This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-aksmhBlMep_IIdkdunb9VKOWr4.roa File: 1-aksmhBlMep_IIdkdunb9VKOWr4.roa (raw, json) Hash identifier: JbBTN/177xHpuFisCBpeMseyxj5dy7+ddb7ULq70+9c= Subject key identifier: F9:A9:2C:9A:10:65:31:EA:7F:20:87:64:76:E9:DB:F5:52:8E:5A:BE Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019B7E38E573461808F75FD74E9E68215E68 Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-aksmhBlMep_IIdkdunb9VKOWr4.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 31.98.140.0/22 maxlen: 22 31.98.144.0/20 maxlen: 20 31.98.160.0/19 maxlen: 19 31.98.192.0/19 maxlen: 19 31.105.0.0/18 maxlen: 18 31.105.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e5:73:46:18:08:f7:5f:d7:4e:9e:68:21:5e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a92c9a106531ea7f20876476e9dbf5528e5abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:ec:b0:9f:50:b4:c0:d9:9c:7d:80:0e:d3: e8:56:92:96:92:78:ae:f3:2e:b4:42:42:59:5a:7b: 19:f5:89:28:5d:05:7b:66:ae:55:11:5a:eb:3b:23: a8:77:2d:7c:6b:27:d4:20:02:8f:1e:d9:5b:fd:87: 9f:56:87:d6:30:0b:11:c6:42:c0:70:9b:53:62:d6: 79:50:8f:7e:36:28:45:1e:ad:2b:db:8e:4b:10:76: 5a:a8:b9:08:78:9e:ba:ce:10:c0:20:15:0f:e6:3c: b3:9d:09:10:15:ff:1e:bc:33:df:ab:1f:ae:05:fd: 5e:ab:5e:24:a1:53:73:b2:34:00:21:42:70:22:59: 02:53:23:ab:91:7f:4b:9f:d3:49:3d:27:b3:a9:c4: 80:6d:e8:20:c9:02:e8:98:bb:24:dd:46:77:fe:6b: 79:f2:8b:31:eb:57:e5:fd:9f:3b:cc:de:e4:19:1a: dc:96:b7:a2:cc:44:b5:ba:36:a2:56:d9:17:39:ba: 94:6c:75:f7:1b:32:b2:77:89:11:e7:ee:1d:9e:bd: a5:fd:09:a1:ed:99:72:12:ea:6b:c5:6a:d6:77:e2: c0:27:be:84:bf:f8:be:04:e3:e8:7d:59:8f:c0:64: 63:d3:8f:a9:64:79:51:3a:9a:6e:96:45:80:40:81: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:2C:9A:10:65:31:EA:7F:20:87:64:76:E9:DB:F5:52:8E:5A:BE X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-aksmhBlMep_IIdkdunb9VKOWr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.98.140.0-31.98.223.255 31.105.0.0-31.105.95.255 Signature Algorithm: sha256WithRSAEncryption 02:87:86:1a:b1:ca:25:0a:f0:e2:77:39:b9:76:01:17:d1:97: ac:96:59:0e:ad:c3:ab:d7:ec:64:16:0e:5a:3a:4a:7f:79:53: dc:41:05:e9:b9:7b:bc:0f:70:7d:97:c7:45:1e:b0:5a:90:a4: 03:29:03:a7:19:ed:be:f1:c4:af:a3:ed:b9:22:ac:c5:b8:17: da:bd:e7:f5:27:18:06:b3:2a:5e:1e:9a:76:e6:b6:70:72:d4: c0:04:7f:9d:76:79:9b:49:76:84:9c:1b:c5:84:bf:51:71:7e: 1f:66:1b:a6:c0:82:3b:06:8e:39:16:f1:ea:f6:0e:b3:db:87: 39:57:f7:3c:11:06:bc:de:85:08:55:af:b9:8b:9b:ea:76:19: 12:95:87:f5:b2:57:50:d2:a4:f5:5c:f8:26:d2:99:64:89:ef: f1:b1:26:7d:6c:9a:11:21:a5:c9:8f:0c:6a:0a:a0:ce:2d:74: eb:ba:fc:a3:30:11:ef:d5:3d:b6:f9:d4:40:9b:f4:a4:96:1e: a4:17:0d:47:09:7f:d9:20:f4:d0:3a:51:9e:78:38:fb:0e:94: cd:4b:da:ca:d3:be:b7:0c:69:29:dc:f8:8c:83:cb:6e:27:7b: 95:29:6b:f8:10:03:2b:5c:4e:f0:a1:83:04:cf:1f:0d:4e:4a: 84:35:a0:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+OOVzRhgI91/XTp5oIV5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWE5MmM5YTEwNjUzMWVhN2YyMDg3NjQ3NmU5ZGJmNTUyOGU1YWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhrssJ9QtMDZnH2ADtPoVpKWkniu 8y60QkJZWnsZ9YkoXQV7Zq5VEVrrOyOody18ayfUIAKPHtlb/YefVofWMAsRxkLA cJtTYtZ5UI9+NihFHq0r245LEHZaqLkIeJ66zhDAIBUP5jyznQkQFf8evDPfqx+u Bf1eq14koVNzsjQAIUJwIlkCUyOrkX9Ln9NJPSezqcSAbeggyQLomLsk3UZ3/mt5 8osx61fl/Z87zN7kGRrclreizES1ujaiVtkXObqUbHX3GzKyd4kR5+4dnr2l/Qmh 7ZlyEuprxWrWd+LAJ76Ev/i+BOPofVmPwGRj04+pZHlROppulkWAQIGjeQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPmpLJoQZTHqfyCHZHbp2/VSjlq+MB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvMS1ha3NtaEJsTWVwX0lJZGtkdW5iOVZLT1dyNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmIvODI4NzFlLTUyYTAtNDBkZi1hZTNkLTc2ZmE1MTViNGI2 ZS8xLzJVUm84OHdfT0c4bTVpZ2JmNml3dzdzamFnWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAEwGzAMAwQCH2KM AwQFH2LAMAsDAwAfaQMEBR9pQDANBgkqhkiG9w0BAQsFAAOCAQEAAoeGGrHKJQrw 4nc5uXYBF9GXrJZZDq3Dq9fsZBYOWjpKf3lT3EEF6bl7vA9wfZfHRR6wWpCkAykD pxntvvHEr6PtuSKsxbgX2r3n9ScYBrMqXh6adua2cHLUwAR/nXZ5m0l2hJwbxYS/ UXF+H2YbpsCCOwaOORbx6vYOs9uHOVf3PBEGvN6FCFWvuYub6nYZEpWH9bJXUNKk 9Vz4JtKZZInv8bEmfWyaESGlyY8Magqgzi1067r8ozAR79U9tvnUQJv0pJYepBcN Rwl/2SD00DpRnng4+w6UzUvaytO+twxpKdz4jIPLbid7lSlr+BADK1xO8KGDBM8f DU5KhDWgVw== -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:41 2026 by rpki-client