This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/pDLuqrMTiYnndul8__rNpmENW8w.roa File: pDLuqrMTiYnndul8__rNpmENW8w.roa (raw, json) Hash identifier: dtdLEtRi5z1XMEhrlW7Gcgyf8VOzvZLXKWQl6l7zHXY= Subject key identifier: A4:32:EE:AA:B3:13:89:89:E7:76:E9:7C:FF:FA:CD:A6:61:0D:5B:CC Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Certificate serial: 019B7E392DAE2C6CD7A5549A2A108CDB1488 Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/pDLuqrMTiYnndul8__rNpmENW8w.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 185.115.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2d:ae:2c:6c:d7:a5:54:9a:2a:10:8c:db:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a432eeaab3138989e776e97cfffacda6610d5bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:ad:19:c8:f9:a5:60:74:76:4c:f5:f4:fa: 95:39:91:29:75:f2:d6:4c:00:64:e4:dd:bc:4f:31: b5:ed:01:7b:18:01:aa:38:a8:04:d4:6f:d8:bc:55: 2e:30:81:d0:44:42:6b:02:ae:e7:ce:ec:76:2d:ad: b2:8f:07:38:45:d0:d5:d2:9a:73:fe:c4:39:e8:e1: 8a:51:91:96:71:67:86:f4:d8:56:8d:fa:61:8f:98: 22:18:00:ec:44:8e:fe:bd:78:d7:74:45:b2:27:a0: 96:07:b9:9f:c2:4c:7f:9d:bd:a8:db:42:3b:44:28: 25:b9:7a:53:52:6e:47:09:1b:7a:f7:b3:3c:0a:a0: bd:aa:ec:22:a7:36:47:25:18:24:18:bc:67:30:b2: b8:bf:f8:b2:76:c5:64:1c:5a:16:92:f9:1b:a3:06: a2:31:f0:67:b5:01:e7:65:0e:92:0d:5f:7d:64:a9: 65:da:ac:1d:4c:fc:18:12:fb:2f:7e:9a:f8:d2:ba: 1b:ec:05:c1:ee:c6:62:96:45:43:2d:d6:50:93:b3: 86:e7:49:aa:bf:20:4c:ad:25:c0:f1:aa:95:9c:76: 9c:9a:db:14:4e:29:96:0e:f6:f6:6a:ab:fa:ef:1b: 92:45:a2:be:3d:2b:25:3c:4e:2c:fb:3d:c1:de:62: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:32:EE:AA:B3:13:89:89:E7:76:E9:7C:FF:FA:CD:A6:61:0D:5B:CC X509v3 Authority Key Identifier: keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/pDLuqrMTiYnndul8__rNpmENW8w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.162.0/24 Signature Algorithm: sha256WithRSAEncryption 77:d0:2b:e8:1b:c9:5f:ba:80:d2:6d:34:cb:b3:ed:8a:59:8b: c2:8f:db:5c:2a:e7:7e:d9:c8:fe:86:87:96:58:c0:74:b1:bf: e8:8c:b1:1e:6e:35:c9:4a:e2:59:d1:97:0b:4c:92:89:31:00: fd:73:b8:0b:84:f7:06:c2:1e:01:5b:c7:bc:e7:4e:78:cf:b0: 60:8c:0c:c6:31:39:02:3d:95:41:7c:6c:0a:6d:22:59:b2:91: 1d:8e:9f:31:b5:bd:d9:3a:37:a2:83:99:79:c1:48:8e:8b:a4: 04:68:4c:f4:ee:e4:3e:27:fa:ee:90:58:e7:d9:f1:77:97:41: a9:9d:56:2d:86:32:1e:be:06:1e:44:bc:7e:c4:63:3c:bb:fa: 2a:bf:c7:9f:9c:6e:70:57:c9:5e:a9:52:94:e0:4f:b0:3e:24: 2c:62:f1:47:58:bf:3d:66:37:a7:7b:e7:75:dc:30:6a:20:64: 65:4f:02:6d:b8:41:c9:b8:6e:68:8c:7a:dd:c2:f5:45:3a:de: 7b:d8:ab:99:eb:6e:1f:73:e8:13:21:7c:6d:9b:a4:82:4a:a6: 47:b0:42:88:71:2f:a1:76:a5:9c:e8:2a:39:5e:4c:20:15:35: 13:fa:27:de:14:35:39:5c:4e:70:4b:38:db:72:e4:0b:34:49: 2c:a6:ba:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OS2uLGzXpVSaKhCM2xSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4 NWNmYzIwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDMyZWVhYWIzMTM4OTg5ZTc3NmU5N2NmZmZhY2RhNjYxMGQ1YmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwCtGcj5pWB0dkz19PqVOZEpdfLW TABk5N28TzG17QF7GAGqOKgE1G/YvFUuMIHQREJrAq7nzux2La2yjwc4RdDV0ppz /sQ56OGKUZGWcWeG9NhWjfphj5giGADsRI7+vXjXdEWyJ6CWB7mfwkx/nb2o20I7 RCgluXpTUm5HCRt697M8CqC9quwipzZHJRgkGLxnMLK4v/iydsVkHFoWkvkbowai MfBntQHnZQ6SDV99ZKll2qwdTPwYEvsvfpr40rob7AXB7sZilkVDLdZQk7OG50mq vyBMrSXA8aqVnHacmtsUTimWDvb2aqv67xuSRaK+PSslPE4s+z3B3mLGewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQy7qqzE4mJ53bpfP/6zaZhDVvMMB8GA1UdIwQY MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct NGM4OTgwYjU4MTI2LzEvcERMdXFyTVRpWW5uZHVsOF9fck5wbUVOVzh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2 LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXOiMA0G CSqGSIb3DQEBCwUAA4IBAQB30CvoG8lfuoDSbTTLs+2KWYvCj9tcKud+2cj+hoeW WMB0sb/ojLEebjXJSuJZ0ZcLTJKJMQD9c7gLhPcGwh4BW8e85054z7BgjAzGMTkC PZVBfGwKbSJZspEdjp8xtb3ZOjeig5l5wUiOi6QEaEz07uQ+J/rukFjn2fF3l0Gp nVYthjIevgYeRLx+xGM8u/oqv8efnG5wV8leqVKU4E+wPiQsYvFHWL89Zjene+d1 3DBqIGRlTwJtuEHJuG5ojHrdwvVFOt572KuZ624fc+gTIXxtm6SCSqZHsEKIcS+h dqWc6Co5XkwgFTUT+ifeFDU5XE5wSzjbcuQLNEksprqa -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:20 2026 by rpki-client