This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DhXiZxQ0MBLqCe6hE2wRILredqs.roa File: DhXiZxQ0MBLqCe6hE2wRILredqs.roa (raw, json) Hash identifier: KfiLppUTopCLjlzmjowIbtwwl85vEe86W2BFbhiCfZw= Subject key identifier: 0E:15:E2:67:14:34:30:12:EA:09:EE:A1:13:6C:11:20:BA:DE:76:AB Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850037A01A0ED0F772D04AF4DB66D6 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DhXiZxQ0MBLqCe6hE2wRILredqs.roa Signing time: Fri 02 Jan 2026 16:23:01 +0000 ROA not before: Fri 02 Jan 2026 16:23:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207676 IP address blocks: 31.148.0.0/24 maxlen: 24 92.253.218.0/23 maxlen: 24 92.253.235.0/24 maxlen: 24 146.120.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:00:37:a0:1a:0e:d0:f7:72:d0:4a:f4:db:66:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e15e26714343012ea09eea1136c1120bade76ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:2c:5b:cf:13:2a:89:b8:3b:34:b2:81:02: 7a:54:0d:7f:ac:37:ba:fc:f1:e0:4a:ac:31:cf:b1: 5e:d6:4b:1a:52:61:0b:b2:43:73:fe:fc:55:c5:82: 7d:a9:51:ea:6e:a2:61:9d:2d:fb:e3:21:c2:3f:f1: f7:b8:66:1b:19:a9:ce:0d:ca:8b:0d:d6:a9:2f:1e: b8:f0:19:b4:dd:df:da:39:c1:81:c0:0a:44:97:c2: f7:3e:29:5f:ba:79:d8:42:fa:77:2f:08:a7:6e:91: f3:09:48:92:f7:e3:ff:ec:6f:eb:b2:ce:38:b0:08: c3:ef:e1:59:b1:65:20:5e:8b:8f:b8:56:28:e5:79: d2:c2:ec:1c:e6:27:1a:6b:fe:b4:17:f5:64:bf:30: cb:c6:86:8a:51:e9:31:30:92:01:a6:7f:c9:89:60: 62:bc:99:08:00:59:41:29:bb:3f:08:38:ef:2f:21: 85:76:30:54:91:d5:14:a2:16:67:43:b0:21:1a:ca: a3:da:d1:70:10:79:7b:9a:b9:e7:27:e7:ae:de:55: 2d:54:fd:de:14:43:e1:6a:01:d5:bb:2e:c4:24:0a: d9:12:6a:de:61:71:c5:c6:0c:8d:80:be:91:f1:c5: f5:3f:b0:7d:f5:48:07:7d:ad:33:c9:5a:c5:8c:db: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:E2:67:14:34:30:12:EA:09:EE:A1:13:6C:11:20:BA:DE:76:AB X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DhXiZxQ0MBLqCe6hE2wRILredqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.0.0/24 92.253.218.0/23 92.253.235.0/24 146.120.110.0/24 Signature Algorithm: sha256WithRSAEncryption ac:04:73:04:6e:53:24:e5:ce:3b:54:0c:e2:42:1d:f9:5c:70: 57:dd:a0:4b:88:65:cb:69:45:8b:cf:ed:c9:fe:55:dd:6b:cb: cf:14:a5:9d:11:ba:3f:12:87:85:f3:e0:b3:8c:bb:64:f2:41: ff:86:98:1f:f5:31:6e:f3:28:f4:cf:c3:6e:cd:90:0a:6c:db: 12:7b:87:d4:da:f1:6d:ca:8f:8d:e3:67:fd:15:98:14:ac:f8: 37:5f:3e:31:4f:b4:34:1b:40:89:6e:97:9d:c7:7d:08:47:89: 52:06:7a:44:7b:2c:38:f4:0f:b8:b7:ec:26:42:a0:a7:e7:84: 8f:38:8e:5d:d4:56:88:ca:fa:09:fa:bb:7d:28:fe:50:1d:6b: 28:6e:85:d9:33:06:a6:34:b7:79:9c:f7:26:75:b1:29:8e:5e: e2:75:10:bf:99:21:c4:97:cb:16:ba:b6:98:d2:75:a0:61:49: c2:93:fe:bc:7c:04:0c:a8:45:a7:38:80:a1:db:69:93:3d:95: 6a:d6:eb:a7:2c:f0:30:89:70:b3:0b:39:a9:47:3c:2b:a1:f0: c3:b8:e3:92:9c:57:b1:ba:e9:a7:a1:67:a1:39:ca:ff:c1:2b: d6:86:23:83:3b:23:a3:28:de:1e:56:d0:7c:07:9a:ce:a8:e0: 05:01:5c:a4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hQA3oBoO0Pdy0Er022bWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE1ZTI2NzE0MzQzMDEyZWEwOWVlYTExMzZjMTEyMGJhZGU3NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGUsW88TKom4OzSygQJ6VA1/rDe6 /PHgSqwxz7Fe1ksaUmELskNz/vxVxYJ9qVHqbqJhnS374yHCP/H3uGYbGanODcqL DdapLx648Bm03d/aOcGBwApEl8L3PilfunnYQvp3LwinbpHzCUiS9+P/7G/rss44 sAjD7+FZsWUgXouPuFYo5XnSwuwc5icaa/60F/VkvzDLxoaKUekxMJIBpn/JiWBi vJkIAFlBKbs/CDjvLyGFdjBUkdUUohZnQ7AhGsqj2tFwEHl7mrnnJ+eu3lUtVP3e FEPhagHVuy7EJArZEmreYXHFxgyNgL6R8cX1P7B99UgHfa0zyVrFjNvpSQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA4V4mcUNDAS6gnuoRNsESC63narMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvRGhYaVp4UTBNQkxxQ2U2aEUyd1JJTHJlZHFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH5QAAwQB XP3aAwQAXP3rAwQAknhuMA0GCSqGSIb3DQEBCwUAA4IBAQCsBHMEblMk5c47VAzi Qh35XHBX3aBLiGXLaUWLz+3J/lXda8vPFKWdEbo/EoeF8+CzjLtk8kH/hpgf9TFu 8yj0z8NuzZAKbNsSe4fU2vFtyo+N42f9FZgUrPg3Xz4xT7Q0G0CJbpedx30IR4lS BnpEeyw49A+4t+wmQqCn54SPOI5d1FaIyvoJ+rt9KP5QHWsoboXZMwamNLd5nPcm dbEpjl7idRC/mSHEl8sWuraY0nWgYUnCk/68fAQMqEWnOICh22mTPZVq1uunLPAw iXCzCzmpRzwrofDDuOOSnFexuumnoWehOcr/wSvWhiODOyOjKN4eVtB8B5rOqOAF AVyk -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:39 2026 by rpki-client