This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/nUsb4McCUGoVLzb61SmYYxwkFCU.roa File: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (raw, json) Hash identifier: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI= Subject key identifier: 9D:4B:1B:E0:C7:02:50:6A:15:2F:36:FA:D5:29:98:63:1C:24:14:25 Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Certificate serial: 019B797F08FE272303C455C816DFEC69F405 Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/nUsb4McCUGoVLzb61SmYYxwkFCU.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3758 IP address blocks: 31.210.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:08:fe:27:23:03:c4:55:c8:16:df:ec:69:f4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d4b1be0c702506a152f36fad52998631c241425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:cc:6a:c6:72:a2:f7:27:b9:e5:3b:c6:99: f8:be:c4:e1:c3:88:bc:b9:7f:9f:64:c9:b4:7b:ee: d7:13:af:e8:7d:2b:10:ae:f7:2b:3a:85:2c:6a:1f: a2:15:cd:f1:2a:0a:91:60:d2:16:30:a4:cb:c2:4c: 82:53:c1:b2:80:58:15:bd:de:21:e7:04:3f:5f:fe: 83:dd:83:39:0e:c5:05:22:87:5b:82:9e:a2:0b:92: 01:c9:0f:24:7d:02:23:93:4b:91:f9:5b:18:15:e4: 6f:61:b3:b0:83:da:2e:e1:19:c4:0b:6e:b1:17:09: 6f:c7:e6:ed:8e:37:2c:91:7c:e6:c1:54:0c:c8:a3: df:f9:da:cb:61:cd:2e:14:6e:ce:1d:eb:b3:db:af: d4:68:81:83:52:8a:14:5b:71:a9:85:37:41:09:e3: ba:12:2f:ef:09:50:ad:13:0e:77:1e:ae:26:e1:ee: 69:e4:06:60:a9:c9:ec:62:e4:df:f6:e8:a0:ad:a7: e5:68:ad:4c:54:12:d8:0c:53:22:41:aa:b9:ff:af: 3a:5e:21:ad:37:c3:69:31:34:1b:23:ac:7d:b2:be: 38:a4:ad:08:f7:b3:67:0b:14:b5:f7:4f:76:c7:01: ba:72:f1:51:c2:56:a4:e6:d8:de:a0:99:1b:75:2e: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:1B:E0:C7:02:50:6A:15:2F:36:FA:D5:29:98:63:1C:24:14:25 X509v3 Authority Key Identifier: keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/nUsb4McCUGoVLzb61SmYYxwkFCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.22.0/23 Signature Algorithm: sha256WithRSAEncryption 57:04:62:b8:bd:eb:4f:e3:ea:a4:3f:d1:9d:95:33:96:bb:ec: 44:3e:5b:55:89:d0:11:51:10:c4:58:f8:e1:ac:71:03:24:df: 53:7d:ef:e2:9a:6c:66:4c:b0:9c:09:c7:ab:a2:98:8a:3f:ca: 61:1c:66:ca:71:0e:3c:02:07:2a:40:20:b4:91:09:1d:4e:77: 04:20:70:2e:f9:2d:dc:11:28:6c:cb:be:1d:37:0f:ba:74:65: 88:7a:0a:aa:a2:05:24:29:51:35:cd:bc:11:59:a0:43:75:97: d4:a3:c0:de:ea:4f:fe:11:b6:fd:be:42:79:b7:c2:94:8f:7d: 7c:82:4b:95:62:70:1e:1e:c2:7c:67:70:dc:e2:71:18:73:0a: 51:0c:f1:e4:44:8d:1a:cd:26:4e:ff:0e:86:0d:ee:80:ff:c1: 2b:d1:e7:ca:fe:3c:3f:e8:ea:66:5f:40:09:17:a3:4a:d1:2f: f7:e4:b1:0d:da:d2:95:3d:21:6d:b9:a7:34:c8:48:74:e0:7e: dd:99:ca:9b:60:de:bb:1d:52:66:83:83:82:83:66:d2:d2:00: e1:37:a5:60:e0:16:7e:d8:5d:9a:ca:ce:e0:89:13:b4:03:ef: c7:61:a7:16:60:91:a5:93:9b:ea:3b:e7:02:60:bd:40:07:f7: 33:75:a7:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwj+JyMDxFXIFt/safQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl MmM0ZDcwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDRiMWJlMGM3MDI1MDZhMTUyZjM2ZmFkNTI5OTg2MzFjMjQxNDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArabMasZyovcnueU7xpn4vsThw4i8 uX+fZMm0e+7XE6/ofSsQrvcrOoUsah+iFc3xKgqRYNIWMKTLwkyCU8GygFgVvd4h 5wQ/X/6D3YM5DsUFIodbgp6iC5IByQ8kfQIjk0uR+VsYFeRvYbOwg9ou4RnEC26x Fwlvx+btjjcskXzmwVQMyKPf+drLYc0uFG7OHeuz26/UaIGDUooUW3GphTdBCeO6 Ei/vCVCtEw53Hq4m4e5p5AZgqcnsYuTf9uigraflaK1MVBLYDFMiQaq5/686XiGt N8NpMTQbI6x9sr44pK0I97NnCxS19092xwG6cvFRwlak5tjeoJkbdS6qYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1LG+DHAlBqFS82+tUpmGMcJBQlMB8GA1UdIwQY MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct ODMxZjdlNmY1Y2NkLzEvblVzYjRNY0NVR29WTHpiNjFTbVlZeHdrRkNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH9IWMA0G CSqGSIb3DQEBCwUAA4IBAQBXBGK4vetP4+qkP9GdlTOWu+xEPltVidARURDEWPjh rHEDJN9Tfe/immxmTLCcCceropiKP8phHGbKcQ48AgcqQCC0kQkdTncEIHAu+S3c EShsy74dNw+6dGWIegqqogUkKVE1zbwRWaBDdZfUo8De6k/+Ebb9vkJ5t8KUj318 gkuVYnAeHsJ8Z3Dc4nEYcwpRDPHkRI0azSZO/w6GDe6A/8Er0efK/jw/6OpmX0AJ F6NK0S/35LEN2tKVPSFtuac0yEh04H7dmcqbYN67HVJmg4OCg2bS0gDhN6Vg4BZ+ 2F2ays7giRO0A+/HYacWYJGlk5vqO+cCYL1AB/czdafs -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:53 2026 by rpki-client