This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa File: 1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa (raw, json) Hash identifier: z9/vDo3XxLBhdAOAkVfQRjghVloHXSHSVsc9PHpJpsk= Subject key identifier: D4:E8:8F:AF:13:D0:9F:79:64:22:17:ED:7B:9C:90:FB:AC:05:4C:0F Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA300D0285B234DB9D821A07B8A3C Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50233 IP address blocks: 212.31.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a3:00:d0:28:5b:23:4d:b9:d8:21:a0:7b:8a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4e88faf13d09f79642217ed7b9c90fbac054c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fc:d2:c8:5e:06:de:05:1d:1d:d2:d3:c2:f2: 8c:1c:17:61:99:64:fe:da:72:4b:3f:f5:f3:cb:29: 72:a0:f4:05:57:e7:33:b7:0f:bb:4f:96:5e:36:8c: 75:b7:b0:3e:d5:4f:38:a5:0e:b8:1c:c7:dd:7f:e4: e1:cf:77:f7:21:46:2c:d6:44:4d:78:0f:54:34:70: f5:25:60:14:b0:38:f7:0e:c7:fe:fa:58:ca:e5:0c: f1:ae:83:a6:08:a2:b7:80:2a:18:f7:ea:1f:3e:7d: 57:0d:c4:d0:93:be:23:c1:a2:13:5e:9a:b6:a5:c1: cd:b6:9f:bc:30:e0:35:a0:1b:e5:91:bd:79:7f:aa: dd:24:0f:d0:80:08:2a:8f:5a:c3:b4:32:25:f7:de: 9a:a0:31:89:76:f3:97:e2:84:bc:00:ec:e3:2d:df: c1:9f:52:ac:46:34:f3:00:29:66:97:42:18:5c:0a: 7d:b7:79:ac:cb:09:6f:f3:7e:cd:4b:97:05:3a:c7: a0:77:36:d8:b8:e9:29:23:1b:97:61:fc:d7:35:d4: 64:cf:d9:6c:49:4a:a2:32:34:64:71:f7:65:b3:51: ad:70:68:80:b7:97:ee:a0:4a:5f:7c:9c:e5:25:9d: 66:0c:e1:99:2c:d8:1d:0a:0e:07:51:64:a2:b3:90: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E8:8F:AF:13:D0:9F:79:64:22:17:ED:7B:9C:90:FB:AC:05:4C:0F X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1OiPrxPQn3lkIhfte5yQ-6wFTA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.31.118.0/23 Signature Algorithm: sha256WithRSAEncryption a4:b2:ca:9f:aa:dc:52:5c:42:b3:22:a3:83:cc:75:16:ac:65: 1c:d6:5b:5c:0b:07:06:30:f2:52:e3:a1:0e:53:92:a5:4e:5b: 1a:1b:b6:5c:e4:a1:c5:92:73:1a:cf:44:04:83:36:74:92:16: 28:9c:85:7b:db:16:e3:28:22:3f:98:6f:4a:e7:ca:4a:72:3f: 24:0b:01:66:c6:29:59:23:88:70:67:13:be:26:29:10:92:78: b5:9d:cf:c2:68:f0:2a:df:e9:a4:3e:b0:13:ba:b5:a4:f8:09: ff:71:07:53:91:dd:ba:8b:5a:d2:de:69:bc:9f:bf:44:47:b8: 7b:a1:8a:97:fc:ae:bd:96:d5:b5:ae:f3:86:69:d8:a6:6a:24: c4:94:94:d7:aa:c0:3e:98:8e:86:4f:f5:ab:d7:77:01:53:6c: 95:7c:45:42:df:ce:2a:6c:43:22:63:e9:a5:f0:d4:73:fd:f9: f6:01:7d:f7:48:9a:d9:ff:c5:ef:80:f6:bd:a2:03:18:79:3b: 1f:de:df:91:8c:90:67:24:d9:ce:2f:f1:73:7c:df:00:32:4f: 73:f8:41:dc:3d:88:9d:82:d2:e8:94:9e:6f:d8:4b:f5:d5:46: 25:99:87:a2:3f:b9:58:c1:45:68:db:6b:2f:48:e8:6d:82:8f: 9d:01:20:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266MA0ChbI0252CGge4o8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGU4OGZhZjEzZDA5Zjc5NjQyMjE3ZWQ3YjljOTBmYmFjMDU0YzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vzSyF4G3gUdHdLTwvKMHBdhmWT+ 2nJLP/XzyylyoPQFV+cztw+7T5ZeNox1t7A+1U84pQ64HMfdf+Thz3f3IUYs1kRN eA9UNHD1JWAUsDj3Dsf++ljK5QzxroOmCKK3gCoY9+ofPn1XDcTQk74jwaITXpq2 pcHNtp+8MOA1oBvlkb15f6rdJA/QgAgqj1rDtDIl996aoDGJdvOX4oS8AOzjLd/B n1KsRjTzAClml0IYXAp9t3msywlv837NS5cFOsegdzbYuOkpIxuXYfzXNdRkz9ls SUqiMjRkcfdls1GtcGiAt5fuoEpffJzlJZ1mDOGZLNgdCg4HUWSis5AgFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNToj68T0J95ZCIX7XuckPusBUwPMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvMU9pUHJ4UFFuM2xrSWhmdGU1eVEtNndGVEE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1B92MA0G CSqGSIb3DQEBCwUAA4IBAQCkssqfqtxSXEKzIqODzHUWrGUc1ltcCwcGMPJS46EO U5KlTlsaG7Zc5KHFknMaz0QEgzZ0khYonIV72xbjKCI/mG9K58pKcj8kCwFmxilZ I4hwZxO+JikQkni1nc/CaPAq3+mkPrATurWk+An/cQdTkd26i1rS3mm8n79ER7h7 oYqX/K69ltW1rvOGadimaiTElJTXqsA+mI6GT/Wr13cBU2yVfEVC384qbEMiY+ml 8NRz/fn2AX33SJrZ/8XvgPa9ogMYeTsf3t+RjJBnJNnOL/FzfN8AMk9z+EHcPYid gtLolJ5v2Ev11UYlmYeiP7lYwUVo22svSOhtgo+dASAw -----END CERTIFICATE-----Generated at Sun Jan 25 12:03:23 2026 by rpki-client