This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ydhN2rLg3omnwRfjFD6P1mFqGZQ.roa File: ydhN2rLg3omnwRfjFD6P1mFqGZQ.roa (raw, json) Hash identifier: +2sNrEag6iN1UCMuIdj9kHoOEvVzwCEzQqbY1+RoWX8= Subject key identifier: C9:D8:4D:DA:B2:E0:DE:89:A7:C1:17:E3:14:3E:8F:D6:61:6A:19:94 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D4308D32E2D800773F5443ED3FD3 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ydhN2rLg3omnwRfjFD6P1mFqGZQ.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60028 IP address blocks: 31.148.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d4:30:8d:32:e2:d8:00:77:3f:54:43:ed:3f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c9d84ddab2e0de89a7c117e3143e8fd6616a1994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:ea:d3:81:5d:6d:6c:2d:fe:e8:70:c2:0a: 25:79:4c:79:d3:f8:81:19:8f:23:6a:98:29:94:ca: b4:f3:78:92:5c:06:41:d2:59:80:96:f5:d6:76:d9: 65:45:a3:21:f1:58:4f:40:fe:f7:2a:3c:d7:ac:52: 53:14:1b:8d:2a:58:fc:47:99:96:e9:a8:74:a9:db: ca:57:34:02:bf:2f:9c:1a:3a:47:02:05:d5:e9:7d: 53:b1:86:de:9f:eb:d6:c9:dd:4c:a1:cc:fb:04:51: d2:16:c2:79:06:7c:ec:33:e2:16:48:f4:1e:bd:03: 5f:7a:91:91:6c:7c:f2:0e:85:48:aa:c0:39:87:ef: cc:9e:f5:77:f4:03:b1:ec:b8:1d:2d:f9:66:56:16: c3:63:e1:b0:62:5d:5c:8d:3a:42:9f:57:88:b4:02: 08:69:09:0c:d0:1e:78:27:b1:40:7a:2d:68:7a:d9: 1b:e8:87:01:1b:5d:85:10:6b:f6:e5:95:59:f0:73: 10:c7:b8:7a:f2:2b:70:e7:e5:3f:a9:6c:43:00:fe: e5:7d:4f:56:7a:ec:0b:72:dc:e7:9e:e6:51:01:73: bb:8c:89:08:a8:a7:c2:75:32:ae:85:78:dc:17:1e: a1:c5:93:ae:ce:ad:62:bc:a2:dc:93:ba:9c:50:33: d1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D8:4D:DA:B2:E0:DE:89:A7:C1:17:E3:14:3E:8F:D6:61:6A:19:94 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ydhN2rLg3omnwRfjFD6P1mFqGZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.4.0/24 Signature Algorithm: sha256WithRSAEncryption 28:85:3e:1a:dd:ca:cc:d5:57:1f:df:cc:35:c0:98:54:6e:a2: ef:af:fb:34:58:52:6d:b1:c2:7b:7b:c7:96:64:72:5c:5e:ac: 57:4c:ec:72:2b:3d:52:bd:f4:75:52:2e:43:e6:ad:5f:1e:9a: b5:15:5c:cf:8e:3f:54:0e:3f:e3:96:0b:f5:55:d8:90:0d:80: 19:c0:e4:d7:c0:b3:3c:eb:8a:18:ad:24:ec:c0:ac:67:5e:72: 61:04:cf:31:a9:2e:9b:9c:00:88:bf:33:11:79:ce:90:dd:2d: a2:db:de:ba:65:6f:cb:3c:07:63:73:c9:97:c6:fb:a4:0c:1f: 04:01:73:06:91:af:fe:1c:d2:df:3a:97:55:e9:d2:38:0a:c5: 54:57:88:4c:1f:7c:28:fb:15:c9:5b:cc:23:89:88:52:f4:55: 7e:0b:cc:55:cf:75:3a:c4:9f:f8:31:50:82:8f:fb:11:8d:c1: 5b:f2:df:7b:94:7a:fc:88:2f:01:8f:a8:4e:7e:b5:24:de:ed: ed:21:b7:41:26:73:ad:fb:4f:37:db:bb:12:0d:cb:42:b4:05: 04:41:01:c0:9e:a2:f9:36:7a:a3:90:4f:de:89:3c:4a:e6:c9: 6f:74:9e:52:27:04:3e:23:31:6d:85:26:54:bb:af:3c:43:d7: 74:07:4d:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNQwjTLi2AB3P1RD7T/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOWQ4NGRkYWIyZTBkZTg5YTdjMTE3ZTMxNDNlOGZkNjYxNmExOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlnq04FdbWwt/uhwwgoleUx50/iB GY8japgplMq083iSXAZB0lmAlvXWdtllRaMh8VhPQP73KjzXrFJTFBuNKlj8R5mW 6ah0qdvKVzQCvy+cGjpHAgXV6X1TsYben+vWyd1Mocz7BFHSFsJ5BnzsM+IWSPQe vQNfepGRbHzyDoVIqsA5h+/MnvV39AOx7LgdLflmVhbDY+GwYl1cjTpCn1eItAII aQkM0B54J7FAei1oetkb6IcBG12FEGv25ZVZ8HMQx7h68itw5+U/qWxDAP7lfU9W euwLctznnuZRAXO7jIkIqKfCdTKuhXjcFx6hxZOuzq1ivKLck7qcUDPRTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMnYTdqy4N6Jp8EX4xQ+j9ZhahmUMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveWRoTjJyTGczb21ud1JmakZENlAxbUZxR1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5QEMA0G CSqGSIb3DQEBCwUAA4IBAQAohT4a3crM1Vcf38w1wJhUbqLvr/s0WFJtscJ7e8eW ZHJcXqxXTOxyKz1SvfR1Ui5D5q1fHpq1FVzPjj9UDj/jlgv1VdiQDYAZwOTXwLM8 64oYrSTswKxnXnJhBM8xqS6bnACIvzMRec6Q3S2i2966ZW/LPAdjc8mXxvukDB8E AXMGka/+HNLfOpdV6dI4CsVUV4hMH3wo+xXJW8wjiYhS9FV+C8xVz3U6xJ/4MVCC j/sRjcFb8t97lHr8iC8Bj6hOfrUk3u3tIbdBJnOt+08327sSDctCtAUEQQHAnqL5 NnqjkE/eiTxK5slvdJ5SJwQ+IzFthSZUu688Q9d0B00m -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:10 2026 by rpki-client