This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/v94LL-qGGgahldRNvzQc-ZVS3KI.roa File: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (raw, json) Hash identifier: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw= Subject key identifier: BF:DE:0B:2F:EA:86:1A:06:A1:95:D4:4D:BF:34:1C:F9:95:52:DC:A2 Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019B7B35C66D68B52928EC4233BBCFD0EAF2 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/v94LL-qGGgahldRNvzQc-ZVS3KI.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 5.182.120.0/22 maxlen: 22 45.135.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c6:6d:68:b5:29:28:ec:42:33:bb:cf:d0:ea:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfde0b2fea861a06a195d44dbf341cf99552dca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d7:9a:be:6e:52:ab:0f:44:1c:4e:53:2e:18: 0c:ff:63:87:72:90:fd:e7:2e:68:46:88:fc:a6:ce: a0:cd:b3:c0:46:b3:aa:fa:51:63:f3:8a:61:d0:c6: 09:24:54:8d:95:39:69:b7:c1:33:2b:77:00:21:6a: 95:f0:24:4b:69:5c:8e:62:89:cb:53:4a:74:f6:ea: c9:1a:69:69:82:d4:62:7a:1b:c4:44:40:42:ed:46: ca:23:12:bf:64:15:de:78:96:f4:20:ff:8c:77:98: ca:ba:bf:c2:21:02:7b:ea:b8:33:21:61:d1:6a:2a: 14:e2:9b:98:e1:39:c7:25:13:20:51:09:0e:f9:6c: de:50:f6:75:6e:90:83:bb:cf:7e:39:8a:15:40:f4: 77:df:24:28:8f:b3:21:ee:00:d3:8f:92:8a:ee:85: 16:01:31:7e:5c:38:d8:24:13:db:7d:39:3e:32:8e: a5:c1:0d:e7:79:ea:56:ef:cb:b8:0d:f6:a2:1c:55: 67:16:67:e0:b5:73:d6:14:75:fc:5d:e8:07:b8:fa: 8f:af:f7:50:72:b0:47:49:99:2d:25:c6:5a:ab:47: 5c:ee:1a:f7:44:0e:87:23:46:04:2a:d7:d1:d8:a1: 1c:f7:29:23:01:af:ad:d5:36:98:a8:60:eb:0e:f1: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DE:0B:2F:EA:86:1A:06:A1:95:D4:4D:BF:34:1C:F9:95:52:DC:A2 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/v94LL-qGGgahldRNvzQc-ZVS3KI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.120.0/22 45.135.136.0/24 Signature Algorithm: sha256WithRSAEncryption 83:81:24:05:1f:be:17:f4:aa:a7:45:a4:16:25:3f:53:38:5e: 99:b2:d1:d0:f8:75:ad:a1:b4:fb:6f:da:56:3b:7e:2b:9c:72: 48:0c:50:67:6e:1c:3b:fa:2f:65:ca:59:61:32:c0:b9:9d:db: 85:e8:63:a3:b5:ba:56:aa:20:ab:6d:d5:a5:cf:d8:9c:79:a5: eb:2b:0c:5b:02:ee:73:84:d7:5f:8f:9d:68:42:75:0b:9a:59: 0c:88:d6:b3:f6:00:23:36:40:bb:9f:ef:0d:ef:4a:36:8a:62: 32:6c:c2:a3:54:e9:9e:b3:e6:de:6d:99:7a:10:ca:26:40:46: c0:aa:7d:35:51:26:86:67:5d:07:7d:b3:5a:66:9d:29:6e:af: 06:79:62:a0:f3:77:0f:e9:60:a6:b2:4f:db:fb:e3:2d:c1:ca: fc:7f:04:a6:38:f8:21:ca:d2:ab:19:a0:05:e4:6d:52:c9:23: 6b:7c:2d:92:82:6d:dd:e3:16:86:43:e8:73:1d:52:ce:a9:12: 41:6d:1f:b5:10:ac:79:9c:e5:5e:22:b9:af:65:3f:40:68:25: 64:bd:63:0f:e3:dc:bf:65:76:45:13:9c:7e:36:10:17:23:24: bb:2b:c3:36:0b:00:64:5f:a0:7a:68:95:08:aa:46:b9:cf:0e: e9:54:3d:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NcZtaLUpKOxCM7vP0OryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmRlMGIyZmVhODYxYTA2YTE5NWQ0NGRiZjM0MWNmOTk1NTJkY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydeavm5Sqw9EHE5TLhgM/2OHcpD9 5y5oRoj8ps6gzbPARrOq+lFj84ph0MYJJFSNlTlpt8EzK3cAIWqV8CRLaVyOYonL U0p09urJGmlpgtRiehvEREBC7UbKIxK/ZBXeeJb0IP+Md5jKur/CIQJ76rgzIWHR aioU4puY4TnHJRMgUQkO+WzeUPZ1bpCDu89+OYoVQPR33yQoj7Mh7gDTj5KK7oUW ATF+XDjYJBPbfTk+Mo6lwQ3neepW78u4DfaiHFVnFmfgtXPWFHX8XegHuPqPr/dQ crBHSZktJcZaq0dc7hr3RA6HI0YEKtfR2KEc9ykjAa+t1TaYqGDrDvF3VQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL/eCy/qhhoGoZXUTb80HPmVUtyiMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvdjk0TEwtcUdHZ2FobGRSTnZ6UWMtWlZTM0tJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBbZ4AwQA LYeIMA0GCSqGSIb3DQEBCwUAA4IBAQCDgSQFH74X9KqnRaQWJT9TOF6ZstHQ+HWt obT7b9pWO34rnHJIDFBnbhw7+i9lyllhMsC5nduF6GOjtbpWqiCrbdWlz9iceaXr KwxbAu5zhNdfj51oQnULmlkMiNaz9gAjNkC7n+8N70o2imIybMKjVOmes+bebZl6 EMomQEbAqn01USaGZ10HfbNaZp0pbq8GeWKg83cP6WCmsk/b++Mtwcr8fwSmOPgh ytKrGaAF5G1SySNrfC2Sgm3d4xaGQ+hzHVLOqRJBbR+1EKx5nOVeIrmvZT9AaCVk vWMP49y/ZXZFE5x+NhAXIyS7K8M2CwBkX6B6aJUIqka5zw7pVD2v -----END CERTIFICATE-----Generated at Wed Jan 21 04:10:32 2026 by rpki-client