This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/oDbMFgQXaDQKBlTZ0sg-aZVkz2w.roa File: oDbMFgQXaDQKBlTZ0sg-aZVkz2w.roa (raw, json) Hash identifier: XEsb6wGIf127C1LxKOs7yrPnyiYyRQO5qlAPpJyV09o= Subject key identifier: A0:36:CC:16:04:17:68:34:0A:06:54:D9:D2:C8:3E:69:95:64:CF:6C Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B5B7F54E63A99E3B0D8863A92A114A68A Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/oDbMFgQXaDQKBlTZ0sg-aZVkz2w.roa Signing time: Fri 26 Dec 2025 16:30:30 +0000 ROA not before: Fri 26 Dec 2025 16:30:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211183 IP address blocks: 157.22.230.0/24 maxlen: 24 157.22.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:7f:54:e6:3a:99:e3:b0:d8:86:3a:92:a1:14:a6:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Dec 26 16:30:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a036cc16041768340a0654d9d2c83e699564cf6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0a:8d:04:6e:da:18:ba:c5:39:d4:7d:4d:86: b7:28:96:49:04:db:25:cd:36:68:0c:31:4d:f9:c6: e2:69:14:ff:97:dc:31:69:34:d8:fe:94:0c:16:74: 0c:20:20:35:8f:b0:48:95:dc:eb:e5:a7:02:4e:74: 51:91:e2:d3:3b:f2:87:4d:3c:61:29:33:bf:c8:56: 62:64:1b:f0:4a:ea:ef:cc:68:e0:72:42:a4:00:40: 62:f4:f8:25:80:44:fe:90:42:d0:c8:31:57:2a:03: 16:12:63:de:6d:33:e3:10:f5:ae:d5:5f:28:ea:b1: b6:18:d2:1e:b0:b3:e3:e2:c8:cb:94:44:58:72:3d: 63:f0:ef:99:90:ba:99:e7:0c:ea:c0:7c:b6:56:6c: 34:31:75:6c:b9:33:bc:54:45:cf:e9:f5:dc:f3:56: 05:7e:28:a4:7b:19:98:11:54:f6:fc:da:09:0f:3f: 19:a5:6e:bc:e6:be:aa:77:fb:06:83:9d:e4:60:23: 18:fe:09:62:2a:26:ee:03:b7:50:2c:2d:26:0f:b7: 4f:85:f1:59:ff:2f:8d:1d:6d:2f:7f:a5:0d:cc:46: 32:a4:cc:37:da:46:3c:68:65:fb:63:2b:01:74:6a: 87:6b:05:81:89:40:12:7d:eb:d5:05:7d:79:e6:66: 7e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:36:CC:16:04:17:68:34:0A:06:54:D9:D2:C8:3E:69:95:64:CF:6C X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/oDbMFgQXaDQKBlTZ0sg-aZVkz2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.22.230.0/23 Signature Algorithm: sha256WithRSAEncryption 21:d0:0a:17:97:7e:df:52:3d:27:b0:49:ec:90:19:a6:18:49: f3:8e:99:ec:af:69:eb:f9:f4:91:b0:07:16:e0:40:0a:59:aa: db:a2:4d:6b:a6:2a:2b:9a:28:2a:be:51:f6:fe:20:2d:4e:d3: 44:f1:be:49:29:a3:20:d1:78:9e:52:ef:b2:54:e1:b9:e3:cb: 29:ea:d3:ed:63:2b:ff:60:69:e1:d5:39:52:5b:53:9e:8c:b8: 00:86:0e:81:ff:0c:bd:27:ad:8c:fd:b0:6b:6b:45:19:16:2e: bf:76:05:ea:e8:c4:e8:32:5b:95:dc:a7:7c:8d:34:a0:27:39: f3:3e:14:7a:3a:37:11:cc:ce:f5:9b:11:4b:67:dc:e8:b3:c5: 54:bb:12:b7:84:6e:d3:1e:9a:63:5a:50:96:3c:e7:30:7e:96: 6f:9b:38:92:2b:ce:92:89:4c:56:35:4e:d4:5d:c0:ce:4f:2b: 6a:7d:a8:45:b3:8d:22:83:59:e2:dd:80:7b:cd:01:e2:fc:a6: 82:91:e9:00:e3:66:0b:3f:36:d4:bd:07:b7:fa:31:e4:11:c4: 54:e6:76:04:30:08:8e:66:5b:c7:b3:06:3e:a1:66:3e:1a:dc: c2:39:c3:97:76:2d:c1:ee:0e:e1:e0:bd:21:17:2a:5a:08:5b: b8:4f:93:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtbf1TmOpnjsNiGOpKhFKaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjUxMjI2MTYzMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDM2Y2MxNjA0MTc2ODM0MGEwNjU0ZDlkMmM4M2U2OTk1NjRjZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AqNBG7aGLrFOdR9TYa3KJZJBNsl zTZoDDFN+cbiaRT/l9wxaTTY/pQMFnQMICA1j7BIldzr5acCTnRRkeLTO/KHTTxh KTO/yFZiZBvwSurvzGjgckKkAEBi9PglgET+kELQyDFXKgMWEmPebTPjEPWu1V8o 6rG2GNIesLPj4sjLlERYcj1j8O+ZkLqZ5wzqwHy2Vmw0MXVsuTO8VEXP6fXc81YF fiikexmYEVT2/NoJDz8ZpW685r6qd/sGg53kYCMY/gliKibuA7dQLC0mD7dPhfFZ /y+NHW0vf6UNzEYypMw32kY8aGX7YysBdGqHawWBiUASfevVBX155mZ+ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKA2zBYEF2g0CgZU2dLIPmmVZM9sMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvb0RiTUZnUVhhRFFLQmxUWjBzZy1hWlZrejJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRbmMA0G CSqGSIb3DQEBCwUAA4IBAQAh0AoXl37fUj0nsEnskBmmGEnzjpnsr2nr+fSRsAcW 4EAKWarbok1rpiormigqvlH2/iAtTtNE8b5JKaMg0XieUu+yVOG548sp6tPtYyv/ YGnh1TlSW1OejLgAhg6B/wy9J62M/bBra0UZFi6/dgXq6MToMluV3Kd8jTSgJznz PhR6OjcRzM71mxFLZ9zos8VUuxK3hG7THppjWlCWPOcwfpZvmziSK86SiUxWNU7U XcDOTytqfahFs40ig1ni3YB7zQHi/KaCkekA42YLPzbUvQe3+jHkEcRU5nYEMAiO ZlvHswY+oWY+GtzCOcOXdi3B7g7h4L0hFypaCFu4T5Pm -----END CERTIFICATE-----Generated at Thu Jan 1 13:05:57 2026 by rpki-client