This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ib1O8UJni2wTeBg-4vywlztMFa0.roa File: ib1O8UJni2wTeBg-4vywlztMFa0.roa (raw, json) Hash identifier: tCiteu8ei+K8/7ggfF70QLB+Q2TYBilnKrvAxdhj1SA= Subject key identifier: 89:BD:4E:F1:42:67:8B:6C:13:78:18:3E:E2:FC:B0:97:3B:4C:15:AD Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B7430BC0736A5ABFF523F663E489 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ib1O8UJni2wTeBg-4vywlztMFa0.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49393 IP address blocks: 31.148.22.0/24 maxlen: 24 93.171.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b7:43:0b:c0:73:6a:5a:bf:f5:23:f6:63:e4:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89bd4ef142678b6c1378183ee2fcb0973b4c15ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:69:bd:d1:bc:99:1e:ca:55:27:b6:34:a4:e3: 10:2a:23:73:e0:b1:a2:84:b2:09:5a:3d:37:b4:32: 4f:1c:e9:41:90:f1:84:cc:f5:08:e4:ac:be:04:c7: 8a:fe:ba:37:d0:0a:f2:5f:94:e9:ea:3c:d8:ce:95: 83:18:37:f6:8e:bc:85:7a:ed:aa:09:7f:a4:32:ad: b7:33:b1:12:32:66:41:b9:eb:84:19:d8:d3:c3:77: 73:0e:a0:30:ae:21:29:dd:b6:94:17:0f:f1:47:df: 6a:8f:78:cc:96:1a:6e:73:62:36:3d:02:31:da:c6: f6:db:d6:0b:23:b1:5c:dd:ea:e0:d6:32:ae:de:ba: 96:f2:ae:23:ac:f1:a8:e2:49:48:dc:bb:12:bd:55: 8d:b1:4b:72:74:e6:1c:d1:e0:aa:00:b2:03:75:f8: 28:55:e4:c2:2f:34:2c:d3:ad:7c:1a:cf:80:10:c1: c2:8b:87:c3:19:7d:f8:2d:7d:df:de:51:65:8f:19: 79:ff:d2:2f:69:60:06:74:2b:0b:d5:6b:87:49:a6: 50:b2:34:22:40:e4:eb:07:40:29:74:ce:75:0b:b9: 0b:54:cf:c2:d2:3f:f8:89:a8:4a:cb:91:09:6d:c1: e9:94:ed:a0:1d:a9:0f:68:31:76:d4:1a:fe:09:0c: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:4E:F1:42:67:8B:6C:13:78:18:3E:E2:FC:B0:97:3B:4C:15:AD X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ib1O8UJni2wTeBg-4vywlztMFa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.22.0/24 93.171.153.0/24 Signature Algorithm: sha256WithRSAEncryption 28:4b:04:12:c1:bb:c8:9f:87:34:9b:26:78:5c:b6:b7:a9:78: 43:b9:75:39:72:e7:5e:46:ba:99:f9:98:ae:46:bb:cc:34:1d: 62:48:1d:ee:a5:ce:0b:83:a7:73:3c:8b:7f:18:49:c6:04:9b: 0a:1c:ae:e8:88:db:94:50:68:2f:01:65:29:35:7c:0a:ea:cc: 97:df:b1:73:b0:82:75:6e:46:f0:f9:5d:b6:a9:bf:2a:fe:7e: 8c:3b:9e:11:3e:40:a4:41:52:fa:fe:3c:d8:ae:17:9f:dc:ec: 7a:88:19:cb:6f:5c:b7:2b:71:e6:39:de:6f:31:78:36:7d:42: d5:4b:f9:6d:67:7b:d7:1c:0b:8e:1c:03:b2:3d:4d:b6:7a:8a: 04:ba:58:85:db:2c:81:bd:ae:4d:50:a0:93:7d:37:80:a1:c1: b6:e7:bd:8a:c3:6b:c5:34:92:37:0d:ac:27:07:f8:9f:4e:88: 4c:ab:4c:a8:41:bb:1d:0e:7a:06:f0:8c:a5:f5:d6:b9:8b:fb: a1:1e:19:8f:ba:15:18:3c:48:dc:62:a6:1b:a5:fc:ac:e2:22: 3c:83:c2:c0:51:0d:45:88:04:01:fc:b5:16:a8:43:f1:ed:54: a8:a8:0c:4b:ec:88:7f:a4:1e:f3:99:15:5c:14:1c:38:c4:fe: 3b:84:33:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hLdDC8Bzalq/9SP2Y+SJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWJkNGVmMTQyNjc4YjZjMTM3ODE4M2VlMmZjYjA5NzNiNGMxNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gm90byZHspVJ7Y0pOMQKiNz4LGi hLIJWj03tDJPHOlBkPGEzPUI5Ky+BMeK/ro30AryX5Tp6jzYzpWDGDf2jryFeu2q CX+kMq23M7ESMmZBueuEGdjTw3dzDqAwriEp3baUFw/xR99qj3jMlhpuc2I2PQIx 2sb229YLI7Fc3erg1jKu3rqW8q4jrPGo4klI3LsSvVWNsUtydOYc0eCqALIDdfgo VeTCLzQs0618Gs+AEMHCi4fDGX34LX3f3lFljxl5/9IvaWAGdCsL1WuHSaZQsjQi QOTrB0ApdM51C7kLVM/C0j/4iahKy5EJbcHplO2gHakPaDF21Br+CQxBrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIm9TvFCZ4tsE3gYPuL8sJc7TBWtMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvaWIxTzhVSm5pMndUZUJnLTR2eXdsenRNRmEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH5QWAwQA XauZMA0GCSqGSIb3DQEBCwUAA4IBAQAoSwQSwbvIn4c0myZ4XLa3qXhDuXU5cude RrqZ+ZiuRrvMNB1iSB3upc4Lg6dzPIt/GEnGBJsKHK7oiNuUUGgvAWUpNXwK6syX 37FzsIJ1bkbw+V22qb8q/n6MO54RPkCkQVL6/jzYrhef3Ox6iBnLb1y3K3HmOd5v MXg2fULVS/ltZ3vXHAuOHAOyPU22eooEuliF2yyBva5NUKCTfTeAocG2572Kw2vF NJI3DawnB/ifTohMq0yoQbsdDnoG8Iyl9da5i/uhHhmPuhUYPEjcYqYbpfys4iI8 g8LAUQ1FiAQB/LUWqEPx7VSoqAxL7Ih/pB7zmRVcFBw4xP47hDO/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:48 2026 by rpki-client