This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/PD0gL5wD6TzlMONcTVSL_nUPkTs.roa File: PD0gL5wD6TzlMONcTVSL_nUPkTs.roa (raw, json) Hash identifier: 8xeOKjdaOuRIzGTIRqsIoy0cuHcgqdyob05N8uzkaNU= Subject key identifier: 3C:3D:20:2F:9C:03:E9:3C:E5:30:E3:5C:4D:54:8B:FE:75:0F:91:3B Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B9CDBE18B4FC61FCE84C1F387D078C179 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/PD0gL5wD6TzlMONcTVSL_nUPkTs.roa Signing time: Thu 08 Jan 2026 09:06:54 +0000 ROA not before: Thu 08 Jan 2026 09:06:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 89.249.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:db:e1:8b:4f:c6:1f:ce:84:c1:f3:87:d0:78:c1:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 8 09:06:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c3d202f9c03e93ce530e35c4d548bfe750f913b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:5b:d0:0c:d5:91:81:d6:55:e3:3e:a3:70: b7:c5:eb:c1:f6:09:ec:30:68:6d:0d:42:2f:eb:89: cc:bc:4b:44:c9:76:8b:c0:ab:62:73:3b:fd:a8:62: ee:b7:95:e4:71:ce:b1:0e:fc:e6:16:7b:b8:23:8c: 13:61:33:6b:ce:f9:e9:90:0e:86:b1:3a:53:c8:23: c1:4c:52:52:6a:ac:53:eb:29:1a:7c:7e:33:53:af: 1d:c5:38:33:59:f0:39:d9:15:b2:b9:a0:d7:f1:8e: 2b:d9:47:19:ec:e8:b7:32:a7:db:dc:5c:f3:0b:cb: 75:db:7b:fe:18:7f:42:f5:ce:04:46:35:b9:78:86: df:69:4a:c1:43:3a:87:ff:04:e0:2d:1d:27:a3:48: ef:b6:c7:9b:61:c4:72:3a:60:9d:d7:73:cd:15:69: 10:09:d8:c4:32:a8:69:74:c8:fe:4b:64:9d:65:31: c6:d7:76:17:3a:ce:86:78:9b:8e:67:86:a2:6d:28: 9f:15:05:64:22:0a:85:c6:6b:e6:04:d4:a9:bc:1e: cf:42:58:80:75:58:b6:38:dc:5c:53:3d:eb:24:3b: 77:4c:b8:b0:2b:6c:2d:af:55:e0:f4:65:9e:ad:1a: 6e:dd:f1:08:d6:42:09:75:b1:57:7a:d2:a6:91:be: 50:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3D:20:2F:9C:03:E9:3C:E5:30:E3:5C:4D:54:8B:FE:75:0F:91:3B X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/PD0gL5wD6TzlMONcTVSL_nUPkTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.206.0/24 Signature Algorithm: sha256WithRSAEncryption b1:cc:ff:21:db:a2:d3:05:b4:e7:5d:af:58:2e:a4:24:8f:1e: f0:bb:f9:66:17:db:f2:4e:16:0e:7e:50:2d:4b:2b:41:aa:fd: 5a:e4:1f:96:71:74:88:21:be:e0:84:ad:34:c5:53:cf:d3:16: 5b:6d:4b:3c:8c:47:9d:96:09:89:f3:25:bc:9f:a5:56:13:7a: ce:0c:47:2a:f9:54:7b:89:9e:4f:32:47:66:20:d4:6b:88:26: 6d:c4:5f:bc:c4:38:04:b3:df:13:48:d1:25:62:ac:60:89:95: 8e:af:55:d1:d0:ff:8d:97:b4:70:97:92:9f:fc:11:50:02:ea: 10:c9:28:96:87:3d:a1:5a:fc:4b:68:f3:a4:82:e6:39:8c:80: 4b:da:16:59:50:6b:14:e2:0b:d3:b3:67:32:af:19:c1:af:f7: ed:27:09:d5:1f:a6:8d:ad:3a:45:11:b5:17:bb:6f:b0:ef:65: b2:db:6f:9c:2b:9f:a1:3c:ca:b7:75:16:f4:63:5b:24:a8:63: 4c:9b:6d:05:25:f6:db:96:c4:f6:20:e2:c0:f1:d7:04:11:da: 60:cb:3e:d8:32:ab:bd:0c:5c:05:fc:5d:67:3b:95:de:be:3d: 85:0b:16:d9:7a:25:81:b3:3d:6a:ec:0d:e4:48:67:ac:4f:a5: ab:fd:82:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuc2+GLT8YfzoTB84fQeMF5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTA4MDkwNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzNkMjAyZjljMDNlOTNjZTUzMGUzNWM0ZDU0OGJmZTc1MGY5MTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/pb0AzVkYHWVeM+o3C3xevB9gns MGhtDUIv64nMvEtEyXaLwKticzv9qGLut5Xkcc6xDvzmFnu4I4wTYTNrzvnpkA6G sTpTyCPBTFJSaqxT6ykafH4zU68dxTgzWfA52RWyuaDX8Y4r2UcZ7Oi3Mqfb3Fzz C8t123v+GH9C9c4ERjW5eIbfaUrBQzqH/wTgLR0no0jvtsebYcRyOmCd13PNFWkQ CdjEMqhpdMj+S2SdZTHG13YXOs6GeJuOZ4aibSifFQVkIgqFxmvmBNSpvB7PQliA dVi2ONxcUz3rJDt3TLiwK2wtr1Xg9GWerRpu3fEI1kIJdbFXetKmkb5QeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDw9IC+cA+k85TDjXE1Ui/51D5E7MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvUEQwZ0w1d0Q2VHpsTU9OY1RWU0xfblVQa1RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnOMA0G CSqGSIb3DQEBCwUAA4IBAQCxzP8h26LTBbTnXa9YLqQkjx7wu/lmF9vyThYOflAt SytBqv1a5B+WcXSIIb7ghK00xVPP0xZbbUs8jEedlgmJ8yW8n6VWE3rODEcq+VR7 iZ5PMkdmINRriCZtxF+8xDgEs98TSNElYqxgiZWOr1XR0P+Nl7Rwl5Kf/BFQAuoQ ySiWhz2hWvxLaPOkguY5jIBL2hZZUGsU4gvTs2cyrxnBr/ftJwnVH6aNrTpFEbUX u2+w72Wy22+cK5+hPMq3dRb0Y1skqGNMm20FJfbblsT2IOLA8dcEEdpgyz7YMqu9 DFwF/F1nO5Xevj2FCxbZeiWBsz1q7A3kSGesT6Wr/YIv -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:19 2026 by rpki-client