This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/dsrIojswrtCAaVDG7x95eUR5UNs.roa File: dsrIojswrtCAaVDG7x95eUR5UNs.roa (raw, json) Hash identifier: qILxj7yICSM2GLcGcjXclEWNMSwoXtcOFYbxsTUB7mE= Subject key identifier: 76:CA:C8:A2:3B:30:AE:D0:80:69:50:C6:EF:1F:79:79:44:79:50:DB Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930 Certificate serial: 019B7BA4E292F7EF2E6C35E9CB556E80D5F2 Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/dsrIojswrtCAaVDG7x95eUR5UNs.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 94.125.224.0/24 maxlen: 24 94.125.225.0/24 maxlen: 24 94.125.226.0/24 maxlen: 24 94.125.227.0/24 maxlen: 24 94.125.228.0/24 maxlen: 24 94.125.229.0/24 maxlen: 24 94.125.230.0/24 maxlen: 24 94.125.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e2:92:f7:ef:2e:6c:35:e9:cb:55:6e:80:d5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930 Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76cac8a23b30aed0806950c6ef1f7979447950db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:4f:2b:a7:b7:eb:0d:ea:b7:42:b5:b7:e5: a9:a2:38:47:9b:22:7c:b4:44:ad:ed:94:65:1e:8b: 6d:5c:db:ca:82:19:ac:a8:57:c6:0c:05:6e:25:b3: 4f:33:4d:e7:13:af:4f:c4:03:22:e1:7e:42:eb:70: e7:4c:ec:54:fc:ce:7e:c8:1f:ad:8d:fb:df:d1:fc: 68:c6:f0:54:d1:d5:5d:d9:9c:42:cf:0e:56:67:e5: 8e:11:1b:51:0b:5b:ca:44:6d:31:f1:82:99:21:c0: fb:36:ab:e1:b2:89:71:28:20:22:0b:32:64:7f:3c: 93:05:ed:8f:a9:b1:98:69:25:ef:e4:1d:58:f5:7a: c3:49:10:cd:65:83:0e:72:9e:e0:3b:c6:fc:50:f5: 85:54:18:5d:74:ae:dc:1b:14:4a:29:f7:60:ab:06: 18:58:03:88:de:11:6f:58:ce:10:e7:9e:31:24:43: 92:0f:69:34:3c:90:58:d4:3e:ee:01:d6:d9:d2:35: c5:05:f1:57:08:0b:dd:01:f5:3e:aa:25:d2:b9:5c: c5:93:e8:4f:c0:dd:aa:90:cc:6f:31:bd:a9:98:80: 22:04:74:79:8f:51:a1:a8:d3:dc:2b:96:78:28:1c: 9a:4d:ae:0b:10:70:35:15:c9:e7:38:e6:30:81:60: ab:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CA:C8:A2:3B:30:AE:D0:80:69:50:C6:EF:1F:79:79:44:79:50:DB X509v3 Authority Key Identifier: keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/dsrIojswrtCAaVDG7x95eUR5UNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.125.224.0/21 Signature Algorithm: sha256WithRSAEncryption bf:0b:94:32:87:b9:09:d5:06:b1:0c:a1:e7:c4:9e:01:f7:16: 67:fd:8c:9a:ff:f6:3f:1e:63:93:12:88:20:bb:d6:72:67:37: 1b:42:6d:7a:06:7f:f2:d3:47:9e:b4:74:3e:c9:4b:f7:2d:04: 58:05:49:c7:f9:c1:32:ce:67:9f:e4:47:7f:61:ae:2f:e2:f4: 89:c5:30:2a:57:d2:83:cf:20:b1:4a:e6:13:79:67:41:10:93: 72:e7:b2:b2:8c:18:be:39:bb:a3:de:3e:bf:ee:b8:39:c3:6f: 21:6c:70:f9:d9:96:58:ed:23:02:71:92:3e:4c:d9:17:6c:b6: b0:9e:15:89:9b:1d:08:50:cb:3d:47:51:d4:f7:9e:6a:6a:e0: 01:c2:69:51:c8:79:28:a0:17:77:2a:10:bc:7a:bf:03:1c:21: b1:d0:23:92:97:8d:dd:ef:bd:89:e2:a5:5d:3c:1d:3e:58:83: 9c:26:fc:69:db:ab:97:14:b4:56:b0:6f:8a:06:a7:9f:82:06: 19:a2:eb:25:8c:e8:12:a1:fc:ef:1a:54:6f:aa:a6:fb:c5:17: a3:e5:2c:bd:a4:ff:10:2e:a6:d0:ba:4d:a1:1b:59:a9:22:61: 68:b8:77:f8:4c:cb:6f:20:52:cf:5a:ab:b4:ae:db:10:a5:92: 9e:e4:3c:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOKS9+8ubDXpy1VugNXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YjQxM2U1MzZkOTkzNTNmMGIwNTBlZTc0NmZmZGQyNGVk YjU5MzAwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmNhYzhhMjNiMzBhZWQwODA2OTUwYzZlZjFmNzk3OTQ0Nzk1MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1INPK6e36w3qt0K1t+WpojhHmyJ8 tESt7ZRlHottXNvKghmsqFfGDAVuJbNPM03nE69PxAMi4X5C63DnTOxU/M5+yB+t jfvf0fxoxvBU0dVd2ZxCzw5WZ+WOERtRC1vKRG0x8YKZIcD7NqvhsolxKCAiCzJk fzyTBe2PqbGYaSXv5B1Y9XrDSRDNZYMOcp7gO8b8UPWFVBhddK7cGxRKKfdgqwYY WAOI3hFvWM4Q554xJEOSD2k0PJBY1D7uAdbZ0jXFBfFXCAvdAfU+qiXSuVzFk+hP wN2qkMxvMb2pmIAiBHR5j1GhqNPcK5Z4KByaTa4LEHA1FcnnOOYwgWCr8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHbKyKI7MK7QgGlQxu8feXlEeVDbMB8GA1UdIwQY MBaAFDa0E+U22ZNT8LBQ7nRv/dJO21kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEt YTFmNTczZDA2OWRhLzEvZHNySW9qc3dydENBYVZERzd4OTVlVVI1VU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lNjYyOTYtMDQ3OS00YzUyLTljZWEtYTFmNTczZDA2OWRh LzEvTnJRVDVUYlprMVB3c0ZEdWRHXzkwazdiV1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXn3gMA0G CSqGSIb3DQEBCwUAA4IBAQC/C5Qyh7kJ1QaxDKHnxJ4B9xZn/Yya//Y/HmOTEogg u9ZyZzcbQm16Bn/y00eetHQ+yUv3LQRYBUnH+cEyzmef5Ed/Ya4v4vSJxTAqV9KD zyCxSuYTeWdBEJNy57KyjBi+Obuj3j6/7rg5w28hbHD52ZZY7SMCcZI+TNkXbLaw nhWJmx0IUMs9R1HU955qauABwmlRyHkooBd3KhC8er8DHCGx0COSl43d772J4qVd PB0+WIOcJvxp26uXFLRWsG+KBqefggYZousljOgSofzvGlRvqqb7xRej5Sy9pP8Q LqbQuk2hG1mpImFouHf4TMtvIFLPWqu0rtsQpZKe5DxZ -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:55 2026 by rpki-client