This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I7FIO-cj3gba9_w50iKvOP2TCmg.roa File: I7FIO-cj3gba9_w50iKvOP2TCmg.roa (raw, json) Hash identifier: m1NX/CWOqSBRKPh9DQI5NWrJgDRVG/LwbJ/+DJzKH9c= Subject key identifier: 23:B1:48:3B:E7:23:DE:06:DA:F7:FC:39:D2:22:AF:38:FD:93:0A:68 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B8EB6BFF38D4DAD557DD064A2E6A381F5 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I7FIO-cj3gba9_w50iKvOP2TCmg.roa Signing time: Mon 05 Jan 2026 15:11:39 +0000 ROA not before: Mon 05 Jan 2026 15:11:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25548 IP address blocks: 31.148.202.0/23 maxlen: 24 93.170.36.0/22 maxlen: 24 95.47.178.0/23 maxlen: 24 95.47.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:b6:bf:f3:8d:4d:ad:55:7d:d0:64:a2:e6:a3:81:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 5 15:11:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23b1483be723de06daf7fc39d222af38fd930a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:67:0a:65:2a:38:e2:5d:15:d4:ca:f1:6b: 43:2b:98:28:e9:90:74:d6:e0:32:d4:e5:f7:fe:c2: a2:aa:73:6b:4f:43:33:d0:5a:4d:e5:0a:ee:93:cf: 6c:0f:2d:68:55:93:1b:5e:51:70:4b:dc:76:bc:cc: 4a:3f:4a:13:09:dd:0c:56:65:f3:59:0e:58:6f:b9: 45:f2:b5:86:d9:ad:c4:17:ad:c2:12:26:e3:1c:82: 08:32:a3:c3:88:f9:2d:87:84:e3:d3:ca:f8:ee:4e: 82:33:56:54:4a:fb:c9:21:eb:8d:cb:e3:49:b4:ea: ff:9e:0f:d0:99:67:ed:2a:43:46:7f:5a:e4:82:47: e5:fc:11:cc:c9:cc:d0:92:aa:4c:9e:4b:16:e2:ae: 6f:73:95:60:a4:72:1e:52:d7:c8:dc:74:68:2a:e2: 4c:7b:32:dc:c2:f3:2c:0e:49:ea:94:8c:00:3c:da: 87:db:e7:8c:a6:77:e1:1b:75:80:97:d6:0a:cd:94: 5c:4f:4c:22:6a:58:f6:b2:9b:15:f6:a8:4f:ac:f0: 4d:64:50:de:35:4f:91:e7:a9:dd:5f:25:59:4a:e6: 95:de:fc:04:94:dc:a6:9e:29:b2:4d:04:3b:a7:ca: 29:9f:a7:a3:b5:85:df:fa:7f:d4:8d:a5:c8:1e:ca: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B1:48:3B:E7:23:DE:06:DA:F7:FC:39:D2:22:AF:38:FD:93:0A:68 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I7FIO-cj3gba9_w50iKvOP2TCmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.202.0/23 93.170.36.0/22 95.47.178.0/23 95.47.186.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:80:32:19:1e:81:14:50:9d:d9:98:90:c6:42:32:b4:4e:92: d1:84:dd:6a:66:f5:4c:67:76:65:90:e4:e1:f0:36:06:80:43: f6:28:ca:15:24:71:6f:b6:ec:02:ac:35:24:48:a6:aa:09:26: c3:2b:22:48:e2:5e:84:13:7c:a7:0c:d7:88:84:55:cb:6f:af: 0d:c3:33:5a:7d:47:88:5a:80:09:3a:14:14:dc:d7:7c:7e:73: 27:3a:1f:1b:8d:98:5e:e5:36:0a:2e:13:af:d3:2f:fc:8c:41: bb:cc:4b:c7:cc:10:1e:78:66:fe:45:94:52:27:c5:81:a5:fb: 29:6a:42:1a:a0:ef:48:1e:b8:af:41:c3:e0:c0:dd:d0:21:6c: 99:c1:b4:88:ab:48:33:66:5f:5d:83:77:13:9b:0a:60:0b:a6: f7:47:3e:d3:ac:e6:13:a1:33:82:fe:24:18:d5:18:23:8d:31: cd:12:48:2b:72:88:27:44:4b:b7:d3:b9:cf:71:52:2b:16:ce: 10:80:bb:22:0e:d8:ac:67:1d:de:9c:92:75:94:2a:fb:c4:9c: 27:85:58:b6:15:fa:a6:e7:a4:90:24:88:bf:8c:44:f6:69:c7: 61:59:d7:ed:85:54:e7:44:b0:49:2d:46:2a:1b:e9:e2:50:1c: 54:22:23:56 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuOtr/zjU2tVX3QZKLmo4H1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTA1MTUxMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2IxNDgzYmU3MjNkZTA2ZGFmN2ZjMzlkMjIyYWYzOGZkOTMwYTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ZnCmUqOOJdFdTK8WtDK5go6ZB0 1uAy1OX3/sKiqnNrT0Mz0FpN5Qruk89sDy1oVZMbXlFwS9x2vMxKP0oTCd0MVmXz WQ5Yb7lF8rWG2a3EF63CEibjHIIIMqPDiPkth4Tj08r47k6CM1ZUSvvJIeuNy+NJ tOr/ng/QmWftKkNGf1rkgkfl/BHMyczQkqpMnksW4q5vc5VgpHIeUtfI3HRoKuJM ezLcwvMsDknqlIwAPNqH2+eMpnfhG3WAl9YKzZRcT0wialj2spsV9qhPrPBNZFDe NU+R56ndXyVZSuaV3vwElNymnimyTQQ7p8opn6ejtYXf+n/UjaXIHsrmXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCOxSDvnI94G2vf8OdIirzj9kwpoMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvSTdGSU8tY2ozZ2JhOV93NTBpS3ZPUDJUQ21nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBH5TKAwQC XaokAwQBXy+yAwQBXy+6MA0GCSqGSIb3DQEBCwUAA4IBAQCfgDIZHoEUUJ3ZmJDG QjK0TpLRhN1qZvVMZ3ZlkOTh8DYGgEP2KMoVJHFvtuwCrDUkSKaqCSbDKyJI4l6E E3ynDNeIhFXLb68NwzNafUeIWoAJOhQU3Nd8fnMnOh8bjZhe5TYKLhOv0y/8jEG7 zEvHzBAeeGb+RZRSJ8WBpfspakIaoO9IHrivQcPgwN3QIWyZwbSIq0gzZl9dg3cT mwpgC6b3Rz7TrOYToTOC/iQY1RgjjTHNEkgrcognREu307nPcVIrFs4QgLsiDtis Zx3enJJ1lCr7xJwnhVi2Ffqm56SQJIi/jET2acdhWdfthVTnRLBJLUYqG+niUBxU IiNW -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:15 2026 by rpki-client