This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/Ud3In0OaskIaLWIkC7KZsdF241I.roa File: Ud3In0OaskIaLWIkC7KZsdF241I.roa (raw, json) Hash identifier: AB7KnYKNBO0Ndoa3Ocgqa4UpFDUV3mhvx0miDDfBz5E= Subject key identifier: 51:DD:C8:9F:43:9A:B2:42:1A:2D:62:24:0B:B2:99:B1:D1:76:E3:52 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B7834A842BFEC65F1AE931C2F9702D4E7 Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/Ud3In0OaskIaLWIkC7KZsdF241I.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 185.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a8:42:bf:ec:65:f1:ae:93:1c:2f:97:02:d4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51ddc89f439ab2421a2d62240bb299b1d176e352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:58:0f:8f:f4:ba:1e:f3:06:30:94:35:db:73: 5b:18:38:a2:4e:9e:e7:5a:e4:66:0a:55:a5:e2:d4: 82:42:0a:c8:8f:22:34:b5:14:d9:49:14:b6:07:e6: 82:41:f4:e4:47:3d:bd:4a:87:fb:64:1d:95:d9:4f: 61:2b:dc:79:50:d1:76:7c:16:0f:9c:e9:69:c6:ba: 8e:c4:82:c5:00:3a:62:37:c4:ef:e9:d1:f9:d7:50: 73:8b:c7:db:fa:91:50:3c:39:5f:a4:88:e3:3d:b7: 79:03:2d:c1:dd:e6:31:3c:2e:05:e1:1a:89:0c:0c: df:4e:1f:87:ed:aa:89:d0:35:56:8e:ae:92:85:fd: ea:41:89:77:69:c8:1a:7c:fb:7b:31:8e:e9:d3:24: af:66:3a:66:7a:b2:0b:6d:84:5c:d8:7d:c7:ca:fd: ee:44:1a:e9:30:ea:7f:16:61:c9:86:4f:f7:eb:f7: b6:ec:fb:60:24:57:dc:a5:63:37:b9:5e:ac:e3:48: 4a:5f:61:5c:26:9c:5a:32:21:d5:c3:fa:75:5c:2c: 14:8a:e6:f9:99:5a:7b:bc:91:c6:0b:13:e6:ee:6f: 0d:ed:d3:de:e4:f5:c8:46:5f:ea:74:32:48:eb:73: 12:61:79:0d:24:5e:46:4f:2f:c2:b8:44:80:0a:be: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DD:C8:9F:43:9A:B2:42:1A:2D:62:24:0B:B2:99:B1:D1:76:E3:52 X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/Ud3In0OaskIaLWIkC7KZsdF241I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.128.0/24 Signature Algorithm: sha256WithRSAEncryption 61:2a:76:8c:63:4d:a3:bf:53:3b:be:cc:8f:4f:f8:0e:f2:97: 74:73:8a:6c:0b:42:62:5f:dd:e7:1f:23:ea:5f:28:ed:9a:bc: f5:86:a2:d4:cd:96:67:b8:ae:61:a5:a6:a6:07:a6:33:a5:75: c1:0d:99:cb:f1:86:a5:2e:0d:fa:a0:87:84:e9:28:f0:c7:6e: d8:0b:d4:d8:75:2b:92:0b:86:04:50:56:0b:0f:ba:f3:4a:74: 8c:6d:bf:3d:c5:ee:ce:46:00:1a:67:e8:71:67:83:41:44:b7: 7e:57:1b:2b:bb:0d:11:1e:e7:ac:5f:dc:d4:ca:36:f3:e4:11: 8d:7f:46:e0:ea:fc:73:95:5b:be:a7:8f:8f:0b:e7:74:05:de: 86:87:34:1f:ce:7c:09:a4:ac:38:2b:29:7a:f9:eb:0f:5e:e4: a7:ac:90:df:35:de:b9:89:dd:b2:6f:82:bc:05:3e:04:85:63: 4b:2d:e8:a0:cf:ad:60:82:4d:35:7f:84:f8:d7:5d:fe:90:38: 3c:e9:78:ad:59:b2:3b:76:34:d7:e0:0c:51:1b:fd:c7:5a:ce: 58:44:84:ac:89:95:e8:08:d3:5b:3a:d3:51:19:30:ae:8a:92: 65:98:76:c2:eb:f4:24:03:21:d7:37:18:82:f0:9f:f2:17:1d: 49:66:c1:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKhCv+xl8a6THC+XAtTnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWRkYzg5ZjQzOWFiMjQyMWEyZDYyMjQwYmIyOTliMWQxNzZlMzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1gPj/S6HvMGMJQ123NbGDiiTp7n WuRmClWl4tSCQgrIjyI0tRTZSRS2B+aCQfTkRz29Sof7ZB2V2U9hK9x5UNF2fBYP nOlpxrqOxILFADpiN8Tv6dH511Bzi8fb+pFQPDlfpIjjPbd5Ay3B3eYxPC4F4RqJ DAzfTh+H7aqJ0DVWjq6Shf3qQYl3acgafPt7MY7p0ySvZjpmerILbYRc2H3Hyv3u RBrpMOp/FmHJhk/36/e27PtgJFfcpWM3uV6s40hKX2FcJpxaMiHVw/p1XCwUiub5 mVp7vJHGCxPm7m8N7dPe5PXIRl/qdDJI63MSYXkNJF5GTy/CuESACr5+SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHdyJ9DmrJCGi1iJAuymbHRduNSMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvVWQzSW4wT2Fza0lhTFdJa0M3S1pzZEYyNDFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRWAMA0G CSqGSIb3DQEBCwUAA4IBAQBhKnaMY02jv1M7vsyPT/gO8pd0c4psC0JiX93nHyPq Xyjtmrz1hqLUzZZnuK5hpaamB6YzpXXBDZnL8YalLg36oIeE6Sjwx27YC9TYdSuS C4YEUFYLD7rzSnSMbb89xe7ORgAaZ+hxZ4NBRLd+Vxsruw0RHuesX9zUyjbz5BGN f0bg6vxzlVu+p4+PC+d0Bd6GhzQfznwJpKw4Kyl6+esPXuSnrJDfNd65id2yb4K8 BT4EhWNLLeigz61ggk01f4T4113+kDg86XitWbI7djTX4AxRG/3HWs5YRISsiZXo CNNbOtNRGTCuipJlmHbC6/QkAyHXNxiC8J/yFx1JZsEv -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client