This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/A69fC_7zVMtqlvoamWiQT_3GOIg.roa File: A69fC_7zVMtqlvoamWiQT_3GOIg.roa (raw, json) Hash identifier: 3IrELkSGpW/dKQr7x+PihevY17+Me3Gj+gbP0UuT754= Subject key identifier: 03:AF:5F:0B:FE:F3:54:CB:6A:96:FA:1A:99:68:90:4F:FD:C6:38:88 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8493BB22E8C573052669382449F255 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/A69fC_7zVMtqlvoamWiQT_3GOIg.roa Signing time: Fri 02 Jan 2026 16:22:33 +0000 ROA not before: Fri 02 Jan 2026 16:22:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34503 IP address blocks: 31.148.217.0/24 maxlen: 24 93.170.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:93:bb:22:e8:c5:73:05:26:69:38:24:49:f2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03af5f0bfef354cb6a96fa1a9968904ffdc63888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:31:05:04:73:d2:05:21:fd:41:1e:9e:d6:07: 46:ef:6c:05:2a:ed:a7:6f:bc:57:46:10:dc:64:22: ba:23:5d:15:d5:d5:27:c4:a8:b6:05:ae:c6:d2:89: 9d:ac:5f:66:f6:4e:ea:49:d2:53:ab:1a:56:81:a4: c1:68:cd:4e:63:21:91:80:62:72:7f:86:91:8e:d4: c1:97:6b:14:bc:5b:68:32:63:59:fd:03:5f:64:2b: 59:4e:5e:8a:9e:18:76:06:76:e8:78:1c:ef:86:ba: e3:a1:ab:82:fa:ff:e1:44:0c:5f:c8:c4:a2:af:53: 0d:8c:cc:f4:31:d5:ea:21:0a:1a:fb:bd:e4:3e:18: cb:15:29:89:64:85:f7:34:1c:f9:ad:47:17:fc:00: 85:d4:6a:0b:0f:15:9c:58:96:46:6e:72:c1:79:81: a5:6e:53:7e:5a:74:f9:df:c4:cb:28:c9:83:0c:e3: fa:31:ae:84:9d:0b:94:8f:95:7c:a1:f1:a0:50:bd: 1b:43:71:24:8c:ac:7f:7f:0b:e9:80:b1:65:53:c1: c4:18:63:2e:0d:d7:d4:98:27:b6:19:f4:3f:a8:c8: 73:eb:79:75:a1:5f:19:0a:0a:68:77:74:a6:0e:3a: b8:47:ae:4c:d4:27:b9:ff:9f:3f:8a:19:40:1c:7b: d5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AF:5F:0B:FE:F3:54:CB:6A:96:FA:1A:99:68:90:4F:FD:C6:38:88 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/A69fC_7zVMtqlvoamWiQT_3GOIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.217.0/24 93.170.103.0/24 Signature Algorithm: sha256WithRSAEncryption 19:81:af:0c:3a:16:f4:ee:e5:be:6f:bf:51:36:81:db:3b:a5: 4a:44:50:7c:a2:2a:ca:a0:64:a8:53:2e:86:86:9b:77:74:ed: 1c:b9:a2:82:ac:35:7a:10:92:3d:d1:10:ef:8c:fe:ef:1d:28: 97:37:04:b6:5f:45:75:5f:f8:d7:71:52:0b:46:3e:f5:3a:a8: 02:98:f0:d9:30:85:25:ce:54:66:7d:66:e2:5c:c7:8a:17:f7: 66:6b:67:7e:0a:27:f2:e7:b8:94:4f:31:2a:d7:cc:dd:c0:89: 3c:c7:c7:2a:3a:05:01:d5:e7:f5:da:16:e0:0b:51:92:49:71: 23:ec:b0:17:62:98:af:c1:f9:07:46:1e:28:60:31:5a:19:54: 07:66:76:28:7c:86:95:5f:06:63:35:2e:d1:9f:47:12:f8:65: a3:f9:2d:8e:d6:e3:03:c7:5a:4e:4c:3b:b3:6f:b0:ce:12:f1: 4c:cf:f4:5c:dd:d0:c4:0d:45:58:6d:9e:7a:7d:48:cb:03:05: a8:d2:2e:87:fb:d7:80:f8:34:77:75:55:8c:1c:42:d9:58:a0: a4:0e:5c:59:24:1e:a3:a1:d3:05:20:4e:2d:bb:0a:4d:6b:21: d5:fe:1d:8c:4c:7c:18:7d:0e:14:8f:b7:55:69:51:68:24:05: f0:4b:b2:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hJO7IujFcwUmaTgkSfJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2FmNWYwYmZlZjM1NGNiNmE5NmZhMWE5OTY4OTA0ZmZkYzYzODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijEFBHPSBSH9QR6e1gdG72wFKu2n b7xXRhDcZCK6I10V1dUnxKi2Ba7G0omdrF9m9k7qSdJTqxpWgaTBaM1OYyGRgGJy f4aRjtTBl2sUvFtoMmNZ/QNfZCtZTl6Knhh2BnboeBzvhrrjoauC+v/hRAxfyMSi r1MNjMz0MdXqIQoa+73kPhjLFSmJZIX3NBz5rUcX/ACF1GoLDxWcWJZGbnLBeYGl blN+WnT538TLKMmDDOP6Ma6EnQuUj5V8ofGgUL0bQ3EkjKx/fwvpgLFlU8HEGGMu DdfUmCe2GfQ/qMhz63l1oV8ZCgpod3SmDjq4R65M1Ce5/58/ihlAHHvVIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAOvXwv+81TLapb6GplokE/9xjiIMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvQTY5ZkNfN3pWTXRxbHZvYW1XaVFUXzNHT0lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5TZAwQA XapnMA0GCSqGSIb3DQEBCwUAA4IBAQAZga8MOhb07uW+b79RNoHbO6VKRFB8oirK oGSoUy6Ghpt3dO0cuaKCrDV6EJI90RDvjP7vHSiXNwS2X0V1X/jXcVILRj71OqgC mPDZMIUlzlRmfWbiXMeKF/dma2d+Cify57iUTzEq18zdwIk8x8cqOgUB1ef12hbg C1GSSXEj7LAXYpivwfkHRh4oYDFaGVQHZnYofIaVXwZjNS7Rn0cS+GWj+S2O1uMD x1pOTDuzb7DOEvFMz/Rc3dDEDUVYbZ56fUjLAwWo0i6H+9eA+DR3dVWMHELZWKCk DlxZJB6jodMFIE4tuwpNayHV/h2MTHwYfQ4Uj7dVaVFoJAXwS7LX -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:57 2026 by rpki-client