This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/98TJQub4EtN4BXIRrG4cNKh1xfw.roa File: 98TJQub4EtN4BXIRrG4cNKh1xfw.roa (raw, json) Hash identifier: ZCcnqtJ6qlNXte/XKxn3WGiCx4J7iiLBNWDpocMLxz8= Subject key identifier: F7:C4:C9:42:E6:F8:12:D3:78:05:72:11:AC:6E:1C:34:A8:75:C5:FC Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Certificate serial: 019B77C72C8F573B73455B2D422E40EB9061 Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/98TJQub4EtN4BXIRrG4cNKh1xfw.roa Signing time: Thu 01 Jan 2026 04:18:20 +0000 ROA not before: Thu 01 Jan 2026 04:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200043 IP address blocks: 217.18.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2c:8f:57:3b:73:45:5b:2d:42:2e:40:eb:90:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7c4c942e6f812d378057211ac6e1c34a875c5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:32:28:33:4f:6c:92:7f:d7:34:71:bc:ec: 40:bf:5c:c1:34:5e:95:c3:08:cc:79:1d:c3:79:1b: 42:f8:ce:14:6b:2c:67:f1:29:fa:d0:9c:9b:9f:c8: d6:27:63:51:30:11:cb:77:f3:2c:72:ee:61:1d:13: 4d:b6:e0:49:15:4a:f0:89:5d:2f:d3:21:05:64:e3: 34:ed:ae:0b:f9:d4:b9:09:dd:22:0c:32:03:94:b9: 0c:d9:64:22:da:8b:5e:8d:0a:cd:49:b5:4b:15:2c: 8c:b0:25:dc:39:80:37:8a:4b:ba:a3:5d:9c:41:7d: 0e:f1:48:c8:9f:b5:a5:c8:28:58:b4:4a:85:9c:00: 67:31:ca:38:bc:9a:97:0f:40:48:2c:0a:36:89:0f: c7:d0:2f:77:48:3a:1d:86:8f:92:97:02:fe:99:9b: 5e:d3:27:21:24:56:1d:57:8c:53:26:c4:52:6a:f1: a3:ea:61:2b:6f:d3:ad:ee:38:77:f2:cd:f6:2a:fd: 6f:11:e9:2d:da:0e:11:ae:47:9e:fd:20:f2:fc:54: f3:42:70:44:60:94:84:2f:8f:1d:eb:9b:3f:52:5e: 44:ff:28:57:99:2c:7d:5b:4a:5d:1a:50:7e:e2:80: 18:09:25:0f:6d:3f:ce:e7:b3:4d:73:c2:d0:08:53: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C4:C9:42:E6:F8:12:D3:78:05:72:11:AC:6E:1C:34:A8:75:C5:FC X509v3 Authority Key Identifier: keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/98TJQub4EtN4BXIRrG4cNKh1xfw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.18.92.0/24 Signature Algorithm: sha256WithRSAEncryption 80:52:79:e5:3d:d0:1a:28:e0:4e:a0:56:9a:c1:8f:72:e8:f6: db:0f:41:80:c6:76:0c:c4:f8:53:50:03:54:65:a3:22:0e:f4: ce:b8:db:96:e2:0a:0b:53:4c:4d:ea:76:d1:23:b3:7e:0e:a3: c9:88:24:24:08:70:c9:82:c9:e2:67:e8:67:9b:99:c9:e8:03: 58:7c:f7:b1:be:1d:ba:d7:94:72:38:d6:c3:06:b8:36:7c:41: 8c:1a:67:d0:c9:aa:44:57:d6:8d:89:35:79:19:a0:b5:90:c0: 4f:97:76:cb:b4:da:95:7a:25:fc:29:fd:e7:5e:06:47:51:d0: 5c:c6:9b:87:f9:5b:12:05:10:1e:d5:51:3d:81:3a:50:b7:81: b5:69:b5:72:5b:3d:53:2f:16:bc:98:7b:de:9e:ae:da:28:94: e9:8a:26:30:70:16:ef:24:36:02:2d:70:be:0a:30:52:2e:42: ef:18:72:f7:d4:94:56:ed:2f:a5:47:18:b6:c8:a6:4e:40:7a: 73:d1:c7:1d:6e:d9:94:45:e7:0b:91:5c:cb:df:9b:82:dc:d6: 09:61:38:e1:92:c1:0d:38:ce:c4:aa:2a:f2:71:ef:74:69:84: 8b:33:8b:47:b5:2f:f2:09:9c:e4:f4:04:1f:41:f0:71:e1:95: 8f:d4:4a:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyyPVztzRVstQi5A65BhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YTgxYmE3NTg5YThlMWJmMGUxYTA5Y2Y0YWEwZjRlOTA5 MDFkNTcwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2M0Yzk0MmU2ZjgxMmQzNzgwNTcyMTFhYzZlMWMzNGE4NzVjNWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/cyKDNPbJJ/1zRxvOxAv1zBNF6V wwjMeR3DeRtC+M4Uayxn8Sn60Jybn8jWJ2NRMBHLd/Mscu5hHRNNtuBJFUrwiV0v 0yEFZOM07a4L+dS5Cd0iDDIDlLkM2WQi2otejQrNSbVLFSyMsCXcOYA3iku6o12c QX0O8UjIn7WlyChYtEqFnABnMco4vJqXD0BILAo2iQ/H0C93SDodho+SlwL+mZte 0ychJFYdV4xTJsRSavGj6mErb9Ot7jh38s32Kv1vEekt2g4Rrkee/SDy/FTzQnBE YJSEL48d65s/Ul5E/yhXmSx9W0pdGlB+4oAYCSUPbT/O57NNc8LQCFMhoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfEyULm+BLTeAVyEaxuHDSodcX8MB8GA1UdIwQY MBaAFEmoG6dYmo4b8OGgnPSqD06QkB1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDIt NjAzMWQ1ZGUzZjM5LzEvOThUSlF1YjRFdE40QlhJUnJHNGNOS2gxeGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85OWUwOGQtYjRmNS00MzUzLTk2MDItNjAzMWQ1ZGUzZjM5 LzEvU2FnYnAxaWFqaHZ3NGFDYzlLb1BUcENRSFZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RJcMA0G CSqGSIb3DQEBCwUAA4IBAQCAUnnlPdAaKOBOoFaawY9y6PbbD0GAxnYMxPhTUANU ZaMiDvTOuNuW4goLU0xN6nbRI7N+DqPJiCQkCHDJgsniZ+hnm5nJ6ANYfPexvh26 15RyONbDBrg2fEGMGmfQyapEV9aNiTV5GaC1kMBPl3bLtNqVeiX8Kf3nXgZHUdBc xpuH+VsSBRAe1VE9gTpQt4G1abVyWz1TLxa8mHvenq7aKJTpiiYwcBbvJDYCLXC+ CjBSLkLvGHL31JRW7S+lRxi2yKZOQHpz0ccdbtmURecLkVzL35uC3NYJYTjhksEN OM7Eqiryce90aYSLM4tHtS/yCZzk9AQfQfBx4ZWP1Epy -----END CERTIFICATE-----Generated at Thu Jan 1 15:35:13 2026 by rpki-client