This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/T9ukIpeE8FQqySiWWIvM8tmpTMI.roa File: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (raw, json) Hash identifier: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM= Subject key identifier: 4F:DB:A4:22:97:84:F0:54:2A:C9:28:96:58:8B:CC:F2:D9:A9:4C:C2 Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 019B7DCB60780066AAAE4C7E3B53D574A0A2 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/T9ukIpeE8FQqySiWWIvM8tmpTMI.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211398 IP address blocks: 31.24.249.0/24 maxlen: 32 2001:678:f30::/48 maxlen: 48 2a12:4940::/32 maxlen: 48 2a12:4942::/31 maxlen: 48 2a12:4942:174::/48 maxlen: 48 2a12:4946:1600::/48 maxlen: 48 2a12:4946:1650::/48 maxlen: 48 2a12:4946:1655::/48 maxlen: 48 2a12:4946:1658::/48 maxlen: 48 2a12:4946:1700::/48 maxlen: 48 2a12:4946:1800::/48 maxlen: 48 2a12:4946:1900::/48 maxlen: 48 2a12:4946:3000::/48 maxlen: 48 2a12:4946:3005::/48 maxlen: 48 2a12:4946:6960::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:60:78:00:66:aa:ae:4c:7e:3b:53:d5:74:a0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fdba4229784f0542ac92896588bccf2d9a94cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:4f:f7:23:34:29:fc:fa:79:07:a8:14:76: 9a:5c:da:03:0d:37:bd:f9:6d:9f:4e:94:a6:50:6d: 4c:8d:9b:66:b0:8c:e2:8e:72:c2:ab:89:88:90:b5: dc:ce:2a:8a:4d:e5:62:da:12:15:38:5d:74:0a:ba: 27:9c:bb:e0:55:2d:df:06:56:0c:79:bc:8c:be:c2: 9b:20:e7:2c:64:ae:66:7b:15:07:d6:95:5d:d6:92: a0:d3:98:99:68:04:19:72:dc:65:2a:0e:86:aa:cc: bf:bd:3d:5f:77:27:93:55:a0:4d:89:7c:88:99:29: aa:4a:53:cf:b2:85:8c:54:16:28:66:e4:83:02:ad: 31:25:29:0a:3e:8a:fb:18:db:9b:0e:53:07:48:5d: a5:9c:12:9d:6e:10:cd:d7:a1:83:f6:eb:87:fe:dc: ba:3b:eb:74:60:e2:e4:b1:46:f4:5c:a7:31:d0:16: 99:33:e6:13:16:41:79:23:2c:e1:ea:d6:c9:52:1d: a1:e4:3c:91:01:fc:4a:49:3a:3a:f5:67:d5:c2:df: 87:10:09:c5:ad:66:08:37:4a:e0:a5:e7:57:93:c7: 47:ff:66:51:28:25:68:aa:91:08:ab:11:9b:93:ed: db:ba:6c:b0:6f:ce:38:a7:1f:c0:89:4b:cb:61:5c: 1d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DB:A4:22:97:84:F0:54:2A:C9:28:96:58:8B:CC:F2:D9:A9:4C:C2 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/T9ukIpeE8FQqySiWWIvM8tmpTMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.249.0/24 IPv6: 2001:678:f30::/48 2a12:4940::/32 2a12:4942::/31 2a12:4946:1600::/48 2a12:4946:1650::/48 2a12:4946:1655::/48 2a12:4946:1658::/48 