This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g0rYQ6SZIj-r0NOwc2SEWNVuOMs.roa File: g0rYQ6SZIj-r0NOwc2SEWNVuOMs.roa (raw, json) Hash identifier: +NLZ0TYjpWIXA9xPvj0n0eoZDUQ8hqALgIe+ufxrp8g= Subject key identifier: 83:4A:D8:43:A4:99:22:3F:AB:D0:D3:B0:73:64:84:58:D5:6E:38:CB Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F1CB1876EA0D78093556DCD283A9 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g0rYQ6SZIj-r0NOwc2SEWNVuOMs.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202290 IP address blocks: 31.148.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f1:cb:18:76:ea:0d:78:09:35:56:dc:d2:83:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=834ad843a499223fabd0d3b073648458d56e38cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:e4:46:29:d6:ac:bd:f8:63:93:d9:4a:10: e2:51:94:91:6a:37:e1:64:7a:07:3a:40:9c:97:43: 91:66:b1:94:59:0d:e0:02:74:ee:e6:b2:de:06:d2: a6:af:98:39:c6:18:d7:b0:fa:21:b3:dd:f4:1f:61: ee:87:45:81:9e:67:08:2f:92:cc:1b:02:0d:0c:76: 02:1c:89:56:42:54:ff:7f:b5:3d:b2:9e:05:7e:08: 91:a0:cb:37:b7:c9:ab:9e:9f:08:b5:40:61:cc:1c: 0f:ab:63:02:7d:ca:f5:9d:5b:14:fc:d2:76:f8:24: 61:81:35:2c:b4:64:cc:89:13:fd:dc:bd:72:2d:a1: 43:b5:38:93:eb:8f:96:ca:78:ff:ef:b9:da:8a:64: f5:6f:0d:4e:3f:fb:38:bf:45:8e:0d:84:21:05:0c: 82:fe:0a:b4:ec:df:2d:a6:9d:4b:b9:b2:06:ed:1f: 57:de:b8:48:d2:dd:2c:71:39:5d:76:22:ff:8e:62: cd:db:2b:8a:f5:e2:86:ff:9b:fb:d9:99:d0:3d:a6: ea:43:99:7c:fb:52:c7:3e:4d:a3:6e:e6:52:87:2e: e0:15:62:91:21:bd:05:57:4c:98:95:ab:d3:d4:fb: fa:72:c6:cb:7a:b0:55:49:98:59:35:03:6e:b5:fb: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4A:D8:43:A4:99:22:3F:AB:D0:D3:B0:73:64:84:58:D5:6E:38:CB X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g0rYQ6SZIj-r0NOwc2SEWNVuOMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.169.0/24 Signature Algorithm: sha256WithRSAEncryption 54:5f:8e:6c:55:3e:32:fe:d5:77:ee:d4:e8:60:dc:24:ab:81: 38:80:77:df:ea:96:b8:e6:1c:0e:9f:71:99:c7:c9:83:0b:68: 21:b7:00:f7:ef:ef:a9:8c:c8:0c:e0:2f:73:43:4f:cd:36:91: 67:2c:ae:04:a4:4a:03:d9:b3:a1:1c:37:08:1c:2c:3c:20:ca: 79:04:50:b3:df:24:37:c1:d9:0d:73:5e:fb:73:b3:4b:f4:86: 24:54:b4:cd:16:d6:09:48:59:06:f3:06:e3:78:85:41:85:91: 98:10:ac:be:dc:44:9c:4f:fa:57:f0:3f:7d:ab:79:b5:01:65: e0:b7:57:41:20:05:e9:fc:76:75:3b:95:be:c8:fe:85:be:ef: df:6b:9e:9d:45:35:a7:59:14:32:a1:8f:c4:0f:d9:b5:9b:7d: 3a:03:7a:56:4e:ef:44:83:98:31:b0:69:50:59:8d:7d:d7:67: 65:7b:d7:91:32:60:7b:53:2d:ba:e3:4e:62:ea:08:ff:1e:82: 2d:32:fc:4d:40:d5:71:37:dd:32:a9:39:84:e1:a3:f3:29:87: e6:6b:6d:d8:28:be:56:ab:65:43:48:62:ca:56:52:83:28:7c: a0:ac:d1:e8:73:38:97:ac:db:8a:eb:0d:b2:6c:39:b0:e1:68: 6e:de:e9:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPHLGHbqDXgJNVbc0oOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzRhZDg0M2E0OTkyMjNmYWJkMGQzYjA3MzY0ODQ1OGQ1NmUzOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLvkRinWrL34Y5PZShDiUZSRajfh ZHoHOkCcl0ORZrGUWQ3gAnTu5rLeBtKmr5g5xhjXsPohs930H2Huh0WBnmcIL5LM GwINDHYCHIlWQlT/f7U9sp4FfgiRoMs3t8mrnp8ItUBhzBwPq2MCfcr1nVsU/NJ2 +CRhgTUstGTMiRP93L1yLaFDtTiT64+Wynj/77naimT1bw1OP/s4v0WODYQhBQyC /gq07N8tpp1LubIG7R9X3rhI0t0scTlddiL/jmLN2yuK9eKG/5v72ZnQPabqQ5l8 +1LHPk2jbuZShy7gFWKRIb0FV0yYlavT1Pv6csbLerBVSZhZNQNutft+uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFINK2EOkmSI/q9DTsHNkhFjVbjjLMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZzByWVE2U1pJai1yME5Pd2MyU0VXTlZ1T01zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5SpMA0G CSqGSIb3DQEBCwUAA4IBAQBUX45sVT4y/tV37tToYNwkq4E4gHff6pa45hwOn3GZ x8mDC2ghtwD37++pjMgM4C9zQ0/NNpFnLK4EpEoD2bOhHDcIHCw8IMp5BFCz3yQ3 wdkNc177c7NL9IYkVLTNFtYJSFkG8wbjeIVBhZGYEKy+3EScT/pX8D99q3m1AWXg t1dBIAXp/HZ1O5W+yP6Fvu/fa56dRTWnWRQyoY/ED9m1m306A3pWTu9Eg5gxsGlQ WY1912dle9eRMmB7Uy26405i6gj/HoItMvxNQNVxN90yqTmE4aPzKYfma23YKL5W q2VDSGLKVlKDKHygrNHocziXrNuK6w2ybDmw4Whu3umo -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:39 2026 by rpki-client