This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O6sB0pN9SPoHpzrFtXTRwcgWAC4.roa File: O6sB0pN9SPoHpzrFtXTRwcgWAC4.roa (raw, json) Hash identifier: GtgT5oYs7yzO9GPhs+vqib6s81cyYvE60gmaA0LDtHo= Subject key identifier: 3B:AB:01:D2:93:7D:48:FA:07:A7:3A:C5:B5:74:D1:C1:C8:16:00:2E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B84F7E611AD6F16C606836E98908 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O6sB0pN9SPoHpzrFtXTRwcgWAC4.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49491 IP address blocks: 31.148.134.0/23 maxlen: 24 31.148.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:4f:7e:61:1a:d6:f1:6c:60:68:36:e9:89:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bab01d2937d48fa07a73ac5b574d1c1c816002e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:35:8e:a5:ad:95:43:53:10:53:87:42:34: d6:35:60:c7:20:4a:d2:e8:54:6e:97:b0:1e:f5:74: 8c:80:e8:23:ff:f9:51:6a:65:76:82:33:0b:9e:0a: e6:a9:d1:83:d4:0d:75:9b:12:ef:cc:67:41:5d:bb: 49:76:8d:95:46:7f:54:a4:d7:d4:2f:e3:23:b3:0e: 4f:7b:e0:bf:c3:a0:d9:e7:5c:77:e3:72:b0:65:ce: 4a:31:ec:a4:ec:fe:de:fb:9a:60:3e:7f:e5:7b:e5: ab:34:cc:53:de:d6:2d:32:e2:20:6c:fe:c1:ed:34: 10:da:28:7f:f2:7e:cd:47:0d:53:63:b0:19:f9:77: 18:d7:29:58:af:8f:8f:56:24:16:4d:2f:0f:68:60: ab:d3:7d:9c:ee:62:cb:18:1a:e9:11:37:72:04:61: 93:d4:74:f6:b6:d0:1d:c7:d9:33:e1:35:c8:24:66: 3f:4d:3d:8f:f0:17:ea:cc:27:72:dd:f5:1a:69:88: 2c:49:1f:5b:72:93:f6:1a:3b:ee:10:83:fd:e8:04: 47:78:16:be:cb:2b:0f:c2:74:aa:79:8c:da:3f:24: 2d:c8:f6:ed:58:d2:f2:0e:28:f5:6f:f1:5b:3f:35: 19:8f:8e:fc:e0:58:0c:e4:ce:80:ca:28:09:67:50: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:01:D2:93:7D:48:FA:07:A7:3A:C5:B5:74:D1:C1:C8:16:00:2E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O6sB0pN9SPoHpzrFtXTRwcgWAC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.134.0/23 31.148.150.0/23 Signature Algorithm: sha256WithRSAEncryption 23:4b:5f:91:9d:d8:39:8b:a8:ca:be:d1:8d:8a:90:c8:af:d1: e3:7f:11:ea:c9:80:d8:d6:80:0a:52:72:93:0e:fa:75:af:cf: 00:65:83:aa:9e:bf:b0:ff:db:ad:59:3f:65:3f:8a:7e:14:67: 3d:b0:84:22:16:87:dc:95:0c:ec:b0:79:67:d1:f8:84:a9:d7: 9a:31:e7:6b:a1:52:0e:a3:63:12:fc:79:82:b4:2c:f6:f7:a4: 64:4f:3c:1a:90:d2:c0:66:01:5e:ad:77:e9:8c:6a:1f:04:9b: 8e:b2:cb:ab:7a:c7:8c:41:16:1b:b2:71:60:0c:e3:a4:2d:58: 8c:9c:77:dc:37:c8:e0:af:7f:45:ca:3c:1b:88:a0:eb:ed:68: e9:df:87:51:4c:4b:db:5a:36:45:b4:6e:f2:87:ca:67:5d:a7: 94:e9:7f:b9:63:12:af:1f:ba:29:c9:fd:ca:32:ad:1e:6d:15: 3c:63:59:db:58:a3:bb:2d:0a:50:38:83:ab:e0:b8:a9:b2:0a: 9d:62:0d:88:85:ef:86:a9:b2:52:57:68:0a:12:e9:6b:e7:04: b9:6d:b3:db:11:f1:c2:94:73:65:45:4d:66:4e:61:ff:c9:5d: eb:04:dc:7b:83:aa:23:10:6a:fb:55:96:2d:7e:94:78:e5:9f: 4a:08:20:a9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hLhPfmEa1vFsYGg26YkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmFiMDFkMjkzN2Q0OGZhMDdhNzNhYzViNTc0ZDFjMWM4MTYwMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK01jqWtlUNTEFOHQjTWNWDHIErS 6FRul7Ae9XSMgOgj//lRamV2gjMLngrmqdGD1A11mxLvzGdBXbtJdo2VRn9UpNfU L+Mjsw5Pe+C/w6DZ51x343KwZc5KMeyk7P7e+5pgPn/le+WrNMxT3tYtMuIgbP7B 7TQQ2ih/8n7NRw1TY7AZ+XcY1ylYr4+PViQWTS8PaGCr032c7mLLGBrpETdyBGGT 1HT2ttAdx9kz4TXIJGY/TT2P8BfqzCdy3fUaaYgsSR9bcpP2GjvuEIP96ARHeBa+ yysPwnSqeYzaPyQtyPbtWNLyDij1b/FbPzUZj4784FgM5M6AyigJZ1CLKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDurAdKTfUj6B6c6xbV00cHIFgAuMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvTzZzQjBwTjlTUG9IcHpyRnRYVFJ3Y2dXQUM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBH5SGAwQB H5SWMA0GCSqGSIb3DQEBCwUAA4IBAQAjS1+Rndg5i6jKvtGNipDIr9HjfxHqyYDY 1oAKUnKTDvp1r88AZYOqnr+w/9utWT9lP4p+FGc9sIQiFofclQzssHln0fiEqdea MedroVIOo2MS/HmCtCz296RkTzwakNLAZgFerXfpjGofBJuOssureseMQRYbsnFg DOOkLViMnHfcN8jgr39FyjwbiKDr7Wjp34dRTEvbWjZFtG7yh8pnXaeU6X+5YxKv H7opyf3KMq0ebRU8Y1nbWKO7LQpQOIOr4LipsgqdYg2Ihe+GqbJSV2gKEulr5wS5 bbPbEfHClHNlRU1mTmH/yV3rBNx7g6ojEGr7VZYtfpR45Z9KCCCp -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:06 2026 by rpki-client