This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/L1N-tP7T52tP4rh2UbSzgRTJT04.roa File: L1N-tP7T52tP4rh2UbSzgRTJT04.roa (raw, json) Hash identifier: Gw8xPIC9j7i9u0wMy7C1iMF5vimUT0CQ7VIeS2//njk= Subject key identifier: 2F:53:7E:B4:FE:D3:E7:6B:4F:E2:B8:76:51:B4:B3:81:14:C9:4F:4E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B5C4488DE45DEF7437BE29C866E6 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/L1N-tP7T52tP4rh2UbSzgRTJT04.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49038 IP address blocks: 31.148.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b5:c4:48:8d:e4:5d:ef:74:37:be:29:c8:66:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f537eb4fed3e76b4fe2b87651b4b38114c94f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:99:47:93:e9:3e:50:cd:95:b1:26:8a:3b: 3a:9e:d2:2a:eb:d9:91:a9:8f:0c:99:e5:92:fa:6d: 71:3a:f3:ec:ca:c5:f9:c1:ba:b3:95:cf:6f:6d:58: 78:17:f5:17:ba:fe:4b:28:58:7e:ce:c5:9f:8c:63: 9d:7c:08:5a:b4:a8:0a:e3:e5:66:76:d3:af:fc:cc: d5:0a:d2:4d:e8:6c:42:ab:b5:68:3e:4e:99:9d:29: ee:47:58:f2:72:b8:3e:b8:63:59:5a:e5:4d:eb:e2: fa:d9:46:89:5d:1b:98:93:c9:a4:d1:ca:2c:ed:42: d2:c0:65:92:86:10:ee:dc:bd:c4:8f:30:81:f5:c7: 93:e3:34:6b:31:89:01:67:7b:f5:12:ef:44:19:9b: 14:a1:ee:ff:7c:70:f2:09:87:aa:f9:73:73:5d:a4: b7:7d:6b:68:8f:e2:bf:6f:86:6a:ac:e0:b6:fc:83: d5:83:b5:75:ea:c2:22:70:ab:6e:53:e0:6e:11:d6: 8d:5c:27:56:1a:07:73:5b:ed:86:0a:f4:53:61:9c: f5:c3:b9:ef:c9:d1:29:9b:e6:57:f4:2a:95:37:15: fe:6f:52:09:fe:03:6b:8a:0b:9d:4b:c1:58:4d:c1: e7:27:47:ef:3b:1f:6d:1e:66:fe:1e:e4:2a:11:e0: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:53:7E:B4:FE:D3:E7:6B:4F:E2:B8:76:51:B4:B3:81:14:C9:4F:4E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/L1N-tP7T52tP4rh2UbSzgRTJT04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.23.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:17:39:a0:9c:9d:6e:68:d9:ee:52:73:af:ff:a5:00:f6:15: 0e:95:27:4f:63:45:67:19:99:83:4c:7e:71:a8:8f:0a:13:4b: 0e:8d:38:2f:4a:e2:a1:5c:35:ee:01:83:97:03:8a:da:85:b6: 31:44:7c:d3:aa:5a:79:21:4e:a2:d2:40:fb:2a:3b:a5:9d:a0: ae:6a:b2:06:48:37:05:cc:77:ae:32:b0:d9:9b:38:86:73:a2: d5:74:be:91:80:1e:56:01:21:2f:b0:fa:25:55:46:26:a8:2f: 78:d2:2a:90:0c:30:d9:f9:12:51:ac:c9:bc:ae:ed:93:02:34: 6d:ed:73:00:ed:9c:21:ce:08:e6:bd:a4:ed:f3:ad:04:51:ea: 2f:fd:ce:be:46:bb:5c:7a:3a:df:41:77:1c:74:35:1b:52:75: a3:ba:36:4c:29:ef:df:fd:66:74:85:8c:43:22:dc:e0:4e:99: a6:18:23:f8:5c:46:c4:1e:12:21:6e:1c:7b:70:a9:3f:48:e3: 3f:16:55:61:76:4a:46:32:5f:99:ad:d1:b2:8e:50:ba:a7:44: 60:8e:3b:0f:ad:bb:bc:78:98:5f:e2:b8:e2:ea:e5:2f:4a:4b: 73:12:a8:c6:7a:f3:a5:30:dd:cb:4b:59:71:d4:5f:ac:b6:dd: 67:61:eb:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLXESI3kXe90N74pyGbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjUzN2ViNGZlZDNlNzZiNGZlMmI4NzY1MWI0YjM4MTE0Yzk0ZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNyZR5PpPlDNlbEmijs6ntIq69mR qY8MmeWS+m1xOvPsysX5wbqzlc9vbVh4F/UXuv5LKFh+zsWfjGOdfAhatKgK4+Vm dtOv/MzVCtJN6GxCq7VoPk6ZnSnuR1jycrg+uGNZWuVN6+L62UaJXRuYk8mk0cos 7ULSwGWShhDu3L3EjzCB9ceT4zRrMYkBZ3v1Eu9EGZsUoe7/fHDyCYeq+XNzXaS3 fWtoj+K/b4ZqrOC2/IPVg7V16sIicKtuU+BuEdaNXCdWGgdzW+2GCvRTYZz1w7nv ydEpm+ZX9CqVNxX+b1IJ/gNrigudS8FYTcHnJ0fvOx9tHmb+HuQqEeAjLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC9TfrT+0+drT+K4dlG0s4EUyU9OMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvTDFOLXRQN1Q1MnRQNHJoMlViU3pnUlRKVDA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5QXMA0G CSqGSIb3DQEBCwUAA4IBAQCMFzmgnJ1uaNnuUnOv/6UA9hUOlSdPY0VnGZmDTH5x qI8KE0sOjTgvSuKhXDXuAYOXA4rahbYxRHzTqlp5IU6i0kD7KjulnaCuarIGSDcF zHeuMrDZmziGc6LVdL6RgB5WASEvsPolVUYmqC940iqQDDDZ+RJRrMm8ru2TAjRt 7XMA7ZwhzgjmvaTt860EUeov/c6+RrtcejrfQXccdDUbUnWjujZMKe/f/WZ0hYxD ItzgTpmmGCP4XEbEHhIhbhx7cKk/SOM/FlVhdkpGMl+ZrdGyjlC6p0RgjjsPrbu8 eJhf4rji6uUvSktzEqjGevOlMN3LS1lx1F+stt1nYet9 -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:42 2026 by rpki-client