This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa File: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (raw, json) Hash identifier: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ= Subject key identifier: A5:D9:D9:13:30:48:1F:3A:B0:07:48:51:17:4C:DC:88:1E:08:E4:04 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A228DBD5DC97C878C79E7D9F48E8 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa Signing time: Fri 02 Jan 2026 10:18:53 +0000 ROA not before: Fri 02 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206070 IP address blocks: 77.36.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a2:28:db:d5:dc:97:c8:78:c7:9e:7d:9f:48:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5d9d91330481f3ab0074851174cdc881e08e404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:bb:41:cf:c2:7c:7b:36:8d:df:11:fc:f8: 1f:6f:24:3f:bb:21:79:d9:04:c5:10:8a:bc:a4:fe: 76:6b:92:d1:42:c9:fb:5b:42:b2:11:6b:3a:41:35: f3:38:65:9c:ab:2b:1f:75:ef:ac:0c:21:c1:b7:08: e8:37:76:58:79:98:73:fa:1e:5a:e8:9c:23:95:cc: cf:48:f3:cc:96:2a:15:ca:98:5b:e3:5b:38:ef:5c: b0:45:ce:92:6b:c3:0d:0b:7b:24:ef:58:b7:02:04: 30:5b:e4:96:5f:e2:93:c6:e2:f7:46:84:39:85:a1: 06:1a:81:9f:4a:eb:eb:82:ab:fd:84:25:b2:7f:ca: 6e:e7:dd:45:2d:a0:10:8a:a6:16:6a:39:4c:e2:a4: 12:e8:43:7a:cc:13:24:2a:c8:a5:e3:e1:2e:18:9f: bc:38:d1:48:2e:f6:73:1e:5f:31:0e:20:56:43:bf: 77:90:7b:4d:93:e9:f4:4e:29:e5:dd:d3:a7:a0:2e: 94:94:96:da:6b:7f:d4:94:aa:17:7b:13:7d:36:44: dc:eb:e5:e9:db:57:ab:19:f1:df:f6:b7:0d:f1:c9: a5:93:f7:d6:25:01:73:a7:b9:1a:ee:30:64:2b:a3: 33:fe:00:0d:2d:cb:be:9f:92:29:46:5f:ff:50:9c: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D9:D9:13:30:48:1F:3A:B0:07:48:51:17:4C:DC:88:1E:08:E4:04 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.36.63.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:b1:48:6a:19:c3:b6:c5:f7:88:ae:68:e6:61:53:cd:af:00: f1:1c:8f:26:44:f8:50:c8:02:6d:d4:6e:7f:64:25:55:2f:34: 6f:5c:c6:39:c1:70:42:e4:e2:b2:dc:58:ae:df:87:60:4c:77: f4:a5:5d:2d:f4:30:7c:29:96:d6:7c:86:94:88:9b:10:12:9d: 97:ef:78:d7:9d:05:a7:90:95:52:ea:3e:77:ba:0b:47:97:6f: 4a:ff:fb:af:e5:88:7a:ba:69:6d:70:ac:03:be:d7:ba:bb:2b: 9d:1f:e1:25:f4:f5:de:ed:00:8f:b5:e8:be:5e:aa:70:10:f5: ab:5b:f2:21:e3:a2:d1:e8:45:2c:03:81:3d:24:1b:7e:b1:ac: ff:49:02:9b:04:9e:99:ac:d8:06:e4:2f:2e:c9:76:24:e3:c2: b3:35:d3:20:a8:dd:19:97:f3:5c:a8:bf:94:1d:56:f9:4f:05: 29:c1:9d:33:66:40:40:32:52:8b:b5:ae:fd:b8:9f:1c:59:8b: 8c:16:8c:10:cc:35:24:19:3c:9e:61:aa:30:46:db:a6:6a:9a: 11:b8:0b:1a:26:1b:16:19:e1:8d:98:7c:07:b9:df:e3:d7:5c: 43:45:9f:c7:42:00:26:41:a4:1b:14:ce:75:c5:16:32:ea:27: 19:f7:ce:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6Io29Xcl8h4x559n0joMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQ5ZDkxMzMwNDgxZjNhYjAwNzQ4NTExNzRjZGM4ODFlMDhlNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPq7Qc/CfHs2jd8R/PgfbyQ/uyF5 2QTFEIq8pP52a5LRQsn7W0KyEWs6QTXzOGWcqysfde+sDCHBtwjoN3ZYeZhz+h5a 6JwjlczPSPPMlioVyphb41s471ywRc6Sa8MNC3sk71i3AgQwW+SWX+KTxuL3RoQ5 haEGGoGfSuvrgqv9hCWyf8pu591FLaAQiqYWajlM4qQS6EN6zBMkKsil4+EuGJ+8 ONFILvZzHl8xDiBWQ793kHtNk+n0Tinl3dOnoC6UlJbaa3/UlKoXexN9NkTc6+Xp 21erGfHf9rcN8cmlk/fWJQFzp7ka7jBkK6Mz/gANLcu+n5IpRl//UJziWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKXZ2RMwSB86sAdIURdM3IgeCOQEMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvcGRuWkV6QklIenF3QjBoUkYwemNpQjRJNUFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSQ/MA0G CSqGSIb3DQEBCwUAA4IBAQBMsUhqGcO2xfeIrmjmYVPNrwDxHI8mRPhQyAJt1G5/ ZCVVLzRvXMY5wXBC5OKy3Fiu34dgTHf0pV0t9DB8KZbWfIaUiJsQEp2X73jXnQWn kJVS6j53ugtHl29K//uv5Yh6umltcKwDvte6uyudH+El9PXe7QCPtei+XqpwEPWr W/Ih46LR6EUsA4E9JBt+saz/SQKbBJ6ZrNgG5C8uyXYk48KzNdMgqN0Zl/NcqL+U HVb5TwUpwZ0zZkBAMlKLta79uJ8cWYuMFowQzDUkGTyeYaowRtumapoRuAsaJhsW GeGNmHwHud/j11xDRZ/HQgAmQaQbFM51xRYy6icZ986B -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:24 2026 by rpki-client