This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dV0JNzyGadwZgO560K7L2S-hGvs.roa File: dV0JNzyGadwZgO560K7L2S-hGvs.roa (raw, json) Hash identifier: Tvaz5QubuCSjVvVVYSCoCB1I2Xe/HSoQkqy+G5v+gp8= Subject key identifier: 75:5D:09:37:3C:86:69:DC:19:80:EE:7A:D0:AE:CB:D9:2F:A1:1A:FB Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D6F6CAE76C6D268EF8B9786211FB Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dV0JNzyGadwZgO560K7L2S-hGvs.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49476 IP address blocks: 185.13.157.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d6:f6:ca:e7:6c:6d:26:8e:f8:b9:78:62:11:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=755d09373c8669dc1980ee7ad0aecbd92fa11afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:1b:fb:9d:ff:2b:b6:fe:3c:ae:ec:f0:d4: d7:12:1d:38:88:d6:9e:34:7f:c6:fd:4d:ad:88:46: 36:93:02:4a:42:4f:81:48:96:fe:06:ee:3a:5d:75: 63:ad:bc:87:ed:ce:ff:17:0e:e4:60:d3:89:cd:8c: 8c:ac:f1:6a:3d:f8:68:db:91:64:14:63:16:7a:c4: b8:9b:1f:4a:d7:69:b1:26:83:72:ef:0d:b8:0a:f4: a0:bb:f4:9d:71:34:21:dd:52:ed:5d:e0:dd:7c:a5: 72:56:86:b5:45:47:78:93:59:df:7c:c6:3a:68:62: 2c:33:60:cb:7a:3d:19:41:83:d3:43:fe:ab:0a:89: 23:c5:24:ec:18:50:35:1d:5a:58:b9:b5:d0:83:75: 49:a5:2f:50:51:ba:81:79:51:18:d8:92:aa:18:69: 69:4d:f5:4a:d4:e1:55:85:a4:c5:f7:02:9e:9a:38: bb:4b:35:4c:20:d6:12:50:6c:31:3d:04:a1:cf:4a: 80:52:e8:3c:8f:14:79:8c:34:5f:9b:92:05:fd:53: 59:e4:dc:8a:24:cd:75:8d:bc:b6:f0:fd:81:7b:4b: fe:a7:74:1e:e8:a9:c3:78:95:2e:f5:b2:e0:75:45: d5:00:85:e4:3f:f5:d7:e9:07:32:a3:98:71:a5:6e: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5D:09:37:3C:86:69:DC:19:80:EE:7A:D0:AE:CB:D9:2F:A1:1A:FB X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dV0JNzyGadwZgO560K7L2S-hGvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.157.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:4a:ed:80:6a:36:b1:09:1b:ba:a5:b7:aa:1d:33:b5:a4:0e: 1d:c9:01:c1:a7:24:44:e4:33:66:47:3c:bb:c8:d7:d8:90:8a: 4a:68:37:1c:ef:5e:96:4c:98:86:24:41:4d:05:6d:83:3c:15: 15:db:33:1b:23:81:a6:44:05:c2:0f:18:1b:ff:d6:1d:58:58: 73:ae:0c:be:79:40:75:9b:f1:30:37:a6:07:f3:7c:76:13:c1: 8b:57:ea:bc:75:0e:a4:8a:b4:fe:af:92:9a:ad:7d:07:26:95: 0f:b0:a8:69:cb:67:32:5c:16:93:27:b9:01:1f:12:a8:a4:e7: 8f:f3:2c:40:fb:50:46:d0:1b:70:2a:69:1b:2a:8e:8c:6b:0a: aa:4c:7c:6c:0b:63:7d:ae:3e:08:33:56:bf:84:04:fb:9c:76: 8d:60:c1:9d:35:5e:e0:b6:63:8b:00:40:f8:8e:5b:a9:c3:58: 32:25:5c:3f:ed:52:f5:48:2e:d4:c3:ae:08:00:bb:de:be:ef: ee:11:21:89:9d:c4:2b:0e:98:ca:a7:58:37:4e:f3:ab:5b:22: e6:62:59:72:24:02:77:93:e7:12:f6:57:7b:80:87:9d:20:1c: b6:a0:e7:a7:de:05:d8:09:3a:c8:57:9d:3e:24:cd:0b:8d:70: 69:c5:11:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Etb2yudsbSaO+Ll4YhH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTVkMDkzNzNjODY2OWRjMTk4MGVlN2FkMGFlY2JkOTJmYTExYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgcb+53/K7b+PK7s8NTXEh04iNae NH/G/U2tiEY2kwJKQk+BSJb+Bu46XXVjrbyH7c7/Fw7kYNOJzYyMrPFqPfho25Fk FGMWesS4mx9K12mxJoNy7w24CvSgu/SdcTQh3VLtXeDdfKVyVoa1RUd4k1nffMY6 aGIsM2DLej0ZQYPTQ/6rCokjxSTsGFA1HVpYubXQg3VJpS9QUbqBeVEY2JKqGGlp TfVK1OFVhaTF9wKemji7SzVMINYSUGwxPQShz0qAUug8jxR5jDRfm5IF/VNZ5NyK JM11jby28P2Be0v+p3Qe6KnDeJUu9bLgdUXVAIXkP/XX6Qcyo5hxpW6nswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHVdCTc8hmncGYDuetCuy9kvoRr7MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZFYwSk56eUdhZHdaZ081NjBLN0wyUy1oR3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQ2dMA0G CSqGSIb3DQEBCwUAA4IBAQCLSu2AajaxCRu6pbeqHTO1pA4dyQHBpyRE5DNmRzy7 yNfYkIpKaDcc716WTJiGJEFNBW2DPBUV2zMbI4GmRAXCDxgb/9YdWFhzrgy+eUB1 m/EwN6YH83x2E8GLV+q8dQ6kirT+r5KarX0HJpUPsKhpy2cyXBaTJ7kBHxKopOeP 8yxA+1BG0BtwKmkbKo6MawqqTHxsC2N9rj4IM1a/hAT7nHaNYMGdNV7gtmOLAED4 jlupw1gyJVw/7VL1SC7Uw64IALvevu/uESGJncQrDpjKp1g3TvOrWyLmYllyJAJ3 k+cS9ld7gIedIBy2oOen3gXYCTrIV50+JM0LjXBpxRHv -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client