This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/44aGJKnw5Hesx37y7qMcSZ1iMsI.roa File: 44aGJKnw5Hesx37y7qMcSZ1iMsI.roa (raw, json) Hash identifier: gXCpn8JpVZnLs233LPUlWa8pDJaZD06hjtiYiLo5D/g= Subject key identifier: E3:86:86:24:A9:F0:E4:77:AC:C7:7E:F2:EE:A3:1C:49:9D:62:32:C2 Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F139E980B26D8C8AC79BA64DF329FF4 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/44aGJKnw5Hesx37y7qMcSZ1iMsI.roa Signing time: Fri 02 Jan 2026 14:19:10 +0000 ROA not before: Fri 02 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56940 IP address blocks: 31.131.40.0/22 maxlen: 22 31.131.46.0/24 maxlen: 24 31.131.47.0/24 maxlen: 24 91.229.12.0/23 maxlen: 23 91.229.14.0/23 maxlen: 23 91.239.164.0/23 maxlen: 23 91.239.166.0/23 maxlen: 23 176.113.100.0/22 maxlen: 22 176.114.56.0/21 maxlen: 21 193.242.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9e:98:0b:26:d8:c8:ac:79:ba:64:df:32:9f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3868624a9f0e477acc77ef2eea31c499d6232c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6b:75:7a:9c:31:42:bb:aa:d7:c7:be:d9:24: 56:58:f6:0f:77:cc:ef:69:84:db:1b:9c:e2:32:87: 52:a7:b8:81:a7:b7:79:7e:f9:89:5e:ff:4d:81:a1: 30:cb:75:61:e0:79:d7:58:74:07:5b:3f:81:86:32: c3:a4:4b:8d:28:ae:a2:aa:42:e0:87:a1:ab:ba:c9: 4e:b1:58:68:b9:07:b5:11:05:2b:a1:f2:81:53:46: 1e:56:e7:78:bc:ec:ee:3d:a6:35:23:f7:3d:47:b4: 1e:f2:bf:65:a5:bf:10:45:0a:07:38:da:99:ef:1c: 23:75:c3:62:11:15:e5:a6:e3:ba:6f:2b:8f:d5:22: ed:06:87:31:ae:7b:80:16:0a:35:85:a1:d0:38:27: 88:cc:1a:ec:0b:ef:f7:d3:17:b5:51:2a:13:02:6c: a1:66:d9:fc:68:01:48:8f:5d:44:47:90:72:18:a7: 80:89:99:c0:00:75:e9:89:2e:50:a5:f7:ff:64:24: fa:b5:12:a5:7d:31:c4:d5:99:71:a7:c5:87:1e:28: 0b:c1:2b:b4:78:a4:4b:c3:13:82:54:98:01:3c:0c: 89:47:33:85:86:d7:43:4a:22:c6:4d:b9:fd:63:d0: 98:92:89:33:84:42:8e:8f:83:62:93:03:2f:8d:94: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:86:86:24:A9:F0:E4:77:AC:C7:7E:F2:EE:A3:1C:49:9D:62:32:C2 X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/44aGJKnw5Hesx37y7qMcSZ1iMsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.131.40.0/22 31.131.46.0/23 91.229.12.0/22 91.239.164.0/22 176.113.100.0/22 176.114.56.0/21 193.242.196.0/22 Signature Algorithm: sha256WithRSAEncryption 37:6d:6e:50:b8:5a:65:38:2a:da:af:5e:99:fe:5d:e8:da:e1: b0:1c:74:ce:85:ec:f5:60:01:1f:f1:63:a4:49:5a:aa:a9:62: a5:bd:ef:b1:27:00:db:c1:9c:f8:51:a3:7c:1e:c0:2c:81:6d: c8:2e:42:bb:55:0a:ef:ae:8a:98:ad:59:dc:ba:38:a4:57:7e: 25:b7:ca:48:55:5e:06:60:aa:b3:d6:ed:6a:c5:54:a9:83:73: 00:c1:f7:98:eb:5a:50:96:62:15:bc:88:ec:13:97:84:a0:98: 7e:2b:63:3b:c2:7f:28:09:7c:7a:39:e6:6c:7d:9e:77:50:ba: 24:b8:01:f8:d1:b0:4e:73:4b:a9:8b:5f:f8:1f:ec:1e:95:57: f1:61:21:55:18:b6:c4:c8:fd:c2:fb:38:f0:ab:8d:92:13:50: bc:4b:b7:a3:dc:43:75:41:ae:29:93:b6:bd:91:6e:e8:f8:c6: 7d:ae:7d:ed:39:9d:a8:93:ad:db:a6:b2:54:2d:d9:c1:15:11: 41:e0:1e:8b:67:1e:62:0c:29:09:7e:a5:50:67:ee:17:40:11: b8:58:a4:d0:0e:aa:f9:c9:78:60:6b:3c:14:8a:78:8a:22:eb: 68:5f:b1:5f:bf:31:4c:0d:0a:d9:4e:9f:7f:b3:b8:f0:04:8c: 89:25:fa:d1 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt/E56YCybYyKx5umTfMp/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzg2ODYyNGE5ZjBlNDc3YWNjNzdlZjJlZWEzMWM0OTlkNjIzMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wt1epwxQruq18e+2SRWWPYPd8zv aYTbG5ziModSp7iBp7d5fvmJXv9NgaEwy3Vh4HnXWHQHWz+BhjLDpEuNKK6iqkLg h6GruslOsVhouQe1EQUrofKBU0YeVud4vOzuPaY1I/c9R7Qe8r9lpb8QRQoHONqZ 7xwjdcNiERXlpuO6byuP1SLtBocxrnuAFgo1haHQOCeIzBrsC+/30xe1USoTAmyh Ztn8aAFIj11ER5ByGKeAiZnAAHXpiS5Qpff/ZCT6tRKlfTHE1Zlxp8WHHigLwSu0 eKRLwxOCVJgBPAyJRzOFhtdDSiLGTbn9Y9CYkokzhEKOj4NikwMvjZTR0QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFOOGhiSp8OR3rMd+8u6jHEmdYjLCMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvNDRhR0pLbnc1SGVzeDM3eTdxTWNTWjFpTXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCH4MoAwQB H4MuAwQCW+UMAwQCW++kAwQCsHFkAwQDsHI4AwQCwfLEMA0GCSqGSIb3DQEBCwUA A4IBAQA3bW5QuFplOCrar16Z/l3o2uGwHHTOhez1YAEf8WOkSVqqqWKlve+xJwDb wZz4UaN8HsAsgW3ILkK7VQrvroqYrVncujikV34lt8pIVV4GYKqz1u1qxVSpg3MA wfeY61pQlmIVvIjsE5eEoJh+K2M7wn8oCXx6OeZsfZ53ULokuAH40bBOc0upi1/4 H+welVfxYSFVGLbEyP3C+zjwq42SE1C8S7ej3EN1Qa4pk7a9kW7o+MZ9rn3tOZ2o k63bprJULdnBFRFB4B6LZx5iDCkJfqVQZ+4XQBG4WKTQDqr5yXhgazwUiniKIuto X7FfvzFMDQrZTp9/s7jwBIyJJfrR -----END CERTIFICATE-----Generated at Sun Jan 25 20:50:08 2026 by rpki-client