This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa File: aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa (raw, json) Hash identifier: faf5JgpqOgasBUcFYGvX0bWfnDSi8YRdOLG2fQ4cWJs= Subject key identifier: 68:37:60:CB:DA:24:15:3F:95:1F:EF:17:7B:48:B2:C3:90:9F:F5:4F Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16FE4B09D521F0439E573809A41AE Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa Signing time: Fri 02 Jan 2026 18:21:27 +0000 ROA not before: Fri 02 Jan 2026 18:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214669 IP address blocks: 43.240.148.0/24 maxlen: 24 147.185.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6f:e4:b0:9d:52:1f:04:39:e5:73:80:9a:41:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=683760cbda24153f951fef177b48b2c3909ff54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:5f:c5:cc:5c:e3:95:bc:fe:a9:82:87:0a: cf:0f:21:59:f2:c5:90:bb:b9:3c:69:63:a5:3b:07: 59:80:0e:e0:2c:f6:6e:ad:dc:1c:f8:5c:42:01:77: d9:6a:4e:4b:c0:e1:0f:89:39:52:ee:66:08:c6:4f: 34:61:d6:58:50:13:0c:00:f9:2a:53:fc:ac:c4:8f: 23:f8:65:85:88:83:ab:80:58:7c:54:ac:cb:2d:bb: f0:98:2e:29:e2:c8:af:ad:cd:37:3a:f5:9c:2b:e4: 73:13:1e:db:0a:df:82:7b:71:bb:38:3d:09:26:09: b4:f4:51:b4:49:5b:87:1e:b0:eb:18:ca:45:cb:51: e3:42:65:7d:51:d5:bc:08:ed:3a:4f:9b:31:a1:c1: 1a:c3:82:9b:83:d3:69:1d:f5:f3:35:e0:d0:3b:76: 63:b5:ca:4b:9f:3b:d2:00:95:53:31:4b:a6:1a:fd: 9b:de:aa:05:c5:2e:5b:03:64:09:fb:2e:a8:11:0d: a7:36:98:ed:01:71:a1:71:b4:91:17:9a:92:64:fc: 62:88:01:b9:5a:0c:79:8a:40:01:dc:ea:ee:06:97: c9:5f:a4:9e:20:ec:97:46:f0:b8:e8:8e:e0:dc:2c: c7:15:da:fb:0b:43:34:72:38:f3:2b:e2:70:e6:7f: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:60:CB:DA:24:15:3F:95:1F:EF:17:7B:48:B2:C3:90:9F:F5:4F X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/aDdgy9okFT-VH-8Xe0iyw5Cf9U8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.148.0/24 147.185.206.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:ba:20:83:be:5c:81:a0:b4:76:b1:54:de:2e:bd:7c:64:0a: 26:af:da:90:39:d1:bf:1a:a5:72:fc:d7:40:39:b3:a9:6a:65: de:68:83:6e:29:3f:d6:c9:bf:f8:46:ca:c4:fa:1f:8c:3d:24: 7f:bc:69:ff:79:c0:57:e7:2f:43:76:3a:8a:55:7c:0e:ab:cd: a7:cb:99:4f:ea:6c:0a:2e:7b:66:24:c5:4f:cb:11:8e:dd:95: be:2e:da:b6:3c:e6:66:5a:0b:41:00:73:ec:4b:4b:29:b8:e7: 52:b3:7f:7a:1d:94:1e:69:e8:d0:84:a1:ef:14:6f:11:90:2b: dd:de:62:df:4c:2f:ec:70:87:22:43:ee:ab:23:66:1f:f5:3c: 4d:94:b0:2c:3c:f6:c2:2b:b2:d2:1d:ff:d3:8b:a9:e1:40:c8: b1:47:14:96:24:2c:35:25:9a:d1:82:a1:02:45:4c:3d:fa:59: c0:95:e0:0e:bc:c7:df:20:6f:0d:bd:d0:13:59:04:a9:90:aa: 65:e8:bf:81:e7:11:77:86:dc:8b:b1:97:f7:ce:c6:1b:cb:ff: 5a:d8:8f:53:27:1c:d7:8f:af:c3:5b:e4:47:65:09:62:23:0c: 0f:01:e1:1f:d2:3d:f0:8d:4d:e2:6f:c3:f8:05:21:34:27:ef: b9:1b:cb:87 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8W/ksJ1SHwQ55XOAmkGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODM3NjBjYmRhMjQxNTNmOTUxZmVmMTc3YjQ4YjJjMzkwOWZmNTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotZfxcxc45W8/qmChwrPDyFZ8sWQ u7k8aWOlOwdZgA7gLPZurdwc+FxCAXfZak5LwOEPiTlS7mYIxk80YdZYUBMMAPkq U/ysxI8j+GWFiIOrgFh8VKzLLbvwmC4p4sivrc03OvWcK+RzEx7bCt+Ce3G7OD0J Jgm09FG0SVuHHrDrGMpFy1HjQmV9UdW8CO06T5sxocEaw4Kbg9NpHfXzNeDQO3Zj tcpLnzvSAJVTMUumGv2b3qoFxS5bA2QJ+y6oEQ2nNpjtAXGhcbSRF5qSZPxiiAG5 Wgx5ikAB3OruBpfJX6SeIOyXRvC46I7g3CzHFdr7C0M0cjjzK+Jw5n/PhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGg3YMvaJBU/lR/vF3tIssOQn/VPMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvYURkZ3k5b2tGVC1WSC04WGUwaXl3NUNmOVU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAK/CUAwQA k7nOMA0GCSqGSIb3DQEBCwUAA4IBAQA7uiCDvlyBoLR2sVTeLr18ZAomr9qQOdG/ GqVy/NdAObOpamXeaINuKT/Wyb/4RsrE+h+MPSR/vGn/ecBX5y9DdjqKVXwOq82n y5lP6mwKLntmJMVPyxGO3ZW+Ltq2POZmWgtBAHPsS0spuOdSs396HZQeaejQhKHv FG8RkCvd3mLfTC/scIciQ+6rI2Yf9TxNlLAsPPbCK7LSHf/Ti6nhQMixRxSWJCw1 JZrRgqECRUw9+lnAleAOvMffIG8NvdATWQSpkKpl6L+B5xF3htyLsZf3zsYby/9a 2I9TJxzXj6/DW+RHZQliIwwPAeEf0j3wjU3ib8P4BSE0J++5G8uH -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client