This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/AWrvYFZRzBwoKUoD2RTwopn0ahg.roa File: AWrvYFZRzBwoKUoD2RTwopn0ahg.roa (raw, json) Hash identifier: FIrRNnU7H4yL3fRTOTjvqaEhwxiYCua1DMnPIKZ4Wpk= Subject key identifier: 01:6A:EF:60:56:51:CC:1C:28:29:4A:03:D9:14:F0:A2:99:F4:6A:18 Certificate issuer: /CN=f36f9cbaff653b60134b46aa70e79117098a7c64 Certificate serial: 019B7AC7E8CC1CB58DBF37C0FD569A58C553 Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/AWrvYFZRzBwoKUoD2RTwopn0ahg.roa Signing time: Thu 01 Jan 2026 18:18:00 +0000 ROA not before: Thu 01 Jan 2026 18:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56740 IP address blocks: 31.130.200.0/21 maxlen: 24 2001:67c:2268::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e8:cc:1c:b5:8d:bf:37:c0:fd:56:9a:58:c5:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64 Validity Not Before: Jan 1 18:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016aef605651cc1c28294a03d914f0a299f46a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:37:2e:b3:57:e4:83:79:54:92:51:15:d7:a0: 78:a4:91:86:72:b2:70:fa:48:f9:53:e8:41:42:a4: 3d:3e:df:3e:85:0f:0d:0d:77:5f:09:8d:ec:23:c9: f0:c8:56:86:ef:14:23:e2:c4:de:ac:57:d9:54:31: 10:45:9d:97:7f:f6:ea:43:e3:5d:05:b0:d7:f2:6d: 90:9a:cf:bf:97:4a:ae:7a:60:26:85:e0:dc:b7:66: d6:e2:15:3c:f0:93:c1:50:1f:e7:43:13:35:6e:d2: 45:d6:ec:26:23:9e:3d:de:9d:24:1f:ad:7b:9b:49: af:10:a9:89:fc:cb:75:6f:ee:d9:b0:b2:d7:bd:08: bf:18:d0:9a:c1:65:c6:17:68:8c:6b:48:5e:54:80: 57:44:f0:8d:96:b9:4d:07:ca:28:4f:7d:7c:56:16: b8:f2:43:b1:14:33:e2:0b:43:2b:e6:2f:b0:5e:05: 15:20:20:a6:cd:cc:47:2a:a9:d4:5f:58:7e:fa:ca: 72:23:17:46:2b:2c:60:87:ac:d6:c0:ce:f1:1d:e9: 4a:26:bf:3f:22:13:54:d6:70:e9:54:5c:c4:85:55: ff:4e:ab:5c:80:ee:ef:41:ed:c5:c3:4d:69:c3:c2: ae:ea:e5:b1:5c:7b:4d:d4:3a:30:0a:cc:29:46:b8: 6b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6A:EF:60:56:51:CC:1C:28:29:4A:03:D9:14:F0:A2:99:F4:6A:18 X509v3 Authority Key Identifier: keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/AWrvYFZRzBwoKUoD2RTwopn0ahg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.200.0/21 IPv6: 2001:67c:2268::/48 Signature Algorithm: sha256WithRSAEncryption 46:22:43:21:36:50:74:8b:ad:2f:7c:cf:a2:26:de:d8:af:23: 97:c9:8a:3d:15:33:d2:a7:17:00:9b:ad:08:de:91:4b:64:88: 9e:f4:cd:7a:b6:6b:f3:9e:ff:c4:ba:3f:0c:b9:d6:94:20:f5: 82:15:97:90:68:09:65:13:78:96:20:20:98:9b:e4:42:4d:cb: d0:6f:9a:d2:f3:8d:62:65:b2:e2:55:a3:ca:b9:74:86:36:64: 39:05:7a:11:05:a9:ec:a3:e6:20:6d:56:52:b4:18:bd:f7:5b: 63:50:c2:66:a1:ef:b7:c6:1b:9a:51:4a:a6:a3:da:ac:03:7a: 84:f9:63:29:c8:20:6a:0c:62:f2:c1:62:dd:66:ab:4c:2c:4a: 5e:59:53:a4:45:ba:a9:d2:a5:c4:c4:02:e1:e9:dc:d6:57:52: 8f:80:a4:f2:00:74:50:b0:f5:63:57:96:1f:da:d6:7a:97:01: 9f:b4:76:45:5a:f0:74:e7:a6:af:2e:50:6b:53:41:0d:bb:2e: 6e:da:9e:5f:ec:69:a9:fd:c8:02:78:b0:7f:7a:47:d7:98:60: e1:35:7b:e1:ac:03:29:d1:ab:e0:e2:83:ed:5e:67:78:4d:4a: 8c:49:03:42:02:4b:ab:c9:97:76:6b:a1:ce:68:dd:b2:a0:38: 62:f6:92:2b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x+jMHLWNvzfA/VaaWMVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4 YTdjNjQwHhcNMjYwMTAxMTgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTZhZWY2MDU2NTFjYzFjMjgyOTRhMDNkOTE0ZjBhMjk5ZjQ2YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dcus1fkg3lUklEV16B4pJGGcrJw +kj5U+hBQqQ9Pt8+hQ8NDXdfCY3sI8nwyFaG7xQj4sTerFfZVDEQRZ2Xf/bqQ+Nd BbDX8m2Qms+/l0quemAmheDct2bW4hU88JPBUB/nQxM1btJF1uwmI5493p0kH617 m0mvEKmJ/Mt1b+7ZsLLXvQi/GNCawWXGF2iMa0heVIBXRPCNlrlNB8ooT318Vha4 8kOxFDPiC0Mr5i+wXgUVICCmzcxHKqnUX1h++spyIxdGKyxgh6zWwM7xHelKJr8/ IhNU1nDpVFzEhVX/TqtcgO7vQe3Fw01pw8Ku6uWxXHtN1DowCswpRrhrYQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAFq72BWUcwcKClKA9kU8KKZ9GoYMB8GA1UdIwQY MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt ZDk1YWI5OWZiMGM1LzEvQVdydllGWlJ6QndvS1VvRDJSVHdvcG4wYWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1 LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDH4LIMA8E AgACMAkDBwAgAQZ8ImgwDQYJKoZIhvcNAQELBQADggEBAEYiQyE2UHSLrS98z6Im 3tivI5fJij0VM9KnFwCbrQjekUtkiJ70zXq2a/Oe/8S6Pwy51pQg9YIVl5BoCWUT eJYgIJib5EJNy9BvmtLzjWJlsuJVo8q5dIY2ZDkFehEFqeyj5iBtVlK0GL33W2NQ wmah77fGG5pRSqaj2qwDeoT5YynIIGoMYvLBYt1mq0wsSl5ZU6RFuqnSpcTEAuHp 3NZXUo+ApPIAdFCw9WNXlh/a1nqXAZ+0dkVa8HTnpq8uUGtTQQ27Lm7anl/saan9 yAJ4sH96R9eYYOE1e+GsAynRq+Dig+1eZ3hNSoxJA0ICS6vJl3Zroc5o3bKgOGL2 kis= -----END CERTIFICATE-----Generated at Mon Jan 26 20:25:39 2026 by rpki-client