This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8CglMt2Z9eZ0BgH-p3GjNEyhILc.roa File: 8CglMt2Z9eZ0BgH-p3GjNEyhILc.roa (raw, json) Hash identifier: oCpcujhCRi0rYzj8Duk4WtfpArer3P8ikXH5XV0dSKA= Subject key identifier: F0:28:25:32:DD:99:F5:E6:74:06:01:FE:A7:71:A3:34:4C:A1:20:B7 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F85144A03202AFCE33BD21CBC0BE6B3 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8CglMt2Z9eZ0BgH-p3GjNEyhILc.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212463 IP address blocks: 31.148.149.0/24 maxlen: 24 95.47.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:14:4a:03:20:2a:fc:e3:3b:d2:1c:bc:0b:e6:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0282532dd99f5e6740601fea771a3344ca120b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:bd:09:0b:83:c5:4a:42:01:b9:ba:40:52: a7:53:ec:d5:fa:8e:ec:2a:7d:fa:8e:69:d0:13:d7: 28:6b:0e:8a:6b:69:42:c6:f8:25:34:26:af:81:c3: 19:27:2a:23:8a:ab:ea:55:64:60:5f:e1:99:3f:92: 86:a2:7b:02:b5:6a:43:e8:c3:57:90:c8:ad:3a:98: ed:0b:6e:ac:51:f1:c0:63:a7:81:fa:7e:b5:41:84: 73:99:d4:5d:ed:5b:83:03:ec:19:91:0c:f9:f1:9d: b6:fd:cc:52:31:c2:45:e3:37:7a:2a:a5:3a:63:00: 1f:a1:05:19:ab:db:bd:e4:2f:56:00:4e:47:08:6f: 78:34:62:ef:8e:8f:e0:d3:9a:1b:00:42:82:fe:05: 73:eb:60:e4:07:f5:dd:60:c8:df:9e:12:55:85:29: 96:fb:fb:48:71:c5:e9:f2:ad:d3:c3:88:e6:cb:6f: b3:a8:fa:9c:02:94:e0:fc:07:ba:29:16:6f:ef:69: 02:b4:86:29:cc:49:b1:ff:10:f3:62:c1:4b:de:7e: 2f:bc:51:a2:3c:03:45:b9:0e:ab:a3:05:01:2d:5e: b3:8d:f8:0b:c3:6a:20:e8:5b:85:3b:3f:f3:6c:d4: 44:0e:39:6e:c9:ea:de:71:6b:63:81:5f:22:39:1a: 45:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:28:25:32:DD:99:F5:E6:74:06:01:FE:A7:71:A3:34:4C:A1:20:B7 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8CglMt2Z9eZ0BgH-p3GjNEyhILc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.149.0/24 95.47.59.0/24 Signature Algorithm: sha256WithRSAEncryption 20:a3:1a:19:1c:40:62:ef:0c:00:e1:3f:31:6f:10:c6:01:88: 44:8d:8b:e2:24:45:d8:fd:fe:cf:ea:38:bd:22:c6:dc:22:9d: 70:0a:4c:f7:09:c9:d1:c1:ef:6f:e5:ed:b5:f6:84:c6:bd:73: 7e:dc:59:c6:64:30:42:5b:f0:c0:26:60:90:d9:c3:ba:90:07: 40:f7:6b:2a:4d:c5:8c:78:fa:02:6d:1e:79:74:75:61:31:6e: cb:4f:1e:68:f5:46:51:4b:26:dd:a3:d7:ce:2a:2c:85:0e:f7: 76:d4:58:1a:49:2f:d4:72:b1:3d:48:37:25:0a:1a:24:7b:43: 65:f6:fd:d2:cd:c7:50:ed:62:5f:9b:e7:6f:dc:cf:5a:b0:6f: b8:29:5c:27:77:94:b6:6b:ef:81:79:90:ab:a7:24:dd:bc:f2: 5f:fe:ce:81:52:b6:c9:22:72:1c:a6:a2:8c:76:9b:07:1d:c3: 53:e9:66:f5:8c:23:3a:2f:f0:9a:1e:59:a6:6b:10:fd:53:4f: a2:83:10:9e:9c:b9:99:4b:65:ea:63:7a:60:05:e9:b1:10:67: 8d:1e:32:a5:16:13:8c:06:81:79:85:1c:44:ce:5e:70:2c:4e: 3a:96:f9:a2:14:93:32:21:f6:8d:61:a1:b6:18:c6:7f:5b:20: 46:dd:75:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hRRKAyAq/OM70hy8C+azMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDI4MjUzMmRkOTlmNWU2NzQwNjAxZmVhNzcxYTMzNDRjYTEyMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6a9CQuDxUpCAbm6QFKnU+zV+o7s Kn36jmnQE9coaw6Ka2lCxvglNCavgcMZJyojiqvqVWRgX+GZP5KGonsCtWpD6MNX kMitOpjtC26sUfHAY6eB+n61QYRzmdRd7VuDA+wZkQz58Z22/cxSMcJF4zd6KqU6 YwAfoQUZq9u95C9WAE5HCG94NGLvjo/g05obAEKC/gVz62DkB/XdYMjfnhJVhSmW +/tIccXp8q3Tw4jmy2+zqPqcApTg/Ae6KRZv72kCtIYpzEmx/xDzYsFL3n4vvFGi PANFuQ6rowUBLV6zjfgLw2og6FuFOz/zbNREDjluyerecWtjgV8iORpFywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPAoJTLdmfXmdAYB/qdxozRMoSC3MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOENnbE10Mlo5ZVowQmdILXAzR2pORXloSUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5SVAwQA Xy87MA0GCSqGSIb3DQEBCwUAA4IBAQAgoxoZHEBi7wwA4T8xbxDGAYhEjYviJEXY /f7P6ji9IsbcIp1wCkz3CcnRwe9v5e219oTGvXN+3FnGZDBCW/DAJmCQ2cO6kAdA 92sqTcWMePoCbR55dHVhMW7LTx5o9UZRSybdo9fOKiyFDvd21FgaSS/UcrE9SDcl Choke0Nl9v3SzcdQ7WJfm+dv3M9asG+4KVwnd5S2a++BeZCrpyTdvPJf/s6BUrbJ InIcpqKMdpsHHcNT6Wb1jCM6L/CaHlmmaxD9U0+igxCenLmZS2XqY3pgBemxEGeN HjKlFhOMBoF5hRxEzl5wLE46lvmiFJMyIfaNYaG2GMZ/WyBG3XXG -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:43 2026 by rpki-client