This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/l8zay_INv7E0VzJhTHR34KyIxYU.roa File: l8zay_INv7E0VzJhTHR34KyIxYU.roa (raw, json) Hash identifier: Ub/uqiz++gX3geu9vGrvci1ULIu9IKfiqiE2f8mI0lM= Subject key identifier: 97:CC:DA:CB:F2:0D:BF:B1:34:57:32:61:4C:74:77:E0:AC:88:C5:85 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA7367213515620012E5CF5827B0DDD Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/l8zay_INv7E0VzJhTHR34KyIxYU.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215394 IP address blocks: 31.130.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:36:72:13:51:56:20:01:2e:5c:f5:82:7b:0d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97ccdacbf20dbfb1345732614c7477e0ac88c585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:09:e6:2b:2f:00:96:a0:70:0d:0f:de:04: a9:98:72:65:30:8e:d9:9a:8e:af:00:24:dc:fe:5d: b2:d2:e8:47:98:ce:43:a5:4c:91:f6:d3:21:c3:aa: 8e:ce:38:e1:cc:99:05:45:4c:f1:fd:4a:5d:a6:11: e1:de:2d:5c:fa:a5:66:1f:17:cf:0f:89:70:bf:f7: cf:cb:9e:14:81:cc:27:4b:f8:86:bb:b9:73:c4:0d: 6b:35:3c:07:df:87:7d:c7:dd:1e:53:88:61:89:4f: 2b:1a:53:46:38:66:1b:a6:42:a0:1d:61:01:89:5e: 1b:2a:83:50:e3:4f:fe:3b:3d:2f:dc:42:f4:51:af: 7c:4c:5e:7f:d8:8f:d6:71:5e:f0:09:6e:cc:7b:89: ab:d3:0f:c5:da:b1:1b:ea:9d:74:d3:a6:82:a6:4a: 08:90:92:64:8b:73:43:0e:b2:8b:52:4a:68:4f:e2: 67:70:e7:f1:f4:53:b6:eb:d9:65:b7:c3:5f:7f:c8: 1c:76:ca:13:15:57:27:19:80:4c:20:fb:94:d2:1a: 2d:c6:8d:64:72:8e:df:05:8c:51:fd:43:b8:99:12: c8:27:1f:4e:01:61:38:b4:ae:cc:67:67:95:15:c2: b6:30:1a:62:3f:f6:6e:f4:43:b7:2a:fd:a4:77:f7: 87:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CC:DA:CB:F2:0D:BF:B1:34:57:32:61:4C:74:77:E0:AC:88:C5:85 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/l8zay_INv7E0VzJhTHR34KyIxYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.139.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:4a:17:d8:df:c5:d6:8a:34:bf:6c:5f:90:50:fb:d3:01:20: c2:e1:92:c9:24:5c:f4:f9:7a:b0:c9:f3:d0:9b:9c:c9:1c:c1: 0e:e7:45:6d:a8:69:e1:15:87:a3:12:b4:1c:43:a1:74:ea:fa: 48:44:de:af:3b:f7:97:1a:1d:f0:30:60:f3:23:8a:0e:b4:ba: 9f:35:c8:e7:33:36:ea:4b:56:8a:b6:e0:ac:ba:90:fe:d6:f2: b3:95:4c:d4:78:82:89:81:cb:66:d2:27:ed:a6:3e:3d:4b:1e: 6e:34:5d:ac:76:cc:11:db:04:79:f6:eb:b3:45:99:ac:b6:af: 92:d7:32:1e:d5:82:df:00:83:be:68:ff:23:de:36:87:8f:81: 4c:ea:14:76:c9:b4:7f:4c:d4:58:a9:7b:32:70:6b:e3:58:ea: 6b:f0:93:0c:a1:bc:94:a5:26:3f:07:68:f5:ba:5b:67:9a:e8: 11:9d:5e:8f:14:1f:91:71:0c:b5:d8:26:ce:98:07:9c:c3:b4: 0c:f0:72:d8:28:48:e5:24:37:75:43:7f:75:2f:0c:bc:ee:3f: 96:bd:51:74:18:ff:a0:42:bb:0e:3a:cc:11:6c:4d:dc:bc:82: 4c:3a:4f:bc:fa:3b:dc:71:7c:86:8f:aa:58:85:06:f9:59:d1: 44:d4:4e:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzZyE1FWIAEuXPWCew3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2NjZGFjYmYyMGRiZmIxMzQ1NzMyNjE0Yzc0NzdlMGFjODhjNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr70J5isvAJagcA0P3gSpmHJlMI7Z mo6vACTc/l2y0uhHmM5DpUyR9tMhw6qOzjjhzJkFRUzx/UpdphHh3i1c+qVmHxfP D4lwv/fPy54UgcwnS/iGu7lzxA1rNTwH34d9x90eU4hhiU8rGlNGOGYbpkKgHWEB iV4bKoNQ40/+Oz0v3EL0Ua98TF5/2I/WcV7wCW7Me4mr0w/F2rEb6p1006aCpkoI kJJki3NDDrKLUkpoT+JncOfx9FO269llt8Nff8gcdsoTFVcnGYBMIPuU0hotxo1k co7fBYxR/UO4mRLIJx9OAWE4tK7MZ2eVFcK2MBpiP/Zu9EO3Kv2kd/eHBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJfM2svyDb+xNFcyYUx0d+CsiMWFMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvbDh6YXlfSU52N0UwVnpKaFRIUjM0S3lJeFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4KLMA0G CSqGSIb3DQEBCwUAA4IBAQANShfY38XWijS/bF+QUPvTASDC4ZLJJFz0+XqwyfPQ m5zJHMEO50VtqGnhFYejErQcQ6F06vpIRN6vO/eXGh3wMGDzI4oOtLqfNcjnMzbq S1aKtuCsupD+1vKzlUzUeIKJgctm0iftpj49Sx5uNF2sdswR2wR59uuzRZmstq+S 1zIe1YLfAIO+aP8j3jaHj4FM6hR2ybR/TNRYqXsycGvjWOpr8JMMobyUpSY/B2j1 ultnmugRnV6PFB+RcQy12CbOmAecw7QM8HLYKEjlJDd1Q391Lwy87j+WvVF0GP+g QrsOOswRbE3cvIJMOk+8+jvccXyGj6pYhQb5WdFE1E4D -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:46 2026 by rpki-client