This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/9iYZwkxjUcEsFbxajgfKUAHpwqo.roa File: 9iYZwkxjUcEsFbxajgfKUAHpwqo.roa (raw, json) Hash identifier: rOHD67cBggUdYXdaTP7eNFtk7CLJ5e+wg+hEmP7cS0A= Subject key identifier: F6:26:19:C2:4C:63:51:C1:2C:15:BC:5A:8E:07:CA:50:01:E9:C2:AA Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019B7E38E5FE761133A076CBEB3F60A6EC64 Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/9iYZwkxjUcEsFbxajgfKUAHpwqo.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204287 IP address blocks: 31.98.32.0/19 maxlen: 19 31.98.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e5:fe:76:11:33:a0:76:cb:eb:3f:60:a6:ec:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f62619c24c6351c12c15bc5a8e07ca5001e9c2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:1b:31:9e:b5:5b:cd:8f:79:b1:9a:c2:01: e7:dd:0f:c5:2a:8c:50:86:32:40:3c:62:52:d4:c1: 3a:cd:95:1e:10:dd:cd:11:94:e3:59:cc:31:73:bc: 75:7b:f1:4f:37:2c:4f:0c:fe:48:69:ba:ed:aa:16: bd:97:97:fb:6d:ab:b9:e1:58:c6:77:85:6e:bc:cf: 76:c6:0d:90:c5:42:60:30:a3:84:fc:4b:ec:14:fc: 11:cb:ae:63:3c:53:80:89:89:64:56:bf:15:c6:0b: 18:82:e8:d2:54:96:f5:7f:2c:cb:22:73:2c:6a:dc: 16:00:3e:19:7d:14:b2:66:58:e3:ea:ec:31:02:3f: da:64:3d:aa:82:c2:8e:7b:28:eb:d6:f0:da:a3:59: 98:40:34:b1:47:ba:58:c4:6f:95:46:b5:e3:23:c5: a5:03:bc:0c:a1:78:ec:6c:e3:07:8a:32:27:29:81: e4:29:24:96:2e:a0:7c:6e:72:4c:f4:92:44:54:c4: 25:0d:72:11:f5:9b:42:ee:e4:4e:79:fe:83:3e:e0: 62:e7:c1:3b:ce:16:a8:28:d9:c4:7a:ab:a2:a2:31: 51:01:c3:52:00:75:a9:c7:d0:27:1f:8a:b9:82:36: 11:c3:03:04:05:6a:f1:44:f7:71:d4:24:d5:88:af: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:19:C2:4C:63:51:C1:2C:15:BC:5A:8E:07:CA:50:01:E9:C2:AA X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/9iYZwkxjUcEsFbxajgfKUAHpwqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.98.32.0-31.98.71.255 Signature Algorithm: sha256WithRSAEncryption 9c:37:4d:bc:68:50:5d:13:e1:6e:80:92:c0:be:f6:9c:4b:30: a8:5a:53:bf:e1:19:28:c7:d6:0c:2a:2c:66:02:25:b2:bc:25: 36:63:77:ba:ff:98:4e:3d:27:fa:44:90:2c:0f:7d:ae:1f:6a: 33:9c:c7:c4:40:c7:05:e2:60:cc:bf:14:1e:19:e2:a1:64:ff: 6d:d7:bd:0f:f5:7a:98:4b:b7:81:26:cc:3c:db:1a:df:67:10: 64:f2:58:f3:37:ec:d9:38:77:2d:e9:97:23:84:65:31:36:e5: c7:97:2f:eb:37:b1:2a:6c:4b:5b:32:41:43:2d:32:00:ef:aa: 3f:ee:a6:66:7f:df:95:69:65:5a:7b:31:a4:d8:c0:4e:fb:8c: 3c:a2:2d:61:3d:23:07:f5:44:7d:26:bf:37:6a:68:5f:ad:e2: 8a:39:d2:31:dc:a7:51:8f:0f:da:f7:da:fb:2b:ff:c7:c7:78: 7e:e6:21:50:21:b7:7f:fb:bf:51:fb:32:b8:dd:a0:65:9d:5e: 26:27:36:2e:0a:84:91:a1:08:0d:b2:d5:f2:7b:4d:07:de:62: a3:7c:6d:2a:51:93:ca:54:f6:f0:2e:91:0b:d1:c4:2f:9c:8b: 14:0e:5a:16:c9:87:59:b9:99:a1:14:08:ee:82:84:0a:e3:b9: 96:6b:17:22 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OOX+dhEzoHbL6z9gpuxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjI2MTljMjRjNjM1MWMxMmMxNWJjNWE4ZTA3Y2E1MDAxZTljMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPIbMZ61W82PebGawgHn3Q/FKoxQ hjJAPGJS1ME6zZUeEN3NEZTjWcwxc7x1e/FPNyxPDP5Iabrtqha9l5f7bau54VjG d4VuvM92xg2QxUJgMKOE/EvsFPwRy65jPFOAiYlkVr8VxgsYgujSVJb1fyzLInMs atwWAD4ZfRSyZljj6uwxAj/aZD2qgsKOeyjr1vDao1mYQDSxR7pYxG+VRrXjI8Wl A7wMoXjsbOMHijInKYHkKSSWLqB8bnJM9JJEVMQlDXIR9ZtC7uROef6DPuBi58E7 zhaoKNnEequiojFRAcNSAHWpx9AnH4q5gjYRwwMEBWrxRPdx1CTViK8nXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPYmGcJMY1HBLBW8Wo4HylAB6cKqMB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvOWlZWndreGpVY0VzRmJ4YWpnZktVQUhwd3FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUfYiAD BAMfYkAwDQYJKoZIhvcNAQELBQADggEBAJw3TbxoUF0T4W6AksC+9pxLMKhaU7/h GSjH1gwqLGYCJbK8JTZjd7r/mE49J/pEkCwPfa4fajOcx8RAxwXiYMy/FB4Z4qFk /23XvQ/1ephLt4EmzDzbGt9nEGTyWPM37Nk4dy3plyOEZTE25ceXL+s3sSpsS1sy QUMtMgDvqj/upmZ/35VpZVp7MaTYwE77jDyiLWE9Iwf1RH0mvzdqaF+t4oo50jHc p1GPD9r32vsr/8fHeH7mIVAht3/7v1H7MrjdoGWdXiYnNi4KhJGhCA2y1fJ7TQfe YqN8bSpRk8pU9vAukQvRxC+cixQOWhbJh1m5maEUCO6ChArjuZZrFyI= -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:00 2026 by rpki-client