This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2T3V1M4xvLdqEASmxCEYvszGxhI.roa File: 2T3V1M4xvLdqEASmxCEYvszGxhI.roa (raw, json) Hash identifier: yhyu91zJDmvIXvo00XcQQA9LFKKuUsrQpTrmtOt8Ozk= Subject key identifier: D9:3D:D5:D4:CE:31:BC:B7:6A:10:04:A6:C4:21:18:BE:CC:C6:C6:12 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850C880B59EB3E69E1961B4004B44A Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2T3V1M4xvLdqEASmxCEYvszGxhI.roa Signing time: Fri 02 Jan 2026 16:23:04 +0000 ROA not before: Fri 02 Jan 2026 16:23:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210519 IP address blocks: 31.148.196.0/22 maxlen: 24 92.38.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0c:88:0b:59:eb:3e:69:e1:96:1b:40:04:b4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d93dd5d4ce31bcb76a1004a6c42118beccc6c612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:39:82:34:9c:cb:bb:14:cd:c4:d3:20:21: a8:06:3a:cb:3d:eb:67:55:18:12:67:6a:b2:db:2d: 68:9c:ce:b8:05:34:f0:b8:da:a0:ef:ca:35:fc:4a: 25:9d:24:01:32:07:87:52:02:86:0a:dd:43:d7:7a: 12:cf:b1:c2:9a:86:d6:9b:e4:ba:7a:31:04:80:90: d0:77:0a:bf:82:f2:d5:f4:9c:20:6a:71:17:45:89: db:dc:97:7a:8f:9b:a1:25:2e:52:40:31:e0:84:10: f6:c7:e3:c9:2e:f3:7e:9a:b9:92:6f:e2:a9:6a:f8: 83:85:28:23:1b:75:7c:3e:15:e7:b0:1e:eb:54:4a: 6f:2e:a8:35:04:ac:55:1e:cb:a6:54:85:3d:92:da: fa:f1:43:5a:9f:49:78:f3:1e:71:a3:2f:6c:3e:09: 08:98:3e:a0:0d:ab:b7:09:bd:67:81:70:f5:21:ea: 05:29:1e:8f:02:57:ef:7e:06:b3:15:f5:50:ff:80: 76:e4:2b:03:24:82:36:32:0b:ce:4f:ae:0b:e0:d9: 75:c1:2f:14:4f:4c:10:82:84:6f:d4:41:7b:b8:79: 4a:21:5a:84:64:a2:41:4c:ed:47:87:19:e4:72:0c: da:e0:46:e4:2e:a8:a5:19:70:03:dc:07:89:e4:e4: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3D:D5:D4:CE:31:BC:B7:6A:10:04:A6:C4:21:18:BE:CC:C6:C6:12 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2T3V1M4xvLdqEASmxCEYvszGxhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.196.0/22 92.38.50.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:08:96:f7:c5:db:4d:7a:b0:d1:50:30:c7:bd:8c:d1:7a:7c: 43:50:84:19:9a:df:52:3d:ff:11:3e:b6:cc:cd:57:0e:12:2d: c6:ab:53:70:79:fe:13:0b:7b:51:e2:1a:93:e0:b7:3d:d2:50: 56:a6:5a:e3:55:d0:d1:1c:85:67:4b:9b:72:66:17:12:35:1b: fa:f8:2b:06:7e:fd:f2:11:cc:2c:c6:b6:40:9c:14:09:ed:25: 99:d7:13:d0:5b:71:cf:82:40:86:3b:e4:74:09:4b:f2:63:d4: 60:e1:e6:7f:74:47:57:b3:d5:00:35:04:81:1d:42:c7:d1:9c: ab:b8:8b:98:ae:20:cd:f6:fc:1c:f6:02:f8:cd:df:d6:38:a8: b2:00:ee:72:f7:9f:71:ad:89:23:dc:66:8b:32:dd:12:29:09: a2:dc:e2:72:82:dd:79:ef:c3:7c:a5:b1:5d:b0:1d:07:60:d3: c1:f8:0a:63:61:54:45:01:a8:92:3c:7f:e5:74:1a:5d:9b:24: 45:bc:62:39:29:96:5a:2d:61:da:e0:2e:89:c0:8e:6a:16:0f: 5b:dc:7c:6d:0c:6a:bf:17:e3:ab:41:2f:94:38:95:94:a4:af: 3c:dc:80:a7:09:6a:6d:6b:b8:c0:b9:1e:e3:21:ea:14:56:8f: 4e:f7:ab:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hQyIC1nrPmnhlhtABLRKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTNkZDVkNGNlMzFiY2I3NmExMDA0YTZjNDIxMThiZWNjYzZjNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweo5gjScy7sUzcTTICGoBjrLPetn VRgSZ2qy2y1onM64BTTwuNqg78o1/EolnSQBMgeHUgKGCt1D13oSz7HCmobWm+S6 ejEEgJDQdwq/gvLV9JwganEXRYnb3Jd6j5uhJS5SQDHghBD2x+PJLvN+mrmSb+Kp aviDhSgjG3V8PhXnsB7rVEpvLqg1BKxVHsumVIU9ktr68UNan0l48x5xoy9sPgkI mD6gDau3Cb1ngXD1IeoFKR6PAlfvfgazFfVQ/4B25CsDJII2MgvOT64L4Nl1wS8U T0wQgoRv1EF7uHlKIVqEZKJBTO1Hhxnkcgza4EbkLqilGXAD3AeJ5OTMpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNk91dTOMby3ahAEpsQhGL7MxsYSMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMlQzVjFNNHh2TGRxRUFTbXhDRVl2c3pHeGhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH5TEAwQB XCYyMA0GCSqGSIb3DQEBCwUAA4IBAQAbCJb3xdtNerDRUDDHvYzRenxDUIQZmt9S Pf8RPrbMzVcOEi3Gq1Nwef4TC3tR4hqT4Lc90lBWplrjVdDRHIVnS5tyZhcSNRv6 +CsGfv3yEcwsxrZAnBQJ7SWZ1xPQW3HPgkCGO+R0CUvyY9Rg4eZ/dEdXs9UANQSB HULH0ZyruIuYriDN9vwc9gL4zd/WOKiyAO5y959xrYkj3GaLMt0SKQmi3OJygt15 78N8pbFdsB0HYNPB+ApjYVRFAaiSPH/ldBpdmyRFvGI5KZZaLWHa4C6JwI5qFg9b 3HxtDGq/F+OrQS+UOJWUpK883ICnCWpta7jAuR7jIeoUVo9O96vn -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:41 2026 by rpki-client