This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/upNiUimsYRsnilhDxfpKRlPrE4Q.roa File: upNiUimsYRsnilhDxfpKRlPrE4Q.roa (raw, json) Hash identifier: YbXhGQhlGDsjr1HnV/3T5/Xk4jlhpA8G4TBOy8dIkCI= Subject key identifier: BA:93:62:52:29:AC:61:1B:27:8A:58:43:C5:FA:4A:46:53:EB:13:84 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019AFE41B676821F9EDDAF84A846B1E7EB06 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/upNiUimsYRsnilhDxfpKRlPrE4Q.roa Signing time: Mon 08 Dec 2025 13:58:30 +0000 ROA not before: Mon 08 Dec 2025 13:58:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59679 IP address blocks: 31.148.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:41:b6:76:82:1f:9e:dd:af:84:a8:46:b1:e7:eb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Dec 8 13:58:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ba93625229ac611b278a5843c5fa4a4653eb1384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:8d:4f:5b:5a:25:6f:52:0d:14:f6:dd:30: a2:69:63:21:6e:eb:0e:a2:38:3a:8c:1a:b3:4c:13: 0b:22:6b:fb:6e:76:d0:de:dc:f6:48:bc:4e:c6:22: 23:c3:e3:61:a6:30:a1:6a:a3:3e:c7:44:82:67:84: 62:e3:a3:d9:69:13:76:de:f9:bc:7f:90:fa:2d:2d: 83:32:26:62:5d:8e:19:b5:6f:f6:3d:61:fe:9c:3c: c8:ed:de:0c:26:61:6c:37:89:ca:e1:4b:a5:d7:ad: a3:e7:4a:2e:a4:37:ee:00:41:94:5c:51:ef:02:1d: 56:49:f0:c8:1f:7b:85:28:a9:c2:75:9f:86:7d:fe: a4:f0:b5:f1:88:4e:ec:be:90:f6:4e:e0:50:71:d5: 7c:20:3e:ec:61:59:f1:07:db:0b:75:71:6a:98:29: e2:ce:46:0f:8a:b5:cd:b2:93:4c:94:3e:66:72:a7: 67:6d:94:f1:cf:6f:72:17:0d:83:3a:b5:4f:41:d3: c8:47:0e:53:af:16:e2:2b:e8:be:6f:76:6b:62:ed: a5:97:0e:bf:48:f3:ca:9f:25:a1:38:8f:72:e5:44: 2e:d0:78:e6:1d:07:b6:f6:b7:c0:b7:cd:9e:e3:13: af:77:cb:02:28:1f:ca:08:c3:28:39:e6:db:42:25: 63:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:93:62:52:29:AC:61:1B:27:8A:58:43:C5:FA:4A:46:53:EB:13:84 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/upNiUimsYRsnilhDxfpKRlPrE4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.148.223.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e7:ff:10:0e:0e:e6:85:b8:6a:d6:27:dc:f6:6c:78:10:fe: 72:61:5e:13:39:c9:2b:f9:da:69:e3:e2:9f:b6:72:8f:73:7c: 8f:d2:9e:60:26:2d:ee:16:35:b0:d1:3d:b0:38:ea:f8:7e:df: 93:cc:7d:25:00:7a:90:18:02:6a:b6:6d:23:d6:a3:63:4e:c7: 26:53:ab:a5:4e:fa:a2:97:c1:49:a0:5b:5a:64:5f:0c:c0:d6: 92:5c:d9:cf:bb:2f:b9:23:d0:11:27:5b:42:75:97:2a:86:50: fb:06:93:cf:a9:8c:65:78:f5:95:9a:61:71:ff:d0:71:1d:b6: 18:4d:a5:89:ae:ad:3b:05:47:fc:af:bb:24:36:0e:56:c5:12: f2:f9:ac:86:78:b0:3b:50:53:5e:73:6c:0c:69:10:d3:1f:66: 8a:36:81:fa:da:f1:9c:da:ee:f1:57:b0:45:53:73:d5:e2:78: 49:95:c9:8a:57:3b:b1:40:d3:b8:47:d4:8b:7f:b5:02:f3:2e: e5:75:1d:a2:c9:1e:bd:4f:7c:41:9a:f0:0a:87:b1:fe:49:2f: cb:b0:a8:6a:fa:10:5b:d2:ad:5b:55:0c:c2:fe:dd:4d:1f:d7: 1d:83:cd:f5:1a:f7:5b:85:31:d4:4e:ab:9f:09:c7:b0:47:e1: cc:65:2d:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+QbZ2gh+e3a+EqEax5+sGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMjA4MTM1ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTkzNjI1MjI5YWM2MTFiMjc4YTU4NDNjNWZhNGE0NjUzZWIxMzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV6NT1taJW9SDRT23TCiaWMhbusO ojg6jBqzTBMLImv7bnbQ3tz2SLxOxiIjw+NhpjChaqM+x0SCZ4Ri46PZaRN23vm8 f5D6LS2DMiZiXY4ZtW/2PWH+nDzI7d4MJmFsN4nK4Uul162j50oupDfuAEGUXFHv Ah1WSfDIH3uFKKnCdZ+Gff6k8LXxiE7svpD2TuBQcdV8ID7sYVnxB9sLdXFqmCni zkYPirXNspNMlD5mcqdnbZTxz29yFw2DOrVPQdPIRw5TrxbiK+i+b3ZrYu2llw6/ SPPKnyWhOI9y5UQu0HjmHQe29rfAt82e4xOvd8sCKB/KCMMoOebbQiVjaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLqTYlIprGEbJ4pYQ8X6SkZT6xOEMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvdXBOaVVpbXNZUnNuaWxoRHhmcEtSbFByRTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5TfMA0G CSqGSIb3DQEBCwUAA4IBAQAQ5/8QDg7mhbhq1ifc9mx4EP5yYV4TOckr+dpp4+Kf tnKPc3yP0p5gJi3uFjWw0T2wOOr4ft+TzH0lAHqQGAJqtm0j1qNjTscmU6ulTvqi l8FJoFtaZF8MwNaSXNnPuy+5I9ARJ1tCdZcqhlD7BpPPqYxlePWVmmFx/9BxHbYY TaWJrq07BUf8r7skNg5WxRLy+ayGeLA7UFNec2wMaRDTH2aKNoH62vGc2u7xV7BF U3PV4nhJlcmKVzuxQNO4R9SLf7UC8y7ldR2iyR69T3xBmvAKh7H+SS/LsKhq+hBb 0q1bVQzC/t1NH9cdg831GvdbhTHUTqufCcewR+HMZS0S -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:04 2025 by rpki-client