This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9-ZwKRpQIPtCGkIwQkgvTljaGLY.roa File: 9-ZwKRpQIPtCGkIwQkgvTljaGLY.roa (raw, json) Hash identifier: vC5W40ZUzz39BAYPmrhTgfC61pwmFa2XLS/VMJXHj/c= Subject key identifier: F7:E6:70:29:1A:50:20:FB:42:1A:42:30:42:48:2F:4E:58:DA:18:B6 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84ACD7665C1E1965425D877E99F4B2 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9-ZwKRpQIPtCGkIwQkgvTljaGLY.roa Signing time: Fri 02 Jan 2026 16:22:40 +0000 ROA not before: Fri 02 Jan 2026 16:22:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44975 IP address blocks: 31.148.1.0/24 maxlen: 24 31.148.174.0/24 maxlen: 24 31.148.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ac:d7:66:5c:1e:19:65:42:5d:87:7e:99:f4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7e670291a5020fb421a423042482f4e58da18b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:98:a9:f4:e2:a8:b7:01:34:86:5c:83:2d:f6: e6:88:5d:91:9b:5a:1e:bc:a5:2f:1d:85:05:f2:5d: 5b:c4:d0:ee:3d:bf:f9:4d:de:d4:65:6b:9f:22:27: c1:ab:0e:3c:a1:69:2c:9f:02:89:99:14:78:06:59: c4:83:6c:6d:dc:d2:6d:48:3e:6f:da:1d:c3:c2:ad: 14:45:fc:12:fe:20:62:56:82:dc:da:cb:f9:ea:5e: 0a:ad:17:d0:54:11:4c:b1:25:00:b0:8b:e4:e9:34: a7:84:ca:f7:15:49:de:52:e9:e6:36:00:3a:7a:88: 91:fc:6b:56:e6:83:7d:74:e6:a8:3c:e6:a2:e5:1f: e7:15:51:30:ed:a6:64:e4:1e:84:cd:2f:fe:35:98: 31:ca:05:d9:25:c2:ad:19:d2:f3:ad:3e:d6:a7:d3: 10:86:4a:24:5a:1d:0d:aa:51:17:29:6c:6c:ce:c1: a2:91:75:88:23:05:9c:a0:ee:f5:62:76:87:cc:47: 7f:e3:ec:a6:e3:d9:03:a1:1d:b5:89:23:1a:0f:af: 6b:78:ae:ab:e6:1a:00:5e:e3:64:21:96:91:f8:00: 2a:9d:f1:64:8e:79:bb:1b:24:b2:08:45:51:5a:62: 74:5b:d8:2e:fc:0c:90:b3:4b:ee:46:83:19:d7:44: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:70:29:1A:50:20:FB:42:1A:42:30:42:48:2F:4E:58:DA:18:B6 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9-ZwKRpQIPtCGkIwQkgvTljaGLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.1.0/24 31.148.174.0/24 31.148.204.0/24 Signature Algorithm: sha256WithRSAEncryption 45:d7:21:d0:61:af:59:49:ac:99:da:a5:2d:d0:5d:bb:8e:b9: 49:01:85:27:05:a3:29:0f:9a:8a:22:1d:2b:5a:4a:6d:c5:84: 60:6e:ea:1b:28:54:46:84:81:0f:3c:8e:17:26:11:7a:b9:37: 81:92:f8:33:ff:f9:09:45:f5:b1:6e:76:a8:e6:0b:99:11:64: 23:1e:9e:5a:60:f9:13:c0:a4:14:74:10:56:42:a5:b8:e6:47: 7b:b1:b6:a9:34:e1:24:6f:54:5a:90:c8:84:a9:21:a3:24:33: 71:d2:fc:88:60:68:48:4f:eb:7d:8a:38:14:df:35:92:da:72: 3a:6e:50:15:22:1b:f7:b9:98:99:81:6c:66:a2:05:6d:17:0d: 6c:d8:c4:02:b7:ba:08:89:41:5f:5a:32:d8:03:0d:55:70:ce: 33:4d:0a:56:0c:e5:9f:bb:36:a2:1c:78:23:eb:88:e3:aa:ae: d2:64:1b:ac:6a:43:89:68:55:1d:18:26:6f:05:9e:ed:f9:88: 72:43:90:5f:2d:c8:eb:97:fe:51:41:72:fe:eb:c0:ed:7c:2b: 73:33:fc:71:0f:97:2a:7e:dc:64:b6:d7:56:69:af:de:48:a4: a7:ff:00:d4:db:32:88:70:6b:9c:cb:49:58:c6:40:9b:b5:83: 07:4e:c9:ec -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hKzXZlweGWVCXYd+mfSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2U2NzAyOTFhNTAyMGZiNDIxYTQyMzA0MjQ4MmY0ZTU4ZGExOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZip9OKotwE0hlyDLfbmiF2Rm1oe vKUvHYUF8l1bxNDuPb/5Td7UZWufIifBqw48oWksnwKJmRR4BlnEg2xt3NJtSD5v 2h3Dwq0URfwS/iBiVoLc2sv56l4KrRfQVBFMsSUAsIvk6TSnhMr3FUneUunmNgA6 eoiR/GtW5oN9dOaoPOai5R/nFVEw7aZk5B6EzS/+NZgxygXZJcKtGdLzrT7Wp9MQ hkokWh0NqlEXKWxszsGikXWIIwWcoO71YnaHzEd/4+ym49kDoR21iSMaD69reK6r 5hoAXuNkIZaR+AAqnfFkjnm7GySyCEVRWmJ0W9gu/AyQs0vuRoMZ10R99wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPfmcCkaUCD7QhpCMEJIL05Y2hi2MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOS1ad0tScFFJUHRDR2tJd1FrZ3ZUbGphR0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH5QBAwQA H5SuAwQAH5TMMA0GCSqGSIb3DQEBCwUAA4IBAQBF1yHQYa9ZSayZ2qUt0F27jrlJ AYUnBaMpD5qKIh0rWkptxYRgbuobKFRGhIEPPI4XJhF6uTeBkvgz//kJRfWxbnao 5guZEWQjHp5aYPkTwKQUdBBWQqW45kd7sbapNOEkb1RakMiEqSGjJDNx0vyIYGhI T+t9ijgU3zWS2nI6blAVIhv3uZiZgWxmogVtFw1s2MQCt7oIiUFfWjLYAw1VcM4z TQpWDOWfuzaiHHgj64jjqq7SZBusakOJaFUdGCZvBZ7t+YhyQ5BfLcjrl/5RQXL+ 68DtfCtzM/xxD5cqftxkttdWaa/eSKSn/wDU2zKIcGucy0lYxkCbtYMHTsns -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:36 2026 by rpki-client