This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ecFnexglKxhmNluv7j9yT2fpPso.roa File: ecFnexglKxhmNluv7j9yT2fpPso.roa (raw, json) Hash identifier: 1MFghwZybBK9tX6zVzwRrbDn/PEx10Vdbtz23Acvg34= Subject key identifier: 79:C1:67:7B:18:25:2B:18:66:36:5B:AF:EE:3F:72:4F:67:E9:3E:CA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C3EA1F6DB24EF789E1D5F7E5BAD4 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ecFnexglKxhmNluv7j9yT2fpPso.roa Signing time: Fri 02 Jan 2026 16:22:45 +0000 ROA not before: Fri 02 Jan 2026 16:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51841 IP address blocks: 31.148.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c3:ea:1f:6d:b2:4e:f7:89:e1:d5:f7:e5:ba:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c1677b18252b1866365bafee3f724f67e93eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:9c:34:b2:ca:75:d5:8f:aa:de:00:83:d1: ba:5a:4e:17:17:2c:20:91:07:d9:6b:52:ad:2e:af: ce:89:00:af:23:4e:f3:50:55:cc:68:7a:5d:36:1a: df:a6:5c:70:20:f0:e3:6c:e1:46:2f:0c:b6:d9:22: 4f:1a:c7:25:9f:e3:d1:c9:8f:3a:dd:34:56:23:cb: 20:15:6d:36:7c:a9:44:43:90:c2:ae:ee:5c:da:46: f8:ae:6b:bb:57:7e:96:39:4d:c5:8c:b6:a1:cb:83: 9d:a0:9f:bf:74:1e:2f:4c:df:b0:d0:65:7e:25:47: 80:43:aa:b3:40:27:88:a3:d3:8b:53:9f:70:cc:f0: 58:2b:3b:da:f1:7b:e7:7c:7d:f1:c5:39:1b:c7:8f: 45:f9:7f:33:19:47:d0:4b:17:da:76:f8:5f:50:11: 8c:bc:bf:eb:57:29:09:34:03:9b:6e:ac:54:fe:77: a9:68:49:76:c1:49:f2:2a:60:d0:f2:be:3c:43:fe: bd:20:9a:b9:9d:bf:c1:a2:91:c4:55:49:a4:2f:f6: d9:3f:80:01:d3:a0:16:81:e8:10:4a:a1:1f:1c:5a: 6d:5a:47:f5:70:0d:a1:b3:ce:47:7a:38:01:00:c8: 98:55:07:04:11:c9:8d:88:91:62:47:42:9e:c6:2f: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C1:67:7B:18:25:2B:18:66:36:5B:AF:EE:3F:72:4F:67:E9:3E:CA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ecFnexglKxhmNluv7j9yT2fpPso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.201.0/24 Signature Algorithm: sha256WithRSAEncryption b1:59:41:4c:a3:a6:cf:14:e0:81:34:be:cd:48:49:c8:4b:8e: c5:7d:df:dd:31:dd:22:1e:b0:4f:ed:fd:6b:00:a0:80:b2:af: 98:73:d3:ba:92:07:53:65:23:a5:85:ee:9f:b0:c7:5d:83:97: 7e:ab:02:87:8b:c8:30:ef:ed:e3:04:ed:7b:d1:31:b4:6d:86: 68:b9:dc:43:b9:ed:fb:48:f3:4c:45:ac:ec:cb:c5:4b:3d:ee: b8:7e:e2:2f:2c:53:12:63:5a:b6:bb:ad:ad:d4:17:ca:0e:3b: a7:84:d4:7f:2a:f7:01:69:4b:63:e7:35:87:07:42:ab:bf:98: 44:d7:b2:cb:44:a6:ed:49:42:09:6f:1b:76:91:1f:1d:51:f1: b1:48:75:ea:72:04:1a:da:7a:4c:6a:62:09:6e:59:a0:c8:d5: 25:5a:1d:10:4f:b9:53:75:81:ea:ba:d1:98:19:cb:ef:88:6b: 41:55:c9:34:2f:2a:4c:33:03:45:49:fe:3e:2b:1f:fe:74:60: 84:d4:17:b8:dd:4c:9e:42:76:87:10:e0:37:21:76:de:02:ff: 4e:1e:62:f2:40:45:b3:f5:fb:4d:74:30:f1:bd:91:0c:56:b3: d9:91:87:d4:25:c4:c4:aa:eb:4b:a2:da:ec:9c:11:07:3a:1b: 64:96:04:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMPqH22yTveJ4dX35brUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWMxNjc3YjE4MjUyYjE4NjYzNjViYWZlZTNmNzI0ZjY3ZTkzZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCacNLLKddWPqt4Ag9G6Wk4XFywg kQfZa1KtLq/OiQCvI07zUFXMaHpdNhrfplxwIPDjbOFGLwy22SJPGscln+PRyY86 3TRWI8sgFW02fKlEQ5DCru5c2kb4rmu7V36WOU3FjLahy4OdoJ+/dB4vTN+w0GV+ JUeAQ6qzQCeIo9OLU59wzPBYKzva8XvnfH3xxTkbx49F+X8zGUfQSxfadvhfUBGM vL/rVykJNAObbqxU/nepaEl2wUnyKmDQ8r48Q/69IJq5nb/BopHEVUmkL/bZP4AB 06AWgegQSqEfHFptWkf1cA2hs85HejgBAMiYVQcEEcmNiJFiR0Kexi9wMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnBZ3sYJSsYZjZbr+4/ck9n6T7KMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZWNGbmV4Z2xLeGhtTmx1djdqOXlUMmZwUHNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5TJMA0G CSqGSIb3DQEBCwUAA4IBAQCxWUFMo6bPFOCBNL7NSEnIS47Ffd/dMd0iHrBP7f1r AKCAsq+Yc9O6kgdTZSOlhe6fsMddg5d+qwKHi8gw7+3jBO170TG0bYZoudxDue37 SPNMRazsy8VLPe64fuIvLFMSY1q2u62t1BfKDjunhNR/KvcBaUtj5zWHB0Krv5hE 17LLRKbtSUIJbxt2kR8dUfGxSHXqcgQa2npMamIJblmgyNUlWh0QT7lTdYHqutGY GcvviGtBVck0LypMMwNFSf4+Kx/+dGCE1Be43UyeQnaHEOA3IXbeAv9OHmLyQEWz 9ftNdDDxvZEMVrPZkYfUJcTEqutLotrsnBEHOhtklgQP -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:02 2026 by rpki-client