This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ddgdHLXpOdpfMWoKRkE23CTAyPw.roa File: ddgdHLXpOdpfMWoKRkE23CTAyPw.roa (raw, json) Hash identifier: a9cF+E3/67pCz6ePMwf6GsQijmdIh0ZVNAr0wsyXcSg= Subject key identifier: 75:D8:1D:1C:B5:E9:39:DA:5F:31:6A:0A:46:41:36:DC:24:C0:C8:FC Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C13112F62D67EAEC3C918A58BA348D4 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ddgdHLXpOdpfMWoKRkE23CTAyPw.roa Signing time: Fri 02 Jan 2026 00:19:42 +0000 ROA not before: Fri 02 Jan 2026 00:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216309 IP address blocks: 94.249.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:11:2f:62:d6:7e:ae:c3:c9:18:a5:8b:a3:48:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d81d1cb5e939da5f316a0a464136dc24c0c8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cc:e2:2d:a9:b0:1e:ff:bb:8b:48:16:fc:ba: 07:51:33:1a:90:10:d5:71:a3:b8:62:d9:6c:b7:1b: 92:24:03:d7:77:d6:7a:f9:10:3b:be:96:7e:9f:d6: d0:02:ac:ca:7b:42:4b:c5:0e:79:55:83:6b:c4:4c: 84:1c:28:f1:9a:60:5f:7f:e7:d3:c5:ae:c0:36:fa: 74:30:03:7f:b1:2c:0f:fa:32:c8:f8:95:c6:a6:ec: 49:3d:81:2b:d0:5c:7c:7c:1e:3f:de:01:79:89:09: 47:b8:ec:ee:da:63:10:49:2b:36:71:c7:b7:8f:ff: 85:7a:d5:c3:41:7c:f3:41:62:2b:96:9f:4e:a4:8d: c4:bb:51:f5:96:dc:77:29:43:88:6b:d6:2e:38:7b: 83:78:f8:26:16:93:6e:db:ae:f8:79:2f:df:1a:d5: 29:bb:da:7f:3e:6b:45:f5:af:ac:8b:85:35:34:fb: b8:88:88:06:ad:59:c5:ac:2f:96:80:99:d7:82:b3: 28:d7:3e:c5:b5:a9:3c:38:90:0d:7b:d4:9b:91:19: f5:ce:8a:5a:fa:fb:df:02:9b:0d:1e:9c:89:c6:2a: 34:66:57:22:a6:a9:4d:57:a4:8d:ed:6f:0a:3c:71: c3:89:52:9e:1f:a5:cf:8c:5f:cd:82:08:a2:85:ca: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D8:1D:1C:B5:E9:39:DA:5F:31:6A:0A:46:41:36:DC:24:C0:C8:FC X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ddgdHLXpOdpfMWoKRkE23CTAyPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.249.231.0/24 Signature Algorithm: sha256WithRSAEncryption 61:68:bc:02:ed:e1:2f:aa:47:58:54:49:80:a9:26:f3:53:ed: a3:4d:4c:af:7d:71:8d:e2:1c:a3:3b:93:f9:17:7e:91:0f:aa: b5:e1:ca:ad:04:ae:36:eb:4f:d1:f2:15:f8:ae:99:54:24:0d: 54:fc:a4:a0:a0:48:bc:2a:10:f5:1e:ae:07:23:51:18:c1:f1: c0:f2:c8:5e:34:5d:34:f5:86:85:08:16:a6:a6:c3:03:d1:f1: b7:ae:5a:3e:d1:0c:59:9c:91:b9:f1:dd:cb:fb:02:02:ca:46: 73:3f:bb:e3:bc:9d:b7:68:44:14:2c:ac:50:39:ab:70:23:6d: 13:fe:63:b7:6b:d2:7e:9d:9a:5b:f1:11:10:ef:33:81:35:45: ac:a6:c1:3b:3d:79:e1:f6:66:b5:0a:04:58:b8:1b:0e:1c:2b: 9f:c0:7b:bb:92:29:07:27:ef:71:45:d6:e2:66:43:de:e2:cd: 90:26:1e:31:45:d9:18:6b:62:d0:36:b2:34:5b:17:29:47:b7: 61:6a:f9:d6:b1:19:79:88:9c:cc:90:47:de:de:29:1f:b2:e7: 55:08:e1:35:de:dd:06:70:46:b3:49:dd:6f:08:7a:2a:f4:52: 7d:ee:a2:be:05:1b:17:71:b9:9c:6f:ab:0a:5e:f3:79:25:a0: d2:0f:e0:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExEvYtZ+rsPJGKWLo0jUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQ4MWQxY2I1ZTkzOWRhNWYzMTZhMGE0NjQxMzZkYzI0YzBjOGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsziLamwHv+7i0gW/LoHUTMakBDV caO4YtlstxuSJAPXd9Z6+RA7vpZ+n9bQAqzKe0JLxQ55VYNrxEyEHCjxmmBff+fT xa7ANvp0MAN/sSwP+jLI+JXGpuxJPYEr0Fx8fB4/3gF5iQlHuOzu2mMQSSs2cce3 j/+FetXDQXzzQWIrlp9OpI3Eu1H1ltx3KUOIa9YuOHuDePgmFpNu2674eS/fGtUp u9p/PmtF9a+si4U1NPu4iIgGrVnFrC+WgJnXgrMo1z7Ftak8OJANe9SbkRn1zopa +vvfApsNHpyJxio0ZlcipqlNV6SN7W8KPHHDiVKeH6XPjF/NggiihcoHZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXYHRy16TnaXzFqCkZBNtwkwMj8MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZGRnZEhMWHBPZHBmTVdvS1JrRTIzQ1RBeVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvnnMA0G CSqGSIb3DQEBCwUAA4IBAQBhaLwC7eEvqkdYVEmAqSbzU+2jTUyvfXGN4hyjO5P5 F36RD6q14cqtBK4260/R8hX4rplUJA1U/KSgoEi8KhD1Hq4HI1EYwfHA8sheNF00 9YaFCBampsMD0fG3rlo+0QxZnJG58d3L+wICykZzP7vjvJ23aEQULKxQOatwI20T /mO3a9J+nZpb8REQ7zOBNUWspsE7PXnh9ma1CgRYuBsOHCufwHu7kikHJ+9xRdbi ZkPe4s2QJh4xRdkYa2LQNrI0WxcpR7dhavnWsRl5iJzMkEfe3ikfsudVCOE13t0G cEazSd1vCHoq9FJ97qK+BRsXcbmcb6sKXvN5JaDSD+CZ -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:57 2026 by rpki-client