This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/McDDjQMho8Ga-dYCijDyzcVZhNM.roa File: McDDjQMho8Ga-dYCijDyzcVZhNM.roa (raw, json) Hash identifier: xcKQ5uX7QQf/1EySaIcDmPqvWpMNL97bfyAO9r8/grI= Subject key identifier: 31:C0:C3:8D:03:21:A3:C1:9A:F9:D6:02:8A:30:F2:CD:C5:59:84:D3 Certificate issuer: /CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda Certificate serial: 019BE9E3FA0956F8196DD9BA316202BA2C26 Authority key identifier: DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/McDDjQMho8Ga-dYCijDyzcVZhNM.roa Signing time: Fri 23 Jan 2026 08:06:30 +0000 ROA not before: Fri 23 Jan 2026 08:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204765 IP address blocks: 176.121.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.mft rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:e3:fa:09:56:f8:19:6d:d9:ba:31:62:02:ba:2c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfb86d5e74c1234f36f219b05d743bb3a2e2afda Validity Not Before: Jan 23 08:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31c0c38d0321a3c19af9d6028a30f2cdc55984d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:5e:9f:6a:51:8d:f2:40:14:58:28:77:ae: fc:66:0c:b3:24:01:47:a9:84:fd:7b:9d:3a:5e:3a: 7c:ea:1b:97:40:c7:aa:00:97:62:89:72:c7:e9:8c: 23:15:08:2a:48:a3:75:ae:f6:77:e7:ed:ec:41:de: 32:d3:a3:e2:67:74:ac:7c:0e:a3:71:09:67:97:3c: 4b:97:67:b0:61:c6:00:68:52:22:7d:a6:de:e2:a8: 2a:01:04:3f:82:d1:98:ed:fc:c0:0d:c7:83:88:b6: bc:fc:7f:9b:ba:68:9b:6a:a3:02:c4:2a:24:93:89: a5:76:40:53:e6:ba:44:89:56:db:91:11:00:c8:16: 51:93:7c:6d:18:75:71:d9:f9:1b:a9:a9:21:b8:13: 1a:94:72:52:7b:0c:0d:62:a3:bd:9c:32:df:e5:ce: 08:a6:df:70:0c:7b:3a:20:73:8b:64:c9:9e:f6:13: 6c:92:56:76:14:5e:7b:ee:88:27:b8:46:e1:9f:f6: e1:6e:92:39:db:26:e1:d8:4c:e9:55:b2:02:0f:69: 44:b1:87:86:bc:b0:8f:a3:65:f2:26:60:08:41:70: 94:8f:44:a6:4b:ea:88:a6:c2:c8:2a:8d:f8:08:d2: 4c:71:5e:15:5c:38:6c:d8:ae:f4:cf:9f:80:a4:6e: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C0:C3:8D:03:21:A3:C1:9A:F9:D6:02:8A:30:F2:CD:C5:59:84:D3 X509v3 Authority Key Identifier: keyid:DF:B8:6D:5E:74:C1:23:4F:36:F2:19:B0:5D:74:3B:B3:A2:E2:AF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37htXnTBI0828hmwXXQ7s6Lir9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/McDDjQMho8Ga-dYCijDyzcVZhNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92e95f-e5d2-49ca-b9c4-f7a77c441f1c/1/37htXnTBI0828hmwXXQ7s6Lir9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.224.0/21 Signature Algorithm: sha256WithRSAEncryption 