This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/49ww4rPn3g7MqsmGfDqf0YpDy8s.roa File: 49ww4rPn3g7MqsmGfDqf0YpDy8s.roa (raw, json) Hash identifier: fAAcaoMC+CvPBu2Hms/Nf/sHfWr9TponmPW+VL5Kk7Q= Subject key identifier: E3:DC:30:E2:B3:E7:DE:0E:CC:AA:C9:86:7C:3A:9F:D1:8A:43:CB:CB Certificate issuer: /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Certificate serial: 019B78A251074D24F15F0CC23B4A65DD922F Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/49ww4rPn3g7MqsmGfDqf0YpDy8s.roa Signing time: Thu 01 Jan 2026 08:17:42 +0000 ROA not before: Thu 01 Jan 2026 08:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210016 IP address blocks: 131.117.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:51:07:4d:24:f1:5f:0c:c2:3b:4a:65:dd:92:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3dc30e2b3e7de0eccaac9867c3a9fd18a43cbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:16:e5:d4:95:ac:ac:0c:56:43:17:3e:66: a6:43:3a:5e:4e:55:13:bc:bb:4f:e4:53:e1:a1:75: 5d:99:72:04:1f:e6:e6:dd:9f:5e:dc:60:cf:99:a5: 58:43:07:11:58:e8:ec:18:e5:05:6c:64:34:0e:aa: f6:21:cb:fa:31:cc:c8:a7:6c:63:35:a1:f2:b3:c7: 43:f6:80:e2:1f:69:7e:99:dd:4a:2b:8b:e9:12:c5: 9e:50:86:cd:3a:7e:79:78:e8:ae:63:ef:36:32:ad: 06:74:05:2d:5b:1d:7f:d0:cd:63:44:06:5d:d7:12: d7:1f:73:d1:c1:ca:2c:65:a4:10:ae:66:46:0e:d9: da:1a:cd:f6:95:01:17:12:4e:48:e3:a6:8e:7f:b9: 3e:85:ce:1b:9a:2e:ff:74:38:e3:1a:96:68:32:33: db:6c:d0:16:e7:6c:16:f1:d9:ec:25:f6:ad:37:85: da:e1:2c:15:ae:0e:74:1c:f2:a3:29:c9:e2:b2:31: 31:bd:11:d8:7e:9f:f5:9d:83:56:41:a0:6e:c1:d6: 5f:8c:ee:8f:e4:62:23:5f:f7:ab:ad:be:f8:40:96: 25:f4:82:34:c0:ca:73:9f:1f:1a:9d:b6:f5:da:d3: b2:ae:ab:48:ed:03:0e:b6:cc:e0:dd:76:f2:e2:6e: 72:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DC:30:E2:B3:E7:DE:0E:CC:AA:C9:86:7C:3A:9F:D1:8A:43:CB:CB X509v3 Authority Key Identifier: keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/49ww4rPn3g7MqsmGfDqf0YpDy8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.117.232.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:7a:7f:da:52:5b:8a:94:49:94:66:f7:67:33:3c:4f:ee:dc: cf:19:39:fe:71:eb:7a:83:cf:ed:a5:e0:51:5a:21:22:83:d5: 0a:2d:15:80:fc:91:86:ce:5c:52:32:21:20:7e:c2:f4:19:d9: 5d:e9:31:ef:0c:1e:31:3b:2f:34:9b:cb:78:97:0c:33:36:ad: 3e:d8:98:a7:5c:1e:08:ea:48:b6:a4:43:41:4d:6c:61:81:19: ef:f0:aa:5a:2a:86:9a:0a:25:3f:5e:99:42:49:95:06:e8:2b: 7c:8f:e4:2e:88:f0:cb:72:30:94:ce:98:34:a8:37:b4:3e:e6: 8d:de:8d:96:7b:2a:2d:d1:37:e8:e4:d0:d9:47:15:24:ba:5e: e9:c3:84:a0:02:fc:12:8c:25:aa:5a:44:c4:44:fb:b7:c0:3b: 29:a9:da:19:e3:9f:41:b7:08:09:72:63:85:68:29:e5:67:3f: 82:b2:15:63:ea:b4:d2:b7:a6:9e:a7:ff:df:27:81:e2:cb:1a: a2:1e:0d:63:bc:e5:53:3b:7f:41:5d:4e:6e:0e:a3:4b:91:96: 4c:b1:04:00:a8:cc:7f:f4:28:b7:b4:7a:ab:41:dd:71:9b:96: 3e:66:4e:6c:b1:7a:4a:1b:f9:6e:28:ee:3e:cb:24:14:60:f5: 96:09:2d:55 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4olEHTSTxXwzCO0pl3ZIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OGEwMmQyMGM2YjdkZTM1NzEyNWYzOGIxNzM1Y2ExYjkx Zjg3YjMwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2RjMzBlMmIzZTdkZTBlY2NhYWM5ODY3YzNhOWZkMThhNDNjYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf4W5dSVrKwMVkMXPmamQzpeTlUT vLtP5FPhoXVdmXIEH+bm3Z9e3GDPmaVYQwcRWOjsGOUFbGQ0Dqr2Icv6MczIp2xj NaHys8dD9oDiH2l+md1KK4vpEsWeUIbNOn55eOiuY+82Mq0GdAUtWx1/0M1jRAZd 1xLXH3PRwcosZaQQrmZGDtnaGs32lQEXEk5I46aOf7k+hc4bmi7/dDjjGpZoMjPb bNAW52wW8dnsJfatN4Xa4SwVrg50HPKjKcnisjExvRHYfp/1nYNWQaBuwdZfjO6P 5GIjX/errb74QJYl9II0wMpznx8anbb12tOyrqtI7QMOtszg3Xby4m5ycQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOPcMOKz594OzKrJhnw6n9GKQ8vLMB8GA1UdIwQY MBaAFPmKAtIMa33jVxJfOLFzXKG5H4ezMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Zb0MwZ3hyZmVOWEVsODRzWE5jb2JrZmg3TS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMz LWFjZTNkNjc1ZDNjZC8xLzQ5d3c0clBuM2c3TXFzbUdmRHFmMFlwRHk4cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2IvYTkyMDZlLWMxZTEtNGMxNS05NTMzLWFjZTNkNjc1ZDNj ZC8xLzEtWW9DMGd4cmZlTlhFbDg0c1hOY29ia2ZoN00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDdegw DQYJKoZIhvcNAQELBQADggEBAGx6f9pSW4qUSZRm92czPE/u3M8ZOf5x63qDz+2l 4FFaISKD1QotFYD8kYbOXFIyISB+wvQZ2V3pMe8MHjE7LzSby3iXDDM2rT7YmKdc HgjqSLakQ0FNbGGBGe/wqloqhpoKJT9emUJJlQboK3yP5C6I8MtyMJTOmDSoN7Q+ 5o3ejZZ7Ki3RN+jk0NlHFSS6XunDhKAC/BKMJapaRMRE+7fAOymp2hnjn0G3CAly Y4VoKeVnP4KyFWPqtNK3pp6n/98ngeLLGqIeDWO85VM7f0FdTm4Oo0uRlkyxBACo zH/0KLe0eqtB3XGblj5mTmyxekob+W4o7j7LJBRg9ZYJLVU= -----END CERTIFICATE-----Generated at Sun Jan 25 07:36:40 2026 by rpki-client