This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/3MbENdJT26XzCCTRISyB_iPykiw.roa File: 3MbENdJT26XzCCTRISyB_iPykiw.roa (raw, json) Hash identifier: kSjcy26IOOyW+caS15k1M32+3TxvbP1k3eV5GVXbdqs= Subject key identifier: DC:C6:C4:35:D2:53:DB:A5:F3:08:24:D1:21:2C:81:FE:23:F2:92:2C Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Certificate serial: 019B7C805BEBB2C4A77B47362044E41F27A8 Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/3MbENdJT26XzCCTRISyB_iPykiw.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197720 IP address blocks: 31.186.0.0/24 maxlen: 24 31.186.1.0/24 maxlen: 24 31.186.2.0/24 maxlen: 24 31.186.3.0/24 maxlen: 24 31.186.4.0/24 maxlen: 24 31.186.5.0/24 maxlen: 24 31.186.6.0/24 maxlen: 24 31.186.7.0/24 maxlen: 24 31.186.8.0/24 maxlen: 24 31.186.9.0/24 maxlen: 24 31.186.10.0/24 maxlen: 24 31.186.11.0/24 maxlen: 24 31.186.12.0/24 maxlen: 24 31.186.13.0/24 maxlen: 24 31.186.14.0/24 maxlen: 24 31.186.15.0/24 maxlen: 24 31.186.16.0/24 maxlen: 24 31.186.17.0/24 maxlen: 24 31.186.18.0/24 maxlen: 24 31.186.19.0/24 maxlen: 24 31.186.20.0/24 maxlen: 24 31.186.21.0/24 maxlen: 24 31.186.22.0/24 maxlen: 24 31.186.23.0/24 maxlen: 24 31.186.24.0/24 maxlen: 24 31.186.25.0/24 maxlen: 24 31.186.26.0/24 maxlen: 24 31.186.27.0/24 maxlen: 24 31.186.28.0/24 maxlen: 24 31.186.29.0/24 maxlen: 24 31.186.30.0/24 maxlen: 24 31.186.31.0/24 maxlen: 24 2a0d:a000:0:a00::/56 maxlen: 56 2a0d:a000:0:b00::/56 maxlen: 56 2a0d:a000:0:c00::/56 maxlen: 56 2a0d:a000:0:d00::/56 maxlen: 56 2a0d:a000:0:e00::/56 maxlen: 56 2a0d:a000:0:f00::/56 maxlen: 56 2a0d:a000:0:1000::/56 maxlen: 56 2a0d:a000:0:1100::/56 maxlen: 56 2a0d:a000:0:1200::/56 maxlen: 56 2a0d:a000:0:1300::/56 maxlen: 56 2a0d:a000:0:1400::/56 maxlen: 56 2a0d:a000:0:1500::/56 maxlen: 56 2a0d:a000:0:1600::/56 maxlen: 56 2a0d:a000:0:1700::/56 maxlen: 56 2a0d:a000:0:1800::/56 maxlen: 56 2a0d:a000:0:1900::/56 maxlen: 56 2a0d:a000:0:1a00::/56 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5b:eb:b2:c4:a7:7b:47:36:20:44:e4:1f:27:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcc6c435d253dba5f30824d1212c81fe23f2922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:63:12:69:27:5f:27:78:23:71:98:24:3b: 52:05:f3:ef:83:61:a1:fc:fd:65:81:cb:9f:86:d7: 6d:ab:f8:69:1a:e0:1d:29:c3:a6:ba:00:5b:96:20: 8b:e9:5c:5b:e3:cf:42:17:10:5e:8e:e0:dc:8c:30: 93:8e:39:be:5b:9c:2b:ab:ba:6b:5d:84:4a:45:89: e0:d4:84:b1:d6:23:c6:a2:e4:c4:c8:07:3b:fb:94: 6f:0a:91:98:75:c2:5f:df:ee:95:da:2c:be:5a:04: f0:3a:77:eb:7e:53:26:9a:c3:35:35:ed:1f:0a:c3: 6b:58:9b:b7:7a:b6:a2:50:60:8a:58:1f:a7:98:3e: e8:0e:fe:f3:87:6f:9d:47:16:9c:fc:df:1c:74:9c: ff:ce:5a:bf:d9:2b:65:bc:b0:aa:e2:4f:ee:e2:51: e8:ed:27:3b:04:12:d0:14:71:4a:fd:bb:69:f7:e9: 09:0b:7b:25:ce:76:ce:75:7a:d3:4a:1c:e8:2e:31: 55:f4:f6:a4:ef:a3:e8:d7:c6:55:85:bc:7c:d5:b6: 09:9c:08:34:3e:4b:35:0d:f7:33:9d:ff:2e:a7:20: 