04:be:d7:79:47:7c:60:53:99:1f:7c:a3:fc:ea:7b:2d:f6:8b: e0:78:02:e6:7f:1c:86:c0:d3:e6:ac:9d:94:bd:0c:a2:b6:d1: f5:85:cc:8b:21:6f:ac:ad:3c:5a:86:8a:b7:bf:49:f1:bd:c0: c3:70:2b:f0:54:2e:35:8c:ef:b8:8d:29:f3:fd:3b:69:43:2e: d5:49:99:27:34:38:72:7a:18:c1:08:3f:d8:9d:69:e4:f3:37: b4:6a:91:71:7b:e8:e8:b6:8c:80:7a:e1:95:08:47:72:43:91: 9a:8b:b3:42:80:bd:32:ff:55:9e:36:41:78:9f:f8:a1:e6:ed: 95:ba:2d:ac:6e:df:94:10:8b:66:73:5c:58:51:5c:ef:c7:8c: fb:99:87:93:ad:ae:67:0b:fa:d0:2b:f9:10:fc:f0:33:de:7e: da:b9:67:18:c4:11:74:77:1d:82:47:70:ee:d5:3e:1b:54:fd: 12:93:68:c0:2f:f3:08:d2:f5:02:ea:b5:69:86:26:d7:bf:7d: a9:a3:b8:9d:e4:21:41:ef:28:6f:bc:a9:b0:12:87:ae:50:32: cb:e6:0a:23:23:6f:4c:99:07:f9:81:55:c1:9d:ea:24:d0:a0: 46:5b:8b:9a:d1:ab:f5:65:df:21:9f:e3:04:6d:28:a3:da:43: ba:3e:54:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvp4/oJVvgZbdm6MWICuiwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmYjg2ZDVlNzRjMTIzNGYzNmYyMTliMDVkNzQzYmIzYTJl MmFmZGEwHhcNMjYwMTIzMDgwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWMwYzM4ZDAzMjFhM2MxOWFmOWQ2MDI4YTMwZjJjZGM1NTk4NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj9en2pRjfJAFFgod678ZgyzJAFH qYT9e506Xjp86huXQMeqAJdiiXLH6YwjFQgqSKN1rvZ35+3sQd4y06PiZ3SsfA6j cQlnlzxLl2ewYcYAaFIifabe4qgqAQQ/gtGY7fzADceDiLa8/H+bumibaqMCxCok k4mldkBT5rpEiVbbkREAyBZRk3xtGHVx2fkbqakhuBMalHJSewwNYqO9nDLf5c4I pt9wDHs6IHOLZMme9hNsklZ2FF577ognuEbhn/bhbpI52ybh2EzpVbICD2lEsYeG vLCPo2XyJmAIQXCUj0SmS+qIpsLIKo34CNJMcV4VXDhs2K70z5+ApG7mgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDHAw40DIaPBmvnWAoow8s3FWYTTMB8GA1UdIwQY MBaAFN+4bV50wSNPNvIZsF10O7Oi4q/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzdodFhuVEJJMDgyOGhtd1hYUTdzNkxpcjlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MmU5NWYtZTVkMi00OWNhLWI5YzQt ZjdhNzdjNDQxZjFjLzEvTWNERGpRTWhvOEdhLWRZQ2lqRHl6Y1ZaaE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MmU5NWYtZTVkMi00OWNhLWI5YzQtZjdhNzdjNDQxZjFj LzEvMzdodFhuVEJJMDgyOGhtd1hYUTdzNkxpcjlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHngMA0G CSqGSIb3DQEBCwUAA4IBAQAEvtd5R3xgU5kffKP86nst9ovgeALmfxyGwNPmrJ2U vQyittH1hcyLIW+srTxahoq3v0nxvcDDcCvwVC41jO+4jSnz/TtpQy7VSZknNDhy ehjBCD/YnWnk8ze0apFxe+jotoyAeuGVCEdyQ5Gai7NCgL0y/1WeNkF4n/ih5u2V ui2sbt+UEItmc1xYUVzvx4z7mYeTra5nC/rQK/kQ/PAz3n7auWcYxBF0dx2CR3Du 1T4bVP0Sk2jAL/MI0vUC6rVphibXv32po7id5CFB7yhvvKmwEoeuUDLL5gojI29M mQf5gVXBneok0KBGW4ua0av1Zd8hn+MEbSij2kO6PlRa -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:40 2026 by rpki-client