This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/u-z9xjm4aXTIN1Cb2VdYs7ls5-E.roa File: u-z9xjm4aXTIN1Cb2VdYs7ls5-E.roa (raw, json) Hash identifier: sizU/gmOpajZ7yHHG3VRnDzwQLefEOlGShCA4m3S8qw= Subject key identifier: BB:EC:FD:C6:39:B8:69:74:C8:37:50:9B:D9:57:58:B3:B9:6C:E7:E1 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C138EA52620E6C1176C586576EABAEB Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/u-z9xjm4aXTIN1Cb2VdYs7ls5-E.roa Signing time: Fri 02 Jan 2026 00:20:15 +0000 ROA not before: Fri 02 Jan 2026 00:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209365 IP address blocks: 31.170.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:8e:a5:26:20:e6:c1:17:6c:58:65:76:ea:ba:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbecfdc639b86974c837509bd95758b3b96ce7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:82:1c:ed:c7:99:55:58:56:52:4a:65:e7: 5b:53:e9:ea:85:ac:3a:46:bd:e8:78:75:05:b6:fe: 4e:a9:88:ec:eb:ab:cc:80:86:a2:cf:3e:1b:f5:1b: 52:d0:c4:e7:7d:a8:2c:38:31:3f:96:e4:58:aa:6b: 99:b2:69:af:24:03:10:c5:98:0c:58:c2:a9:e2:fa: 48:55:e3:d5:40:c7:2b:02:24:e4:c5:b5:f4:f7:11: 8f:98:c5:74:7e:99:54:3c:89:4a:5f:95:f9:4a:50: 8e:53:39:c1:44:5d:a1:59:d7:c2:b3:07:bf:8d:33: 35:20:b2:6a:ec:69:b5:c6:c5:e2:32:c8:f3:9f:f8: 07:ee:c5:87:c2:fb:0a:2d:cf:3c:03:10:bd:2b:c9: 60:e2:18:f5:b0:f1:95:41:8d:e8:b9:28:46:55:1a: ab:33:d4:7a:0b:62:57:e9:50:57:d5:08:97:ea:91: 45:61:7c:19:7d:ae:ac:b5:63:b9:f0:65:ff:03:2d: 2a:49:3e:58:c5:f1:16:ff:a1:69:42:cb:d2:25:5f: fc:ec:39:29:22:9a:f6:f4:dc:32:1e:8e:24:11:43: 4d:34:3d:2f:bb:f7:b8:1e:ef:d3:0e:e4:7b:df:4a: 9e:98:e3:b5:07:5b:96:b1:5c:31:3c:29:6c:7b:cf: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EC:FD:C6:39:B8:69:74:C8:37:50:9B:D9:57:58:B3:B9:6C:E7:E1 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/u-z9xjm4aXTIN1Cb2VdYs7ls5-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.103.0/24 Signature Algorithm: sha256WithRSAEncryption 63:9a:46:b6:05:a5:14:d8:aa:31:b1:c4:61:ee:bc:42:1b:0b: a0:e1:03:fc:d2:fc:96:d8:ba:5a:da:0f:32:46:de:9a:b8:ce: ad:1b:3b:4c:0e:6f:fe:67:f4:e4:f4:63:b0:80:c0:2e:c4:f6: 30:ee:1a:da:b0:c8:af:f6:09:59:2a:c8:f9:cb:24:b4:48:91: 31:bd:b2:f3:14:4c:a0:44:4e:04:b2:ac:00:e8:be:ff:57:09: 7b:b1:ba:42:83:8f:ba:91:dd:5b:cc:1e:91:6c:7a:3b:f9:ec: 31:de:14:91:95:1a:0d:e2:e8:d3:55:f9:92:74:44:16:ce:dc: 82:2a:cd:74:ef:03:96:7b:6d:91:2b:e7:4b:07:1c:1e:19:22: 9b:6e:b4:24:db:73:63:07:41:45:dc:5b:6f:86:0f:9e:64:03: 93:ba:25:4f:74:b1:4a:ee:95:c3:83:d0:64:13:03:a4:c9:a7: d7:f5:8c:ba:a4:a3:4e:cb:ec:66:05:42:09:08:43:bb:1c:02: 68:be:cd:b3:d1:13:c6:c2:c8:7e:e2:6e:56:eb:58:2d:55:3f: d8:8b:2e:ec:01:f8:93:e8:56:f3:cc:f0:7b:bf:fa:c1:21:2f: 0f:0b:65:8e:37:33:51:da:ac:a4:3c:62:2b:86:9a:5e:ba:45: 9c:b4:43:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E46lJiDmwRdsWGV26rrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmVjZmRjNjM5Yjg2OTc0YzgzNzUwOWJkOTU3NThiM2I5NmNlN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+eCHO3HmVVYVlJKZedbU+nqhaw6 Rr3oeHUFtv5OqYjs66vMgIaizz4b9RtS0MTnfagsODE/luRYqmuZsmmvJAMQxZgM WMKp4vpIVePVQMcrAiTkxbX09xGPmMV0fplUPIlKX5X5SlCOUznBRF2hWdfCswe/ jTM1ILJq7Gm1xsXiMsjzn/gH7sWHwvsKLc88AxC9K8lg4hj1sPGVQY3ouShGVRqr M9R6C2JX6VBX1QiX6pFFYXwZfa6stWO58GX/Ay0qST5YxfEW/6FpQsvSJV/87Dkp Ipr29NwyHo4kEUNNND0vu/e4Hu/TDuR730qemOO1B1uWsVwxPClse8/uOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvs/cY5uGl0yDdQm9lXWLO5bOfhMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdS16OXhqbTRhWFRJTjFDYjJWZFlzN2xzNS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6pnMA0G CSqGSIb3DQEBCwUAA4IBAQBjmka2BaUU2KoxscRh7rxCGwug4QP80vyW2Lpa2g8y Rt6auM6tGztMDm/+Z/Tk9GOwgMAuxPYw7hrasMiv9glZKsj5yyS0SJExvbLzFEyg RE4EsqwA6L7/Vwl7sbpCg4+6kd1bzB6RbHo7+ewx3hSRlRoN4ujTVfmSdEQWztyC Ks107wOWe22RK+dLBxweGSKbbrQk23NjB0FF3Ftvhg+eZAOTuiVPdLFK7pXDg9Bk EwOkyafX9Yy6pKNOy+xmBUIJCEO7HAJovs2z0RPGwsh+4m5W61gtVT/Yiy7sAfiT 6FbzzPB7v/rBIS8PC2WONzNR2qykPGIrhppeukWctEOM -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:15 2026 by rpki-client