This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/mNhJEg8yYPko26xnMlb5p8FIxE0.roa File: mNhJEg8yYPko26xnMlb5p8FIxE0.roa (raw, json) Hash identifier: w9gg5PUiPe908J5vjI6p+AZZqfbQNUOc9hdSAtqhApM= Subject key identifier: 98:D8:49:12:0F:32:60:F9:28:DB:AC:67:32:56:F9:A7:C1:48:C4:4D Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA73314FBF23396F0C8452343A3F6A7 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/mNhJEg8yYPko26xnMlb5p8FIxE0.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49107 IP address blocks: 31.130.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:33:14:fb:f2:33:96:f0:c8:45:23:43:a3:f6:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98d849120f3260f928dbac673256f9a7c148c44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:e4:78:7e:68:b0:11:a4:ff:c0:e6:14:75: e4:20:aa:45:52:87:fa:1b:d0:12:b3:bf:e5:6b:6d: ea:c6:eb:5c:15:9f:7e:22:44:2b:c0:56:ce:60:9c: 2a:17:38:62:9d:b4:28:68:12:c0:ec:07:35:ee:00: 54:d1:11:89:cf:ce:3a:29:a3:e9:5c:5e:02:74:80: 00:57:17:dc:69:29:1a:2f:2a:6b:07:d7:a1:69:e6: 30:ca:ec:33:9d:52:9b:6b:e6:1c:6a:c7:40:15:72: 46:da:0a:20:97:b7:78:58:5d:95:6e:6e:43:47:59: 56:0c:27:62:0c:75:5c:bc:6e:e4:64:ef:df:c9:01: bc:3c:ad:2a:30:24:23:6b:f6:c6:dd:fd:72:5e:5b: 41:28:3b:6c:51:e9:6b:56:bc:07:80:19:e2:8f:fb: 75:5b:b8:1a:84:03:9a:d4:de:0e:94:07:c8:71:50: 6d:1c:1b:3c:b1:f6:e3:4b:7b:8d:23:d5:6d:9e:ff: 09:53:9b:ff:10:d3:88:0b:b8:12:0b:f6:dc:ee:7e: 93:49:3d:2e:cf:68:af:5b:29:16:c0:c2:ed:03:74: b1:4b:c1:1f:1a:90:81:bc:4a:32:13:34:92:e7:cd: 98:24:50:57:e9:fa:ba:01:66:b3:fb:65:c4:6c:24: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D8:49:12:0F:32:60:F9:28:DB:AC:67:32:56:F9:A7:C1:48:C4:4D X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/mNhJEg8yYPko26xnMlb5p8FIxE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.156.0/23 Signature Algorithm: sha256WithRSAEncryption a6:f7:26:31:a5:bb:df:d5:05:be:b9:bd:d9:77:5a:de:81:a0: 43:cf:fa:1f:0e:28:48:bb:4f:0e:b3:4e:81:c7:15:51:01:5c: 68:e9:be:51:ab:2f:22:70:56:4f:4c:84:76:18:32:b1:44:59: 26:16:12:cf:27:f4:d5:67:5d:77:14:fb:ab:dd:cc:85:ab:21: 48:5e:0c:f3:3c:aa:ce:07:f0:14:6a:e1:5e:46:67:ff:83:03: 84:7a:0d:94:1b:fc:57:ef:45:cf:0d:f2:1d:a5:48:9f:97:05: fb:da:db:dd:d1:9e:d7:cf:55:c2:57:1e:8e:81:df:5b:b6:9d: c4:c5:b6:49:16:02:c6:88:9b:96:fb:f6:4c:29:c5:af:25:ff: 1b:52:c1:ee:aa:d4:a5:e8:1b:02:7e:84:d2:2e:6e:0f:02:d1: e9:7b:c2:4f:b6:bb:20:da:61:b4:60:13:d7:ef:7b:16:7d:f1: 1d:f0:ea:57:9e:47:da:73:e5:68:07:20:97:a8:f6:c5:f3:c7: 19:11:fe:cd:fe:ae:d6:4e:4c:9f:06:43:e7:c9:57:27:b1:a0: ad:6b:02:5b:40:4f:ad:da:93:e9:24:66:14:0e:9c:bc:3d:cf: 02:3a:44:a1:b7:d0:20:b8:0a:38:a8:32:dc:e1:59:94:fa:1e: 7c:3a:11:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzMU+/IzlvDIRSNDo/anMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQ4NDkxMjBmMzI2MGY5MjhkYmFjNjczMjU2ZjlhN2MxNDhjNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CrkeH5osBGk/8DmFHXkIKpFUof6 G9ASs7/la23qxutcFZ9+IkQrwFbOYJwqFzhinbQoaBLA7Ac17gBU0RGJz846KaPp XF4CdIAAVxfcaSkaLyprB9ehaeYwyuwznVKba+YcasdAFXJG2gogl7d4WF2Vbm5D R1lWDCdiDHVcvG7kZO/fyQG8PK0qMCQja/bG3f1yXltBKDtsUelrVrwHgBnij/t1 W7gahAOa1N4OlAfIcVBtHBs8sfbjS3uNI9Vtnv8JU5v/ENOIC7gSC/bc7n6TST0u z2ivWykWwMLtA3SxS8EfGpCBvEoyEzSS582YJFBX6fq6AWaz+2XEbCQseQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJjYSRIPMmD5KNusZzJW+afBSMRNMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvbU5oSkVnOHlZUGtvMjZ4bk1sYjVwOEZJeEUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4KcMA0G CSqGSIb3DQEBCwUAA4IBAQCm9yYxpbvf1QW+ub3Zd1regaBDz/ofDihIu08Os06B xxVRAVxo6b5Rqy8icFZPTIR2GDKxRFkmFhLPJ/TVZ113FPur3cyFqyFIXgzzPKrO B/AUauFeRmf/gwOEeg2UG/xX70XPDfIdpUiflwX72tvd0Z7Xz1XCVx6Ogd9btp3E xbZJFgLGiJuW+/ZMKcWvJf8bUsHuqtSl6BsCfoTSLm4PAtHpe8JPtrsg2mG0YBPX 73sWffEd8OpXnkfac+VoByCXqPbF88cZEf7N/q7WTkyfBkPnyVcnsaCtawJbQE+t 2pPpJGYUDpy8Pc8COkSht9AguAo4qDLc4VmU+h58OhHL -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:06 2026 by rpki-client