This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_CkFGRtMLDnZx7_-MSMDMiuISjA.roa File: _CkFGRtMLDnZx7_-MSMDMiuISjA.roa (raw, json) Hash identifier: AeDITtRyui6oQ96XiNYbOlU7wj8o4filoK3rgtqoIcc= Subject key identifier: FC:29:05:19:1B:4C:2C:39:D9:C7:BF:FE:31:23:03:32:2B:88:4A:30 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CFA7B40B47859F24FA673D5C49AC Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_CkFGRtMLDnZx7_-MSMDMiuISjA.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59679 IP address blocks: 31.148.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cf:a7:b4:0b:47:85:9f:24:fa:67:3d:5c:49:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc2905191b4c2c39d9c7bffe312303322b884a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:0d:a6:cc:27:da:82:ba:99:4b:2e:49:11: ed:92:22:6e:69:0b:9d:77:86:09:ce:64:be:bb:cd: 20:e6:29:b3:e5:2a:31:74:8b:e7:d4:ed:06:7c:84: 05:75:61:07:a7:83:a1:73:89:05:97:b2:02:8c:40: d8:33:91:c7:71:d9:e3:9d:d3:ec:22:e3:df:15:17: 92:8e:34:ae:cb:4b:5b:52:c3:2b:67:25:32:49:dd: 3b:ca:72:03:6c:39:19:bb:9c:f7:35:b5:cf:46:c4: 8a:58:a4:d9:5d:f2:87:f8:4b:e7:92:8d:25:b4:db: c5:b6:13:88:9d:b6:f0:df:52:ed:ae:e3:7f:a8:d7: f5:cd:40:71:15:04:89:a5:00:d4:b1:9c:6b:6c:90: b0:e4:0f:6d:01:62:aa:8b:46:2d:ef:ad:1f:a9:c7: 43:c4:e2:67:6e:8b:18:66:e9:e5:c7:9d:77:be:21: 92:3a:ed:fb:10:c7:89:1d:9f:14:47:6b:a3:c1:03: 11:88:3f:e9:22:f3:3c:ba:f4:44:a5:a4:84:65:5e: e1:07:c0:61:41:65:5e:9e:1c:f2:77:6c:94:b1:65: 43:86:c4:2b:dd:ea:d8:aa:d7:6b:ec:5c:97:69:b1: 3d:59:57:5d:1e:59:78:32:6d:dc:f2:1f:cf:43:4e: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:29:05:19:1B:4C:2C:39:D9:C7:BF:FE:31:23:03:32:2B:88:4A:30 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_CkFGRtMLDnZx7_-MSMDMiuISjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.223.0/24 Signature Algorithm: sha256WithRSAEncryption 53:5e:0d:88:18:bf:6a:cc:53:f9:24:da:12:90:86:1c:4a:61: dd:96:06:19:45:d0:d6:bf:f5:0a:d7:d9:6a:3b:c6:1b:71:59: 39:da:a4:de:04:86:4f:89:5a:c2:fb:57:1b:ec:35:aa:0b:93: b7:91:76:02:95:f8:b4:ab:26:a9:92:e8:d7:87:23:86:80:58: fb:18:e9:7d:3f:db:7e:d2:7e:df:19:e2:7a:2a:57:9b:02:28: f9:93:ce:29:60:1c:cd:a6:f3:da:99:e1:76:19:9c:d0:1f:fe: c6:c0:c4:18:39:60:01:2a:8f:a6:b5:45:e4:5e:f4:7f:5c:3a: c5:ce:a0:b1:47:48:cb:48:f5:b2:2f:9a:2f:63:02:a7:fd:56: 25:be:c1:58:bd:7c:bb:3e:59:9c:8e:2d:75:d1:d6:de:4f:32: 3a:e6:71:11:78:cc:ea:78:38:f1:7d:68:d5:18:53:80:03:82: 22:83:d6:41:a1:46:7d:22:54:68:35:a3:01:89:62:76:38:74: df:4f:65:28:75:74:86:49:96:60:05:46:ab:26:b0:8b:17:8e: 35:1d:35:b1:37:d2:50:bf:50:ed:21:46:57:96:d8:f9:51:67: a3:e7:d4:7d:33:f5:26:41:98:da:1d:4a:83:38:22:42:2c:6c: 34:35:2b:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hM+ntAtHhZ8k+mc9XEmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzI5MDUxOTFiNGMyYzM5ZDljN2JmZmUzMTIzMDMzMjJiODg0YTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoYNpswn2oK6mUsuSRHtkiJuaQud d4YJzmS+u80g5imz5SoxdIvn1O0GfIQFdWEHp4Ohc4kFl7ICjEDYM5HHcdnjndPs IuPfFReSjjSuy0tbUsMrZyUySd07ynIDbDkZu5z3NbXPRsSKWKTZXfKH+Evnko0l tNvFthOInbbw31LtruN/qNf1zUBxFQSJpQDUsZxrbJCw5A9tAWKqi0Yt760fqcdD xOJnbosYZunlx513viGSOu37EMeJHZ8UR2ujwQMRiD/pIvM8uvREpaSEZV7hB8Bh QWVenhzyd2yUsWVDhsQr3erYqtdr7FyXabE9WVddHll4Mm3c8h/PQ07HkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwpBRkbTCw52ce//jEjAzIriEowMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvX0NrRkdSdE1MRG5aeDdfLU1TTURNaXVJU2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5TfMA0G CSqGSIb3DQEBCwUAA4IBAQBTXg2IGL9qzFP5JNoSkIYcSmHdlgYZRdDWv/UK19lq O8YbcVk52qTeBIZPiVrC+1cb7DWqC5O3kXYClfi0qyapkujXhyOGgFj7GOl9P9t+ 0n7fGeJ6KlebAij5k84pYBzNpvPameF2GZzQH/7GwMQYOWABKo+mtUXkXvR/XDrF zqCxR0jLSPWyL5ovYwKn/VYlvsFYvXy7Plmcji110dbeTzI65nEReMzqeDjxfWjV GFOAA4Iig9ZBoUZ9IlRoNaMBiWJ2OHTfT2UodXSGSZZgBUarJrCLF441HTWxN9JQ v1DtIUZXltj5UWej59R9M/UmQZjaHUqDOCJCLGw0NSvV -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:24 2026 by rpki-client