This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9IgDjZO6_rQg1E8Pqz1TryB-ezU.roa File: 9IgDjZO6_rQg1E8Pqz1TryB-ezU.roa (raw, json) Hash identifier: qP5SgTozlAWGhNaq9Ue7Pu9i5cck7ix6f6zf7isHa5k= Subject key identifier: F4:88:03:8D:93:BA:FE:B4:20:D4:4F:0F:AB:3D:53:AF:20:7E:7B:35 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84EFBC61A61F7078FFA385F0C6CE52 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9IgDjZO6_rQg1E8Pqz1TryB-ezU.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201469 IP address blocks: 31.148.21.0/24 maxlen: 24 31.148.31.0/24 maxlen: 24 95.46.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ef:bc:61:a6:1f:70:78:ff:a3:85:f0:c6:ce:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f488038d93bafeb420d44f0fab3d53af207e7b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:f9:71:4b:77:b2:cf:98:31:2e:28:dc:9b: 41:87:2b:5f:e2:07:68:64:f3:02:df:52:24:9d:cf: e9:3d:73:46:b9:c9:bc:92:a5:84:55:06:66:03:c6: e3:68:df:32:06:bb:2a:7f:8d:c6:49:b8:8a:ce:db: 03:c0:b7:54:2a:d7:36:92:80:87:ce:98:6d:4e:14: 99:fb:cd:61:9d:cd:b3:40:82:1c:fc:6d:43:b0:41: 87:98:5e:f8:8e:cd:12:cf:c2:ac:a4:17:6b:94:85: e4:c1:bc:9d:a9:a4:ee:14:0e:e3:42:62:12:dd:9a: fc:fa:66:12:f8:85:ae:f1:40:86:30:28:bc:bc:12: d4:40:fb:69:38:50:4d:88:2d:a5:59:d1:a7:fb:5f: 80:dc:d1:c5:cc:a1:80:2b:b3:27:69:de:63:78:77: 80:4b:5f:e8:2d:62:a0:0e:8b:17:66:9a:8c:1e:25: 67:6a:78:17:64:59:b9:03:48:51:25:18:99:9d:8a: f8:8f:3d:da:f1:43:d6:a5:07:57:e6:74:6f:cd:5e: 12:35:c2:6a:d5:40:87:d4:36:c4:66:15:d3:cc:6d: db:e7:82:31:dc:88:43:68:c9:cf:c5:1c:a3:6c:95: 80:73:5d:78:f0:3e:45:4c:76:01:c0:22:84:a9:6f: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:88:03:8D:93:BA:FE:B4:20:D4:4F:0F:AB:3D:53:AF:20:7E:7B:35 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9IgDjZO6_rQg1E8Pqz1TryB-ezU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.21.0/24 31.148.31.0/24 95.46.4.0/24 Signature Algorithm: sha256WithRSAEncryption 68:fe:5a:11:b8:21:78:16:9c:62:af:de:47:32:f9:d0:20:59: b1:37:e4:55:b9:bf:ab:db:c7:cb:92:cd:66:2d:0e:22:73:3d: 00:ff:1e:21:ae:7e:7a:4d:be:b9:82:a7:c5:e4:3b:bd:96:22: c8:4c:c8:04:ea:24:af:42:5c:34:62:be:4f:41:56:63:cd:93: 6e:59:d1:bf:46:67:8a:c0:74:22:49:c3:c8:7b:39:d1:8e:ca: 2b:ad:30:f5:fa:55:d2:40:03:97:3d:13:00:2d:9f:82:04:b1: a4:6e:45:af:d2:85:b2:d1:ed:dc:a0:30:d5:23:5e:e8:e1:aa: bb:66:76:cc:9a:29:e7:f3:bb:b0:71:81:81:58:8f:18:89:02: 9d:c8:db:a2:02:bc:96:0d:7f:4a:1f:1f:7f:35:2b:1a:3d:5f: 9b:09:15:19:68:f0:b9:24:5a:07:a2:2c:2d:25:66:00:be:09: 07:68:f4:29:b5:82:cb:96:87:4a:d5:6f:6e:d0:75:d1:81:57: 23:f0:d4:1b:02:01:52:2c:14:f2:2c:54:68:28:5e:e0:16:05: cb:d1:21:8d:b2:2f:eb:bd:22:5e:5c:0f:ed:a0:34:d9:28:04: f7:21:e0:73:6b:c2:cb:1d:1f:66:de:af:06:be:3b:49:c6:65: 8e:fe:aa:e7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hO+8YaYfcHj/o4Xwxs5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDg4MDM4ZDkzYmFmZWI0MjBkNDRmMGZhYjNkNTNhZjIwN2U3YjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveD5cUt3ss+YMS4o3JtBhytf4gdo ZPMC31Iknc/pPXNGucm8kqWEVQZmA8bjaN8yBrsqf43GSbiKztsDwLdUKtc2koCH zphtThSZ+81hnc2zQIIc/G1DsEGHmF74js0Sz8KspBdrlIXkwbydqaTuFA7jQmIS 3Zr8+mYS+IWu8UCGMCi8vBLUQPtpOFBNiC2lWdGn+1+A3NHFzKGAK7Mnad5jeHeA S1/oLWKgDosXZpqMHiVnangXZFm5A0hRJRiZnYr4jz3a8UPWpQdX5nRvzV4SNcJq 1UCH1DbEZhXTzG3b54Ix3IhDaMnPxRyjbJWAc1148D5FTHYBwCKEqW/GLwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPSIA42Tuv60INRPD6s9U68gfns1MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOUlnRGpaTzZfclFnMUU4UHF6MVRyeUItZXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH5QVAwQA H5QfAwQAXy4EMA0GCSqGSIb3DQEBCwUAA4IBAQBo/loRuCF4Fpxir95HMvnQIFmx N+RVub+r28fLks1mLQ4icz0A/x4hrn56Tb65gqfF5Du9liLITMgE6iSvQlw0Yr5P QVZjzZNuWdG/RmeKwHQiScPIeznRjsorrTD1+lXSQAOXPRMALZ+CBLGkbkWv0oWy 0e3coDDVI17o4aq7ZnbMminn87uwcYGBWI8YiQKdyNuiAryWDX9KHx9/NSsaPV+b CRUZaPC5JFoHoiwtJWYAvgkHaPQptYLLlodK1W9u0HXRgVcj8NQbAgFSLBTyLFRo KF7gFgXL0SGNsi/rvSJeXA/toDTZKAT3IeBza8LLHR9m3q8GvjtJxmWO/qrn -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:44 2026 by rpki-client