This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/GqB4ft9MdLfFT6O-79FvIfbX6mA.roa File: GqB4ft9MdLfFT6O-79FvIfbX6mA.roa (raw, json) Hash identifier: tl2PhT7Se6lXYjqeH5WhdtVk1xP0yZCmrUvC7sMF7bY= Subject key identifier: 1A:A0:78:7E:DF:4C:74:B7:C5:4F:A3:BE:EF:D1:6F:21:F6:D7:EA:60 Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019B7E38E59F42DA551FA101AA074418A181 Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/GqB4ft9MdLfFT6O-79FvIfbX6mA.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 31.98.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e5:9f:42:da:55:1f:a1:01:aa:07:44:18:a1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1aa0787edf4c74b7c54fa3beefd16f21f6d7ea60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:56:d6:42:b3:43:e8:86:a9:87:2d:b3:ca: d3:97:84:29:aa:fa:ac:6c:f9:cc:e7:43:dd:4a:8c: 16:af:59:ee:08:7f:f5:ce:67:0b:38:49:79:0a:c4: 54:21:b1:af:fe:68:0d:04:57:6f:04:7c:87:a9:ba: 68:c1:94:7d:33:66:43:20:57:e5:3a:62:84:54:b9: 29:21:e1:96:33:ff:49:a7:48:b0:0a:6c:be:19:c8: 96:40:97:68:9a:07:63:3c:f8:0b:27:b5:15:e7:16: fe:57:88:6a:a5:91:11:9b:8b:90:a2:90:44:af:5b: 87:70:08:8f:67:e9:26:59:2f:db:20:37:ed:11:67: a5:c5:0e:1e:ca:89:cf:06:ac:cd:e9:b8:3d:36:3e: ab:81:29:fc:63:39:04:b3:bc:10:5e:69:76:9d:8a: cc:59:15:d9:25:a0:b0:8e:69:1c:4c:4f:ab:63:59: f8:a2:7b:bf:d4:e6:f8:f6:74:35:f8:df:b9:89:cf: d7:cb:95:93:c7:e8:78:c8:7b:d4:20:65:19:bb:cf: 16:78:c2:ce:64:3d:22:77:ac:9f:ab:02:61:3b:6c: e4:7f:a5:87:bd:13:3d:5b:07:6f:9d:46:c5:0e:2a: 10:1d:bd:92:6d:a9:9f:8f:34:3f:6f:c9:aa:aa:b6: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A0:78:7E:DF:4C:74:B7:C5:4F:A3:BE:EF:D1:6F:21:F6:D7:EA:60 X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/GqB4ft9MdLfFT6O-79FvIfbX6mA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.98.0.0/19 Signature Algorithm: sha256WithRSAEncryption 70:11:88:ad:d2:72:c3:08:ef:28:95:02:09:9d:9a:dd:62:10: 01:55:d6:8d:e3:52:6e:72:fa:08:b9:f0:52:e6:98:7c:a2:7c: c2:1c:62:aa:6c:30:41:f4:26:3b:09:7b:e1:6a:07:04:2e:2f: 53:2e:02:de:4e:06:86:59:6a:41:33:d1:49:4e:8f:21:d1:6a: d4:a6:ac:de:18:52:fb:47:d3:67:4d:5a:10:da:cf:0c:03:c1: 75:21:e5:01:f8:31:c7:48:64:8b:7f:e4:a3:a3:2f:b5:8a:7c: bd:c9:15:3b:bb:f7:05:4a:fb:ac:9b:54:bd:cf:1d:4d:22:e5: 71:56:14:23:74:28:a2:c8:22:9e:cb:27:34:fb:d3:41:eb:93: 52:13:3d:4a:9b:4f:80:4f:77:bb:e3:09:56:68:f0:1a:c3:2a: 5e:5f:8b:06:f4:96:35:19:aa:9f:77:63:1d:c3:11:0f:f5:7b: bc:43:45:8a:91:b1:65:ea:39:72:40:2e:c1:11:2f:a7:87:7f: 40:d9:34:53:0e:3f:c2:3a:db:8c:d5:a2:e0:78:fc:40:31:62: 47:6d:f1:8e:67:87:f4:74:59:4a:a2:7a:0b:87:d8:82:55:0e: 86:4d:4b:b2:4b:dd:ee:75:16:70:1d:56:14:72:87:a8:e1:b1: 64:d8:a1:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOWfQtpVH6EBqgdEGKGBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWEwNzg3ZWRmNGM3NGI3YzU0ZmEzYmVlZmQxNmYyMWY2ZDdlYTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9VW1kKzQ+iGqYcts8rTl4Qpqvqs bPnM50PdSowWr1nuCH/1zmcLOEl5CsRUIbGv/mgNBFdvBHyHqbpowZR9M2ZDIFfl OmKEVLkpIeGWM/9Jp0iwCmy+GciWQJdomgdjPPgLJ7UV5xb+V4hqpZERm4uQopBE r1uHcAiPZ+kmWS/bIDftEWelxQ4eyonPBqzN6bg9Nj6rgSn8YzkEs7wQXml2nYrM WRXZJaCwjmkcTE+rY1n4onu/1Ob49nQ1+N+5ic/Xy5WTx+h4yHvUIGUZu88WeMLO ZD0id6yfqwJhO2zkf6WHvRM9WwdvnUbFDioQHb2SbamfjzQ/b8mqqrbb6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBqgeH7fTHS3xU+jvu/RbyH21+pgMB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvR3FCNGZ0OU1kTGZGVDZPLTc5RnZJZmJYNm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFH2IAMA0G CSqGSIb3DQEBCwUAA4IBAQBwEYit0nLDCO8olQIJnZrdYhABVdaN41JucvoIufBS 5ph8onzCHGKqbDBB9CY7CXvhagcELi9TLgLeTgaGWWpBM9FJTo8h0WrUpqzeGFL7 R9NnTVoQ2s8MA8F1IeUB+DHHSGSLf+Sjoy+1iny9yRU7u/cFSvusm1S9zx1NIuVx VhQjdCiiyCKeyyc0+9NB65NSEz1Km0+AT3e74wlWaPAawypeX4sG9JY1Gaqfd2Md wxEP9Xu8Q0WKkbFl6jlyQC7BES+nh39A2TRTDj/COtuM1aLgePxAMWJHbfGOZ4f0 dFlKonoLh9iCVQ6GTUuyS93udRZwHVYUcoeo4bFk2KGM -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:24 2026 by rpki-client