This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UnFMkdVJellCSxJcdQg67Rhoh6o.roa File: UnFMkdVJellCSxJcdQg67Rhoh6o.roa (raw, json) Hash identifier: xo+SNjx0SOiYZTLo7Xn7So+cpORldCIoAaXulgyDnbE= Subject key identifier: 52:71:4C:91:D5:49:7A:59:42:4B:12:5C:75:08:3A:ED:18:68:87:AA Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B173089F1B0FCD28EB52A100E57F3 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UnFMkdVJellCSxJcdQg67Rhoh6o.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199048 IP address blocks: 83.222.186.0/23 maxlen: 24 83.222.188.0/24 maxlen: 24 94.72.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:17:30:89:f1:b0:fc:d2:8e:b5:2a:10:0e:57:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52714c91d5497a59424b125c75083aed186887aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:52:4e:6a:4e:87:68:32:7e:f3:85:53:e1:df: 40:18:35:60:cc:7d:7e:a0:44:23:52:f8:10:ef:5c: f7:9d:09:17:49:4b:a2:46:39:bf:df:d9:5c:b5:78: 2d:e5:3a:18:13:c3:8b:b9:de:80:4b:ba:cd:ce:c2: 8b:8a:18:2b:e0:5a:83:5a:06:90:71:62:58:d1:d1: c3:5c:f7:fe:70:2c:e8:88:79:28:77:12:13:4c:09: 55:61:91:e9:e6:a8:8e:47:ad:c7:3f:85:8b:e6:dc: 7b:67:86:01:08:fd:74:8d:a7:7c:6e:6c:9f:dc:57: a0:ae:d8:98:6b:93:95:e9:14:1f:20:20:7c:65:10: 74:31:36:00:d5:bb:a9:55:ac:3e:e5:59:dd:08:f1: aa:c3:a1:f1:89:dd:2e:ef:af:5e:d4:8f:16:b3:06: cb:38:cb:e9:87:c6:46:4c:84:cd:fd:c8:8f:36:80: 69:73:f0:7b:f7:24:a9:56:b1:95:e5:d6:18:b7:a5: fd:64:ca:d6:3d:72:23:3b:17:6e:00:c8:c0:f6:fc: f6:9f:14:f1:b3:05:91:4a:ac:0f:45:49:aa:13:df: e6:44:70:1b:d2:0c:8b:a2:2e:98:36:3f:9d:d4:01: 15:54:53:cb:a9:da:6a:54:1d:11:7b:64:9d:87:a1: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:71:4C:91:D5:49:7A:59:42:4B:12:5C:75:08:3A:ED:18:68:87:AA X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/UnFMkdVJellCSxJcdQg67Rhoh6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.222.186.0-83.222.188.255 94.72.146.0/23 Signature Algorithm: sha256WithRSAEncryption 66:05:dc:85:c1:a9:a2:6e:49:d6:f9:56:0c:2c:ce:18:bb:23: d8:83:a1:a0:4a:93:70:43:6e:5e:77:45:ca:1e:7d:91:7c:22: d1:aa:ca:bc:65:aa:3e:f4:f6:8b:12:9a:85:be:c2:7e:3d:d4: 98:f1:b2:69:c2:59:2b:e2:7e:7f:2c:58:57:1b:79:d6:ac:5a: 25:f9:c7:00:6e:7c:8f:d7:59:90:0c:32:3c:09:a6:c8:e6:86: a2:6d:99:9b:7a:f6:44:26:23:46:40:fc:e3:29:87:94:13:a2: c9:58:83:d2:12:96:07:79:b6:c9:d3:7f:a3:5f:6f:9b:ea:6f: b1:db:b9:3f:a7:3d:68:98:ef:b1:62:ce:a0:d9:c2:b1:00:df: 2b:2c:a9:b6:89:c9:a5:9c:33:99:c2:e6:5d:ef:4e:d1:64:07: d8:27:12:ac:c4:25:56:d4:cc:fb:f5:5a:37:3b:ae:1d:2d:52: c5:57:2b:44:24:6d:56:4b:cb:23:23:c4:9e:9c:76:8e:01:7c: 64:b0:83:fb:ed:9c:90:60:9b:56:aa:70:8b:61:45:0a:f0:8d: 9c:e9:20:1d:20:91:2f:ec:06:5a:57:53:30:22:bf:5f:37:16: 7d:0d:f3:6b:54:e6:b7:1f:d9:75:97:44:8a:93:4e:37:3e:cf: 3e:f3:13:e5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9WxcwifGw/NKOtSoQDlfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjcxNGM5MWQ1NDk3YTU5NDI0YjEyNWM3NTA4M2FlZDE4Njg4N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlJOak6HaDJ+84VT4d9AGDVgzH1+ oEQjUvgQ71z3nQkXSUuiRjm/39lctXgt5ToYE8OLud6AS7rNzsKLihgr4FqDWgaQ cWJY0dHDXPf+cCzoiHkodxITTAlVYZHp5qiOR63HP4WL5tx7Z4YBCP10jad8bmyf 3FegrtiYa5OV6RQfICB8ZRB0MTYA1bupVaw+5VndCPGqw6Hxid0u769e1I8WswbL OMvph8ZGTITN/ciPNoBpc/B79ySpVrGV5dYYt6X9ZMrWPXIjOxduAMjA9vz2nxTx swWRSqwPRUmqE9/mRHAb0gyLoi6YNj+d1AEVVFPLqdpqVB0Re2Sdh6FbWQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFJxTJHVSXpZQksSXHUIOu0YaIeqMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvVW5GTWtkVkplbGxDU3hKY2RRZzY3UmhvaDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFT3roD BABT3rwDBAFeSJIwDQYJKoZIhvcNAQELBQADggEBAGYF3IXBqaJuSdb5Vgwszhi7 I9iDoaBKk3BDbl53RcoefZF8ItGqyrxlqj709osSmoW+wn491JjxsmnCWSvifn8s WFcbedasWiX5xwBufI/XWZAMMjwJpsjmhqJtmZt69kQmI0ZA/OMph5QToslYg9IS lgd5tsnTf6Nfb5vqb7HbuT+nPWiY77FizqDZwrEA3yssqbaJyaWcM5nC5l3vTtFk B9gnEqzEJVbUzPv1Wjc7rh0tUsVXK0QkbVZLyyMjxJ6cdo4BfGSwg/vtnJBgm1aq cIthRQrwjZzpIB0gkS/sBlpXUzAiv183Fn0N82tU5rcf2XWXRIqTTjc+zz7zE+U= -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:10 2026 by rpki-client