6a:ae:29:7a:4a:b4:4f:85:01:47:5c:b5:f0:b9:f3: 5e:b8:41:e8:52:0f:94:67:be:c1:9d:5a:89:81:f4: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C6:C4:35:D2:53:DB:A5:F3:08:24:D1:21:2C:81:FE:23:F2:92:2C X509v3 Authority Key Identifier: keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/3MbENdJT26XzCCTRISyB_iPykiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.0.0/19 IPv6: 2a0d:a000:0:a00::-2a0d:a000:0:1aff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 93:6a:2b:95:c9:78:31:09:ec:1c:a5:a6:34:c3:fa:c5:ee:83: a8:ab:62:21:8c:ed:e7:70:7e:20:5e:be:2e:ad:51:34:c4:3e: eb:df:10:13:eb:b3:41:d1:87:8c:ae:f0:c2:ec:fb:7f:ad:94: f3:28:01:c7:8e:48:fc:d8:0b:98:37:61:00:54:82:1a:20:56: 59:94:17:71:01:66:8d:0a:90:e2:79:ba:9f:73:71:6e:5a:2f: e1:9a:eb:c6:60:2f:9b:60:ca:31:4f:d1:87:92:3d:6e:b1:69: 0d:d8:10:75:75:46:ec:5e:3d:55:a0:ce:89:96:53:e6:0f:ed: 78:0e:a9:38:c3:05:fd:f5:0e:bc:21:9f:9c:b2:57:11:c3:4e: ed:0f:62:74:bf:50:22:19:1c:64:b6:94:9b:86:d8:2a:71:94: 1a:f8:c2:d0:06:4e:1d:5e:67:d5:fb:37:54:48:fe:dc:37:0a: c1:eb:5c:a8:b8:34:4a:48:1f:85:d4:db:c6:22:f1:c7:b8:45: 96:e7:ad:75:da:b3:b3:b9:f6:0d:ae:97:fb:94:49:96:c4:cd: 76:b8:30:e7:52:01:bc:00:23:6d:4b:0c:2a:51:f1:1c:d2:b3: e1:04:95:cd:36:5f:52:7d:1f:cf:d2:ac:ae:84:87:e2:4f:ef: c7:ab:9d:8a -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gFvrssSne0c2IETkHyeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YWYyYzcxNjZiYjM0YTY5NmZkZTJmYmFjZWY0MDAxYjBh OGU3ZTIwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2M2YzQzNWQyNTNkYmE1ZjMwODI0ZDEyMTJjODFmZTIzZjI5MjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEZjEmknXyd4I3GYJDtSBfPvg2Gh /P1lgcufhtdtq/hpGuAdKcOmugBbliCL6Vxb489CFxBejuDcjDCTjjm+W5wrq7pr XYRKRYng1ISx1iPGouTEyAc7+5RvCpGYdcJf3+6V2iy+WgTwOnfrflMmmsM1Ne0f CsNrWJu3eraiUGCKWB+nmD7oDv7zh2+dRxac/N8cdJz/zlq/2StlvLCq4k/u4lHo 7Sc7BBLQFHFK/btp9+kJC3slznbOdXrTShzoLjFV9Pak76Po18ZVhbx81bYJnAg0 Pks1Dfcznf8upyBqril6SrRPhQFHXLXwufNeuEHoUg+UZ77BnVqJgfRFewIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNzGxDXSU9ul8wgk0SEsgf4j8pIsMB8GA1UdIwQY MBaAFIavLHFmuzSmlv3i+6zvQAGwqOfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEt ZTRmNTg3MDQ4MDRlLzEvM01iRU5kSlQyNlh6Q0NUUklTeUJfaVB5a2l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mOGY2NmQtOGE0Ny00NDMxLWFmNTEtZTRmNTg3MDQ4MDRl LzEvaHE4c2NXYTdOS2FXX2VMN3JPOUFBYkNvNS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAMBAIAATAGAwQFH7oAMBwE AgACMBYwFAMIASoNoAAAAAoDCAAqDaAAAAAaMA0GCSqGSIb3DQEBCwUAA4IBAQCT aiuVyXgxCewcpaY0w/rF7oOoq2IhjO3ncH4gXr4urVE0xD7r3xAT67NB0YeMrvDC 7Pt/rZTzKAHHjkj82AuYN2EAVIIaIFZZlBdxAWaNCpDiebqfc3FuWi/hmuvGYC+b YMoxT9GHkj1usWkN2BB1dUbsXj1VoM6JllPmD+14Dqk4wwX99Q68IZ+cslcRw07t D2J0v1AiGRxktpSbhtgqcZQa+MLQBk4dXmfV+zdUSP7cNwrB61youDRKSB+F1NvG IvHHuEWW56112rOzufYNrpf7lEmWxM12uDDnUgG8ACNtSwwqUfEc0rPhBJXNNl9S fR/P0qyuhIfiT+/Hq52K -----END CERTIFICATE-----Generated at Mon Feb 2 20:58:31 2026 by rpki-client