This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jr6x6aipjT8ifcfA7vO5JJZA9FM.roa File: jr6x6aipjT8ifcfA7vO5JJZA9FM.roa (raw, json) Hash identifier: 2aGUJMXJiSIPVoYSuqzV/NjjSgesqAsio3Hytb2wCCI= Subject key identifier: 8E:BE:B1:E9:A8:A9:8D:3F:22:7D:C7:C0:EE:F3:B9:24:96:40:F4:53 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A50C7B30210A7043449BFCCFFD57 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jr6x6aipjT8ifcfA7vO5JJZA9FM.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43301 IP address blocks: 31.148.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a5:0c:7b:30:21:0a:70:43:44:9b:fc:cf:fd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ebeb1e9a8a98d3f227dc7c0eef3b9249640f453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:b5:8a:ff:e4:48:6e:64:17:98:2e:df:3b: 58:c6:91:20:ca:39:1a:ad:2c:00:cd:72:4d:3b:1c: 74:f3:83:e5:3e:20:99:48:2c:8b:86:f8:ba:fc:75: 15:c2:ad:03:bc:da:8b:03:a3:56:06:79:f4:22:44: b4:47:73:87:5e:7f:2d:2d:eb:c5:5f:06:23:a9:57: 88:cf:6e:76:c4:b3:2c:f4:b4:40:87:7c:51:24:6e: 60:dc:19:e5:d7:53:11:ec:f7:8a:7c:67:12:d3:88: 93:8e:5e:21:71:ff:1e:52:9d:77:b7:98:91:15:ce: d5:19:d9:74:a0:0e:2b:8c:d8:62:4a:8c:d6:44:70: 8d:f5:a8:ef:9f:c6:fd:b7:c7:a8:3f:9f:06:41:ff: 96:dc:a6:f2:35:e0:89:32:5e:29:2f:da:6c:d6:f0: e5:f4:b5:c1:67:d3:9a:59:63:ff:5e:0c:c2:5d:53: 64:5f:e7:87:da:75:ca:3b:16:b7:12:fd:4b:ff:21: 24:85:ca:91:ce:70:c5:c6:4a:8b:0a:96:e2:f4:8f: f1:a9:67:a9:6e:32:5f:5f:bf:f1:f9:dd:a3:16:f9: 33:1c:c5:99:f2:9a:77:62:81:c1:0d:05:6f:ed:fd: c3:58:b0:5d:e9:95:d1:52:12:af:ff:10:d3:a2:8e: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BE:B1:E9:A8:A9:8D:3F:22:7D:C7:C0:EE:F3:B9:24:96:40:F4:53 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jr6x6aipjT8ifcfA7vO5JJZA9FM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.206.0/23 Signature Algorithm: sha256WithRSAEncryption 64:48:eb:1a:e9:27:a8:4f:0c:6d:62:12:f4:6e:3e:bf:89:20: 37:b0:e1:3e:4c:6b:fa:93:cf:21:89:93:86:72:37:c4:e8:36: 0e:b9:10:8d:ee:b7:0e:74:cb:57:f2:3e:13:e0:21:97:b6:1a: f7:99:15:67:87:c8:41:5f:39:a3:8a:74:aa:9f:1d:c5:fa:6e: 4b:89:c6:6d:8c:86:70:d9:4b:72:46:2e:52:cf:e1:6a:94:42: 86:6e:b1:a6:6c:14:a7:69:0f:1e:64:2c:ab:52:ef:9b:5e:a4: c2:d9:f9:7b:66:81:12:2e:88:a0:e0:70:4e:c9:7b:4c:31:c6: d6:1c:01:d1:74:f9:89:16:e2:9e:77:ee:49:f0:08:a5:a9:16: 70:86:f1:6b:62:77:76:cc:b2:be:0f:7b:3f:21:47:98:2c:2d: 6c:0c:72:ac:1b:51:3b:6e:a8:70:57:0b:9b:4e:70:e2:53:e1: c9:8a:09:d7:b6:c6:b9:9a:85:8f:30:66:e5:8c:1c:a5:fa:b6: 8a:79:d3:32:a3:7f:de:2f:7e:59:52:86:14:b0:46:86:d1:de: fa:68:26:f1:5d:b7:95:20:32:fc:74:c0:17:dc:50:71:c8:39: 0f:93:1e:2f:28:b9:a0:bc:fa:60:6a:bd:29:5c:ec:b3:7d:58: 98:a9:a1:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKUMezAhCnBDRJv8z/1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWJlYjFlOWE4YTk4ZDNmMjI3ZGM3YzBlZWYzYjkyNDk2NDBmNDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylm1iv/kSG5kF5gu3ztYxpEgyjka rSwAzXJNOxx084PlPiCZSCyLhvi6/HUVwq0DvNqLA6NWBnn0IkS0R3OHXn8tLevF XwYjqVeIz252xLMs9LRAh3xRJG5g3Bnl11MR7PeKfGcS04iTjl4hcf8eUp13t5iR Fc7VGdl0oA4rjNhiSozWRHCN9ajvn8b9t8eoP58GQf+W3KbyNeCJMl4pL9ps1vDl 9LXBZ9OaWWP/XgzCXVNkX+eH2nXKOxa3Ev1L/yEkhcqRznDFxkqLCpbi9I/xqWep bjJfX7/x+d2jFvkzHMWZ8pp3YoHBDQVv7f3DWLBd6ZXRUhKv/xDToo6pQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI6+semoqY0/In3HwO7zuSSWQPRTMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvanI2eDZhaXBqVDhpZmNmQTd2TzVKSlpBOUZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH5TOMA0G CSqGSIb3DQEBCwUAA4IBAQBkSOsa6SeoTwxtYhL0bj6/iSA3sOE+TGv6k88hiZOG cjfE6DYOuRCN7rcOdMtX8j4T4CGXthr3mRVnh8hBXzmjinSqnx3F+m5LicZtjIZw 2UtyRi5Sz+FqlEKGbrGmbBSnaQ8eZCyrUu+bXqTC2fl7ZoESLoig4HBOyXtMMcbW HAHRdPmJFuKed+5J8AilqRZwhvFrYnd2zLK+D3s/IUeYLC1sDHKsG1E7bqhwVwub TnDiU+HJignXtsa5moWPMGbljByl+raKedMyo3/eL35ZUoYUsEaG0d76aCbxXbeV IDL8dMAX3FBxyDkPkx4vKLmgvPpgar0pXOyzfViYqaFY -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:16 2026 by rpki-client