This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/IQtWki5ELUTgi2gsS7IO7ixd2mA.roa File: IQtWki5ELUTgi2gsS7IO7ixd2mA.roa (raw, json) Hash identifier: APtYFNUlkTrTGFr0t02Zs6yCyIMFrfeQaS9bMm7zHBU= Subject key identifier: 21:0B:56:92:2E:44:2D:44:E0:8B:68:2C:4B:B2:0E:EE:2C:5D:DA:60 Certificate issuer: /CN=31463669c281175395380c92a51cf1fdffee905f Certificate serial: 019BCE9E0C4F6239F74D7C3BF1EBD214FCA5 Authority key identifier: 31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/IQtWki5ELUTgi2gsS7IO7ixd2mA.roa Signing time: Sun 18 Jan 2026 01:00:22 +0000 ROA not before: Sun 18 Jan 2026 01:00:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3169 IP address blocks: 91.238.52.0/22 maxlen: 22 176.124.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.mft rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ce:9e:0c:4f:62:39:f7:4d:7c:3b:f1:eb:d2:14:fc:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31463669c281175395380c92a51cf1fdffee905f Validity Not Before: Jan 18 01:00:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210b56922e442d44e08b682c4bb20eee2c5dda60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:df:e1:33:9e:98:fa:51:c5:4c:0c:ab:7e:3d: ad:47:fe:33:b4:76:fd:ec:64:6a:e6:bf:b8:b2:94: bf:25:ae:69:9f:2a:f5:da:cd:b9:57:be:a2:f1:f8: 7a:04:23:6f:d0:d2:8e:d5:eb:ab:02:d2:e8:3c:58: 49:46:83:a3:b3:d0:b4:5d:52:d5:42:f2:66:b7:49: 37:7f:35:f6:95:6f:b9:b1:ed:f8:eb:3a:34:b6:4a: ab:6d:82:a2:a8:9e:f5:55:07:b8:7b:1b:b0:90:09: a6:c6:80:0e:a0:dd:a0:5c:2c:c0:af:2e:bc:e6:b5: 46:25:4e:91:3d:2f:35:5b:62:eb:de:b4:2d:c3:44: 4c:5e:8a:dc:03:a4:2a:c6:3b:7c:1b:7f:d9:36:43: b0:fe:61:10:83:d5:d7:d8:ad:4b:2e:1e:cf:47:e4: 1b:f6:c5:2b:03:9f:82:16:7b:b4:d1:72:37:40:5f: e0:04:7d:c9:af:b7:e4:47:32:c6:fc:4f:8d:f3:bb: 31:c1:2d:1d:d5:f3:65:bc:c9:8c:4f:73:67:06:48: ef:09:ea:f4:84:72:ff:de:fb:95:0b:86:da:76:87: f9:f2:fd:51:57:d4:2a:88:10:09:61:1f:ba:5e:d4: 1f:87:d7:93:48:a7:91:b4:01:92:54:e8:36:d7:3e: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0B:56:92:2E:44:2D:44:E0:8B:68:2C:4B:B2:0E:EE:2C:5D:DA:60 X509v3 Authority Key Identifier: keyid:31:46:36:69:C2:81:17:53:95:38:0C:92:A5:1C:F1:FD:FF:EE:90:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUY2acKBF1OVOAySpRzx_f_ukF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/IQtWki5ELUTgi2gsS7IO7ixd2mA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1cbde8-0426-48d9-bad6-4620a0a161e8/1/MUY2acKBF1OVOAySpRzx_f_ukF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.238.52.0/22 176.124.140.0/22 Signature Algorithm: