This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa File: 1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa (raw, json) Hash identifier: BkBrVdmzVpfXD4QvBO8xygY9UajM60k/x4abGcDGbmw= Subject key identifier: D4:DC:71:D1:38:0E:5F:75:B6:B0:F7:6B:75:4C:5A:CA:FB:D8:06:D9 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019B7EA73DA6B73E1BD7EEDBFF569F34D490 Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49100 IP address blocks: 31.130.176.0/22 maxlen: 22 31.130.176.0/24 maxlen: 24 31.130.177.0/24 maxlen: 24 31.130.178.0/24 maxlen: 24 31.130.179.0/24 maxlen: 24 31.130.180.0/24 maxlen: 24 31.130.184.0/21 maxlen: 21 31.130.184.0/24 maxlen: 24 31.130.185.0/24 maxlen: 24 31.130.186.0/24 maxlen: 24 31.130.187.0/24 maxlen: 24 31.130.188.0/24 maxlen: 24 31.130.189.0/24 maxlen: 24 31.130.190.0/24 maxlen: 24 31.130.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3d:a6:b7:3e:1b:d7:ee:db:ff:56:9f:34:d4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4dc71d1380e5f75b6b0f76b754c5acafbd806d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:cb:10:27:27:b4:a0:8d:7f:d1:bf:84:ed: 89:6d:5e:05:80:ac:4a:60:05:6f:8f:fe:29:35:16: fa:2b:13:e1:99:cc:d7:16:27:00:49:83:de:5c:0e: 98:bb:51:b3:63:b2:ee:61:b2:55:4f:52:85:2b:cf: 7a:65:37:83:12:66:56:57:1b:a1:ec:c5:c2:e4:a1: fd:01:5e:bd:75:ac:03:af:2e:bc:55:c6:68:21:fc: 5a:25:c6:3b:9a:7d:db:e8:ea:2d:8b:2a:06:d5:58: 0f:28:ab:15:93:96:0c:f5:dd:c3:bf:f7:1a:9e:55: b7:de:e8:a7:0c:cd:7d:65:93:23:37:30:2f:b7:15: 03:7b:a5:39:92:e2:61:2d:7f:dc:e8:77:6d:d2:c6: 90:45:86:6b:0f:62:84:fe:50:af:e0:35:30:eb:4a: 41:dc:b5:70:d6:bd:a8:43:17:f3:7e:63:90:0b:d5: 6b:dc:53:df:5e:76:2e:78:19:1e:b6:73:2b:e8:83: 68:87:a8:cc:14:7f:ec:ac:c9:b2:39:73:dd:b9:a8: 39:32:e6:fb:75:be:e9:c3:00:1c:7b:e2:75:c7:6b: e1:ea:5a:63:d7:95:16:60:6d:92:b1:fa:0a:85:21: 66:39:8d:41:8d:58:eb:f4:e7:df:63:05:c7:f9:cb: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DC:71:D1:38:0E:5F:75:B6:B0:F7:6B:75:4C:5A:CA:FB:D8:06:D9 X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/1Nxx0TgOX3W2sPdrdUxayvvYBtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.176.0-31.130.180.255 31.130.184.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:da:84:d3:1c:51:eb:ca:7f:fd:42:81:8b:e8:c4:21:96:c8: 90:cb:9f:76:4a:8e:05:be:0f:41:2b:3d:f9:cd:8f:aa:67:e0: 0d:c0:e9:fb:32:d9:b4:02:b1:e8:40:55:bd:fa:76:90:57:63: 61:91:1e:48:fc:b0:13:49:3f:76:6b:09:01:88:db:e5:34:7e: 8d:03:22:89:df:2f:1f:18:ae:6b:b3:e8:cd:3d:77:29:35:fe: 94:ac:6b:79:dd:b2:a2:8b:51:a0:bd:4a:80:da:c0:26:73:d7: 21:8c:70:21:d7:76:52:db:4f:31:06:eb:3f:3b:b4:2c:53:a9: 7b:b7:0e:3f:40:49:a5:ba:0a:af:37:cd:ed:92:fd:e7:b6:84: db:56:ef:da:78:b6:91:f1:55:81:f7:13:1c:84:f5:23:b3:97: c4:af:f4:73:73:d6:5a:5d:43:20:08:a4:4c:6d:54:fe:57:43: 35:6c:4c:f8:fd:cc:b7:ab:83:c6:04:18:f2:c2:b5:24:fe:26: 8e:22:28:88:cc:bd:fc:2a:d4:63:39:b8:4e:b2:b6:84:1c:db: 6c:79:e0:66:06:f7:60:b7:f0:36:75:d7:25:a2:c5:2e:a8:33: 82:1a:e6:b4:0a:e8:ae:86:4d:83:30:51:f2:57:c9:8a:21:f8: 52:e5:d8:59 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+pz2mtz4b1+7b/1afNNSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGRjNzFkMTM4MGU1Zjc1YjZiMGY3NmI3NTRjNWFjYWZiZDgwNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzXLECcntKCNf9G/hO2JbV4FgKxK YAVvj/4pNRb6KxPhmczXFicASYPeXA6Yu1GzY7LuYbJVT1KFK896ZTeDEmZWVxuh 7MXC5KH9AV69dawDry68VcZoIfxaJcY7mn3b6OotiyoG1VgPKKsVk5YM9d3Dv/ca nlW33uinDM19ZZMjNzAvtxUDe6U5kuJhLX/c6Hdt0saQRYZrD2KE/lCv4DUw60pB 3LVw1r2oQxfzfmOQC9Vr3FPfXnYueBketnMr6INoh6jMFH/srMmyOXPduag5Mub7 db7pwwAce+J1x2vh6lpj15UWYG2SsfoKhSFmOY1BjVjr9OffYwXH+ctcdwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNTccdE4Dl91trD3a3VMWsr72AbZMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvMU54eDBUZ09YM1cyc1BkcmRVeGF5dnZZQnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAQfgrAD BAAfgrQDBAMfgrgwDQYJKoZIhvcNAQELBQADggEBAB7ahNMcUevKf/1CgYvoxCGW yJDLn3ZKjgW+D0ErPfnNj6pn4A3A6fsy2bQCsehAVb36dpBXY2GRHkj8sBNJP3Zr CQGI2+U0fo0DIonfLx8Yrmuz6M09dyk1/pSsa3ndsqKLUaC9SoDawCZz1yGMcCHX dlLbTzEG6z87tCxTqXu3Dj9ASaW6Cq83ze2S/ee2hNtW79p4tpHxVYH3ExyE9SOz l8Sv9HNz1lpdQyAIpExtVP5XQzVsTPj9zLerg8YEGPLCtST+Jo4iKIjMvfwq1GM5 uE6ytoQc22x54GYG92C38DZ11yWixS6oM4Ia5rQK6K6GTYMwUfJXyYoh+FLl2Fk= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:13 2026 by rpki-client