2a12:4946:1700::/48 2a12:4946:1800::/48 2a12:4946:1900::/48 2a12:4946:3000::/48 2a12:4946:3005::/48 2a12:4946:6960::/44 Signature Algorithm: sha256WithRSAEncryption bf:be:87:7e:1b:70:7b:a9:2a:20:ad:52:54:b8:8c:eb:80:0e: dc:38:69:31:8c:e0:9d:7c:2d:50:b3:0c:46:80:ac:f3:76:fd: 58:59:0b:85:7f:2d:46:8d:f1:e7:dc:8c:e1:02:87:11:c7:33: ba:1f:90:f7:5b:5e:df:03:21:7f:9f:b2:e3:03:62:0d:d1:95: 9d:13:c4:09:72:eb:be:4e:12:5d:f8:1e:30:d0:c3:92:86:03: a2:d3:49:c1:b9:43:af:87:78:1d:59:ab:32:47:63:cb:49:b5: 2b:ba:40:c3:da:c0:c4:34:a3:6a:70:cf:11:35:ec:16:a5:df: ea:b7:cb:bf:df:ac:95:14:a7:1f:67:21:8d:be:2a:ed:f8:b3: 7a:51:d8:8c:bb:81:35:71:10:f8:02:98:4a:1d:d2:1f:b8:2b: 02:7f:14:54:b8:64:1d:fd:26:46:a4:7e:05:fe:54:54:d9:4e: 1f:1f:df:a3:5b:67:a3:d3:5a:48:6e:01:d9:35:f2:dc:39:42: a0:db:27:50:b3:20:e0:4a:4f:e3:a9:e4:00:9d:cd:56:ae:4a: a6:a8:50:34:de:d1:6c:79:fd:be:e8:30:a0:77:ac:cd:73:af: 2d:d7:35:4d:a6:2c:7f:2e:5d:72:e3:c3:0c:08:e0:66:68:5e: 42:b4:68:67 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt9y2B4AGaqrkx+O1PVdKCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmRiYTQyMjk3ODRmMDU0MmFjOTI4OTY1ODhiY2NmMmQ5YTk0Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApstP9yM0Kfz6eQeoFHaaXNoDDTe9 +W2fTpSmUG1MjZtmsIzijnLCq4mIkLXcziqKTeVi2hIVOF10CronnLvgVS3fBlYM ebyMvsKbIOcsZK5mexUH1pVd1pKg05iZaAQZctxlKg6Gqsy/vT1fdyeTVaBNiXyI mSmqSlPPsoWMVBYoZuSDAq0xJSkKPor7GNubDlMHSF2lnBKdbhDN16GD9uuH/ty6 O+t0YOLksUb0XKcx0BaZM+YTFkF5Iyzh6tbJUh2h5DyRAfxKSTo69WfVwt+HEAnF rWYIN0rgpedXk8dH/2ZRKCVoqpEIqxGbk+3bumywb844px/AiUvLYVwdHwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFE/bpCKXhPBUKskolliLzPLZqUzCMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvVDl1a0lwZUU4RlFxeVNpV1dJdk04dG1wVE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzAMBAIAATAGAwQAHxj5 MHcEAgACMHEDBwAgAQZ4DzADBQAqEklAAwUBKhJJQgMHACoSSUYWAAMHACoSSUYW UAMHACoSSUYWVQMHACoSSUYWWAMHACoSSUYXAAMHACoSSUYYAAMHACoSSUYZAAMH ACoSSUYwAAMHACoSSUYwBQMHBCoSSUZpYDANBgkqhkiG9w0BAQsFAAOCAQEAv76H fhtwe6kqIK1SVLiM64AO3DhpMYzgnXwtULMMRoCs83b9WFkLhX8tRo3x59yM4QKH Ecczuh+Q91te3wMhf5+y4wNiDdGVnRPECXLrvk4SXfgeMNDDkoYDotNJwblDr4d4 HVmrMkdjy0m1K7pAw9rAxDSjanDPETXsFqXf6rfLv9+slRSnH2chjb4q7fizelHY jLuBNXEQ+AKYSh3SH7grAn8UVLhkHf0mRqR+Bf5UVNlOHx/fo1tno9NaSG4B2TXy 3DlCoNsnULMg4EpP46nkAJ3NVq5KpqhQNN7RbHn9vugwoHeszXOvLdc1TaYsfy5d cuPDDAjgZmheQrRoZw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:19 2026 by rpki-client