This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xqBG_xkDbpeYw5DUM_Tl5ealLb0.roa File: xqBG_xkDbpeYw5DUM_Tl5ealLb0.roa (raw, json) Hash identifier: AfEDH8wisZOqZb3mG8kHJuTxh3eP4IqM593iL6bWmBY= Subject key identifier: C6:A0:46:FF:19:03:6E:97:98:C3:90:D4:33:F4:E5:E5:E6:A5:2D:BD Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E0789E924B0275DC199B4DB5AD21 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xqBG_xkDbpeYw5DUM_Tl5ealLb0.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61372 IP address blocks: 31.148.12.0/22 maxlen: 24 95.47.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e0:78:9e:92:4b:02:75:dc:19:9b:4d:b5:ad:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6a046ff19036e9798c390d433f4e5e5e6a52dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:61:f1:fe:a4:a9:7d:c9:a3:a4:b5:c0:cc: 6b:86:9d:d9:f3:90:87:b2:f3:c6:e6:9b:7d:f2:86: a2:09:db:5f:e7:ae:6f:42:2c:72:50:df:b6:47:d5: e2:f3:10:b2:e1:bf:0e:7b:12:de:b8:38:4d:e5:6f: c5:2e:7d:13:68:d1:86:04:5c:09:a9:6e:d1:55:05: e3:0c:99:04:fb:b2:f3:03:dc:ab:42:71:4a:69:e4: f1:7b:27:4a:fd:72:03:58:24:f0:1f:1b:a8:01:d4: 56:7e:b3:cc:f4:52:85:01:66:55:d3:02:93:69:c5: b9:95:13:2a:5c:ab:ac:5a:85:46:43:47:af:a1:3e: 56:5b:58:4f:58:5a:ba:f9:3b:1e:8b:24:02:4a:92: 0d:f1:55:88:fc:48:52:5a:52:4c:88:9a:38:0d:d9: 49:f5:fa:a8:b5:8a:6c:f7:cf:32:2f:6d:6d:42:78: 1b:8f:ba:a0:5b:7e:2c:03:3a:b6:a3:a9:99:25:82: 09:ef:a7:52:57:49:6f:50:22:10:a6:d5:ba:b4:cc: cc:ca:05:f2:89:b3:24:2f:34:62:46:cb:86:69:71: e6:7b:3f:a3:1d:66:f5:e3:20:97:64:8b:4a:0e:e2: 4e:6e:53:8e:ae:81:5f:47:a1:25:50:db:14:12:a6: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A0:46:FF:19:03:6E:97:98:C3:90:D4:33:F4:E5:E5:E6:A5:2D:BD X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xqBG_xkDbpeYw5DUM_Tl5ealLb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.12.0/22 95.47.180.0/22 Signature Algorithm: sha256WithRSAEncryption 60:5c:78:4c:20:3b:46:8f:29:ae:f6:8b:6c:56:6b:ac:9d:c2: 34:b0:bc:be:67:15:07:a7:f9:f8:ca:0f:2c:04:de:79:6d:d4: 16:49:6f:9b:25:bf:a1:0a:f4:d3:36:09:7c:cd:d6:a1:f0:ea: 16:15:78:20:65:13:c4:01:ba:1a:ff:7e:09:ba:0f:0c:fd:ba: 01:69:3a:d3:69:af:2e:97:a8:7a:b7:e9:44:fe:53:77:c5:95: be:e5:1e:14:4f:a3:e7:9d:bb:5e:3e:de:97:d3:36:72:f9:38: e0:62:50:d3:85:13:82:11:7d:1e:5d:72:5d:00:b0:60:b3:67: 57:f7:f0:28:62:6d:74:fd:ae:b1:74:6f:0c:da:bb:c0:2a:6d: 72:f8:24:47:7a:86:ad:8b:fa:a5:83:2d:b7:86:d4:5f:9a:e9: c1:3a:b6:02:b5:63:91:40:bc:2c:72:83:11:9f:80:a7:1f:89: db:d6:dd:05:42:5e:f8:88:f9:26:74:87:39:5e:39:cc:fd:ab: d1:00:de:6f:7b:b9:00:32:11:d7:a1:92:20:b4:9c:11:c8:6e: 94:48:bf:3f:82:71:1f:a8:74:65:18:29:d5:db:47:ba:2d:d9: 47:57:d4:43:06:de:90:34:3a:32:df:7f:78:cb:0d:b7:23:35: ac:16:d6:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hOB4npJLAnXcGZtNta0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmEwNDZmZjE5MDM2ZTk3OThjMzkwZDQzM2Y0ZTVlNWU2YTUyZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyFh8f6kqX3Jo6S1wMxrhp3Z85CH svPG5pt98oaiCdtf565vQixyUN+2R9Xi8xCy4b8OexLeuDhN5W/FLn0TaNGGBFwJ qW7RVQXjDJkE+7LzA9yrQnFKaeTxeydK/XIDWCTwHxuoAdRWfrPM9FKFAWZV0wKT acW5lRMqXKusWoVGQ0evoT5WW1hPWFq6+TseiyQCSpIN8VWI/EhSWlJMiJo4DdlJ 9fqotYps988yL21tQngbj7qgW34sAzq2o6mZJYIJ76dSV0lvUCIQptW6tMzMygXy ibMkLzRiRsuGaXHmez+jHWb14yCXZItKDuJOblOOroFfR6ElUNsUEqYa/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMagRv8ZA26XmMOQ1DP05eXmpS29MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveHFCR194a0RicGVZdzVEVU1fVGw1ZWFsTGIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH5QMAwQC Xy+0MA0GCSqGSIb3DQEBCwUAA4IBAQBgXHhMIDtGjymu9otsVmusncI0sLy+ZxUH p/n4yg8sBN55bdQWSW+bJb+hCvTTNgl8zdah8OoWFXggZRPEAboa/34Jug8M/boB aTrTaa8ul6h6t+lE/lN3xZW+5R4UT6PnnbtePt6X0zZy+TjgYlDThROCEX0eXXJd ALBgs2dX9/AoYm10/a6xdG8M2rvAKm1y+CRHeoati/qlgy23htRfmunBOrYCtWOR QLwscoMRn4CnH4nb1t0FQl74iPkmdIc5XjnM/avRAN5ve7kAMhHXoZIgtJwRyG6U SL8/gnEfqHRlGCnV20e6LdlHV9RDBt6QNDoy3394yw23IzWsFtbV -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:46 2026 by rpki-client