This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/wSuoaH9wOLl866tBer1nWZMIWCc.roa File: wSuoaH9wOLl866tBer1nWZMIWCc.roa (raw, json) Hash identifier: IgY4urUfYKNfspzPi766lr6KcHLSrEwdZwQgGXHYG6o= Subject key identifier: C1:2B:A8:68:7F:70:38:B9:7C:EB:AB:41:7A:BD:67:59:93:08:58:27 Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6 Certificate serial: 019B7EA73DF1EDC53F9970A6132DBD8D212F Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/wSuoaH9wOLl866tBer1nWZMIWCc.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56749 IP address blocks: 31.130.182.0/24 maxlen: 24 31.130.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3d:f1:ed:c5:3f:99:70:a6:13:2d:bd:8d:21:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c12ba8687f7038b97cebab417abd675993085827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6f:af:35:5b:6c:bb:0b:0b:f8:78:81:44:f2: 42:be:31:9b:64:49:a9:c2:c1:92:03:1c:5a:92:80: 34:22:b8:43:7a:79:73:f7:ed:cc:93:2b:0a:7f:25: 1a:27:0c:5b:15:f4:6f:2e:b8:fb:1e:dd:d8:ea:27: f9:c1:a9:0d:32:a6:bb:46:7d:b3:6b:8a:1b:1f:eb: f9:11:9c:ec:06:83:4f:56:dd:ad:aa:bd:c3:10:11: c9:41:44:55:f1:96:5f:cf:80:7b:45:d0:e9:57:b2: 9c:6a:b3:df:f2:8c:e2:7b:61:ab:b3:e4:b0:ba:bf: d3:38:83:1e:db:a8:b5:e8:fe:4e:3a:e9:c6:7a:13: 23:ca:97:6e:f6:f7:1f:fa:40:9c:10:33:9a:cd:52: 82:77:43:f7:9f:f7:06:8e:59:41:39:1b:d8:6b:8e: 7d:f8:de:36:26:7e:87:f8:eb:2c:54:a7:65:64:3c: 1c:75:9f:16:fa:ae:83:90:06:ea:45:36:a3:7d:49: 59:d9:70:75:9e:46:1c:e9:92:5a:dd:8a:9e:7f:b7: f0:93:ee:2e:16:fe:be:7e:07:b1:45:dc:e8:91:01: a6:35:56:37:e9:33:77:93:5e:47:1f:54:1c:7d:1f: 41:17:72:cb:c2:18:a4:d1:47:19:e6:af:ac:b3:32: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2B:A8:68:7F:70:38:B9:7C:EB:AB:41:7A:BD:67:59:93:08:58:27 X509v3 Authority Key Identifier: keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/wSuoaH9wOLl866tBer1nWZMIWCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.182.0/23 Signature Algorithm: sha256WithRSAEncryption 73:45:5a:21:c8:df:da:04:82:cc:25:a3:74:fc:35:d6:7a:4c: e1:e8:cf:4b:27:66:0b:ae:cc:9c:4b:67:ae:4d:52:46:eb:a1: ff:c2:e7:65:97:d9:dc:6e:39:a3:1a:c0:1b:59:4d:5c:5b:79: 97:12:3c:6e:f3:ee:64:ad:49:d3:d2:52:28:6e:88:06:3e:80: e7:67:a8:a3:d6:d9:55:c6:07:ac:73:ef:ad:59:55:77:a7:e3: da:78:88:c5:b2:55:cd:b1:54:a9:7c:1b:72:11:22:b1:be:8b: bb:c6:76:65:90:c9:72:cc:2c:c6:bf:9d:11:0e:0e:e7:38:64: c2:fd:f7:50:7c:99:2a:9d:cf:1f:b6:27:a6:cf:5d:e9:48:82: 71:5d:ae:c7:c4:7d:35:f3:38:59:e1:74:d4:0d:ab:0e:c5:7d: 4e:c8:04:40:0f:91:84:6a:77:4d:f2:ab:e1:0c:b5:46:62:5a: c8:93:e1:34:c3:35:09:f1:15:20:07:89:b8:d7:7d:b5:2c:51: 04:03:a1:89:45:b8:1b:76:c3:eb:dc:2b:c0:92:de:8b:0f:b0: b0:55:90:eb:18:65:0b:66:c9:e6:87:2e:42:8d:ca:a8:b7:31: bd:c2:b9:83:d3:1d:da:44:a8:93:68:ef:ac:0e:d8:3d:d2:bd: 9a:3f:53:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pz3x7cU/mXCmEy29jSEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3 OTU2YTYwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTJiYTg2ODdmNzAzOGI5N2NlYmFiNDE3YWJkNjc1OTkzMDg1ODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG+vNVtsuwsL+HiBRPJCvjGbZEmp wsGSAxxakoA0IrhDenlz9+3MkysKfyUaJwxbFfRvLrj7Ht3Y6if5wakNMqa7Rn2z a4obH+v5EZzsBoNPVt2tqr3DEBHJQURV8ZZfz4B7RdDpV7KcarPf8ozie2Grs+Sw ur/TOIMe26i16P5OOunGehMjypdu9vcf+kCcEDOazVKCd0P3n/cGjllBORvYa459 +N42Jn6H+OssVKdlZDwcdZ8W+q6DkAbqRTajfUlZ2XB1nkYc6ZJa3Yqef7fwk+4u Fv6+fgexRdzokQGmNVY36TN3k15HH1QcfR9BF3LLwhik0UcZ5q+sszLGUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMErqGh/cDi5fOurQXq9Z1mTCFgnMB8GA1UdIwQY MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt YzAzZjNmZGRkNGFjLzEvd1N1b2FIOXdPTGw4NjZ0QmVyMW5XWk1JV0NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4K2MA0G CSqGSIb3DQEBCwUAA4IBAQBzRVohyN/aBILMJaN0/DXWekzh6M9LJ2YLrsycS2eu TVJG66H/wudll9ncbjmjGsAbWU1cW3mXEjxu8+5krUnT0lIobogGPoDnZ6ij1tlV xgesc++tWVV3p+PaeIjFslXNsVSpfBtyESKxvou7xnZlkMlyzCzGv50RDg7nOGTC /fdQfJkqnc8ftiemz13pSIJxXa7HxH018zhZ4XTUDasOxX1OyARAD5GEandN8qvh DLVGYlrIk+E0wzUJ8RUgB4m41321LFEEA6GJRbgbdsPr3CvAkt6LD7CwVZDrGGUL Zsnmhy5CjcqotzG9wrmD0x3aRKiTaO+sDtg90r2aP1Mf -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:24 2026 by rpki-client