This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/q6q4U64HI_-eToYoeUgOUPU3KRE.roa File: q6q4U64HI_-eToYoeUgOUPU3KRE.roa (raw, json) Hash identifier: kxmtIIlqbHTH1qvNoBG2/z96qUIjP2N3zilZLCieN00= Subject key identifier: AB:AA:B8:53:AE:07:23:FF:9E:4E:86:28:79:48:0E:50:F5:37:29:11 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA7336B1967F73CD6585515EDA83BE5 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/q6q4U64HI_-eToYoeUgOUPU3KRE.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56701 IP address blocks: 31.130.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:33:6b:19:67:f7:3c:d6:58:55:15:ed:a8:3b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abaab853ae0723ff9e4e862879480e50f5372911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:7a:29:93:f0:41:1b:82:6a:b9:36:d2:40: 04:21:f3:85:a4:9c:9d:85:c5:aa:a7:2a:9d:4e:60: f9:ee:13:33:c5:40:bf:76:0d:b8:2e:8c:7d:a4:e3: ca:52:b9:d1:c9:f6:0b:b4:cf:4c:b5:74:5c:b1:70: 44:2c:2d:35:04:ae:06:b6:bf:35:d3:30:93:e7:19: 6e:02:9f:91:ef:a1:30:39:ae:aa:de:b0:80:38:21: b0:94:e6:3c:6c:3b:62:a2:be:55:a1:ba:73:5f:18: de:a3:e0:c6:86:bf:12:6e:38:cb:35:aa:77:d7:ca: e8:e3:5b:5a:88:ff:1b:aa:6c:70:e3:11:bb:4e:91: 51:40:ba:78:68:79:d3:c8:29:5f:65:81:c9:9f:ab: a3:1f:e2:23:39:13:05:5a:d8:c8:e0:dd:03:f3:26: 65:00:dc:55:6c:d1:76:86:66:2f:4c:f8:6c:26:2d: e3:9e:67:7d:e6:db:aa:d8:6b:e7:b5:bb:c9:4e:d1: c6:63:59:c6:3a:f4:f4:bf:51:0f:4e:96:d9:7e:76: da:39:99:f9:81:b0:cd:e6:71:23:ac:67:33:7f:c3: 87:be:ce:77:8d:42:56:3b:2e:75:53:6d:37:61:28: 05:78:87:ff:ef:2b:bf:74:2f:c8:9c:47:de:61:4e: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AA:B8:53:AE:07:23:FF:9E:4E:86:28:79:48:0E:50:F5:37:29:11 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/q6q4U64HI_-eToYoeUgOUPU3KRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.137.0/24 Signature Algorithm: sha256WithRSAEncryption a9:6f:84:4f:ae:c9:00:c5:92:00:7c:f7:6f:fb:a1:ee:0a:92: 2b:eb:d8:a5:79:2d:99:bb:2f:10:8f:3d:c5:9e:41:5b:e5:b9: 9e:fd:54:89:ae:df:2f:11:40:86:99:c9:1b:0a:c7:55:68:4a: 6d:12:bb:43:5f:d2:92:8f:11:0c:7d:c2:e3:5b:7a:30:d8:1b: a9:53:59:da:e6:61:01:2b:0f:d7:74:ab:cd:d0:6d:01:45:4e: de:dd:df:35:74:db:68:21:09:c4:c3:89:e1:36:ad:28:e5:cb: 0e:aa:d1:1b:64:f0:59:4f:de:c6:c2:4e:44:2d:a5:d8:6f:f8: cd:3f:e3:43:da:e7:67:5d:d9:07:9a:42:47:d9:7c:20:99:a5: 8c:f7:84:73:b8:f8:30:de:aa:6c:55:3d:23:d9:08:df:ce:de: 6d:ed:76:ec:e8:e3:c8:13:c9:ce:8b:eb:f4:ec:8a:21:06:1f: 02:d4:89:ba:06:05:a0:c2:bd:30:8e:d5:95:5c:dd:98:ba:b6: 8b:7c:9c:a9:d8:d1:45:f2:89:83:58:45:82:02:fe:7e:94:4c: 2d:3a:47:68:37:f2:bb:08:17:b4:5c:f8:c7:71:2b:31:06:ff: d6:2e:81:ef:63:8c:f0:b9:4c:58:1f:af:db:2e:8e:80:85:08: 1b:24:85:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzNrGWf3PNZYVRXtqDvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmFhYjg1M2FlMDcyM2ZmOWU0ZTg2Mjg3OTQ4MGU1MGY1MzcyOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibZ6KZPwQRuCark20kAEIfOFpJyd hcWqpyqdTmD57hMzxUC/dg24Lox9pOPKUrnRyfYLtM9MtXRcsXBELC01BK4Gtr81 0zCT5xluAp+R76EwOa6q3rCAOCGwlOY8bDtior5VobpzXxjeo+DGhr8SbjjLNap3 18ro41taiP8bqmxw4xG7TpFRQLp4aHnTyClfZYHJn6ujH+IjORMFWtjI4N0D8yZl ANxVbNF2hmYvTPhsJi3jnmd95tuq2GvntbvJTtHGY1nGOvT0v1EPTpbZfnbaOZn5 gbDN5nEjrGczf8OHvs53jUJWOy51U203YSgFeIf/7yu/dC/InEfeYU74DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuquFOuByP/nk6GKHlIDlD1NykRMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvcTZxNFU2NEhJXy1lVG9Zb2VVZ09VUFUzS1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4KJMA0G CSqGSIb3DQEBCwUAA4IBAQCpb4RPrskAxZIAfPdv+6HuCpIr69ileS2Zuy8Qjz3F nkFb5bme/VSJrt8vEUCGmckbCsdVaEptErtDX9KSjxEMfcLjW3ow2BupU1na5mEB Kw/XdKvN0G0BRU7e3d81dNtoIQnEw4nhNq0o5csOqtEbZPBZT97Gwk5ELaXYb/jN P+ND2udnXdkHmkJH2XwgmaWM94RzuPgw3qpsVT0j2Qjfzt5t7Xbs6OPIE8nOi+v0 7IohBh8C1Im6BgWgwr0wjtWVXN2YuraLfJyp2NFF8omDWEWCAv5+lEwtOkdoN/K7 CBe0XPjHcSsxBv/WLoHvY4zwuUxYH6/bLo6AhQgbJIVT -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:54 2026 by rpki-client