This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa File: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (raw, json) Hash identifier: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y= Subject key identifier: 35:D0:E0:F5:B6:A0:76:0C:82:97:C9:86:FD:25:27:AA:C1:16:E9:5C Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Certificate serial: 019B797F40CEF0033002F7C119D1A317F892 Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.240.18.0/24 maxlen: 24 91.240.19.0/24 maxlen: 24 193.151.94.0/24 maxlen: 24 195.8.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:ce:f0:03:30:02:f7:c1:19:d1:a3:17:f8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176 Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35d0e0f5b6a0760c8297c986fd2527aac116e95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0d:43:fa:d8:1e:c1:0c:7d:1d:41:92:33:0b: ba:15:2d:32:4b:26:91:45:1f:a3:2c:51:73:d3:6d: 41:d8:90:f1:bf:d2:eb:8a:db:ab:02:b2:05:04:3f: c4:80:63:7a:7e:b0:45:c5:12:c7:8a:52:92:40:28: 97:0e:ff:4d:da:7d:7a:13:a6:6d:7e:3c:35:19:15: 80:0d:65:8b:a0:b0:83:44:4d:29:31:48:f7:53:f5: f1:32:b0:ab:c3:26:d8:5e:dd:9c:2f:b0:7a:59:8d: 99:41:9d:dc:cf:ec:70:96:40:c5:38:82:cd:68:33: 87:b7:a0:8d:0a:49:a9:11:4f:d1:2d:0f:80:26:43: 54:60:27:62:1a:1d:b9:6f:89:2f:86:6d:3d:aa:61: dc:e6:bc:08:a4:f8:fc:70:11:8b:44:9f:b8:e1:41: 98:c4:27:5d:36:57:52:c0:70:c7:68:48:9c:aa:e6: 8d:77:f0:f2:83:dc:9d:51:97:2a:4c:02:95:2d:fd: 65:02:e3:4f:c5:93:43:0e:a0:50:15:68:16:e1:50: f6:1d:1c:e4:4d:1e:86:65:2d:aa:56:a2:c3:c9:90: 6d:c3:b6:55:da:b8:42:40:4b:97:47:09:d0:74:82: b8:0f:24:aa:fd:b9:09:5b:7d:0a:7f:8e:27:f3:9a: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:E0:F5:B6:A0:76:0C:82:97:C9:86:FD:25:27:AA:C1:16:E9:5C X509v3 Authority Key Identifier: keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.18.0/23 193.151.94.0/24 195.8.103.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7c:4a:ab:cf:26:6f:72:21:83:f5:7d:de:b5:63:3d:9d:d0: 93:3e:51:cd:f4:5f:2d:56:58:ee:0c:ad:90:ec:af:31:b8:90: ba:71:87:93:1e:f9:b3:1a:74:ef:2c:d5:b2:ec:06:60:56:16: 55:11:c2:74:a7:c0:8e:93:a6:4a:31:95:13:9b:90:24:be:77: ed:1c:66:e2:18:ab:61:9d:81:82:31:5e:d7:e7:61:0c:46:ce: b5:76:d3:11:72:db:f5:1a:5c:c4:26:e5:d7:27:ef:8f:c1:87: 55:eb:14:a3:f6:98:a0:ec:db:08:d7:7c:3e:42:24:f1:b4:78: 34:da:43:d6:c1:43:bb:35:ba:5a:f2:14:e3:14:7e:b7:66:82: e7:f6:e8:03:16:c8:5b:82:00:2b:31:1b:93:61:42:e6:20:00: a4:bc:82:cb:34:cc:c8:50:39:7e:b6:24:96:d5:6b:b3:8b:17: 7f:d7:3b:62:e7:39:a2:f7:e2:ba:6f:7f:63:28:91:52:6d:3a: 00:dc:5d:31:91:15:cc:bd:d5:6e:e9:e0:eb:44:ec:a8:f2:c9: b2:04:e7:e3:b3:84:20:be:47:93:94:a3:d4:1f:95:52:f8:0b: a2:5f:9d:12:e0:b3:28:c8:bf:8b:bc:f0:1d:32:78:ac:44:ee: 98:49:1b:16 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5f0DO8AMwAvfBGdGjF/iSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw YTIxNzYwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQwZTBmNWI2YTA3NjBjODI5N2M5ODZmZDI1MjdhYWMxMTZlOTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg1D+tgewQx9HUGSMwu6FS0ySyaR RR+jLFFz021B2JDxv9LriturArIFBD/EgGN6frBFxRLHilKSQCiXDv9N2n16E6Zt fjw1GRWADWWLoLCDRE0pMUj3U/XxMrCrwybYXt2cL7B6WY2ZQZ3cz+xwlkDFOILN aDOHt6CNCkmpEU/RLQ+AJkNUYCdiGh25b4kvhm09qmHc5rwIpPj8cBGLRJ+44UGY xCddNldSwHDHaEicquaNd/Dyg9ydUZcqTAKVLf1lAuNPxZNDDqBQFWgW4VD2HRzk TR6GZS2qVqLDyZBtw7ZV2rhCQEuXRwnQdIK4DySq/bkJW30Kf44n85o8nQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDXQ4PW2oHYMgpfJhv0lJ6rBFulcMB8GA1UdIwQY MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt NjQ1NDAyMDVlY2Y0LzEvTmREZzliYWdkZ3lDbDhtR19TVW5xc0VXNlZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0 LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW/ASAwQA wZdeAwQAwwhnMA0GCSqGSIb3DQEBCwUAA4IBAQArfEqrzyZvciGD9X3etWM9ndCT PlHN9F8tVljuDK2Q7K8xuJC6cYeTHvmzGnTvLNWy7AZgVhZVEcJ0p8COk6ZKMZUT m5AkvnftHGbiGKthnYGCMV7X52EMRs61dtMRctv1GlzEJuXXJ++PwYdV6xSj9pig 7NsI13w+QiTxtHg02kPWwUO7Nbpa8hTjFH63ZoLn9ugDFshbggArMRuTYULmIACk vILLNMzIUDl+tiSW1Wuzixd/1zti5zmi9+K6b39jKJFSbToA3F0xkRXMvdVu6eDr ROyo8smyBOfjs4QgvkeTlKPUH5VS+AuiX50S4LMoyL+LvPAdMnisRO6YSRsW -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:03 2026 by rpki-client