This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa File: aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa (raw, json) Hash identifier: m6Rf2fpcq/fb4aUDhuQy0L8UgTU/UIaDKJQ6AQd8ZLw= Subject key identifier: 68:69:B8:A1:6C:D6:0A:BD:E1:67:69:F9:7A:65:1E:4C:CC:E0:19:29 Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Certificate serial: 019B79ED391E6130476577934C379A530AC9 Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215161 IP address blocks: 31.22.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:39:1e:61:30:47:65:77:93:4c:37:9a:53:0a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6869b8a16cd60abde16769f97a651e4ccce01929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0a:11:d7:2c:0f:25:dc:eb:2c:fd:8e:7d:c4: 25:29:9a:62:5e:05:df:14:9a:18:6a:ab:f0:bc:7a: 0f:be:45:e2:05:36:17:9f:98:18:22:0c:70:85:53: 9a:ae:ec:2d:63:24:9c:4e:ea:bd:18:c9:e5:0a:b0: 9f:f0:d0:43:66:42:95:6b:8b:ec:59:c0:44:5f:2d: 74:ac:18:e9:14:22:df:82:6b:c4:ad:f0:77:88:7a: 05:3f:d4:65:1b:06:e3:31:41:60:ce:e1:7f:d9:aa: 93:76:98:4c:67:b1:b8:43:3e:ab:47:80:ba:33:63: d4:e4:22:47:03:d0:43:8d:ae:a3:a1:5e:2f:e2:43: 92:5c:c6:83:27:0f:a0:ce:ea:89:c8:31:39:99:76: 95:7b:eb:b2:fd:73:65:df:ef:54:b3:47:ff:43:02: 9f:b2:ef:80:69:aa:17:6b:11:62:9d:f2:69:54:79: 4b:7b:db:83:b5:33:1e:dd:bd:10:c3:fa:68:1b:d2: 61:c1:a4:6e:8e:97:2e:9a:d7:e3:c0:08:6b:b8:a9: 68:e7:1e:6f:2e:d8:3a:5e:fd:6b:ac:b1:11:fb:e3: cc:12:96:bd:fb:d5:88:b6:55:5e:9b:90:09:9d:04: d5:0a:98:ec:a2:ed:2e:10:59:25:2f:1b:8f:37:ba: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:69:B8:A1:6C:D6:0A:BD:E1:67:69:F9:7A:65:1E:4C:CC:E0:19:29 X509v3 Authority Key Identifier: keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/aGm4oWzWCr3hZ2n5emUeTMzgGSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.118.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:ca:9e:8d:9f:f6:b3:01:56:4e:f2:7e:13:87:6c:ee:aa:18: d7:95:68:2d:17:fa:82:0b:e8:23:e6:dd:e6:a6:3e:33:de:81: 3a:53:98:77:2b:9a:98:6b:99:49:de:39:d1:79:b3:6f:02:46: f8:36:f5:9e:32:3d:41:b4:e4:8e:19:42:e9:c0:49:c6:8c:cc: 96:b7:db:4b:bc:c0:05:df:19:95:03:ae:fb:e3:2d:37:0b:59: 1e:42:da:46:44:61:75:2f:85:51:ad:66:2c:be:2f:d8:bd:42: f7:46:08:b8:47:c0:fa:7a:50:6f:49:26:73:fb:70:48:11:a6: cc:9d:30:74:8f:e9:df:fd:03:d8:c6:81:3b:86:a4:ce:d6:43: d2:43:90:0d:40:d0:cc:d3:63:db:3a:70:23:8a:0b:a9:9c:c2: 70:e4:7f:ff:f8:e3:63:b9:17:ac:ef:5c:4c:3c:dd:16:f9:9c: 4b:3a:4c:f2:25:4f:31:df:5e:bf:e7:03:d8:cb:4b:45:31:a1: af:f7:dd:28:3b:06:8e:50:b7:b1:3a:8e:9b:0f:90:fc:96:ea: d1:78:9c:28:a2:d0:54:53:e5:5f:b9:1c:41:bd:6a:3b:70:e7: f2:94:47:38:37:41:d3:9f:83:0d:e1:f5:40:3a:0b:c7:6e:ed: a2:a3:17:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TkeYTBHZXeTTDeaUwrJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk ZTQwYTAwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODY5YjhhMTZjZDYwYWJkZTE2NzY5Zjk3YTY1MWU0Y2NjZTAxOTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QoR1ywPJdzrLP2OfcQlKZpiXgXf FJoYaqvwvHoPvkXiBTYXn5gYIgxwhVOaruwtYyScTuq9GMnlCrCf8NBDZkKVa4vs WcBEXy10rBjpFCLfgmvErfB3iHoFP9RlGwbjMUFgzuF/2aqTdphMZ7G4Qz6rR4C6 M2PU5CJHA9BDja6joV4v4kOSXMaDJw+gzuqJyDE5mXaVe+uy/XNl3+9Us0f/QwKf su+AaaoXaxFinfJpVHlLe9uDtTMe3b0Qw/poG9JhwaRujpcumtfjwAhruKlo5x5v Ltg6Xv1rrLER++PMEpa9+9WItlVem5AJnQTVCpjsou0uEFklLxuPN7pWawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhpuKFs1gq94Wdp+XplHkzM4BkpMB8GA1UdIwQY MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt MjRmN2Y5NDM2Y2VjLzEvYUdtNG9XeldDcjNoWjJuNWVtVWVUTXpnR1NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxZ2MA0G CSqGSIb3DQEBCwUAA4IBAQB/yp6Nn/azAVZO8n4Th2zuqhjXlWgtF/qCC+gj5t3m pj4z3oE6U5h3K5qYa5lJ3jnRebNvAkb4NvWeMj1BtOSOGULpwEnGjMyWt9tLvMAF 3xmVA6774y03C1keQtpGRGF1L4VRrWYsvi/YvUL3Rgi4R8D6elBvSSZz+3BIEabM nTB0j+nf/QPYxoE7hqTO1kPSQ5ANQNDM02PbOnAjigupnMJw5H//+ONjuRes71xM PN0W+ZxLOkzyJU8x316/5wPYy0tFMaGv990oOwaOULexOo6bD5D8lurReJwootBU U+VfuRxBvWo7cOfylEc4N0HTn4MN4fVAOgvHbu2ioxd0 -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:55 2026 by rpki-client