This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/J0cgNdbp82xwSAhTcid--cSnvw8.roa File: J0cgNdbp82xwSAhTcid--cSnvw8.roa (raw, json) Hash identifier: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0= Subject key identifier: 27:47:20:35:D6:E9:F3:6C:70:48:08:53:72:27:7E:F9:C4:A7:BF:0F Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019B7D5CC1F203A9510C58B015538CCF7E10 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/J0cgNdbp82xwSAhTcid--cSnvw8.roa Signing time: Fri 02 Jan 2026 06:19:49 +0000 ROA not before: Fri 02 Jan 2026 06:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 31.171.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c1:f2:03:a9:51:0c:58:b0:15:53:8c:cf:7e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jan 2 06:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27472035d6e9f36c7048085372277ef9c4a7bf0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:98:c8:c7:03:2f:c8:b2:99:df:29:02:23:57: b4:fa:24:be:36:f6:d3:ef:69:83:77:cd:2a:87:cc: ec:80:b3:90:9d:fe:fc:52:e3:62:04:ea:0f:42:aa: ad:fd:fb:0e:e0:27:d5:92:23:7b:6a:bc:4e:7f:fe: 72:c1:7e:25:2d:17:48:41:0d:e0:ae:dc:8f:6e:c3: 27:8a:f7:2c:ed:eb:6a:d0:27:db:d6:ce:a7:4e:1e: eb:bb:be:af:0c:4e:9f:61:6a:2d:db:a1:fe:4c:85: d7:64:5e:9f:9e:41:0b:9d:16:86:75:9e:b0:10:03: 13:96:73:a5:53:9e:cc:5e:ee:e5:1d:d1:a1:ee:9c: 69:00:1c:9a:48:ad:63:5b:f0:ed:13:4e:b7:a3:a4: 9b:85:b7:84:26:c1:bc:5c:aa:2d:db:50:18:aa:b8: c8:7b:5f:8a:4a:4f:aa:8b:11:8b:fe:e6:4c:12:9c: 0f:81:51:9e:53:2a:83:d7:e6:ba:f3:a8:ad:da:95: 3d:13:42:09:a3:ec:b1:1a:20:c7:69:34:11:d9:eb: 13:58:35:5e:ea:10:60:de:59:4b:4d:c0:ed:a9:56: 4f:5b:f8:ef:32:8e:ba:26:62:ef:fa:2a:5b:ba:58: 65:b6:68:3a:46:0a:b0:00:eb:b0:b7:ab:76:4e:c3: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:47:20:35:D6:E9:F3:6C:70:48:08:53:72:27:7E:F9:C4:A7:BF:0F X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/J0cgNdbp82xwSAhTcid--cSnvw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.128.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:95:e2:9a:4a:bc:28:38:50:93:fc:7e:d8:83:9c:46:43:d8: f6:7c:75:43:39:af:8c:9f:d3:1b:e4:83:bf:ea:2f:f3:67:c5: 10:2b:4c:19:56:02:2a:ea:30:28:c2:1d:9b:93:57:4c:11:a2: d1:19:f3:46:fa:14:63:c9:1d:d0:ee:de:d8:d0:d8:38:ba:29: 54:ea:10:d4:c6:c8:50:aa:22:92:e2:a2:9f:a7:54:b7:65:43: 81:7d:ae:2b:e4:6f:eb:14:e7:6b:56:8c:0c:d1:a0:44:aa:c4: 24:41:80:35:f9:82:8b:df:a0:6f:55:0e:6a:f8:66:7d:ae:a6: dd:5a:22:88:c5:35:35:70:18:01:4c:a7:08:df:0d:44:0a:c5: 66:29:7c:83:be:03:34:9f:06:91:b8:2f:86:74:c9:53:d3:15: 4e:7f:c6:23:da:ab:1a:69:41:0e:73:0c:78:80:4d:2e:d8:72: 70:df:a7:da:26:12:35:e9:4f:cf:21:9c:9b:50:0b:88:c5:88: bf:84:59:5b:72:ec:d8:ba:f9:e5:2f:68:67:48:2b:df:55:9b: 74:ab:28:ca:c1:0d:62:b6:50:83:ea:48:83:2b:20:01:24:67: f7:ce:24:f2:b4:8a:00:88:df:27:32:eb:5c:e7:48:0d:d4:0d: d1:60:b7:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMHyA6lRDFiwFVOMz34QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwMTAyMDYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ3MjAzNWQ2ZTlmMzZjNzA0ODA4NTM3MjI3N2VmOWM0YTdiZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25jIxwMvyLKZ3ykCI1e0+iS+NvbT 72mDd80qh8zsgLOQnf78UuNiBOoPQqqt/fsO4CfVkiN7arxOf/5ywX4lLRdIQQ3g rtyPbsMnivcs7etq0Cfb1s6nTh7ru76vDE6fYWot26H+TIXXZF6fnkELnRaGdZ6w EAMTlnOlU57MXu7lHdGh7pxpAByaSK1jW/DtE063o6SbhbeEJsG8XKot21AYqrjI e1+KSk+qixGL/uZMEpwPgVGeUyqD1+a686it2pU9E0IJo+yxGiDHaTQR2esTWDVe 6hBg3llLTcDtqVZPW/jvMo66JmLv+ipbulhltmg6RgqwAOuwt6t2TsPSSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdHIDXW6fNscEgIU3InfvnEp78PMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvSjBjZ05kYnA4Mnh3U0FoVGNpZC0tY1Nudnc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6uAMA0G CSqGSIb3DQEBCwUAA4IBAQBPleKaSrwoOFCT/H7Yg5xGQ9j2fHVDOa+Mn9Mb5IO/ 6i/zZ8UQK0wZVgIq6jAowh2bk1dMEaLRGfNG+hRjyR3Q7t7Y0Ng4uilU6hDUxshQ qiKS4qKfp1S3ZUOBfa4r5G/rFOdrVowM0aBEqsQkQYA1+YKL36BvVQ5q+GZ9rqbd WiKIxTU1cBgBTKcI3w1ECsVmKXyDvgM0nwaRuC+GdMlT0xVOf8Yj2qsaaUEOcwx4 gE0u2HJw36faJhI16U/PIZybUAuIxYi/hFlbcuzYuvnlL2hnSCvfVZt0qyjKwQ1i tlCD6kiDKyABJGf3ziTytIoAiN8nMutc50gN1A3RYLf6 -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:49 2026 by rpki-client