This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/048JNcfIi8Unjo1Z8oIvhvmpvKg.roa File: 048JNcfIi8Unjo1Z8oIvhvmpvKg.roa (raw, json) Hash identifier: nXV7ldbSp5udK4g2o2MpZclUwLAJWg+D8sg47IGER20= Subject key identifier: D3:8F:09:35:C7:C8:8B:C5:27:8E:8D:59:F2:82:2F:86:F9:A9:BC:A8 Certificate issuer: /CN=0007534eb77caa836f8f118630164e0236e5fe86 Certificate serial: 019B7B369DFC5644203F18C4B775B86418E3 Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/048JNcfIi8Unjo1Z8oIvhvmpvKg.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197960 IP address blocks: 31.135.182.0/23 maxlen: 23 31.135.182.0/24 maxlen: 24 31.135.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:fc:56:44:20:3f:18:c4:b7:75:b8:64:18:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d38f0935c7c88bc5278e8d59f2822f86f9a9bca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:98:36:49:8e:92:88:60:dc:ac:89:ce:5c: c9:9f:52:84:d0:ae:c4:36:56:69:37:54:c5:ec:9a: 96:3a:51:3b:4d:51:10:6a:b0:c6:e8:9a:17:4b:77: f9:af:25:e1:8d:ce:9d:09:c9:06:8b:f4:02:5c:fc: bb:00:47:83:5b:2a:4d:af:34:77:ac:04:98:63:72: 3e:a7:2c:2e:7d:d0:e7:f4:dd:d4:78:83:5a:ee:a7: ce:01:05:9f:29:7f:49:82:ff:4e:39:08:1c:59:57: 45:97:1f:bb:d8:12:1a:22:be:b1:8f:d4:2b:c0:70: b8:3a:28:0b:23:75:16:8a:37:bf:f1:c0:c0:cb:ce: 78:66:38:7a:c4:e9:06:5b:ea:47:7a:af:3f:00:d3: 28:18:eb:9e:ae:18:dc:a5:39:f6:67:74:35:67:7d: c2:07:fd:77:44:ef:82:63:59:41:9c:df:92:39:56: 41:de:ec:57:05:98:68:fb:eb:23:ed:a8:60:5b:b3: 47:5e:df:7d:46:0b:cc:f0:24:c3:5e:37:24:07:4a: 49:51:f1:8f:61:e6:7e:c6:4c:83:b3:85:f1:94:61: 06:b2:7a:7c:a3:c7:3a:15:fa:74:cf:01:16:d7:86: 9c:58:08:09:c4:44:2e:57:17:61:c5:dc:f3:af:22: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8F:09:35:C7:C8:8B:C5:27:8E:8D:59:F2:82:2F:86:F9:A9:BC:A8 X509v3 Authority Key Identifier: keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/048JNcfIi8Unjo1Z8oIvhvmpvKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.135.182.0/23 Signature Algorithm: sha256WithRSAEncryption 91:cb:1e:9f:c0:ec:44:3b:38:0d:67:79:05:c0:f3:de:e2:e3: 96:86:96:c8:39:94:72:68:0c:0e:20:ae:79:f4:35:95:38:0b: 8c:f7:f7:a7:ee:5d:b9:40:0b:6e:c6:02:c2:bb:32:fb:fe:ae: 7a:2d:58:73:9c:b8:59:03:cb:18:c0:1e:ff:30:e0:6e:e9:81: 0d:c1:ab:bd:8a:b1:98:ed:02:00:1d:4c:be:22:4a:e6:ac:92: 5a:ad:85:94:3d:f7:45:00:61:b9:a8:75:e3:0b:ad:a7:c5:9b: 0d:4c:0c:cf:6d:0a:33:54:70:9c:b4:b7:15:b5:ce:91:13:c4: 81:5d:04:67:42:b6:31:84:4b:88:c1:fc:b4:27:28:ec:39:c0: c9:11:8e:4a:3c:be:31:df:2c:d3:df:64:c6:84:8d:99:e4:10: ae:f3:3f:dd:19:ca:92:12:51:22:67:4e:ee:d2:da:82:58:2b: 53:ea:60:9c:00:bf:9b:b7:b5:9d:d9:cb:0d:e3:c7:db:42:54: 14:3a:2c:40:55:b1:70:f0:8a:aa:ed:f2:02:7b:d8:37:3c:2e: 1f:42:27:73:e3:3b:d2:1a:0f:de:b7:86:8b:21:75:e0:7c:f4: 0e:66:3b:31:c3:fa:dd:51:8c:c1:42:b1:92:e0:21:a2:64:dd: dc:ee:68:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Np38VkQgPxjEt3W4ZBjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl NWZlODYwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzhmMDkzNWM3Yzg4YmM1Mjc4ZThkNTlmMjgyMmY4NmY5YTliY2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJqYNkmOkohg3KyJzlzJn1KE0K7E NlZpN1TF7JqWOlE7TVEQarDG6JoXS3f5ryXhjc6dCckGi/QCXPy7AEeDWypNrzR3 rASYY3I+pywufdDn9N3UeINa7qfOAQWfKX9Jgv9OOQgcWVdFlx+72BIaIr6xj9Qr wHC4OigLI3UWije/8cDAy854Zjh6xOkGW+pHeq8/ANMoGOuerhjcpTn2Z3Q1Z33C B/13RO+CY1lBnN+SOVZB3uxXBZho++sj7ahgW7NHXt99RgvM8CTDXjckB0pJUfGP YeZ+xkyDs4XxlGEGsnp8o8c6Ffp0zwEW14acWAgJxEQuVxdhxdzzryK0DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOPCTXHyIvFJ46NWfKCL4b5qbyoMB8GA1UdIwQY MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt NmQxYzliMTUzY2YwLzEvMDQ4Sk5jZklpOFVuam8xWjhvSXZodm1wdktnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4e2MA0G CSqGSIb3DQEBCwUAA4IBAQCRyx6fwOxEOzgNZ3kFwPPe4uOWhpbIOZRyaAwOIK55 9DWVOAuM9/en7l25QAtuxgLCuzL7/q56LVhznLhZA8sYwB7/MOBu6YENwau9irGY 7QIAHUy+IkrmrJJarYWUPfdFAGG5qHXjC62nxZsNTAzPbQozVHCctLcVtc6RE8SB XQRnQrYxhEuIwfy0JyjsOcDJEY5KPL4x3yzT32TGhI2Z5BCu8z/dGcqSElEiZ07u 0tqCWCtT6mCcAL+bt7Wd2csN48fbQlQUOixAVbFw8Iqq7fICe9g3PC4fQidz4zvS Gg/et4aLIXXgfPQOZjsxw/rdUYzBQrGS4CGiZN3c7mhR -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:52 2026 by rpki-client