: 019B7F855C880D3031CDFFE1A3C1EA9B3736 Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/jIASpROSIV_qZhR1JMZmDWlpQjE.roa Signing time: Fri 02 Jan 2026 16:23:24 +0000 ROA not before: Fri 02 Jan 2026 16:23:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213340 IP address blocks: 31.31.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5c:88:0d:30:31:cd:ff:e1:a3:c1:ea:9b:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31 Validity Not Before: Jan 2 16:23:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8012a51392215fea66147524c6660d69694231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:ac:3a:f3:f8:46:3b:b4:71:a1:96:f8:87: 97:6a:44:4e:55:0d:9e:fa:41:f8:3c:19:94:76:a3: fc:99:2c:0c:ac:57:08:a3:1d:9e:b9:e7:0c:ce:c7: 40:3f:d3:e8:6e:2f:ea:f5:a3:b3:95:ff:45:ee:64: 89:3c:df:f0:5e:c6:7a:b7:6c:b4:8a:72:ac:a6:96: 3c:6c:59:e6:7d:4f:7c:2a:87:5d:d5:0e:32:1c:c2: 34:dd:50:6d:45:19:10:25:db:55:06:b6:6d:f5:92: b0:cf:41:b5:1a:0c:5f:2a:b5:a1:a2:98:96:d6:95: 01:2a:8f:c4:b1:8e:99:6b:0f:b4:a7:f5:58:76:d4: 61:ec:d0:95:5a:ad:71:0e:46:b6:88:33:97:d3:14: 6d:3d:e4:7e:87:1e:44:f5:0e:20:a1:f5:77:99:64: ad:64:98:18:b1:0f:dc:d6:c9:a9:31:38:3d:85:7a: ad:68:b2:20:42:22:65:58:9b:6f:4f:71:24:d4:70: d8:ed:91:35:60:9f:85:43:a9:13:e7:d0:e6:ef:35: 77:06:f2:03:e1:9d:6f:4d:43:62:21:de:75:27:fd: 61:3e:89:02:92:b3:f1:3b:55:1c:38:bc:36:8c:be: 4b:33:14:35:75:bf:08:52:ad:31:d3:ab:56:43:97: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:80:12:A5:13:92:21:5F:EA:66:14:75:24:C6:66:0D:69:69:42:31 X509v3 Authority Key Identifier: keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/jIASpROSIV_qZhR1JMZmDWlpQjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.171.0/24 Signature Algorithm: sha256WithRSAEncryption 22:c4:d0:1a:90:dd:2c:b1:a3:c3:2e:e7:17:54:4c:b4:68:00: 0b:05:35:af:0d:67:f5:16:8f:a3:04:a3:39:bb:bf:7d:c3:d2: bb:e6:83:ab:6a:81:0f:42:45:71:30:ed:55:e4:15:46:c5:f6: a4:00:2d:49:32:42:fa:94:d3:43:b1:c7:e1:df:5c:3d:49:e4: c2:64:19:eb:c1:0b:e1:00:4d:1f:5c:e1:a7:3d:03:7a:d4:33: 43:37:a1:14:68:6b:1c:ef:ac:b2:f3:9c:b3:2d:df:ac:15:f6: dc:b6:02:01:85:5c:75:7a:d0:ce:b5:8a:0b:90:4e:bc:f8:e2: 76:ef:32:27:a9:ee:c9:c8:3c:2c:7f:ec:99:30:60:b9:e4:0a: 15:ec:5c:79:8a:33:b9:04:64:50:cc:76:ac:af:64:88:f7:68: 38:36:7f:dd:9f:4a:4b:42:ea:87:6d:7a:19:bb:0e:7e:1b:86: d9:bb:d5:51:c4:7b:08:2a:3b:02:65:4e:43:aa:94:ab:08:55: ce:c5:7a:1f:91:16:4b:9d:3b:67:d3:a2:b4:27:c5:2f:a0:93: 57:81:e8:9e:39:a5:8a:a2:f3:d9:66:d2:a7:fa:ca:b8:e6:45: 4f:af:22:66:3b:af:82:f2:80:1d:23:2f:4b:85:e2:4a:72:36: 00:89:f0:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hVyIDTAxzf/ho8Hqmzc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl NDhlMzEwHhcNMjYwMTAyMTYyMzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzgwMTJhNTEzOTIyMTVmZWE2NjE0NzUyNGM2NjYwZDY5Njk0MjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAummsOvP4Rju0caGW+IeXakROVQ2e +kH4PBmUdqP8mSwMrFcIox2euecMzsdAP9Pobi/q9aOzlf9F7mSJPN/wXsZ6t2y0 inKsppY8bFnmfU98Kodd1Q4yHMI03VBtRRkQJdtVBrZt9ZKwz0G1GgxfKrWhopiW 1pUBKo/EsY6Zaw+0p/VYdtRh7NCVWq1xDka2iDOX0xRtPeR+hx5E9Q4gofV3mWSt ZJgYsQ/c1smpMTg9hXqtaLIgQiJlWJtvT3Ek1HDY7ZE1YJ+FQ6kT59Dm7zV3BvID 4Z1vTUNiId51J/1hPokCkrPxO1UcOLw2jL5LMxQ1db8IUq0x06tWQ5eDDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIyAEqUTkiFf6mYUdSTGZg1paUIxMB8GA1UdIwQY MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt ZDhiNGUwZDBkNmQ1LzEvaklBU3BST1NJVl9xWmhSMUpNWm1EV2xwUWpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1 LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHx+rMA0G CSqGSIb3DQEBCwUAA4IBAQAixNAakN0ssaPDLucXVEy0aAALBTWvDWf1Fo+jBKM5 u799w9K75oOraoEPQkVxMO1V5BVGxfakAC1JMkL6lNNDscfh31w9SeTCZBnrwQvh AE0fXOGnPQN61DNDN6EUaGsc76yy85yzLd+sFfbctgIBhVx1etDOtYoLkE68+OJ2 7zInqe7JyDwsf+yZMGC55AoV7Fx5ijO5BGRQzHasr2SI92g4Nn/dn0pLQuqHbXoZ uw5+G4bZu9VRxHsIKjsCZU5DqpSrCFXOxXofkRZLnTtn06K0J8UvoJNXgeieOaWK ovPZZtKn+sq45kVPryJmO6+C8oAdIy9LheJKcjYAifBa -----END CERTIFICATE-----Generated at Mon Jan 26 12:15:29 2026 by rpki-client