This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7Y8HvFQrtRR6jnbgQOloayeCNA4.roa File: 7Y8HvFQrtRR6jnbgQOloayeCNA4.roa (raw, json) Hash identifier: KeUpXApEOTZFs/rO+XRgVnzlokPUI0DOFipaAsJpO2Q= Subject key identifier: ED:8F:07:BC:54:2B:B5:14:7A:8E:76:E0:40:E9:68:6B:27:82:34:0E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A8A82B649D29CEF70615E44A4115 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7Y8HvFQrtRR6jnbgQOloayeCNA4.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44343 IP address blocks: 31.148.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a8:a8:2b:64:9d:29:ce:f7:06:15:e4:4a:41:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8f07bc542bb5147a8e76e040e9686b2782340e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:00:bd:5a:60:e4:e8:a0:37:8d:0d:95:c6:69: a8:b1:73:8c:6f:91:27:86:2a:cf:3e:54:0a:d5:ce: de:20:56:81:bb:eb:80:c2:02:57:92:e8:90:2d:54: c3:05:d1:a5:98:89:c6:d2:d0:58:a9:55:41:a9:c1: 4b:4a:10:04:7c:2f:41:cd:9c:a8:b3:99:7f:81:88: d4:aa:19:8f:bc:85:a9:7b:b5:46:80:4c:50:2e:83: 5e:10:cb:0a:ce:f8:af:36:56:f8:eb:81:8b:b4:a5: 16:e8:12:27:4b:68:a1:b6:81:a3:a0:93:aa:bc:95: fa:76:b9:ab:aa:9c:70:59:d0:96:d2:99:c8:56:3a: 8a:1f:c4:01:29:1e:12:cc:8f:3f:47:5a:3b:0a:f2: 02:1b:5e:89:a4:e6:71:33:55:58:3b:75:ca:f4:80: ac:94:6a:89:e8:69:5c:b8:62:40:08:a5:c3:a3:43: 70:e7:9e:f7:41:0b:90:13:e1:32:0e:8a:cc:e0:73: dd:a8:e4:2a:42:38:6e:04:db:d5:b2:12:5e:6a:f7: 44:53:d7:66:a6:38:52:66:60:be:06:84:c4:53:d2: d1:d5:2e:9b:5c:9e:89:36:df:b2:d3:a6:c1:23:b7: 3b:e4:73:57:5e:31:58:8d:6e:8d:29:1b:07:20:a7: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8F:07:BC:54:2B:B5:14:7A:8E:76:E0:40:E9:68:6B:27:82:34:0E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7Y8HvFQrtRR6jnbgQOloayeCNA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.30.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:26:c2:b6:90:f1:4c:ba:9e:dc:78:95:db:df:1b:7c:44:3c: 26:f8:a4:eb:3d:df:a1:3d:05:9c:77:28:12:30:a7:b8:0b:bd: 0d:62:82:ba:53:f8:bb:4e:35:b8:5c:b7:75:63:94:c1:57:a9: e3:ca:a2:7f:dc:ab:e5:47:49:63:aa:b5:89:45:06:08:3b:26: b2:8b:cc:cd:65:25:68:ec:08:a6:8b:c7:1d:2a:bc:dc:a4:95: 15:b7:6b:fe:1e:6d:3a:e7:86:76:1f:9a:c6:ed:e9:a7:4d:d9: c7:5c:cf:18:12:b8:bb:5a:18:b1:bb:b3:3f:f8:8e:b1:ae:6b: 7b:7b:1a:53:0e:62:a1:cd:4a:60:49:61:79:8b:d3:cb:d5:35: 4b:40:94:f8:c0:75:09:bc:a8:03:f3:91:d4:a0:be:3a:af:c6: cb:f1:03:30:ac:eb:25:b5:74:43:4f:cf:c1:9a:9e:7d:aa:ae: e9:03:66:e1:16:87:8d:f9:3c:dc:77:36:9c:39:96:98:0f:bf: a4:e6:04:a6:63:0e:2a:9b:cf:c4:79:fb:5c:52:dc:42:5f:98: c3:7d:33:b4:d6:37:ea:88:04:2c:e3:47:0e:4d:71:db:74:1d: dd:20:a3:56:0f:8c:47:66:bd:62:bc:59:c3:bb:ce:b5:84:92: 18:48:f5:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKioK2SdKc73BhXkSkEVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhmMDdiYzU0MmJiNTE0N2E4ZTc2ZTA0MGU5Njg2YjI3ODIzNDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgC9WmDk6KA3jQ2VxmmosXOMb5En hirPPlQK1c7eIFaBu+uAwgJXkuiQLVTDBdGlmInG0tBYqVVBqcFLShAEfC9BzZyo s5l/gYjUqhmPvIWpe7VGgExQLoNeEMsKzvivNlb464GLtKUW6BInS2ihtoGjoJOq vJX6drmrqpxwWdCW0pnIVjqKH8QBKR4SzI8/R1o7CvICG16JpOZxM1VYO3XK9ICs lGqJ6GlcuGJACKXDo0Nw5573QQuQE+EyDorM4HPdqOQqQjhuBNvVshJeavdEU9dm pjhSZmC+BoTEU9LR1S6bXJ6JNt+y06bBI7c75HNXXjFYjW6NKRsHIKf3WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2PB7xUK7UUeo524EDpaGsngjQOMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvN1k4SHZGUXJ0UlI2am5iZ1FPbG9heWVDTkE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5QeMA0G CSqGSIb3DQEBCwUAA4IBAQArJsK2kPFMup7ceJXb3xt8RDwm+KTrPd+hPQWcdygS MKe4C70NYoK6U/i7TjW4XLd1Y5TBV6njyqJ/3KvlR0ljqrWJRQYIOyayi8zNZSVo 7Aimi8cdKrzcpJUVt2v+Hm0654Z2H5rG7emnTdnHXM8YEri7Whixu7M/+I6xrmt7 expTDmKhzUpgSWF5i9PL1TVLQJT4wHUJvKgD85HUoL46r8bL8QMwrOsltXRDT8/B mp59qq7pA2bhFoeN+TzcdzacOZaYD7+k5gSmYw4qm8/EeftcUtxCX5jDfTO01jfq iAQs40cOTXHbdB3dIKNWD4xHZr1ivFnDu861hJIYSPX3 -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:39 2026 by rpki-client