This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/9enrJ1aLGA3RCeme7xBZCB62agk.roa File: 9enrJ1aLGA3RCeme7xBZCB62agk.roa (raw, json) Hash identifier: vRnXuA5NETYBT1BeqdHLACLYGuovCr87R2REHEDrMcI= Subject key identifier: F5:E9:EB:27:56:8B:18:0D:D1:09:E9:9E:EF:10:59:08:1E:B6:6A:09 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019B7EA73C7D326C61158E67E587CD706D0F Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/9enrJ1aLGA3RCeme7xBZCB62agk.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39650 IP address blocks: 31.130.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3c:7d:32:6c:61:15:8e:67:e5:87:cd:70:6d:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5e9eb27568b180dd109e99eef1059081eb66a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:65:81:22:00:47:45:d3:86:74:f2:d9:1f: d3:6b:fa:3d:56:82:5d:96:23:0d:9d:e7:be:00:ef: a6:09:b8:f1:0f:c7:64:2f:f6:dd:aa:5b:c3:5b:45: b3:c9:5a:f8:fc:e3:9f:03:7b:37:75:4f:a4:91:d3: 75:db:97:52:ca:25:49:cc:f8:55:49:f7:83:fd:f3: 62:3c:bd:ce:7b:da:bd:fb:88:6a:81:97:7b:e5:c3: a1:7c:5e:61:a9:99:fd:fa:2a:bd:b5:8b:f3:51:31: 52:83:af:10:57:1b:1f:2b:bd:be:fe:84:fa:9a:17: 0b:43:88:9d:fd:46:52:a1:78:e8:3c:e9:33:1c:6d: 95:2c:23:8f:e8:d4:e8:92:ea:dc:87:28:83:f4:81: 2d:da:41:a8:7b:c5:0d:8f:e1:dc:b1:bc:af:69:e8: 0e:ad:33:27:f4:e5:52:e5:b1:0f:33:5f:dd:c2:47: 0a:fd:76:73:de:a6:ff:e3:17:be:ae:9b:e5:99:b1: d3:15:1a:6a:b7:cf:50:e7:08:28:5e:21:d0:b7:43: f7:54:e3:d6:65:2c:61:e5:58:1d:05:e8:12:94:d0: c5:24:7d:3d:bc:05:b0:72:d6:c9:0a:8f:84:a8:5f: c2:33:ed:ce:13:4b:45:f0:4c:e0:97:e2:6a:a2:29: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E9:EB:27:56:8B:18:0D:D1:09:E9:9E:EF:10:59:08:1E:B6:6A:09 X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/9enrJ1aLGA3RCeme7xBZCB62agk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.181.0/24 Signature Algorithm: sha256WithRSAEncryption 27:47:46:a8:ea:4b:87:34:ab:75:42:3a:36:c7:e0:ab:18:24: aa:4d:8b:83:75:ad:aa:f8:ad:90:69:c1:cf:1e:ab:01:68:39: 32:a9:34:15:16:90:8e:bb:44:ea:76:26:fe:5d:2a:44:6b:56: 80:62:9e:78:e3:c2:f7:8a:7f:e4:2f:82:1d:d7:00:36:0f:01: 5f:53:5f:87:c6:7c:00:a7:ca:1d:c8:8d:d4:db:1b:3a:1d:7a: a2:98:60:20:dc:ec:76:66:02:68:d6:57:9e:dd:bf:d9:43:06: d2:09:d7:2b:69:7e:d5:c7:86:31:15:82:74:07:2a:28:31:38: 87:c6:c2:80:70:85:74:a4:ba:89:55:67:a1:92:02:c7:aa:98: 67:5c:54:ec:e2:cb:84:c2:08:b8:1d:a4:84:e0:fd:e3:3b:02: a1:f6:18:96:35:da:f6:61:28:8c:a1:7a:19:37:37:cd:53:35: 1d:03:a6:c3:17:ab:ed:e9:12:b1:5f:18:ee:84:4b:83:17:51: 7a:dc:89:9b:8c:51:4a:aa:3f:ce:81:3e:6f:26:e7:35:0e:6d: 31:2e:f6:78:18:01:b9:8d:7f:90:3e:c1:bd:a3:23:c6:44:69: 2a:30:1c:f1:0f:da:a4:1e:e3:4c:dc:d1:a9:4b:e2:f1:97:5d: f5:5d:1a:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pzx9MmxhFY5n5YfNcG0PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWU5ZWIyNzU2OGIxODBkZDEwOWU5OWVlZjEwNTkwODFlYjY2YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhZlgSIAR0XThnTy2R/Ta/o9VoJd liMNnee+AO+mCbjxD8dkL/bdqlvDW0WzyVr4/OOfA3s3dU+kkdN125dSyiVJzPhV SfeD/fNiPL3Oe9q9+4hqgZd75cOhfF5hqZn9+iq9tYvzUTFSg68QVxsfK72+/oT6 mhcLQ4id/UZSoXjoPOkzHG2VLCOP6NTokurchyiD9IEt2kGoe8UNj+HcsbyvaegO rTMn9OVS5bEPM1/dwkcK/XZz3qb/4xe+rpvlmbHTFRpqt89Q5wgoXiHQt0P3VOPW ZSxh5VgdBegSlNDFJH09vAWwctbJCo+EqF/CM+3OE0tF8Ezgl+JqoilLewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXp6ydWixgN0Qnpnu8QWQgetmoJMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvOWVuckoxYUxHQTNSQ2VtZTd4QlpDQjYyYWdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH4K1MA0G CSqGSIb3DQEBCwUAA4IBAQAnR0ao6kuHNKt1Qjo2x+CrGCSqTYuDda2q+K2QacHP HqsBaDkyqTQVFpCOu0Tqdib+XSpEa1aAYp5448L3in/kL4Id1wA2DwFfU1+HxnwA p8odyI3U2xs6HXqimGAg3Ox2ZgJo1lee3b/ZQwbSCdcraX7Vx4YxFYJ0ByooMTiH xsKAcIV0pLqJVWehkgLHqphnXFTs4suEwgi4HaSE4P3jOwKh9hiWNdr2YSiMoXoZ NzfNUzUdA6bDF6vt6RKxXxjuhEuDF1F63ImbjFFKqj/OgT5vJuc1Dm0xLvZ4GAG5 jX+QPsG9oyPGRGkqMBzxD9qkHuNM3NGpS+Lxl131XRrT -----END CERTIFICATE-----Generated at Tue Jan 27 01:04:07 2026 by rpki-client