This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/G91BUS4j09tDTvnkgzG-8yPqkks.roa File: G91BUS4j09tDTvnkgzG-8yPqkks.roa (raw, json) Hash identifier: AzBidtBms+I3eEHMvC7i12178nIW5avVdzsUYto8818= Subject key identifier: 1B:DD:41:51:2E:23:D3:DB:43:4E:F9:E4:83:31:BE:F3:23:EA:92:4B Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79107216A37DAFBA287304CAE8303025 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/G91BUS4j09tDTvnkgzG-8yPqkks.roa Signing time: Thu 01 Jan 2026 10:17:59 +0000 ROA not before: Thu 01 Jan 2026 10:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214876 IP address blocks: 31.210.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:72:16:a3:7d:af:ba:28:73:04:ca:e8:30:30:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bdd41512e23d3db434ef9e48331bef323ea924b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:42:bf:10:b2:b1:1c:00:1e:de:7e:cc:ef: 2d:6b:c2:f2:e0:73:97:98:92:1e:cf:fb:89:8b:30: 7c:84:df:d1:41:ec:c8:46:63:c1:6f:21:31:21:bd: a6:7e:ce:ab:73:90:f1:e1:3e:73:ee:c2:00:5f:a5: 7e:24:19:1d:23:4a:b2:65:b6:f0:da:93:e7:0c:31: 4e:7e:b7:3b:a3:52:e3:78:ca:56:36:07:41:af:f2: 08:07:09:cf:1c:2b:33:1f:83:66:33:9b:29:34:7d: 7a:4a:a4:4e:4e:3e:71:eb:89:cf:c1:e6:74:e1:d1: 05:7f:7e:a0:90:3a:85:27:1c:75:99:6e:f5:b5:2b: da:53:93:2b:36:62:eb:b6:5a:33:59:60:19:dd:a4: 28:a8:f3:2d:84:ed:de:f6:9f:65:b5:1b:ff:aa:90: f3:f0:4c:6c:2d:b3:88:c5:a9:4b:37:a3:85:0a:92: 8b:33:4f:5e:85:d0:b1:88:67:93:57:c5:43:68:a9: 53:fe:63:98:3c:37:98:a5:cb:49:65:9b:9d:6c:22: 5c:b6:31:06:de:cb:41:52:db:1a:1d:d9:46:2c:15: 46:01:23:71:be:d3:cc:a4:e1:02:2c:ff:38:8b:1a: 78:11:df:6b:a7:23:89:4e:96:92:fb:9f:7e:cd:72: 66:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DD:41:51:2E:23:D3:DB:43:4E:F9:E4:83:31:BE:F3:23:EA:92:4B X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/G91BUS4j09tDTvnkgzG-8yPqkks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.48.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:30:30:c6:d9:9d:a4:a9:96:5b:bb:a0:ec:43:9b:c7:fa:c7: 39:d9:28:08:ff:52:8a:f7:95:23:6b:32:89:d1:de:cd:99:40: 94:a4:07:67:b0:12:66:23:9b:08:83:5d:12:a4:73:1f:35:92: 5c:7d:ee:1a:d3:e9:78:71:d5:a1:d0:d5:f4:ca:b9:1f:9c:a1: 8e:f3:3e:85:8b:94:50:54:ab:0d:2f:ad:18:9b:b6:42:69:4d: 1e:41:36:71:db:d3:d1:66:9e:61:36:1a:c1:94:84:d0:67:1f: 9e:c7:05:fd:dd:68:21:34:7a:16:b2:cd:4f:4d:27:b5:5d:c5: e3:3e:61:03:61:de:c9:a1:9e:64:f8:91:8b:63:23:eb:83:aa: 4e:de:38:ea:a1:d8:fa:98:72:20:a4:54:5a:48:f7:28:e7:cd: 6a:75:86:e3:47:e8:d9:9a:f4:42:cb:a2:e5:24:14:cd:74:c6: 48:cf:06:b3:f1:3d:0c:be:69:22:1f:fb:10:2d:bb:e0:2b:36: f8:f9:95:36:97:a0:53:56:83:a6:a0:74:31:75:a9:ad:db:22: 9e:b1:4c:12:a8:d3:28:73:8d:10:0a:f6:7c:44:bd:7e:20:68: ec:cc:9c:dd:81:b4:cf:88:2f:d1:e0:42:93:b2:66:4d:f7:2c: b0:f1:6f:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHIWo32vuihzBMroMDAlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmRkNDE1MTJlMjNkM2RiNDM0ZWY5ZTQ4MzMxYmVmMzIzZWE5MjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArStCvxCysRwAHt5+zO8ta8Ly4HOX mJIez/uJizB8hN/RQezIRmPBbyExIb2mfs6rc5Dx4T5z7sIAX6V+JBkdI0qyZbbw 2pPnDDFOfrc7o1LjeMpWNgdBr/IIBwnPHCszH4NmM5spNH16SqROTj5x64nPweZ0 4dEFf36gkDqFJxx1mW71tSvaU5MrNmLrtlozWWAZ3aQoqPMthO3e9p9ltRv/qpDz 8ExsLbOIxalLN6OFCpKLM09ehdCxiGeTV8VDaKlT/mOYPDeYpctJZZudbCJctjEG 3stBUtsaHdlGLBVGASNxvtPMpOECLP84ixp4Ed9rpyOJTpaS+59+zXJmuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvdQVEuI9PbQ0755IMxvvMj6pJLMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvRzkxQlVTNGowOXREVHZua2d6Ry04eVBxa2tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IwMA0G CSqGSIb3DQEBCwUAA4IBAQAsMDDG2Z2kqZZbu6DsQ5vH+sc52SgI/1KK95UjazKJ 0d7NmUCUpAdnsBJmI5sIg10SpHMfNZJcfe4a0+l4cdWh0NX0yrkfnKGO8z6Fi5RQ VKsNL60Ym7ZCaU0eQTZx29PRZp5hNhrBlITQZx+exwX93WghNHoWss1PTSe1XcXj PmEDYd7JoZ5k+JGLYyPrg6pO3jjqodj6mHIgpFRaSPco581qdYbjR+jZmvRCy6Ll JBTNdMZIzwaz8T0MvmkiH/sQLbvgKzb4+ZU2l6BTVoOmoHQxdamt2yKesUwSqNMo c40QCvZ8RL1+IGjszJzdgbTPiC/R4EKTsmZN9yyw8W9i -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:41 2026 by rpki-client