This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6ejy9jOFRwwSUhE_mQNWGmvGv1k.roa File: 6ejy9jOFRwwSUhE_mQNWGmvGv1k.roa (raw, json) Hash identifier: pS3SVqDz8c83BOtoxrru+bXxOIuMK0LYgW0wWWkRkIU= Subject key identifier: E9:E8:F2:F6:33:85:47:0C:12:52:11:3F:99:03:56:1A:6B:C6:BF:59 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C5009BE1C73F2BB21C58A679890E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6ejy9jOFRwwSUhE_mQNWGmvGv1k.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56361 IP address blocks: 31.148.40.0/21 maxlen: 24 31.148.52.0/22 maxlen: 24 31.148.56.0/21 maxlen: 24 31.148.104.0/21 maxlen: 24 31.148.112.0/21 maxlen: 24 31.148.192.0/22 maxlen: 24 93.170.166.0/23 maxlen: 24 93.170.192.0/21 maxlen: 24 93.171.34.0/23 maxlen: 24 93.171.36.0/22 maxlen: 24 95.46.128.0/21 maxlen: 24 95.46.166.0/23 maxlen: 24 95.46.168.0/22 maxlen: 24 95.46.172.0/22 maxlen: 24 146.158.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c5:00:9b:e1:c7:3f:2b:b2:1c:58:a6:79:89:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9e8f2f63385470c1252113f9903561a6bc6bf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:8d:40:3d:46:37:ef:3a:3f:04:6e:9d:f8: 0d:41:84:dd:94:e2:00:6e:a9:b5:7f:3c:ae:52:24: 60:f0:37:fb:04:c4:cb:2b:ac:4e:0c:d2:fd:4f:36: 68:68:9d:d3:36:27:0c:87:cf:63:07:9e:31:fe:6e: 27:73:e6:7f:ce:f1:11:30:4f:a3:d0:5d:71:c7:f3: db:47:33:67:87:09:ef:c3:ec:f0:52:89:8b:4b:b8: cd:34:64:59:7e:9e:7b:ce:fa:e2:86:70:56:a5:a0: 1c:15:87:c9:2d:59:ba:44:26:99:0c:d5:a4:6f:cf: af:a1:4b:7d:ca:9f:be:2f:d5:e6:3b:3d:c0:46:37: 22:00:0b:82:41:96:68:b3:8d:66:5b:f2:19:bc:a6: a2:fd:dc:d1:ee:45:82:6a:16:da:04:43:77:57:70: a4:b3:b4:2c:a1:92:99:30:42:05:38:b7:8d:e4:3d: c7:2a:4b:75:9d:40:1e:38:d1:ac:58:44:00:12:bd: e1:f1:19:8c:36:0e:ae:fd:f7:b5:69:64:0d:19:5d: 5b:72:55:aa:aa:c7:43:57:7f:7a:de:06:f4:f2:68: 45:63:0d:aa:7c:f3:46:b6:ca:33:cd:de:40:79:60: be:6b:10:ad:17:a6:61:11:8c:83:5a:29:36:a3:7a: 21:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E8:F2:F6:33:85:47:0C:12:52:11:3F:99:03:56:1A:6B:C6:BF:59 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6ejy9jOFRwwSUhE_mQNWGmvGv1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.40.0/21 31.148.52.0-31.148.63.255 31.148.104.0-31.148.119.255 31.148.192.0/22 93.170.166.0/23 93.170.192.0/21 93.171.34.0-93.171.39.255 95.46.128.0/21 95.46.166.0-95.46.175.255 146.158.48.0/21 Signature Algorithm: sha256WithRSAEncryption 18:26:39:49:6a:df:2a:a5:ba:8e:27:bb:2a:cf:a0:3e:a7:bf: 57:b2:c1:dd:d5:16:73:4d:12:02:c4:71:d7:c4:59:43:38:f1: 3c:8d:94:83:83:f1:6a:43:02:bb:25:b1:57:1e:84:31:25:9c: e2:dc:dc:4b:e1:a2:73:fb:88:f6:49:d5:b1:0a:3b:1e:3d:ab: fd:e0:7e:3a:7d:ec:35:25:04:08:94:d5:0d:f9:ae:da:81:c3: ec:da:86:0b:e0:27:46:af:f9:6b:88:4a:ca:8f:c7:ea:6f:bf: c8:08:b8:86:5f:31:5d:17:ad:08:df:e4:cd:9e:85:a3:d6:66: 94:9d:a5:b1:f8:23:7a:98:6f:1f:e2:2d:f7:c3:02:9a:b9:fc: 74:58:30:61:30:72:af:fd:a8:0e:f9:c5:96:f0:e8:eb:72:a3: f8:2e:b2:8a:64:45:44:6b:56:a6:95:bd:90:47:11:55:aa:02: a7:5f:92:95:00:a0:1b:b9:c6:b8:8b:09:bb:73:19:e8:7e:22: 19:11:bf:9a:8a:77:99:6c:a3:8a:32:81:73:52:96:03:8a:48: af:d7:8c:23:6d:4f:68:18:c4:36:95:69:71:d9:a6:26:19:0a: 5a:36:f3:bd:75:71:b9:68:88:67:5a:4d:30:dc:69:f9:cc:9b: 5c:07:92:11 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt/hMUAm+HHPyuyHFimeYkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWU4ZjJmNjMzODU0NzBjMTI1MjExM2Y5OTAzNTYxYTZiYzZiZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43uNQD1GN+86PwRunfgNQYTdlOIA bqm1fzyuUiRg8Df7BMTLK6xODNL9TzZoaJ3TNicMh89jB54x/m4nc+Z/zvERME+j 0F1xx/PbRzNnhwnvw+zwUomLS7jNNGRZfp57zvrihnBWpaAcFYfJLVm6RCaZDNWk b8+voUt9yp++L9XmOz3ARjciAAuCQZZos41mW/IZvKai/dzR7kWCahbaBEN3V3Ck s7QsoZKZMEIFOLeN5D3HKkt1nUAeONGsWEQAEr3h8RmMNg6u/fe1aWQNGV1bclWq qsdDV3963gb08mhFYw2qfPNGtsozzd5AeWC+axCtF6ZhEYyDWik2o3ohvwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFOno8vYzhUcMElIRP5kDVhprxr9ZMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvNmVqeTlqT0ZSd3dTVWhFX21RTldHbXZHdjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQDH5QoMAwD BAIflDQDBAYflAAwDAMEAx+UaAMEAx+UcAMEAh+UwAMEAV2qpgMEA12qwDAMAwQB XasiAwQDXasgAwQDXy6AMAwDBAFfLqYDBARfLqADBAOSnjAwDQYJKoZIhvcNAQEL BQADggEBABgmOUlq3yqluo4nuyrPoD6nv1eywd3VFnNNEgLEcdfEWUM48TyNlIOD 8WpDArslsVcehDElnOLc3EvhonP7iPZJ1bEKOx49q/3gfjp97DUlBAiU1Q35rtqB w+zahgvgJ0av+WuISsqPx+pvv8gIuIZfMV0XrQjf5M2ehaPWZpSdpbH4I3qYbx/i LffDApq5/HRYMGEwcq/9qA75xZbw6Otyo/gusopkRURrVqaVvZBHEVWqAqdfkpUA oBu5xriLCbtzGeh+IhkRv5qKd5lso4oygXNSlgOKSK/XjCNtT2gYxDaVaXHZpiYZ Clo28711cbloiGdaTTDcafnMm1wHkhE= -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:26 2026 by rpki-client