This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DqeR2FWuyBOQWn6hpvG3sODBINk.roa File: DqeR2FWuyBOQWn6hpvG3sODBINk.roa (raw, json) Hash identifier: fNTRU9jJPnWN8rpjPkdn/YVRGun7TGeiuvo6jmTFMFU= Subject key identifier: 0E:A7:91:D8:55:AE:C8:13:90:5A:7E:A1:A6:F1:B7:B0:E0:C1:20:D9 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2D70920790441FA04E9EDD26D5C1 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DqeR2FWuyBOQWn6hpvG3sODBINk.roa Signing time: Fri 02 Jan 2026 06:18:06 +0000 ROA not before: Fri 02 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272697 IP address blocks: 130.185.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2d:70:92:07:90:44:1f:a0:4e:9e:dd:26:d5:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ea791d855aec813905a7ea1a6f1b7b0e0c120d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:f0:cc:28:0a:e8:79:b6:3e:e2:be:50:99: 9b:62:3c:85:97:b1:0e:3c:08:9a:6a:53:6f:3f:f1: 1b:62:fd:d1:75:90:85:db:b8:9c:c3:4a:a4:93:e5: 9b:fa:c8:d6:5e:4d:e1:d8:e2:b7:f4:2f:f4:f4:4e: ed:e3:c0:8d:67:36:ae:63:39:ef:56:0e:1e:3d:50: 52:3a:df:a1:8f:be:08:74:93:5c:ac:02:03:84:a4: 65:8d:8c:8e:03:ee:3e:f0:01:71:9c:60:f1:af:33: 68:eb:21:df:08:bf:c6:9d:48:42:0a:d3:3a:78:74: c7:8a:2a:1e:0a:f9:8a:bf:d6:12:a2:2e:c8:9a:ed: 80:9a:dc:d4:c3:14:6d:08:73:ba:de:bb:fa:f6:a7: 9d:15:07:84:bd:66:6c:7e:85:5b:ca:a7:af:21:ee: 52:16:11:d1:9d:98:eb:9a:15:41:78:ed:83:ea:73: d8:47:ff:90:ed:a3:99:ca:23:d8:e3:a4:16:d0:ab: 46:b2:fa:4d:c2:f9:33:8d:b8:c3:f7:c6:c9:df:c8: df:c1:d8:09:c7:5e:13:c4:5d:b6:e6:3f:85:e0:76: 03:2b:4c:3c:18:97:e0:da:ec:39:77:fb:06:83:7a: 75:64:0f:7e:f6:d9:f7:bc:ab:64:87:55:9b:79:27: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A7:91:D8:55:AE:C8:13:90:5A:7E:A1:A6:F1:B7:B0:E0:C1:20:D9 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/DqeR2FWuyBOQWn6hpvG3sODBINk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.238.0/24 Signature Algorithm: sha256WithRSAEncryption 02:29:b9:65:b2:6e:22:e8:6f:2c:c0:b2:9d:cd:8d:6a:f2:57: 22:a3:b9:52:33:6f:60:46:c3:7c:8e:17:c4:2d:66:62:48:53: ee:66:a8:62:aa:ca:fa:8a:99:a6:48:e6:6a:6e:5d:b2:03:5b: 68:2f:28:66:ad:e0:b5:45:ae:53:98:06:d5:d3:c2:cd:9c:90: 29:5f:e4:bc:bc:40:fd:5a:27:53:0a:85:ed:07:f7:26:2b:f9: 8d:cb:24:36:be:18:ce:01:be:cc:35:e7:73:d1:26:af:c9:ce: 0d:e7:77:2b:f7:9c:b8:d4:41:8b:7e:e1:e6:92:e6:fe:78:da: 51:1b:01:a4:ad:1e:ea:2c:ae:aa:d7:53:81:a7:96:25:fb:5c: fa:96:c3:e5:14:52:bb:8b:76:c3:60:a2:94:a9:14:b0:06:1f: 71:77:2e:8f:f1:c7:fe:0b:fe:6f:95:32:2d:af:7a:9e:5f:df: 38:ee:16:b5:a0:fc:8a:9a:10:d8:49:75:58:4e:ba:bb:8d:98: 97:7a:e4:18:c9:34:45:af:c2:0a:d9:b7:fe:31:73:e8:11:37: 84:36:02:db:ca:87:64:76:17:16:43:30:c7:a1:95:ce:47:9f: bf:5c:4b:28:da:0b:54:43:e2:93:88:0c:d6:de:ff:c8:0d:92: a2:cd:d5:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wy1wkgeQRB+gTp7dJtXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWE3OTFkODU1YWVjODEzOTA1YTdlYTFhNmYxYjdiMGUwYzEyMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZzwzCgK6Hm2PuK+UJmbYjyFl7EO PAiaalNvP/EbYv3RdZCF27icw0qkk+Wb+sjWXk3h2OK39C/09E7t48CNZzauYznv Vg4ePVBSOt+hj74IdJNcrAIDhKRljYyOA+4+8AFxnGDxrzNo6yHfCL/GnUhCCtM6 eHTHiioeCvmKv9YSoi7Imu2AmtzUwxRtCHO63rv69qedFQeEvWZsfoVbyqevIe5S FhHRnZjrmhVBeO2D6nPYR/+Q7aOZyiPY46QW0KtGsvpNwvkzjbjD98bJ38jfwdgJ x14TxF225j+F4HYDK0w8GJfg2uw5d/sGg3p1ZA9+9tn3vKtkh1WbeSczMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6nkdhVrsgTkFp+oabxt7DgwSDZMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvRHFlUjJGV3V5Qk9RV242aHB2RzNzT0RCSU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgrnuMA0G CSqGSIb3DQEBCwUAA4IBAQACKbllsm4i6G8swLKdzY1q8lcio7lSM29gRsN8jhfE LWZiSFPuZqhiqsr6ipmmSOZqbl2yA1toLyhmreC1Ra5TmAbV08LNnJApX+S8vED9 WidTCoXtB/cmK/mNyyQ2vhjOAb7MNedz0Savyc4N53cr95y41EGLfuHmkub+eNpR GwGkrR7qLK6q11OBp5Yl+1z6lsPlFFK7i3bDYKKUqRSwBh9xdy6P8cf+C/5vlTIt r3qeX9847ha1oPyKmhDYSXVYTrq7jZiXeuQYyTRFr8IK2bf+MXPoETeENgLbyodk dhcWQzDHoZXOR5+/XEso2gtUQ+KTiAzW3v/IDZKizdUJ -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:47 2026 by rpki-client