This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/7ejZ3K5XJXw42cK_JDpws_LBqPY.roa File: 7ejZ3K5XJXw42cK_JDpws_LBqPY.roa (raw, json) Hash identifier: Y1PAS81Ngu/ibCqA+GXn0uait9upSnAxeVEYWJyyRbo= Subject key identifier: ED:E8:D9:DC:AE:57:25:7C:38:D9:C2:BF:24:3A:70:B3:F2:C1:A8:F6 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12DDC3DE3DF21937516B4436EB6264 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/7ejZ3K5XJXw42cK_JDpws_LBqPY.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 31.43.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dd:c3:de:3d:f2:19:37:51:6b:44:36:eb:62:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ede8d9dcae57257c38d9c2bf243a70b3f2c1a8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:ed:66:c3:ae:a8:e9:f0:8b:a0:87:c7:56: d0:e8:fa:80:1f:bc:7e:16:8b:23:21:4f:e1:44:f7: 58:ab:da:1d:a5:17:4a:91:2b:ff:90:ba:9f:77:0b: 15:36:9e:7a:64:f8:f1:43:c7:2b:f7:86:7e:55:7d: 4f:d2:55:97:7c:b9:47:ef:e4:21:ab:42:ec:17:b0: 74:c5:46:bb:ca:f0:5a:d3:cf:95:02:63:7c:3b:0a: 63:e8:3a:45:02:11:7c:50:2c:a5:4c:6a:95:b9:bd: d5:48:81:17:69:e8:8b:c9:0f:ce:b1:90:2e:24:a6: 4a:a2:80:2a:48:d4:eb:6a:94:df:61:fe:ee:ca:c9: 68:96:fa:a3:b3:86:00:a2:d5:39:e0:5a:4f:8d:db: 81:5d:d2:e4:4d:e1:6e:a5:b2:ac:b7:ea:49:31:ad: 4e:7d:e1:db:6e:9f:23:3e:5e:98:ff:86:85:9b:f5: ff:b0:9c:fb:41:37:cd:19:48:71:1d:cc:f7:cb:3b: 46:3f:40:bf:2a:07:73:e8:e8:79:e0:4d:15:2e:09: af:de:96:9c:a2:72:44:0c:e4:ec:8d:0e:d4:87:e2: d8:db:b8:a4:6b:50:26:7e:3f:46:30:4a:55:44:b2: dc:65:41:99:d2:d1:60:68:35:1e:c9:49:1e:d5:9e: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E8:D9:DC:AE:57:25:7C:38:D9:C2:BF:24:3A:70:B3:F2:C1:A8:F6 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/7ejZ3K5XJXw42cK_JDpws_LBqPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.165.0/24 Signature Algorithm: sha256WithRSAEncryption 41:3d:cd:e2:36:0f:25:8b:d9:b6:83:b2:f8:61:d9:20:ed:1b: 40:f5:f3:34:3b:91:2b:3c:c1:4a:2c:9e:66:3e:4d:0f:2e:0a: 02:bb:f6:06:99:4e:46:78:a2:c7:22:6a:d0:f7:0e:eb:20:1a: 29:17:51:c2:3b:a4:87:75:31:ce:02:dd:7a:8c:ab:ff:59:c4: b7:77:36:f5:78:7a:d7:e9:16:8b:ff:55:f6:18:99:8d:7e:d8: 5a:5d:b8:3b:45:26:20:35:09:0a:8a:33:e6:5b:f8:1c:18:2a: 83:f0:2d:ea:34:dc:01:88:5c:7c:ea:4a:55:79:37:4b:ff:d4: 7a:64:43:2e:7f:53:d8:60:43:42:35:98:e8:8f:c2:28:a6:27: 5e:86:a7:85:41:4b:fe:bb:ed:68:88:28:97:f2:b5:bd:37:f5: e7:ae:ed:17:cd:7b:49:3f:15:45:cc:9e:8c:1e:03:6b:e3:8b: 33:5c:86:61:aa:a9:c4:d8:74:96:14:ba:f2:2b:41:16:70:72: 57:da:a2:3d:b8:f9:59:91:f5:51:19:77:c6:c6:c2:5a:45:e2: 59:ff:f3:f3:8c:d7:3f:cb:f4:3f:30:0b:12:ee:6c:13:35:3a: bc:3a:7a:a0:50:68:7b:af:41:17:32:1a:2c:d8:55:21:99:80: 61:b1:69:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Et3D3j3yGTdRa0Q262JkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGU4ZDlkY2FlNTcyNTdjMzhkOWMyYmYyNDNhNzBiM2YyYzFhOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ/tZsOuqOnwi6CHx1bQ6PqAH7x+ FosjIU/hRPdYq9odpRdKkSv/kLqfdwsVNp56ZPjxQ8cr94Z+VX1P0lWXfLlH7+Qh q0LsF7B0xUa7yvBa08+VAmN8Owpj6DpFAhF8UCylTGqVub3VSIEXaeiLyQ/OsZAu JKZKooAqSNTrapTfYf7uyslolvqjs4YAotU54FpPjduBXdLkTeFupbKst+pJMa1O feHbbp8jPl6Y/4aFm/X/sJz7QTfNGUhxHcz3yztGP0C/Kgdz6Oh54E0VLgmv3pac onJEDOTsjQ7Uh+LY27ika1Amfj9GMEpVRLLcZUGZ0tFgaDUeyUke1Z4TcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3o2dyuVyV8ONnCvyQ6cLPywaj2MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvN2VqWjNLNVhKWHc0MmNLX0pEcHdzX0xCcVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyulMA0G CSqGSIb3DQEBCwUAA4IBAQBBPc3iNg8li9m2g7L4Ydkg7RtA9fM0O5ErPMFKLJ5m Pk0PLgoCu/YGmU5GeKLHImrQ9w7rIBopF1HCO6SHdTHOAt16jKv/WcS3dzb1eHrX 6RaL/1X2GJmNfthaXbg7RSYgNQkKijPmW/gcGCqD8C3qNNwBiFx86kpVeTdL/9R6 ZEMuf1PYYENCNZjoj8IopidehqeFQUv+u+1oiCiX8rW9N/Xnru0XzXtJPxVFzJ6M HgNr44szXIZhqqnE2HSWFLryK0EWcHJX2qI9uPlZkfVRGXfGxsJaReJZ//PzjNc/ y/Q/MAsS7mwTNTq8OnqgUGh7r0EXMhos2FUhmYBhsWlx -----END CERTIFICATE-----Generated at Mon Jan 19 17:13:36 2026 by rpki-client