This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iDDC-2rHGKPVRoYKgXWzS07-EAY.roa File: iDDC-2rHGKPVRoYKgXWzS07-EAY.roa (raw, json) Hash identifier: BVcxHmnPWpXEr9RVsHlmDkNOuTfv8hmwCSOKj/s7kCs= Subject key identifier: 88:30:C2:FB:6A:C7:18:A3:D5:46:86:0A:81:75:B3:4B:4E:FE:10:06 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F52E63EFA804B9B72A5D05E54E37 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iDDC-2rHGKPVRoYKgXWzS07-EAY.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39368 IP address blocks: 185.218.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:2e:63:ef:a8:04:b9:b7:2a:5d:05:e5:4e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8830c2fb6ac718a3d546860a8175b34b4efe1006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:56:f8:71:ca:2a:89:d4:39:30:7c:a8:22: d3:ba:ba:b8:01:0f:26:96:59:04:59:95:5c:ac:1d: 1b:a7:83:cb:dd:45:9a:3d:89:3e:28:1d:ea:1a:a8: 28:a6:3e:46:39:cb:75:34:d0:4e:83:f0:47:bc:9e: 0c:0c:6f:42:50:9c:12:f2:1a:cf:23:52:6d:a0:c0: c2:e9:c4:ff:cf:bb:ad:ac:96:28:6b:ae:3d:c1:b4: bf:3f:91:34:13:d8:a0:07:a9:9e:4c:96:b4:7b:59: fe:66:8a:1d:90:e8:37:6f:30:9c:01:db:88:af:51: 63:f1:79:6c:65:07:49:d2:f7:b3:8f:87:10:e7:8a: 28:b9:8c:c6:49:14:7b:85:38:d1:76:1f:df:d4:cd: e8:c8:ce:ac:c3:b0:af:20:5e:43:00:ca:bd:ff:06: fd:f9:7b:ac:f4:52:b7:90:c0:69:f4:6f:b9:55:7a: 10:09:4b:cf:d4:1e:37:65:0d:32:55:c7:a3:d5:26: 40:4c:96:e0:c0:69:dd:d7:15:35:b3:8f:d1:42:82: b6:24:1f:2b:74:85:94:6f:30:93:4b:77:48:1b:b1: d7:80:63:84:34:f5:9d:20:a0:f5:6e:5a:c9:b4:2f: 2a:84:b0:b9:1a:de:39:95:01:a9:e9:1e:42:21:89: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:30:C2:FB:6A:C7:18:A3:D5:46:86:0A:81:75:B3:4B:4E:FE:10:06 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iDDC-2rHGKPVRoYKgXWzS07-EAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.139.0/24 Signature Algorithm: sha256WithRSAEncryption 67:22:8e:4d:27:b2:2d:ea:68:8b:9d:3b:ee:b2:77:a1:ea:66: 6e:a9:58:79:08:4b:0e:53:12:c2:83:fb:18:86:7d:9a:0d:94: 74:e8:80:30:de:c4:35:77:19:3f:42:13:42:ff:53:e2:4c:37: 0b:3a:13:29:5f:53:3b:8a:5d:89:7e:6c:75:be:07:f8:69:fa: 58:bb:8f:d5:68:d7:d5:99:0a:9b:f1:22:3c:29:eb:d9:b1:e5: 2e:0a:23:08:47:5c:e7:66:24:b3:02:38:80:03:f2:aa:ac:e2: e7:84:35:6b:c5:97:df:b5:42:82:2e:6b:73:76:25:42:2f:b1: af:20:23:91:87:39:91:c3:bf:ad:db:3d:f5:df:25:c3:41:37: 04:9f:71:e5:78:c0:47:4b:9c:87:f3:a9:f1:c5:b0:3d:44:4d: 41:86:7f:3b:cf:ee:9c:51:18:2d:a1:73:1c:e4:9c:9a:8f:cd: b4:63:e6:b7:30:86:47:1a:fc:19:41:dc:5a:11:0b:3b:e9:49: b1:e9:43:71:b8:e3:94:4f:e4:75:b1:a0:67:84:72:d5:9d:0e: 0a:66:1f:72:da:47:b0:b1:ba:06:bd:36:7e:9d:ed:4a:89:5f: a8:42:8a:d0:4d:5c:d4:ef:d3:0d:9d:57:b1:b8:ac:f5:d1:d2: 14:39:c0:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovUuY++oBLm3Kl0F5U43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODMwYzJmYjZhYzcxOGEzZDU0Njg2MGE4MTc1YjM0YjRlZmUxMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2xW+HHKKonUOTB8qCLTurq4AQ8m llkEWZVcrB0bp4PL3UWaPYk+KB3qGqgopj5GOct1NNBOg/BHvJ4MDG9CUJwS8hrP I1JtoMDC6cT/z7utrJYoa649wbS/P5E0E9igB6meTJa0e1n+ZoodkOg3bzCcAduI r1Fj8XlsZQdJ0vezj4cQ54oouYzGSRR7hTjRdh/f1M3oyM6sw7CvIF5DAMq9/wb9 +Xus9FK3kMBp9G+5VXoQCUvP1B43ZQ0yVcej1SZATJbgwGnd1xU1s4/RQoK2JB8r dIWUbzCTS3dIG7HXgGOENPWdIKD1blrJtC8qhLC5Gt45lQGp6R5CIYlbOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgwwvtqxxij1UaGCoF1s0tO/hAGMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaUREQy0yckhHS1BWUm9ZS2dYV3pTMDctRUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudqLMA0G CSqGSIb3DQEBCwUAA4IBAQBnIo5NJ7It6miLnTvusneh6mZuqVh5CEsOUxLCg/sY hn2aDZR06IAw3sQ1dxk/QhNC/1PiTDcLOhMpX1M7il2Jfmx1vgf4afpYu4/VaNfV mQqb8SI8KevZseUuCiMIR1znZiSzAjiAA/KqrOLnhDVrxZfftUKCLmtzdiVCL7Gv ICORhzmRw7+t2z313yXDQTcEn3HleMBHS5yH86nxxbA9RE1Bhn87z+6cURgtoXMc 5Jyaj820Y+a3MIZHGvwZQdxaEQs76Umx6UNxuOOUT+R1saBnhHLVnQ4KZh9y2kew sboGvTZ+ne1KiV+oQorQTVzU79MNnVexuKz10dIUOcDQ -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:52 2026 by rpki-client