This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rdklJtnIsRPpCMnxSS1GGHIWCtI.roa File: rdklJtnIsRPpCMnxSS1GGHIWCtI.roa (raw, json) Hash identifier: i2J/w0/vFTIyr+KWAGpYaVRFjg90ISDIds54aojdKiA= Subject key identifier: AD:D9:25:26:D9:C8:B1:13:E9:08:C9:F1:49:2D:46:18:72:16:0A:D2 Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA44785E85B739D4081DAB2159CCF Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rdklJtnIsRPpCMnxSS1GGHIWCtI.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134963 IP address blocks: 31.153.230.0/23 maxlen: 23 46.199.88.0/24 maxlen: 24 81.4.190.0/23 maxlen: 24 128.0.107.0/24 maxlen: 24 195.14.130.0/24 maxlen: 24 195.14.154.0/24 maxlen: 24 195.14.157.0/24 maxlen: 24 212.31.96.0/24 maxlen: 24 212.31.123.0/24 maxlen: 24 212.31.124.0/24 maxlen: 24 212.31.125.0/24 maxlen: 24 212.31.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:47:85:e8:5b:73:9d:40:81:da:b2:15:9c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=add92526d9c8b113e908c9f1492d461872160ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:89:9f:51:e2:6a:5d:cb:bc:50:af:83:20:36: 53:b2:52:a2:cb:19:27:e0:32:ad:78:94:7f:20:1d: 0c:2f:a4:52:78:48:ad:c6:5c:b8:55:a2:06:0a:6a: b0:c0:70:a4:ff:c9:ab:34:52:39:ef:78:16:8d:2b: b1:f2:ac:7a:58:52:9d:ff:6d:48:6f:ea:32:0e:c1: cd:c9:34:e4:d5:db:3a:f3:8d:72:c0:20:6e:32:21: c4:6d:bd:f8:4b:e6:b5:c3:6f:7a:fa:aa:ac:c0:3e: 84:20:14:99:92:cb:f6:ef:b0:71:24:26:6b:e7:0c: 1f:5f:4d:c9:f8:4c:0b:3f:bd:5d:1b:5d:36:ee:9e: f5:02:1f:dc:ec:eb:60:52:84:ed:84:01:a3:cc:ff: 62:b2:3e:7c:36:47:9e:96:3a:72:f8:cb:d5:08:02: f5:12:08:67:7e:83:38:81:34:43:d9:df:42:09:f4: 99:86:ff:08:ec:46:42:18:8c:b2:e0:2e:bd:bf:57: bb:9b:48:39:c3:5b:eb:96:cd:43:77:58:56:0f:da: ea:64:ca:e5:f9:16:08:03:30:ce:5d:c9:6b:b0:64: 97:2c:fe:7f:f8:00:09:58:4f:e2:83:66:89:33:37: 0d:61:dd:cd:4e:3e:be:6c:92:77:d2:f9:21:53:28: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D9:25:26:D9:C8:B1:13:E9:08:C9:F1:49:2D:46:18:72:16:0A:D2 X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/rdklJtnIsRPpCMnxSS1GGHIWCtI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.153.230.0/23 46.199.88.0/24 81.4.190.0/23 128.0.107.0/24 195.14.130.0/24 195.14.154.0/24 195.14.157.0/24 212.31.96.0/24 212.31.123.0-212.31.125.255 212.31.127.0/24 Signature Algorithm: sha256WithRSAEncryption 61:7c:70:ef:47:f8:f2:24:4e:1b:ea:2e:89:b8:70:49:f3:70: 11:a2:73:ac:20:37:1b:81:36:57:47:ea:14:b2:09:a1:ea:bf: a1:cb:2c:fa:1d:14:b0:3f:d7:5b:59:7f:a2:e7:26:7d:50:6f: aa:7c:12:8a:5b:16:5f:4b:fb:53:c2:90:b5:33:e7:30:c6:5b: d1:fa:d0:5a:3c:88:f8:1b:fe:c3:45:7f:85:1b:87:a7:41:0f: 8c:7d:ce:ba:67:a9:d2:1b:3f:a1:3f:61:10:6e:5e:79:4b:c8: 79:78:0a:e0:48:74:f8:4c:68:73:92:f2:89:ab:50:20:88:22: 49:87:37:09:57:40:53:6f:42:a3:dd:7f:e4:ec:df:42:1f:68: d5:76:d1:18:a6:e3:5e:9e:c7:38:2e:75:0b:5e:83:65:4d:76: fd:51:03:7e:4e:2a:31:30:39:43:3a:84:3b:3c:9e:03:47:c5: 44:2a:17:0c:86:45:31:df:ff:0d:bb:5a:8e:d5:d7:b4:68:57: 65:29:b8:7e:a0:15:3d:43:0e:73:7b:32:0d:a4:28:62:3c:95: 93:02:21:cf:8e:a5:1b:eb:81:f0:e0:dc:4c:4a:89:93:74:3a: ff:71:de:15:ce:42:e6:27:a1:a0:e6:83:f7:bb:4a:30:12:8b: 9a:02:75:00 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt266RHhehbc51AgdqyFZzPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQ5MjUyNmQ5YzhiMTEzZTkwOGM5ZjE0OTJkNDYxODcyMTYwYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44mfUeJqXcu8UK+DIDZTslKiyxkn 4DKteJR/IB0ML6RSeEitxly4VaIGCmqwwHCk/8mrNFI573gWjSux8qx6WFKd/21I b+oyDsHNyTTk1ds6841ywCBuMiHEbb34S+a1w296+qqswD6EIBSZksv277BxJCZr 5wwfX03J+EwLP71dG1027p71Ah/c7OtgUoTthAGjzP9isj58Nkeeljpy+MvVCAL1 EghnfoM4gTRD2d9CCfSZhv8I7EZCGIyy4C69v1e7m0g5w1vrls1Dd1hWD9rqZMrl +RYIAzDOXclrsGSXLP5/+AAJWE/ig2aJMzcNYd3NTj6+bJJ30vkhUyiEkQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFK3ZJSbZyLET6QjJ8UktRhhyFgrSMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvcmRrbEp0bklzUlBwQ01ueFNTMUdHSElXQ3RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBH5nmAwQA LsdYAwQBUQS+AwQAgABrAwQAww6CAwQAww6aAwQAww6dAwQA1B9gMAwDBADUH3sD BAHUH3wDBADUH38wDQYJKoZIhvcNAQELBQADggEBAGF8cO9H+PIkThvqLom4cEnz cBGic6wgNxuBNldH6hSyCaHqv6HLLPodFLA/11tZf6LnJn1Qb6p8EopbFl9L+1PC kLUz5zDGW9H60Fo8iPgb/sNFf4Ubh6dBD4x9zrpnqdIbP6E/YRBuXnlLyHl4CuBI dPhMaHOS8omrUCCIIkmHNwlXQFNvQqPdf+Ts30IfaNV20Rim416exzgudQteg2VN dv1RA35OKjEwOUM6hDs8ngNHxUQqFwyGRTHf/w27Wo7V17RoV2UpuH6gFT1DDnN7 Mg2kKGI8lZMCIc+OpRvrgfDg3ExKiZN0Ov9x3hXOQuYnoaDmg/e7SjASi5oCdQA= -----END CERTIFICATE-----Generated at Thu Jan 1 19:06:42 2026 by rpki-client