This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/_cO3dPrIFou0SkBFKvSED_RiaEA.roa File: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (raw, json) Hash identifier: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y= Subject key identifier: FD:C3:B7:74:FA:C8:16:8B:B4:4A:40:45:2A:F4:84:0F:F4:62:68:40 Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0 Certificate serial: 019B797F1C13CDF54B5994C1470FA410F995 Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/_cO3dPrIFou0SkBFKvSED_RiaEA.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 89.40.210.0/24 maxlen: 24 91.205.43.0/24 maxlen: 24 185.109.254.0/24 maxlen: 24 2a06:c900::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1c:13:cd:f5:4b:59:94:c1:47:0f:a4:10:f9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0 Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc3b774fac8168bb44a40452af4840ff4626840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:98:72:70:03:c2:02:f3:51:bf:23:c3:e7: bd:0e:c5:6e:c9:d2:35:48:d4:b1:92:3b:47:2a:24: c9:25:ef:0e:d6:f6:95:c7:14:9a:19:a0:b9:e0:6b: 2a:b4:9f:df:b8:bf:b2:9f:1c:b6:ef:46:8e:4f:fa: 15:ba:70:e8:62:d9:d1:89:f7:35:39:e5:b3:32:e5: 28:9b:b3:72:84:1e:42:73:e0:ac:bd:1e:3b:4f:c4: ca:25:cc:38:6b:b3:56:77:1f:8f:e7:af:fe:3b:b3: d6:4e:7e:0b:ed:22:00:12:d9:90:46:0d:05:1e:a0: 6e:7f:1d:b7:c7:12:c7:c8:00:d4:34:b0:69:ce:29: 4e:ae:55:98:20:24:af:71:6a:5c:0a:ec:6c:fd:ed: 2f:30:77:2e:64:92:97:35:ed:2f:31:b9:40:63:f7: 8e:8f:a0:06:64:73:23:a7:4a:70:97:be:47:c5:de: 73:50:17:83:e0:73:d1:d0:be:e5:b6:54:06:d3:9d: 3c:28:c9:a0:a5:65:e6:da:e3:33:82:b8:a2:8d:e2: 40:3c:6b:c4:6c:6a:96:2d:99:7e:55:1a:64:89:b5: 34:ee:ba:9d:89:d5:45:73:7d:87:99:f3:0c:6f:12: e0:0a:64:bf:b3:39:92:4c:59:cf:30:9d:81:7c:ba: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C3:B7:74:FA:C8:16:8B:B4:4A:40:45:2A:F4:84:0F:F4:62:68:40 X509v3 Authority Key Identifier: keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/_cO3dPrIFou0SkBFKvSED_RiaEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.210.0/24 91.205.43.0/24 185.109.254.0/24 IPv6: 2a06:c900::/29 Signature Algorithm: sha256WithRSAEncryption 8e:9e:c7:c2:62:4f:5b:47:93:0a:03:8f:16:e6:d4:eb:98:b5: 33:dd:11:da:49:14:4c:f7:f5:a2:24:be:4d:74:50:d9:f5:af: 84:f0:3c:f2:9a:0c:93:94:c6:da:32:47:78:18:8a:0b:3b:99: d2:48:8d:23:ba:48:61:7d:7a:3f:52:65:14:96:aa:c3:3e:4e: 9f:69:05:a0:f7:a0:b3:ea:29:0b:28:2b:92:ab:fa:6d:32:c1: e7:30:e2:25:c2:ab:11:f8:6b:e6:4f:1b:39:10:7d:dd:39:76: 3b:fc:1f:87:45:2d:6a:0e:63:93:ec:5f:e8:1d:a3:00:28:d2: e1:0a:7f:f2:b4:c2:01:20:fa:f3:91:75:bd:47:80:64:f5:fc: 26:62:d2:96:73:29:51:3a:87:4d:4e:a7:95:de:48:37:b3:4c: e8:6c:fc:34:39:b0:e0:cb:ea:2f:eb:1d:69:3e:8e:cf:64:04: a2:84:c7:27:f1:13:bc:1c:af:57:1c:90:1e:36:6f:97:dd:6e: be:b7:d4:c5:04:19:b9:8a:65:50:d4:f5:18:1b:ea:25:16:ec: ef:ce:b2:52:fb:6e:52:c2:26:29:34:c6:25:56:d3:51:c3:fc: 0f:f3:13:66:86:cd:77:62:dc:b9:8f:5f:21:82:c7:90:cf:06: a8:3d:ee:c4 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fxwTzfVLWZTBRw+kEPmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh NTAxZTAwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGMzYjc3NGZhYzgxNjhiYjQ0YTQwNDUyYWY0ODQwZmY0NjI2ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BaYcnADwgLzUb8jw+e9DsVuydI1 SNSxkjtHKiTJJe8O1vaVxxSaGaC54GsqtJ/fuL+ynxy270aOT/oVunDoYtnRifc1 OeWzMuUom7NyhB5Cc+CsvR47T8TKJcw4a7NWdx+P56/+O7PWTn4L7SIAEtmQRg0F HqBufx23xxLHyADUNLBpzilOrlWYICSvcWpcCuxs/e0vMHcuZJKXNe0vMblAY/eO j6AGZHMjp0pwl75Hxd5zUBeD4HPR0L7ltlQG0508KMmgpWXm2uMzgriijeJAPGvE bGqWLZl+VRpkibU07rqdidVFc32HmfMMbxLgCmS/szmSTFnPMJ2BfLrOzQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFP3Dt3T6yBaLtEpARSr0hA/0YmhAMB8GA1UdIwQY MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt OWUyNDk2OGU2NjY0LzEvX2NPM2RQcklGb3UwU2tCRkt2U0VEX1JpYUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0 LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWSjSAwQA W80rAwQAuW3+MA0EAgACMAcDBQMqBskAMA0GCSqGSIb3DQEBCwUAA4IBAQCOnsfC Yk9bR5MKA48W5tTrmLUz3RHaSRRM9/WiJL5NdFDZ9a+E8DzymgyTlMbaMkd4GIoL O5nSSI0jukhhfXo/UmUUlqrDPk6faQWg96Cz6ikLKCuSq/ptMsHnMOIlwqsR+Gvm Txs5EH3dOXY7/B+HRS1qDmOT7F/oHaMAKNLhCn/ytMIBIPrzkXW9R4Bk9fwmYtKW cylROodNTqeV3kg3s0zobPw0ObDgy+ov6x1pPo7PZASihMcn8RO8HK9XHJAeNm+X 3W6+t9TFBBm5imVQ1PUYG+olFuzvzrJS+25SwiYpNMYlVtNRw/wP8xNmhs13Yty5 j18hgseQzwaoPe7E -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:32 2026 by rpki-client