This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/OdjD6-jie1gU1V0cRR0FziitCAg.roa File: OdjD6-jie1gU1V0cRR0FziitCAg.roa (raw, json) Hash identifier: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk= Subject key identifier: 39:D8:C3:EB:E8:E2:7B:58:14:D5:5D:1C:45:1D:05:CE:28:AD:08:08 Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc Certificate serial: 019B7E37FB1F9AC8AAFC5EBC1507E051AC3C Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/OdjD6-jie1gU1V0cRR0FziitCAg.roa Signing time: Fri 02 Jan 2026 10:19:16 +0000 ROA not before: Fri 02 Jan 2026 10:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60245 IP address blocks: 185.54.236.0/24 maxlen: 24 185.54.237.0/24 maxlen: 24 185.54.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:fb:1f:9a:c8:aa:fc:5e:bc:15:07:e0:51:ac:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc Validity Not Before: Jan 2 10:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=39d8c3ebe8e27b5814d55d1c451d05ce28ad0808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:db:16:7b:99:81:04:c2:73:d2:51:ec:db:4b: dd:8a:11:81:24:e8:5d:5d:1c:89:74:1b:53:b5:9a: 80:e5:2d:92:fa:c0:2b:75:9e:05:6b:83:55:11:98: 5e:4b:81:9b:d4:c7:76:f1:f9:96:8e:90:71:ac:1d: cf:63:d5:35:ba:4c:56:a9:36:69:1e:b7:54:d2:dc: 4b:78:20:15:b1:6c:96:57:61:04:1a:e4:9e:f4:79: 6d:19:e6:bd:0a:c5:a0:ed:92:e4:4d:9f:a7:d7:23: 1d:d9:89:f2:7d:02:82:97:17:a7:cc:66:82:2b:96: 39:15:f3:d8:64:aa:f9:5d:76:7e:5b:03:49:d0:58: df:29:32:99:5d:5d:f9:89:51:34:53:5a:4d:8d:da: 55:e3:f6:e7:58:46:41:7c:1f:44:f0:61:7b:6f:92: b5:1a:79:c5:78:32:74:81:77:66:45:79:ec:c6:d5: ec:a7:53:bb:ee:51:59:bc:b0:93:3c:fe:94:2b:d8: 72:f7:d3:78:a2:3f:e7:b4:18:f1:85:bf:fb:2f:20: 27:2e:22:02:e1:bb:34:fb:04:27:c8:ca:86:79:99: ae:ce:78:42:01:2a:d5:7a:4b:ad:1a:4f:85:51:88: 32:d2:ee:97:fc:dc:8d:3a:13:bf:1a:1e:0a:06:6c: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:C3:EB:E8:E2:7B:58:14:D5:5D:1C:45:1D:05:CE:28:AD:08:08 X509v3 Authority Key Identifier: keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/OdjD6-jie1gU1V0cRR0FziitCAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.236.0/22 Signature Algorithm: sha256WithRSAEncryption 46:43:09:08:f8:4b:9c:7c:e8:f5:de:f2:a3:cd:9c:4d:b3:bd: f1:fc:ae:f5:cf:b6:73:33:6a:fa:20:f5:c0:2e:a3:73:ee:98: 33:81:0d:40:9d:b2:de:97:dd:51:d1:58:53:a0:60:47:03:49: 93:c5:e4:4b:20:6b:25:64:31:d5:a7:f2:50:06:74:d4:db:11: 86:69:0d:3c:ea:e7:64:72:12:a9:57:5a:fd:30:7d:5f:2f:b8: 92:24:d6:c0:32:e1:1c:49:5f:04:29:b9:f5:d6:4a:c5:69:bb: 2a:89:94:e1:da:65:b1:82:2d:2a:65:83:f6:4d:39:f0:ab:e7: 40:08:57:45:11:1a:be:15:f2:95:d6:d8:86:de:c1:4f:ef:53: cb:28:67:ba:cc:dd:2c:db:b1:b8:12:7c:a9:45:bd:34:d7:3b: 04:d4:a8:1e:91:b8:9f:5c:c4:ad:d0:49:a0:8d:bd:e3:10:b0: cb:39:87:66:17:9b:06:91:91:80:96:50:72:e4:82:8f:64:65: 61:c5:bc:47:64:07:22:8a:a4:36:36:2b:ee:99:df:d9:33:28: 0e:4a:31:51:3f:d7:0f:08:fc:a9:49:7a:6e:56:a2:d0:90:9e: ff:27:63:00:bf:26:ba:80:ff:d5:2c:7c:fb:14:58:b2:ac:3e: 81:1b:fd:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N/sfmsiq/F68FQfgUaw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmJjNmY2YmFjMTQyYTAzYWJiMWE3YWQ5MTY5MDY4M2Yw M2E0ZGMwHhcNMjYwMTAyMTAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWQ4YzNlYmU4ZTI3YjU4MTRkNTVkMWM0NTFkMDVjZTI4YWQwODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA99sWe5mBBMJz0lHs20vdihGBJOhd XRyJdBtTtZqA5S2S+sArdZ4Fa4NVEZheS4Gb1Md28fmWjpBxrB3PY9U1ukxWqTZp HrdU0txLeCAVsWyWV2EEGuSe9HltGea9CsWg7ZLkTZ+n1yMd2YnyfQKClxenzGaC K5Y5FfPYZKr5XXZ+WwNJ0FjfKTKZXV35iVE0U1pNjdpV4/bnWEZBfB9E8GF7b5K1 GnnFeDJ0gXdmRXnsxtXsp1O77lFZvLCTPP6UK9hy99N4oj/ntBjxhb/7LyAnLiIC 4bs0+wQnyMqGeZmuznhCASrVekutGk+FUYgy0u6X/NyNOhO/Gh4KBmxGBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDnYw+vo4ntYFNVdHEUdBc4orQgIMB8GA1UdIwQY MBaAFBYrxva6wUKgOrsaetkWkGg/A6TcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTct MGJlN2FhZThhMGQxLzEvT2RqRDYtamllMWdVMVYwY1JSMEZ6aWl0Q0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTctMGJlN2FhZThhMGQx LzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTbsMA0G CSqGSIb3DQEBCwUAA4IBAQBGQwkI+EucfOj13vKjzZxNs73x/K71z7ZzM2r6IPXA LqNz7pgzgQ1AnbLel91R0VhToGBHA0mTxeRLIGslZDHVp/JQBnTU2xGGaQ086udk chKpV1r9MH1fL7iSJNbAMuEcSV8EKbn11krFabsqiZTh2mWxgi0qZYP2TTnwq+dA CFdFERq+FfKV1tiG3sFP71PLKGe6zN0s27G4EnypRb001zsE1KgekbifXMSt0Emg jb3jELDLOYdmF5sGkZGAllBy5IKPZGVhxbxHZAciiqQ2Nivumd/ZMygOSjFRP9cP CPypSXpuVqLQkJ7/J2MAvya6gP/VLHz7FFiyrD6BG/0Z -----END CERTIFICATE-----Generated at Mon Jan 26 12:20:56 2026 by rpki-client