This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/zASeUNdd7TsqfrUrt-6Lw63Wros.roa File: zASeUNdd7TsqfrUrt-6Lw63Wros.roa (raw, json) Hash identifier: tPrCCZB56fmn25oi2PgLtVRLTnTPlMY3Sp4O5v3mdt0= Subject key identifier: CC:04:9E:50:D7:5D:ED:3B:2A:7E:B5:2B:B7:EE:8B:C3:AD:D6:AE:8B Certificate issuer: /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Certificate serial: 019B78A3626408CBD26E6A64712F5E14B4BD Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/zASeUNdd7TsqfrUrt-6Lw63Wros.roa Signing time: Thu 01 Jan 2026 08:18:52 +0000 ROA not before: Thu 01 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 185.31.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:62:64:08:cb:d2:6e:6a:64:71:2f:5e:14:b4:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a Validity Not Before: Jan 1 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc049e50d75ded3b2a7eb52bb7ee8bc3add6ae8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:0c:8b:6f:bd:38:c6:77:56:34:4a:fc:9e: 34:d2:bd:7f:5b:dd:17:fe:e9:94:69:a2:50:96:f9: 1e:0f:1c:76:87:ef:60:07:71:b8:32:b8:b0:97:f6: d8:79:f7:3d:c2:45:35:c0:34:c4:85:e3:e7:9d:bc: 58:01:20:94:37:ca:18:c1:ab:bb:9a:f4:de:88:fa: ae:7c:53:fc:2a:be:60:c2:e8:1d:6b:a8:b3:92:07: a0:74:c2:dc:53:90:7b:dc:4c:31:88:3d:72:de:f5: a3:63:d9:fe:74:0b:f2:82:a0:c1:17:13:f4:e4:6b: 4a:fe:8d:68:81:3d:0e:24:9a:0c:38:d4:8d:ea:68: 51:ef:5e:fa:f5:00:e6:68:f9:53:76:8d:c3:5d:40: 5f:b0:af:a9:cb:da:44:4a:ce:f9:a8:29:26:43:f5: be:9e:35:bd:8f:c9:6f:67:d1:1d:dd:76:7c:79:ee: 37:fd:ab:90:ce:d7:48:d7:a6:e4:16:6e:ce:da:f7: d6:94:a5:2b:a0:d0:6e:1f:ba:ed:42:0a:0b:e8:64: 35:22:b5:d1:e2:ea:be:70:f8:a2:0e:64:91:48:1a: 4b:7d:f2:f6:23:2d:71:48:27:30:13:a9:7c:98:35: 97:b5:df:1a:b4:75:3d:aa:54:08:88:f0:29:40:24: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:04:9E:50:D7:5D:ED:3B:2A:7E:B5:2B:B7:EE:8B:C3:AD:D6:AE:8B X509v3 Authority Key Identifier: keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/zASeUNdd7TsqfrUrt-6Lw63Wros.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.8.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:1a:b8:ee:4d:56:4b:29:de:1a:eb:2f:0d:cb:bf:a8:fc:e7: ac:55:41:12:65:18:ad:31:b5:06:8b:f3:cd:eb:7e:33:ad:b0: 3f:b5:ec:ac:c2:37:74:44:fa:bb:44:14:48:04:11:6b:fd:c1: ed:ca:ae:6e:46:56:dd:01:b8:13:dd:e7:6c:57:d4:ba:a2:76: 22:6a:ea:ce:34:5d:66:7c:de:fc:48:72:20:89:64:dc:d7:47: ca:59:ec:08:00:81:a9:86:67:a2:68:ba:86:2e:74:3d:01:c1: f5:15:24:d1:be:0a:14:62:92:8c:42:29:22:29:b9:ec:e6:b5: 8e:3e:6b:64:f4:aa:80:2e:d7:56:05:8c:f3:f8:9f:4b:aa:af: 07:37:b3:32:78:35:ad:97:e7:67:92:ef:7e:6d:c6:91:32:1e: 44:09:cf:b2:51:05:36:ff:e8:4a:d0:4a:38:2c:0d:53:96:c0: c6:c6:11:33:57:e8:74:a9:73:06:c1:49:e0:3e:c9:58:86:5c: 5c:98:e4:8d:d4:fb:d6:5e:74:e9:1c:62:b3:fc:4e:8a:e7:47: 15:a1:19:08:6c:63:57:52:ac:ea:9f:99:12:b4:49:4e:1b:f6: 55:3b:25:93:88:cd:85:f2:8b:77:93:18:67:fd:5f:b7:23:51: fa:0e:e3:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2JkCMvSbmpkcS9eFLS9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDI0YWZhNGJjZWU3NjU0YmRmM2FiNzkxNjU2ZTQ0NDVj MmY5NWEwHhcNMjYwMTAxMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzA0OWU1MGQ3NWRlZDNiMmE3ZWI1MmJiN2VlOGJjM2FkZDZhZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiQMi2+9OMZ3VjRK/J400r1/W90X /umUaaJQlvkeDxx2h+9gB3G4Mriwl/bYefc9wkU1wDTEhePnnbxYASCUN8oYwau7 mvTeiPqufFP8Kr5gwugda6izkgegdMLcU5B73EwxiD1y3vWjY9n+dAvygqDBFxP0 5GtK/o1ogT0OJJoMONSN6mhR71769QDmaPlTdo3DXUBfsK+py9pESs75qCkmQ/W+ njW9j8lvZ9Ed3XZ8ee43/auQztdI16bkFm7O2vfWlKUroNBuH7rtQgoL6GQ1IrXR 4uq+cPiiDmSRSBpLffL2Iy1xSCcwE6l8mDWXtd8atHU9qlQIiPApQCQ2IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMwEnlDXXe07Kn61K7fui8Ot1q6LMB8GA1UdIwQY MBaAFAVCSvpLzudlS986t5FlbkRFwvlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQt MDgxYjE3OTkzM2M0LzEvekFTZVVOZGQ3VHNxZnJVcnQtNkx3NjNXcm9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81MTE2ZjMtZjQ1NC00ZDcwLWI5ZDQtMDgxYjE3OTkzM2M0 LzEvQlVKSy1rdk81MlZMM3pxM2tXVnVSRVhDLVZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR8IMA0G CSqGSIb3DQEBCwUAA4IBAQA/GrjuTVZLKd4a6y8Ny7+o/OesVUESZRitMbUGi/PN 634zrbA/teyswjd0RPq7RBRIBBFr/cHtyq5uRlbdAbgT3edsV9S6onYiaurONF1m fN78SHIgiWTc10fKWewIAIGphmeiaLqGLnQ9AcH1FSTRvgoUYpKMQikiKbns5rWO Pmtk9KqALtdWBYzz+J9Lqq8HN7MyeDWtl+dnku9+bcaRMh5ECc+yUQU2/+hK0Eo4 LA1TlsDGxhEzV+h0qXMGwUngPslYhlxcmOSN1PvWXnTpHGKz/E6K50cVoRkIbGNX Uqzqn5kStElOG/ZVOyWTiM2F8ot3kxhn/V+3I1H6DuMK -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:22 2026 by rpki-client