This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/10qUOD3TRs_VZ30N36BucY8E_IQ.roa File: 10qUOD3TRs_VZ30N36BucY8E_IQ.roa (raw, json) Hash identifier: lXaJEd2dHqQh/cLWl96tMEopHvxJpYOXWe/ausu9h4M= Subject key identifier: D7:4A:94:38:3D:D3:46:CF:D5:67:7D:0D:DF:A0:6E:71:8F:04:FC:84 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B21726C0E4CF49236AB4D8C8AC13C Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/10qUOD3TRs_VZ30N36BucY8E_IQ.roa Signing time: Fri 02 Jan 2026 06:18:02 +0000 ROA not before: Fri 02 Jan 2026 06:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205872 IP address blocks: 79.124.72.0/24 maxlen: 24 83.222.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:21:72:6c:0e:4c:f4:92:36:ab:4d:8c:8a:c1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74a94383dd346cfd5677d0ddfa06e718f04fc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6b:40:b7:33:9c:7d:48:96:e7:d1:57:4d:1a: db:27:b7:7e:7e:c9:67:d4:90:b9:76:0f:e1:bb:61: 7e:bc:44:20:3c:c9:18:10:66:72:46:23:3a:e2:d4: b9:17:48:a4:ed:ca:83:79:df:28:0f:f7:96:70:00: 1b:a1:04:c0:4d:2d:3e:34:a9:d6:14:53:50:7b:ba: 62:eb:71:02:88:07:d1:1e:ba:2e:30:4f:9f:fa:7d: e8:dd:c4:c7:4b:56:49:4d:19:02:03:ae:2c:82:ba: 48:f8:23:cc:e2:52:d0:cc:8f:e7:a9:8c:77:9a:98: 75:b6:70:ad:17:f7:af:c8:1d:2d:ca:f3:89:3a:55: f8:9c:d0:ad:0d:91:c7:23:a8:14:25:50:68:36:b9: de:88:ce:2e:08:06:15:e2:91:bd:72:aa:38:7f:22: b3:a6:28:be:f1:e2:67:9d:5e:2c:24:cb:93:82:6f: 70:97:1d:70:67:a4:b1:6a:0c:1d:4d:26:00:54:3d: b3:5a:1c:b2:60:44:40:fb:0b:7e:ef:b1:24:0a:a0: a1:15:12:3d:ca:ea:4f:bd:4b:fe:17:f2:11:46:e5: 30:9a:c0:1f:0c:c0:c1:44:56:77:bb:5c:2e:d9:39: 1c:83:7d:36:35:a0:0f:0e:3b:ca:e1:53:f8:42:e1: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4A:94:38:3D:D3:46:CF:D5:67:7D:0D:DF:A0:6E:71:8F:04:FC:84 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/10qUOD3TRs_VZ30N36BucY8E_IQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.72.0/24 83.222.189.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:5a:c8:db:6c:d7:85:8f:2d:15:19:ac:d4:44:ef:ed:93:4b: 7c:e8:ab:3e:c8:30:75:f7:41:1a:fa:94:38:7c:10:a3:4d:df: 58:cc:6b:86:3f:59:33:1a:8e:f6:23:cb:2f:fd:6e:64:96:49: d8:eb:a5:54:86:d8:f3:6e:78:5c:87:3a:c7:3f:4f:d1:3f:6b: 7f:5b:dd:87:a1:e3:9d:e7:59:27:e0:75:84:44:40:88:68:a6: c2:de:d3:9d:05:06:67:e4:0c:67:ec:5f:ee:56:d8:20:ed:03: 73:25:0b:bf:03:ee:4b:bf:d6:af:2c:2f:89:6c:db:d0:01:dc: b8:07:e7:cc:19:b4:45:42:95:cf:83:c9:1f:a0:60:d5:6b:b3: a4:5d:e2:1d:11:fe:fa:77:ca:fe:6a:dd:65:4b:75:52:6a:78: af:a0:4e:c0:54:d7:7d:e5:de:da:13:9b:42:69:35:6b:60:72: 32:f0:0a:2c:a1:d8:d2:c9:c9:a4:12:2d:93:95:49:dd:88:ab: cb:58:d5:6e:09:43:23:c5:70:ea:b6:e0:d3:0e:c7:f2:4e:cd: 76:03:24:8e:e7:b5:70:6c:dd:ba:92:35:ff:72:f6:18:06:29: 50:2a:80:d4:c4:05:1b:48:2f:5c:c5:10:9c:79:53:85:f1:2e: 7b:23:ea:ff -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WyFybA5M9JI2q02MisE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzRhOTQzODNkZDM0NmNmZDU2NzdkMGRkZmEwNmU3MThmMDRmYzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGtAtzOcfUiW59FXTRrbJ7d+fsln 1JC5dg/hu2F+vEQgPMkYEGZyRiM64tS5F0ik7cqDed8oD/eWcAAboQTATS0+NKnW FFNQe7pi63ECiAfRHrouME+f+n3o3cTHS1ZJTRkCA64sgrpI+CPM4lLQzI/nqYx3 mph1tnCtF/evyB0tyvOJOlX4nNCtDZHHI6gUJVBoNrneiM4uCAYV4pG9cqo4fyKz pii+8eJnnV4sJMuTgm9wlx1wZ6SxagwdTSYAVD2zWhyyYERA+wt+77EkCqChFRI9 yupPvUv+F/IRRuUwmsAfDMDBRFZ3u1wu2Tkcg302NaAPDjvK4VP4QuE4dwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNdKlDg900bP1Wd9Dd+gbnGPBPyEMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvMTBxVU9EM1RSc19WWjMwTjM2QnVjWThFX0lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT3xIAwQA U969MA0GCSqGSIb3DQEBCwUAA4IBAQBcWsjbbNeFjy0VGazURO/tk0t86Ks+yDB1 90Ea+pQ4fBCjTd9YzGuGP1kzGo72I8sv/W5klknY66VUhtjzbnhchzrHP0/RP2t/ W92HoeOd51kn4HWERECIaKbC3tOdBQZn5Axn7F/uVtgg7QNzJQu/A+5Lv9avLC+J bNvQAdy4B+fMGbRFQpXPg8kfoGDVa7OkXeIdEf76d8r+at1lS3VSanivoE7AVNd9 5d7aE5tCaTVrYHIy8AosodjSycmkEi2TlUndiKvLWNVuCUMjxXDqtuDTDsfyTs12 AySO57VwbN26kjX/cvYYBilQKoDUxAUbSC9cxRCceVOF8S57I+r/ -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:37 2026 by rpki-client