This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_DN1BJnmuDR952-S139PBW4eI0o.roa File: _DN1BJnmuDR952-S139PBW4eI0o.roa (raw, json) Hash identifier: CuxpSCEIg8uL6nW+I+vNZQDm3b1UUuXZ8KqLQQm0Gt4= Subject key identifier: FC:33:75:04:99:E6:B8:34:7D:E7:6F:92:D7:7F:4F:05:6E:1E:23:4A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BC488D8F3130FBAB27E9B15AF661 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_DN1BJnmuDR952-S139PBW4eI0o.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50334 IP address blocks: 31.148.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bc:48:8d:8f:31:30:fb:ab:27:e9:b1:5a:f6:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc33750499e6b8347de76f92d77f4f056e1e234a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1d:03:17:33:ed:fc:a2:6b:7a:44:1d:4f:ef: 1c:3e:ad:9e:c6:30:41:98:38:0d:a2:89:6c:e7:cb: 71:de:2e:67:02:5c:b0:09:2b:9b:08:9e:f3:79:c9: 13:64:38:91:5b:eb:33:f4:54:51:59:7a:8d:3c:c3: 07:2a:0c:37:38:85:52:a9:c2:70:9f:fb:03:fa:91: e6:88:b0:ac:47:ac:4a:70:6d:de:28:84:0d:4d:7f: d8:c9:37:bd:ed:3e:f6:c9:b5:b6:ee:d5:a6:e6:c0: cb:41:82:74:bb:62:70:ec:86:fd:b8:fa:e7:dc:9a: 3c:7c:38:12:ef:5c:ff:35:53:9d:59:4e:e5:79:84: 1c:d2:56:42:bb:95:c7:78:4e:0b:94:ca:5b:05:ac: 79:b0:c9:6e:0a:1d:c9:41:9a:39:b1:66:6d:d8:24: a6:34:de:ad:00:4a:80:48:86:a7:eb:2d:3c:7f:34: 6a:e5:36:be:1d:42:8e:5d:2d:c9:34:44:99:fe:da: ff:64:1b:6f:ac:e5:52:28:e9:10:2b:fa:11:a9:6b: 89:b9:62:56:f3:70:9a:9a:d0:53:2f:53:fc:e5:0a: 0a:d4:6b:dc:5b:3c:70:e1:e4:5e:09:bb:8f:3f:e6: 9a:70:95:f2:f8:19:9a:97:2e:fc:61:b1:4d:06:86: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:33:75:04:99:E6:B8:34:7D:E7:6F:92:D7:7F:4F:05:6E:1E:23:4A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_DN1BJnmuDR952-S139PBW4eI0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.250.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:ae:6a:67:1f:08:27:5f:4a:52:92:18:8e:5e:ae:73:eb:d8: 8d:28:05:dd:dd:5b:24:7c:e0:c4:af:a4:db:f7:2c:8f:49:d4: 43:6c:eb:4b:05:bd:c5:fc:9c:b9:d1:03:8a:37:36:27:cb:ca: f1:f4:90:3e:81:2a:0a:e0:41:ae:3f:fa:cf:91:05:eb:85:71: 02:79:86:11:41:28:85:45:f9:9d:81:52:50:31:34:8f:06:0e: fc:a0:1f:c2:85:41:10:75:88:be:d4:94:5e:a2:f4:b3:3b:b9: d3:85:de:89:c5:1b:28:74:c4:e6:43:98:af:b9:62:16:8e:29: 8f:21:2b:7d:6b:5c:d0:fb:32:8a:2f:31:87:fc:99:26:8c:88: 98:21:77:af:ba:fe:4a:dc:61:18:f5:91:a9:b3:5c:2e:fe:fd: 0c:96:b4:97:64:19:68:87:3a:c9:0c:37:4c:31:be:49:e3:96: 45:aa:1a:c7:40:e5:07:41:b9:f9:1e:a0:01:10:7b:52:a0:c3: ae:7e:86:10:e1:87:84:fd:90:cc:db:f4:6b:bb:3d:08:86:57: cd:ab:1d:87:26:ab:22:12:92:bd:2d:e5:ae:59:0a:15:70:65: 22:9a:b4:63:4e:9c:d0:56:e1:10:5c:60:45:e3:0b:99:61:31: f8:58:a5:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLxIjY8xMPurJ+mxWvZhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzMzNzUwNDk5ZTZiODM0N2RlNzZmOTJkNzdmNGYwNTZlMWUyMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB0DFzPt/KJrekQdT+8cPq2exjBB mDgNools58tx3i5nAlywCSubCJ7zeckTZDiRW+sz9FRRWXqNPMMHKgw3OIVSqcJw n/sD+pHmiLCsR6xKcG3eKIQNTX/YyTe97T72ybW27tWm5sDLQYJ0u2Jw7Ib9uPrn 3Jo8fDgS71z/NVOdWU7leYQc0lZCu5XHeE4LlMpbBax5sMluCh3JQZo5sWZt2CSm NN6tAEqASIan6y08fzRq5Ta+HUKOXS3JNESZ/tr/ZBtvrOVSKOkQK/oRqWuJuWJW 83CamtBTL1P85QoK1GvcWzxw4eReCbuPP+aacJXy+Bmaly78YbFNBoYCCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwzdQSZ5rg0fedvktd/TwVuHiNKMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvX0ROMUJKbm11RFI5NTItUzEzOVBCVzRlSTBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH5T6MA0G CSqGSIb3DQEBCwUAA4IBAQBarmpnHwgnX0pSkhiOXq5z69iNKAXd3VskfODEr6Tb 9yyPSdRDbOtLBb3F/Jy50QOKNzYny8rx9JA+gSoK4EGuP/rPkQXrhXECeYYRQSiF RfmdgVJQMTSPBg78oB/ChUEQdYi+1JReovSzO7nThd6JxRsodMTmQ5ivuWIWjimP ISt9a1zQ+zKKLzGH/JkmjIiYIXevuv5K3GEY9ZGps1wu/v0MlrSXZBlohzrJDDdM Mb5J45ZFqhrHQOUHQbn5HqABEHtSoMOufoYQ4YeE/ZDM2/Rruz0IhlfNqx2HJqsi EpK9LeWuWQoVcGUimrRjTpzQVuEQXGBF4wuZYTH4WKVu -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:52 2026 by rpki-client