This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ifdwjNilVHfWfsSoPp1oST0DlHk.roa File: ifdwjNilVHfWfsSoPp1oST0DlHk.roa (raw, json) Hash identifier: 4qWXNeRzhPU4RIAHpiefxMPIc3r9l6FBostZARH1fW4= Subject key identifier: 89:F7:70:8C:D8:A5:54:77:D6:7E:C4:A8:3E:9D:68:49:3D:03:94:79 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3828B0BD75C5FEB3359AB8B0A4211D Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ifdwjNilVHfWfsSoPp1oST0DlHk.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56541 IP address blocks: 31.44.176.0/23 maxlen: 23 31.44.178.0/23 maxlen: 23 31.44.180.0/23 maxlen: 23 31.44.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:28:b0:bd:75:c5:fe:b3:35:9a:b8:b0:a4:21:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f7708cd8a55477d67ec4a83e9d68493d039479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:09:ad:73:8f:ba:98:00:d4:ff:ba:6a:ca: cc:b9:b9:70:58:9c:41:ef:17:5e:9a:19:da:48:41: b4:af:19:80:94:e9:99:2c:70:d4:c5:46:59:45:09: 13:6e:98:bc:8a:ab:fb:40:c4:63:e1:a2:91:7c:03: f7:af:16:c8:a2:0d:c8:81:5b:de:eb:3b:97:30:8a: f3:76:e6:e9:fc:56:82:be:d7:54:60:9c:30:0a:80: ce:5f:c4:9b:71:dd:1c:27:fd:37:1b:d0:4d:d9:46: 72:02:93:af:80:e7:ef:82:cc:70:35:4c:65:6f:ad: e8:10:bf:06:10:ce:e8:36:34:a2:a5:f6:46:ef:d3: 7b:e4:3d:f2:b7:38:dd:09:d2:c6:af:bc:db:c9:07: 02:a9:8b:79:b8:d4:5e:0d:36:5f:3b:38:e3:66:fe: b8:04:7b:d3:9b:22:a1:0e:c1:95:3b:17:a5:08:d4: 20:d8:79:9f:5c:a3:99:15:57:d9:37:ad:1a:ca:05: 03:3a:e4:e2:06:a2:2b:3c:56:d2:9f:7a:46:10:13: f3:78:fb:bd:10:d1:e6:26:ae:38:29:d1:72:d5:af: 34:4e:99:98:3f:cc:14:b9:3c:03:a2:b1:19:74:2e: 66:3d:fa:ce:66:84:6c:ac:e7:c2:a7:dc:d1:8b:a9: ac:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F7:70:8C:D8:A5:54:77:D6:7E:C4:A8:3E:9D:68:49:3D:03:94:79 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ifdwjNilVHfWfsSoPp1oST0DlHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.176.0/21 Signature Algorithm: sha256WithRSAEncryption 56:0d:c0:52:8b:a4:7d:d9:17:dc:a9:4e:fb:0b:ea:e2:2d:25: 98:5f:02:8c:9d:e9:68:02:37:fc:68:e1:b3:1d:30:93:4b:bd: 51:ec:70:b9:1d:26:29:ed:f4:dc:0a:1c:e3:24:6f:98:1f:e8: ef:e5:d0:cc:3a:dc:6b:43:b4:b4:bd:c0:08:39:ad:af:8c:16: 6a:18:21:15:1e:c9:e6:55:4f:2b:08:63:fd:de:e2:1c:46:2b: 0e:98:71:78:08:e7:c8:c9:01:ae:28:65:63:d2:00:7f:c3:14: 13:69:76:a1:e2:ec:f6:87:78:db:5a:1d:88:74:af:c3:45:3a: 99:18:be:c8:0e:74:9a:21:26:97:5d:02:e6:5b:44:96:6f:c0: f6:2a:63:02:bf:a8:f7:8a:47:28:2a:a9:f2:71:5f:1d:0d:e8: d7:fa:ce:34:94:76:79:9a:d8:48:89:8b:83:e0:d9:51:46:f8: 96:e6:7c:8a:dd:fa:35:0f:3e:61:4e:af:cb:8b:ed:e0:04:e1: cb:53:f3:93:07:fa:10:9f:16:4b:a5:bb:71:85:c7:d8:f3:71: a3:a1:43:ca:82:e8:08:65:b6:19:30:d4:f5:80:cc:9a:d1:96: 26:0e:96:75:62:d2:0c:5e:81:f9:0b:f3:61:a5:7e:d5:36:8e: d6:38:5e:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCiwvXXF/rM1mriwpCEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY3NzA4Y2Q4YTU1NDc3ZDY3ZWM0YTgzZTlkNjg0OTNkMDM5NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G8JrXOPupgA1P+6asrMublwWJxB 7xdemhnaSEG0rxmAlOmZLHDUxUZZRQkTbpi8iqv7QMRj4aKRfAP3rxbIog3IgVve 6zuXMIrzdubp/FaCvtdUYJwwCoDOX8Sbcd0cJ/03G9BN2UZyApOvgOfvgsxwNUxl b63oEL8GEM7oNjSipfZG79N75D3ytzjdCdLGr7zbyQcCqYt5uNReDTZfOzjjZv64 BHvTmyKhDsGVOxelCNQg2HmfXKOZFVfZN60aygUDOuTiBqIrPFbSn3pGEBPzePu9 ENHmJq44KdFy1a80TpmYP8wUuTwDorEZdC5mPfrOZoRsrOfCp9zRi6msZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIn3cIzYpVR31n7EqD6daEk9A5R5MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvaWZkd2pOaWxWSGZXZnNTb1BwMW9TVDBEbEhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDHyywMA0G CSqGSIb3DQEBCwUAA4IBAQBWDcBSi6R92RfcqU77C+riLSWYXwKMneloAjf8aOGz HTCTS71R7HC5HSYp7fTcChzjJG+YH+jv5dDMOtxrQ7S0vcAIOa2vjBZqGCEVHsnm VU8rCGP93uIcRisOmHF4COfIyQGuKGVj0gB/wxQTaXah4uz2h3jbWh2IdK/DRTqZ GL7IDnSaISaXXQLmW0SWb8D2KmMCv6j3ikcoKqnycV8dDejX+s40lHZ5mthIiYuD 4NlRRviW5nyK3fo1Dz5hTq/Li+3gBOHLU/OTB/oQnxZLpbtxhcfY83GjoUPKgugI ZbYZMNT1gMya0ZYmDpZ1YtIMXoH5C/NhpX7VNo7WOF5O -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:57 2026 by rpki-client