This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa File: A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa (raw, json) Hash identifier: i9DOUjMa7c5ZM14JioAbWMihtBuOPOBDq4Dq7r6lxQg= Subject key identifier: 03:49:03:57:A1:CE:AB:A1:5D:63:E2:E4:53:34:68:8A:8D:B1:03:D4 Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c Certificate serial: 019B77C6817FF5DDA569A61D850DEA0C0790 Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215331 IP address blocks: 84.246.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:81:7f:f5:dd:a5:69:a6:1d:85:0d:ea:0c:07:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03490357a1ceaba15d63e2e45334688a8db103d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9a:30:6a:1d:5b:ef:3e:43:dd:44:ff:a1:bf: 70:9b:f3:5f:3e:35:4f:c0:b3:13:c6:b0:f9:8d:da: ef:cf:4c:30:1b:73:cf:43:2e:65:0a:fc:59:8c:a3: aa:a1:24:79:94:29:53:d8:c0:f2:96:9e:0a:ee:d1: 89:14:a4:b0:8b:fb:6f:22:a7:80:c0:07:d7:40:f6: 24:3c:54:78:ce:2e:c4:c3:e0:a0:4a:70:f6:cc:19: c7:e4:05:69:f4:41:63:d1:db:49:a0:6d:fb:af:1e: 14:80:ce:f3:e2:7a:e9:84:5d:dc:c2:51:6c:f3:2d: 4e:fd:d0:fa:bb:6d:a9:86:1f:84:e5:e9:51:7d:ea: a4:d1:c4:6c:6e:88:3a:01:67:e0:0f:26:80:1a:f0: 0f:77:64:b8:2c:81:0a:8d:46:35:a1:18:3f:4a:d8: 12:a7:fd:9b:c2:b2:b7:20:5f:bb:62:d0:be:d6:d6: e1:e6:a1:24:2c:f4:a7:32:ac:2b:fc:8c:bf:42:46: 22:ed:e4:92:cc:7b:34:2b:c5:9d:3d:f6:17:aa:dc: 3d:98:e9:26:ac:c9:42:9d:18:33:3c:ed:9d:3b:fd: ec:75:9c:1a:4b:32:35:98:72:47:36:0f:f9:a9:88: bd:1d:d4:a5:ba:08:be:2a:b0:c7:29:80:d2:8f:f2: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:03:57:A1:CE:AB:A1:5D:63:E2:E4:53:34:68:8A:8D:B1:03:D4 X509v3 Authority Key Identifier: keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/A0kDV6HOq6FdY-LkUzRoio2xA9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.135.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d7:13:19:e5:11:3f:66:e2:58:47:50:4d:8f:43:f1:25:b1: 0d:4e:e9:9b:a3:4e:02:6f:9b:a5:35:fc:16:64:ea:b4:8d:3a: 97:e0:93:68:5d:6c:e2:ed:5c:d7:a7:e0:72:39:fd:bb:61:02: 3f:7b:4a:ee:21:69:e9:d6:5d:77:64:6f:38:5f:7d:6c:45:12: b5:77:64:0c:e9:ff:0b:b8:2d:15:a8:4c:96:2f:9a:4e:40:f4: 3f:4c:69:19:00:99:6d:b3:31:42:3b:67:36:03:fd:e4:f8:6b: a7:e6:63:9e:61:52:74:eb:1d:d3:e4:ba:34:ca:f5:79:31:b9: 3c:31:37:99:20:a4:b5:63:0d:ca:97:d8:cb:80:a0:3a:bb:c7: 5a:dd:8b:93:c0:26:44:b4:ad:94:05:89:fc:18:37:f5:ed:f3: 97:2b:18:e6:f3:0d:76:c7:97:4c:bc:1e:05:8b:27:be:27:9e: 1f:ef:1e:be:8f:3f:37:92:84:07:3c:09:d6:b2:95:d7:7f:1b: 9b:60:1d:61:64:14:6e:e6:a0:c6:6e:6f:b0:c6:d4:fc:b5:40: 0c:e2:12:d2:b1:e8:6b:90:e6:e0:1e:91:3c:53:94:ff:9a:d7: 93:7b:db:f8:40:e8:ea:46:b2:68:fe:85:92:4d:a9:8a:fd:7c: e8:02:6f:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xoF/9d2laaYdhQ3qDAeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNzg1NmM5N2JlYjk3YzJiMzg2ZmI5NThjMmRiMTIyYzU3 ZGIzNmMwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzQ5MDM1N2ExY2VhYmExNWQ2M2UyZTQ1MzM0Njg4YThkYjEwM2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZowah1b7z5D3UT/ob9wm/NfPjVP wLMTxrD5jdrvz0wwG3PPQy5lCvxZjKOqoSR5lClT2MDylp4K7tGJFKSwi/tvIqeA wAfXQPYkPFR4zi7Ew+CgSnD2zBnH5AVp9EFj0dtJoG37rx4UgM7z4nrphF3cwlFs 8y1O/dD6u22phh+E5elRfeqk0cRsbog6AWfgDyaAGvAPd2S4LIEKjUY1oRg/StgS p/2bwrK3IF+7YtC+1tbh5qEkLPSnMqwr/Iy/QkYi7eSSzHs0K8WdPfYXqtw9mOkm rMlCnRgzPO2dO/3sdZwaSzI1mHJHNg/5qYi9HdSlugi+KrDHKYDSj/LqnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFANJA1ehzquhXWPi5FM0aIqNsQPUMB8GA1UdIwQY MBaAFH14Vsl765fCs4b7lYwtsSLFfbNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEt M2M3Mzg1NDQ0ODJlLzEvQTBrRFY2SE9xNkZkWS1Ma1V6Um9pbzJ4QTlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEtM2M3Mzg1NDQ0ODJl LzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPaHMA0G CSqGSIb3DQEBCwUAA4IBAQBY1xMZ5RE/ZuJYR1BNj0PxJbENTumbo04Cb5ulNfwW ZOq0jTqX4JNoXWzi7VzXp+ByOf27YQI/e0ruIWnp1l13ZG84X31sRRK1d2QM6f8L uC0VqEyWL5pOQPQ/TGkZAJltszFCO2c2A/3k+Gun5mOeYVJ06x3T5Lo0yvV5Mbk8 MTeZIKS1Yw3Kl9jLgKA6u8da3YuTwCZEtK2UBYn8GDf17fOXKxjm8w12x5dMvB4F iye+J54f7x6+jz83koQHPAnWspXXfxubYB1hZBRu5qDGbm+wxtT8tUAM4hLSsehr kObgHpE8U5T/mteTe9v4QOjqRrJo/oWSTamK/XzoAm+n -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:57 2026 by rpki-client