This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/a4JX8atRXTBjOkFkzLWbs91WUt0.roa File: a4JX8atRXTBjOkFkzLWbs91WUt0.roa (raw, json) Hash identifier: hygMUEElKBQ8R6kCrSLGxzVNEcmnQVkmM227XwI3xW8= Subject key identifier: 6B:82:57:F1:AB:51:5D:30:63:3A:41:64:CC:B5:9B:B3:DD:56:52:DD Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F44B480C8DDEDC5C67C86697B390 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/a4JX8atRXTBjOkFkzLWbs91WUt0.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203553 IP address blocks: 31.148.175.0/24 maxlen: 24 93.170.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f4:4b:48:0c:8d:de:dc:5c:67:c8:66:97:b3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b8257f1ab515d30633a4164ccb59bb3dd5652dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:9f:54:a3:8f:5f:05:96:31:2d:98:6f:79: d9:ae:6d:6c:b3:02:f2:bc:8d:4b:5a:98:bd:6e:d1: 18:ef:ab:05:bb:1e:23:2f:4c:9c:61:28:35:a3:d1: 58:06:4f:4b:ca:5b:f6:05:1f:e0:8c:30:fa:fb:00: c0:49:68:dd:5b:4d:cd:fd:89:48:c4:c1:13:77:98: 64:15:93:24:a5:41:0d:d7:be:ec:b4:b5:e7:0f:7a: d6:31:02:7a:00:b2:39:99:f5:ba:b8:47:26:17:ca: ab:2b:2f:81:82:30:88:03:6c:c7:38:57:51:c2:2d: d7:3d:40:9d:84:7b:5a:26:9c:85:3a:ee:54:c2:82: 6a:0a:42:75:56:94:b5:fb:b1:ea:78:49:70:0a:d2: 8f:bc:59:ba:be:2c:a3:b6:3e:e4:b2:a0:62:75:b8: 8e:55:91:f3:9e:bb:a7:d5:f6:ae:03:d8:5d:53:03: 4b:98:b1:c0:e5:5f:56:fe:81:f5:fb:81:d1:e7:35: d1:81:4c:a2:38:d6:a5:07:1f:7e:9d:c3:92:7a:c1: 14:e0:2d:36:e4:f2:e2:53:ad:cc:24:a5:6c:d4:57: 16:66:16:1c:5b:38:c1:c2:a2:79:2f:9d:a9:dc:b7: b3:00:e9:c3:a6:c5:2f:c1:73:46:98:46:ab:15:f5: 1c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:82:57:F1:AB:51:5D:30:63:3A:41:64:CC:B5:9B:B3:DD:56:52:DD X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/a4JX8atRXTBjOkFkzLWbs91WUt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.175.0/24 93.170.164.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:62:aa:48:bf:73:2b:59:ac:c3:39:b0:f5:59:84:03:31:98: 18:70:26:58:12:ef:cc:e4:68:3e:59:a0:00:9f:b4:96:fc:ca: 07:4a:c2:4b:72:4e:26:9c:6d:ef:5b:4f:b6:e0:ca:d5:d7:5b: d6:e4:77:62:0b:d3:ca:e3:f2:6e:f4:0c:e1:37:b3:57:b4:99: c0:cb:9f:fe:87:05:f5:35:58:ed:32:43:eb:29:4f:31:f9:c7: 9b:c8:d4:66:f2:d9:05:b8:e3:c6:7f:93:08:ab:6f:a5:60:99: ce:e0:28:ef:89:2d:bc:86:9f:de:fa:b6:f2:d3:73:3f:37:34: 6c:c6:da:56:2a:74:d5:41:2b:f9:fc:b9:d1:13:a4:79:2c:33: 62:da:95:3f:5d:b9:b5:60:79:0d:dd:1c:d7:71:ba:39:98:3c: f8:66:91:06:24:7e:60:1f:d1:9b:6d:00:85:00:8f:16:10:ae: 32:44:c9:23:2e:52:08:39:b3:08:16:6f:6d:de:d7:b6:64:19: 42:a2:24:61:11:f0:1d:8c:ba:74:f2:43:03:b5:1b:7e:47:ba: f8:9d:45:55:d0:d6:3e:41:d9:df:a5:01:e5:b2:19:b1:52:3b: 83:50:3d:15:9a:c6:72:0e:ed:19:d2:ec:ac:56:26:1c:16:cc: 71:47:77:b0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hPRLSAyN3txcZ8hml7OQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjgyNTdmMWFiNTE1ZDMwNjMzYTQxNjRjY2I1OWJiM2RkNTY1MmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09KfVKOPXwWWMS2Yb3nZrm1sswLy vI1LWpi9btEY76sFux4jL0ycYSg1o9FYBk9Lylv2BR/gjDD6+wDASWjdW03N/YlI xMETd5hkFZMkpUEN177stLXnD3rWMQJ6ALI5mfW6uEcmF8qrKy+BgjCIA2zHOFdR wi3XPUCdhHtaJpyFOu5UwoJqCkJ1VpS1+7HqeElwCtKPvFm6viyjtj7ksqBidbiO VZHznrun1fauA9hdUwNLmLHA5V9W/oH1+4HR5zXRgUyiONalBx9+ncOSesEU4C02 5PLiU63MJKVs1FcWZhYcWzjBwqJ5L52p3LezAOnDpsUvwXNGmEarFfUcDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGuCV/GrUV0wYzpBZMy1m7PdVlLdMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYTRKWDhhdFJYVEJqT2tGa3pMV2JzOTFXVXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5SvAwQB XaqkMA0GCSqGSIb3DQEBCwUAA4IBAQAqYqpIv3MrWazDObD1WYQDMZgYcCZYEu/M 5Gg+WaAAn7SW/MoHSsJLck4mnG3vW0+24MrV11vW5HdiC9PK4/Ju9AzhN7NXtJnA y5/+hwX1NVjtMkPrKU8x+cebyNRm8tkFuOPGf5MIq2+lYJnO4CjviS28hp/e+rby 03M/NzRsxtpWKnTVQSv5/LnRE6R5LDNi2pU/Xbm1YHkN3RzXcbo5mDz4ZpEGJH5g H9GbbQCFAI8WEK4yRMkjLlIIObMIFm9t3te2ZBlCoiRhEfAdjLp08kMDtRt+R7r4 nUVV0NY+QdnfpQHlshmxUjuDUD0VmsZyDu0Z0uysViYcFsxxR3ew -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:55 2026 by rpki-client