This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zqN9vdf3WLB13EeTfbaL6Iua8mc.roa File: zqN9vdf3WLB13EeTfbaL6Iua8mc.roa (raw, json) Hash identifier: m+9jrvhBDAf5KVdj/6q3av42iobBn71vUSAw9zp6ljY= Subject key identifier: CE:A3:7D:BD:D7:F7:58:B0:75:DC:47:93:7D:B6:8B:E8:8B:9A:F2:67 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F1F7C26CA39F74DFC12E124FA472 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zqN9vdf3WLB13EeTfbaL6Iua8mc.roa Signing time: Fri 02 Jan 2026 16:22:57 +0000 ROA not before: Fri 02 Jan 2026 16:22:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202353 IP address blocks: 31.148.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f1:f7:c2:6c:a3:9f:74:df:c1:2e:12:4f:a4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cea37dbdd7f758b075dc47937db68be88b9af267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:33:5b:61:35:80:0d:89:e5:6f:26:b4:6d: 07:6b:59:30:be:1e:52:b7:aa:6d:8c:24:17:0c:f3: 27:77:d6:25:8b:ee:b4:7b:36:77:b9:de:f7:72:50: af:36:4f:d4:73:e7:fa:d0:ed:b1:22:e7:e0:32:54: 6a:91:d0:85:57:f4:53:8f:05:e7:e2:d0:f0:18:dd: 26:5d:d0:8b:c8:5a:cd:d3:e7:82:e4:a4:d3:a6:d1: 62:19:58:c0:c1:20:1f:00:35:f2:4f:f3:3a:ea:55: 54:30:53:52:e0:b7:1e:09:fe:8d:01:6c:54:ae:3a: 5d:2e:16:f5:61:de:b5:7a:90:01:6e:57:f4:b8:86: 93:b9:22:cd:79:be:70:5c:1e:3d:3b:f0:f0:07:b2: ce:af:21:27:ff:93:2a:d6:3e:1b:2e:c6:66:48:df: 96:65:e5:f2:bb:ee:18:9f:07:a4:4b:cc:84:9e:94: de:c7:5e:2a:36:b9:b7:9e:a0:3e:b7:8a:d9:33:46: 85:db:52:16:82:93:a0:a4:93:e5:61:f5:41:a6:69: e7:b6:cc:02:ec:6e:d8:ea:3a:3f:84:37:67:e9:6f: 6e:41:09:70:fe:6b:79:fe:96:7f:9f:04:23:f0:10: c4:45:22:a7:6e:d5:77:98:7e:21:4b:33:d6:9e:11: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A3:7D:BD:D7:F7:58:B0:75:DC:47:93:7D:B6:8B:E8:8B:9A:F2:67 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/zqN9vdf3WLB13EeTfbaL6Iua8mc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.168.0/24 Signature Algorithm: sha256WithRSAEncryption 60:e5:e9:33:5f:58:81:05:13:41:4c:ae:d8:1d:45:64:f5:80: 81:93:4b:bd:22:e0:f8:90:9b:1f:c9:8e:40:70:c7:59:2e:1f: f4:e5:69:8b:dc:94:e9:7d:fb:db:58:21:9f:c4:ad:e2:12:11: a8:8d:0f:31:1e:e2:1f:df:8d:8a:c4:c7:90:c9:18:07:06:c7: 8f:d4:e8:6c:11:f7:16:da:45:a8:44:c5:d9:63:a7:13:96:40: 58:22:5d:4f:dc:46:ce:81:88:d1:95:9f:03:6c:c9:51:a7:4c: b1:2a:1e:88:93:f5:8b:cf:db:6d:98:35:59:b6:0e:bf:71:6f: bf:c3:0d:90:93:27:b8:2b:cf:7c:19:17:be:95:63:4f:3b:5a: 89:44:07:77:a0:44:eb:56:af:b9:96:51:c6:35:41:48:49:10: e2:4e:d8:e1:51:8b:60:dd:48:37:26:5e:c9:89:cd:da:9e:df: 67:76:1a:c4:9a:99:73:cb:84:5d:20:4b:06:8c:03:0c:0d:15: 0f:88:6c:a1:b0:f1:61:9d:fd:3d:17:4b:39:4a:b4:fd:14:31: 8a:57:4b:9b:5d:03:8d:95:0a:bb:58:54:87:41:f0:47:16:57: 37:f9:93:31:d6:26:91:e1:ee:74:2e:26:ac:46:3f:4a:46:8e: b4:78:bc:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPH3wmyjn3TfwS4ST6RyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWEzN2RiZGQ3Zjc1OGIwNzVkYzQ3OTM3ZGI2OGJlODhiOWFmMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll8zW2E1gA2J5W8mtG0Ha1kwvh5S t6ptjCQXDPMnd9Yli+60ezZ3ud73clCvNk/Uc+f60O2xIufgMlRqkdCFV/RTjwXn 4tDwGN0mXdCLyFrN0+eC5KTTptFiGVjAwSAfADXyT/M66lVUMFNS4LceCf6NAWxU rjpdLhb1Yd61epABblf0uIaTuSLNeb5wXB49O/DwB7LOryEn/5Mq1j4bLsZmSN+W ZeXyu+4YnwekS8yEnpTex14qNrm3nqA+t4rZM0aF21IWgpOgpJPlYfVBpmnntswC 7G7Y6jo/hDdn6W9uQQlw/mt5/pZ/nwQj8BDERSKnbtV3mH4hSzPWnhE7VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM6jfb3X91iwddxHk322i+iLmvJnMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvenFOOXZkZjNXTEIxM0VlVGZiYUw2SXVhOG1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5SoMA0G CSqGSIb3DQEBCwUAA4IBAQBg5ekzX1iBBRNBTK7YHUVk9YCBk0u9IuD4kJsfyY5A cMdZLh/05WmL3JTpffvbWCGfxK3iEhGojQ8xHuIf342KxMeQyRgHBseP1OhsEfcW 2kWoRMXZY6cTlkBYIl1P3EbOgYjRlZ8DbMlRp0yxKh6Ik/WLz9ttmDVZtg6/cW+/ ww2Qkye4K898GRe+lWNPO1qJRAd3oETrVq+5llHGNUFISRDiTtjhUYtg3Ug3Jl7J ic3ant9ndhrEmplzy4RdIEsGjAMMDRUPiGyhsPFhnf09F0s5SrT9FDGKV0ubXQON lQq7WFSHQfBHFlc3+ZMx1iaR4e50LiasRj9KRo60eLwn -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:27 2026 by rpki-client