This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/t5l7KHAEWqvhTIwVkhIeMMidR-M.roa File: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (raw, json) Hash identifier: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk= Subject key identifier: B7:99:7B:28:70:04:5A:AB:E1:4C:8C:15:92:12:1E:30:C8:9D:47:E3 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF49BD40DA1386313093456E89BEC Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/t5l7KHAEWqvhTIwVkhIeMMidR-M.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31715 IP address blocks: 185.21.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f4:9b:d4:0d:a1:38:63:13:09:34:56:e8:9b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7997b2870045aabe14c8c1592121e30c89d47e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:b1:94:fa:35:bf:02:fd:41:00:9d:37:af: ea:f6:c5:cd:57:cc:46:25:16:54:16:3b:57:36:e9: da:41:98:a6:8a:38:97:a0:ad:e1:4a:ea:05:51:7c: f9:35:2c:db:e6:79:41:80:74:04:a6:d6:1c:b1:da: e0:ad:b1:fb:19:2f:b2:6d:65:17:1f:85:0a:13:74: 01:60:5d:7c:dd:24:4a:52:a9:f1:03:2e:d0:1c:60: 07:0f:c6:1a:fe:b5:26:c1:e0:ee:84:9e:e0:e1:16: 5a:9a:f5:b7:cf:52:f8:18:13:34:65:1a:bb:e0:08: 7b:da:6e:fd:2a:60:48:9a:2c:7f:d3:45:9c:90:55: 46:33:4c:d8:7b:4f:dc:97:c2:dc:58:ca:38:0e:bb: 54:00:80:a1:8a:60:ef:75:b3:fe:94:41:ce:72:d4: c7:80:0c:09:90:d0:06:4e:1a:b7:61:fd:c8:f8:6e: 43:50:3b:96:56:84:a6:b8:0d:78:ee:46:83:6e:3e: fd:e1:24:87:92:d0:1a:cb:a7:7f:93:25:0a:b3:33: a4:4c:1e:de:f1:db:55:66:1c:70:15:6d:dd:88:a6: 4a:4d:c5:25:d7:1d:fb:e3:8c:39:7c:ac:57:a9:59: 35:0e:7c:a3:a8:0c:4b:09:a3:78:ac:c3:0b:bc:d2: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:99:7B:28:70:04:5A:AB:E1:4C:8C:15:92:12:1E:30:C8:9D:47:E3 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/t5l7KHAEWqvhTIwVkhIeMMidR-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.254.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b4:ab:a4:73:2c:89:af:55:48:9c:32:c3:6e:9f:20:92:6c: d5:ef:dc:64:14:bc:0a:e1:5c:9c:2c:6c:c9:98:e9:9e:0a:75: 83:5b:6f:16:49:71:bb:b4:e8:92:b6:4f:f7:24:a9:23:be:f9: 7f:ec:f4:7c:db:a3:9e:10:96:b2:bb:9c:24:dc:07:c7:ab:71: 63:c2:41:aa:54:02:44:cb:e0:c2:34:8a:ed:a3:d0:91:70:d3: 1f:35:16:ed:13:1f:e6:20:6a:1b:3e:35:d9:ad:ec:81:39:2d: 65:51:7f:fd:3d:9a:a7:48:00:55:9b:a8:28:8e:e1:29:b8:f5: 71:99:06:9f:a9:b5:a0:8c:34:11:6a:ed:6f:1d:60:0c:89:1e: 68:44:fc:33:b3:36:77:59:dd:87:41:a0:b5:e1:c3:a5:5d:26: e7:7e:a7:73:ba:b6:60:4c:3c:cf:33:11:de:04:0a:db:cc:a6: 81:b9:85:d3:66:e0:92:a7:1a:f2:e4:1b:87:db:bc:fd:6d:9d: da:0f:22:7c:1a:e9:0a:e8:b0:9b:e9:ee:4c:ed:91:b9:7d:e3: 4a:10:9f:ad:02:13:dd:98:07:3a:67:9d:2f:cc:de:51:74:af: 26:ef:cb:fa:e3:07:61:10:70:fc:4f:c8:06:ef:91:cf:82:0f: 99:10:e2:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvSb1A2hOGMTCTRW6JvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzk5N2IyODcwMDQ1YWFiZTE0YzhjMTU5MjEyMWUzMGM4OWQ0N2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBOxlPo1vwL9QQCdN6/q9sXNV8xG JRZUFjtXNunaQZimijiXoK3hSuoFUXz5NSzb5nlBgHQEptYcsdrgrbH7GS+ybWUX H4UKE3QBYF183SRKUqnxAy7QHGAHD8Ya/rUmweDuhJ7g4RZamvW3z1L4GBM0ZRq7 4Ah72m79KmBImix/00WckFVGM0zYe0/cl8LcWMo4DrtUAIChimDvdbP+lEHOctTH gAwJkNAGThq3Yf3I+G5DUDuWVoSmuA147kaDbj794SSHktAay6d/kyUKszOkTB7e 8dtVZhxwFW3diKZKTcUl1x3744w5fKxXqVk1DnyjqAxLCaN4rMMLvNKKQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLeZeyhwBFqr4UyMFZISHjDInUfjMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvdDVsN0tIQUVXcXZoVEl3VmtoSWVNTWlkUi1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRX+MA0G CSqGSIb3DQEBCwUAA4IBAQCVtKukcyyJr1VInDLDbp8gkmzV79xkFLwK4VycLGzJ mOmeCnWDW28WSXG7tOiStk/3JKkjvvl/7PR826OeEJayu5wk3AfHq3FjwkGqVAJE y+DCNIrto9CRcNMfNRbtEx/mIGobPjXZreyBOS1lUX/9PZqnSABVm6gojuEpuPVx mQafqbWgjDQRau1vHWAMiR5oRPwzszZ3Wd2HQaC14cOlXSbnfqdzurZgTDzPMxHe BArbzKaBuYXTZuCSpxry5BuH27z9bZ3aDyJ8GukK6LCb6e5M7ZG5feNKEJ+tAhPd mAc6Z50vzN5RdK8m78v64wdhEHD8T8gG75HPgg+ZEOLP -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:19 2026 by rpki-client