sha256WithRSAEncryption 28:db:ff:0a:1a:19:49:d1:86:6e:cb:c2:0e:94:ce:f7:b6:ec: 9a:a9:2a:ea:8f:cd:e5:27:ed:5f:d8:d4:c0:9a:84:9c:36:5b: 74:0c:69:a9:ce:f8:1a:71:94:7d:7f:05:a0:9c:2b:0e:a7:b4: 15:11:30:d1:fe:ae:cd:63:b3:dd:93:5c:8b:f6:62:85:a3:fa: c3:10:86:db:f0:35:fa:e2:33:22:96:df:a5:12:45:eb:71:4f: 35:37:fb:30:0e:c1:ad:0d:64:3a:30:49:82:11:0f:02:c5:0e: 1d:51:21:36:64:bd:58:fd:5c:d1:58:4a:67:bd:3a:d5:92:ba: 96:6c:e7:00:96:e6:9d:b2:5c:7c:80:de:2f:6e:25:30:bd:29: 70:d3:71:59:d7:17:b8:9b:e0:d5:63:6c:e3:02:87:27:49:f1: b2:75:9f:d1:3c:95:e4:35:c5:11:83:0f:0c:b9:c5:f1:53:f5: b1:91:5a:b6:ea:64:54:31:b0:41:dc:58:cc:e2:b3:67:32:1f: 66:95:be:53:07:fa:5d:af:cf:1c:c2:2e:ce:71:55:0d:c4:82: a0:9a:0b:8c:52:cb:61:11:94:6e:49:40:a6:54:45:11:51:fa: 58:84:c8:c4:20:7e:e8:d6:2c:b8:ae:05:07:7e:de:6d:4d:9f: 33:b8:d9:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvOngxPYjn3TXw78evSFPylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNDYzNjY5YzI4MTE3NTM5NTM4MGM5MmE1MWNmMWZkZmZl ZTkwNWYwHhcNMjYwMTE4MDEwMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTBiNTY5MjJlNDQyZDQ0ZTA4YjY4MmM0YmIyMGVlZTJjNWRkYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t/hM56Y+lHFTAyrfj2tR/4ztHb9 7GRq5r+4spS/Ja5pnyr12s25V76i8fh6BCNv0NKO1eurAtLoPFhJRoOjs9C0XVLV QvJmt0k3fzX2lW+5se346zo0tkqrbYKiqJ71VQe4exuwkAmmxoAOoN2gXCzAry68 5rVGJU6RPS81W2Lr3rQtw0RMXorcA6Qqxjt8G3/ZNkOw/mEQg9XX2K1LLh7PR+Qb 9sUrA5+CFnu00XI3QF/gBH3Jr7fkRzLG/E+N87sxwS0d1fNlvMmMT3NnBkjvCer0 hHL/3vuVC4badof58v1RV9QqiBAJYR+6XtQfh9eTSKeRtAGSVOg21z6ypwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCELVpIuRC1E4ItoLEuyDu4sXdpgMB8GA1UdIwQY MBaAFDFGNmnCgRdTlTgMkqUc8f3/7pBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVVZMmFjS0JGMU9WT0F5U3BSenhfZl91a0Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xY2JkZTgtMDQyNi00OGQ5LWJhZDYt NDYyMGEwYTE2MWU4LzEvSVF0V2tpNUVMVVRnaTJnc1M3SU83aXhkMm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xY2JkZTgtMDQyNi00OGQ5LWJhZDYtNDYyMGEwYTE2MWU4 LzEvTVVZMmFjS0JGMU9WT0F5U3BSenhfZl91a0Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+40AwQC sHyMMA0GCSqGSIb3DQEBCwUAA4IBAQAo2/8KGhlJ0YZuy8IOlM73tuyaqSrqj83l J+1f2NTAmoScNlt0DGmpzvgacZR9fwWgnCsOp7QVETDR/q7NY7Pdk1yL9mKFo/rD EIbb8DX64jMilt+lEkXrcU81N/swDsGtDWQ6MEmCEQ8CxQ4dUSE2ZL1Y/VzRWEpn vTrVkrqWbOcAluadslx8gN4vbiUwvSlw03FZ1xe4m+DVY2zjAocnSfGydZ/RPJXk NcURgw8MucXxU/WxkVq26mRUMbBB3FjM4rNnMh9mlb5TB/pdr88cwi7OcVUNxIKg mguMUsthEZRuSUCmVEURUfpYhMjEIH7o1iy4rgUHft5tTZ8zuNmq -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:36 2026 by rpki-client