This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa File: I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa (raw, json) Hash identifier: ycdqoFMuV7vOqJ6ik/7TLLM1IrEFNQXg4WIcvH+nbTI= Subject key identifier: 23:EB:0C:1F:3E:4A:59:A2:56:58:7B:FC:2C:FF:9C:4D:B2:D1:96:19 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA738D57DAC8D8AD052901C65673691 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215947 IP address blocks: 31.130.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:38:d5:7d:ac:8d:8a:d0:52:90:1c:65:67:36:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23eb0c1f3e4a59a256587bfc2cff9c4db2d19619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:18:6a:12:75:43:81:d2:3c:89:85:fd:29: b5:43:41:2a:9a:3a:65:19:8c:a9:93:f9:5f:fe:74: 87:30:2e:2c:49:f6:c6:41:42:b1:f3:3a:1c:51:5f: 17:65:e5:f7:81:09:9e:15:df:10:ba:e7:31:3c:59: 05:eb:b1:97:63:b0:4c:58:17:0d:d7:24:03:6a:98: 8b:76:2d:6a:ee:84:23:e7:26:78:c2:10:34:d0:0f: 77:e7:58:8a:64:2a:47:14:64:03:31:6d:e1:93:09: 92:09:88:48:63:db:4d:b1:43:44:86:55:b7:e3:ac: 44:2f:9a:58:2e:6f:b4:3a:cd:c3:04:a8:38:c7:0f: 81:cc:3e:fe:9f:dd:ba:37:09:96:81:94:b2:c4:a1: 2f:b8:40:54:31:9a:b6:79:72:48:44:95:b4:cc:2e: 18:bb:69:79:66:52:1e:8f:fe:2b:20:6c:99:ea:cc: 1a:e8:dd:82:7e:26:13:d0:70:e5:e5:1b:3f:63:ed: ed:8e:08:59:76:28:2b:44:85:45:b1:61:e1:e3:6a: 76:b9:d6:2a:da:b7:08:96:e8:d3:fd:59:28:42:32: 99:36:65:59:96:76:ce:20:ed:56:12:a9:78:f5:0c: 72:ea:a4:43:14:d8:b8:ce:5c:6f:5b:0b:88:cc:03: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EB:0C:1F:3E:4A:59:A2:56:58:7B:FC:2C:FF:9C:4D:B2:D1:96:19 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/I-sMHz5KWaJWWHv8LP-cTbLRlhk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.136.0/24 Signature Algorithm: sha256WithRSAEncryption 84:e5:df:72:98:ac:82:a1:0c:e5:47:32:a5:7d:4b:23:63:ea: b5:20:cd:fb:54:5b:dd:ce:97:58:dd:32:5d:33:e2:11:92:85: fb:34:fe:da:dd:ca:06:d9:6d:fb:f2:c7:c1:08:a0:76:7d:ca: 37:53:8e:c7:f6:43:9e:56:ae:46:e0:c6:d4:1c:62:7c:bf:4f: aa:e4:19:57:a0:6e:c9:18:6e:bf:9e:ba:49:1a:2f:51:a0:bf: 91:df:cd:b0:a1:15:cf:9b:fa:34:05:67:15:64:58:1f:20:e6: c7:f6:a9:30:d8:49:0e:37:39:49:f1:fa:a5:ff:c9:3f:12:9e: 76:6f:32:1a:4e:94:7c:8d:d6:9f:2a:d5:1f:2b:0c:f3:18:dd: 09:cb:10:57:7a:c3:c0:c8:b3:93:ac:9f:0a:a6:8a:32:6e:ef: b0:a5:d9:32:fe:bb:09:3c:2a:6d:00:67:29:38:a0:b2:af:25: 28:92:9e:b9:79:19:bf:19:b1:20:a2:a8:e4:4e:32:aa:92:11: fb:ec:a1:31:e7:f6:ef:80:cd:4e:21:f1:c3:d8:22:21:04:6c: 0a:c9:00:f9:ca:87:5a:0d:4c:4a:f8:e7:e6:4c:db:55:c0:92: ee:be:81:1e:7c:aa:de:5b:d4:bc:45:aa:df:de:a9:15:da:66: 6a:04:84:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzjVfayNitBSkBxlZzaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2ViMGMxZjNlNGE1OWEyNTY1ODdiZmMyY2ZmOWM0ZGIyZDE5NjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjgYahJ1Q4HSPImF/Sm1Q0Eqmjpl GYypk/lf/nSHMC4sSfbGQUKx8zocUV8XZeX3gQmeFd8QuucxPFkF67GXY7BMWBcN 1yQDapiLdi1q7oQj5yZ4whA00A9351iKZCpHFGQDMW3hkwmSCYhIY9tNsUNEhlW3 46xEL5pYLm+0Os3DBKg4xw+BzD7+n926NwmWgZSyxKEvuEBUMZq2eXJIRJW0zC4Y u2l5ZlIej/4rIGyZ6swa6N2CfiYT0HDl5Rs/Y+3tjghZdigrRIVFsWHh42p2udYq 2rcIlujT/VkoQjKZNmVZlnbOIO1WEql49Qxy6qRDFNi4zlxvWwuIzAMZvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPrDB8+SlmiVlh7/Cz/nE2y0ZYZMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvSS1zTUh6NUtXYUpXV0h2OExQLWNUYkxSbGhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4KIMA0G CSqGSIb3DQEBCwUAA4IBAQCE5d9ymKyCoQzlRzKlfUsjY+q1IM37VFvdzpdY3TJd M+IRkoX7NP7a3coG2W378sfBCKB2fco3U47H9kOeVq5G4MbUHGJ8v0+q5BlXoG7J GG6/nrpJGi9RoL+R382woRXPm/o0BWcVZFgfIObH9qkw2EkONzlJ8fql/8k/Ep52 bzIaTpR8jdafKtUfKwzzGN0JyxBXesPAyLOTrJ8Kpooybu+wpdky/rsJPCptAGcp OKCyryUokp65eRm/GbEgoqjkTjKqkhH77KEx5/bvgM1OIfHD2CIhBGwKyQD5yoda DUxK+OfmTNtVwJLuvoEefKreW9S8Rarf3qkV2mZqBISH -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:56 2026 by rpki-client