This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/p0VUng2o1_gaZHh--wu0wK0iIL4.roa File: p0VUng2o1_gaZHh--wu0wK0iIL4.roa (raw, json) Hash identifier: oO1bw6THJUf9h7ZSPQOfZA0dBR3CVemJCl3j27Vlz30= Subject key identifier: A7:45:54:9E:0D:A8:D7:F8:1A:64:78:7E:FB:0B:B4:C0:AD:22:20:BE Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Certificate serial: 019B7EA4C5011F275DA6B6E6837570D5B6B2 Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/p0VUng2o1_gaZHh--wu0wK0iIL4.roa Signing time: Fri 02 Jan 2026 12:18:06 +0000 ROA not before: Fri 02 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198432 IP address blocks: 185.18.198.0/24 maxlen: 24 185.18.199.0/24 maxlen: 24 185.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:c5:01:1f:27:5d:a6:b6:e6:83:75:70:d5:b6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec Validity Not Before: Jan 2 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a745549e0da8d7f81a64787efb0bb4c0ad2220be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:4c:ef:7a:81:9f:95:fc:48:0d:2d:9b:72: aa:83:70:5f:e1:04:a2:84:50:3d:29:33:4b:c0:70: 73:4d:3d:8a:16:fb:67:6d:b5:3d:31:9d:86:83:85: da:6b:09:5d:35:68:0d:2f:54:2b:28:b6:6b:93:69: 73:c6:3b:58:aa:ff:4c:38:f4:67:59:55:76:11:87: 39:23:1e:b2:19:9a:60:e8:65:58:ff:01:09:dc:a0: d5:c4:61:9d:d9:1d:be:fd:26:af:48:1e:58:29:34: 6c:28:e5:c8:49:2f:b8:4a:d6:47:27:24:e4:bd:44: 6f:a0:b7:9f:7c:3a:d6:59:87:03:1d:6d:75:19:2e: 2b:fb:14:8d:ec:2f:83:3c:f8:dd:58:e1:c5:fd:eb: d9:1f:a4:56:9a:93:10:ad:c5:a6:ef:22:b3:2b:f9: 5b:5e:23:5a:46:11:4c:7d:81:51:a1:18:fb:bb:0b: 3a:16:10:e7:2f:52:00:13:e9:60:fe:cf:45:23:29: ef:c3:dd:2d:a8:54:de:80:b8:d5:7b:e1:a8:b6:b0: 16:db:94:08:d0:b8:22:4f:f9:00:52:30:c8:c0:e3: d7:6e:fd:65:1a:f2:cb:d9:6c:b8:9d:82:40:6d:29: 4b:ba:3b:c5:be:a2:73:41:ca:92:eb:c6:65:62:dc: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:45:54:9E:0D:A8:D7:F8:1A:64:78:7E:FB:0B:B4:C0:AD:22:20:BE X509v3 Authority Key Identifier: keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/p0VUng2o1_gaZHh--wu0wK0iIL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.198.0/23 185.68.111.0/24 Signature Algorithm: sha256WithRSAEncryption 24:89:b1:1d:9b:b5:bf:f6:08:8d:1f:97:b0:d4:4f:db:de:e9: 99:f2:e6:9c:59:a8:63:12:d2:e4:c4:6c:52:5e:0b:9b:36:81: 66:28:f6:4a:27:67:a7:c6:7b:cd:87:31:fa:6d:7a:ed:b3:db: ee:e7:96:4e:07:d8:ee:e0:d5:08:89:06:fd:79:50:e8:45:e9: 4b:95:35:8f:b4:9b:5b:1b:38:4d:8d:23:3c:a0:79:e7:3b:45: d2:1d:ed:25:3d:b8:af:d4:fe:e5:f9:f6:b6:c5:34:0f:1b:b4: a1:5d:ed:06:3d:b4:63:39:c1:35:aa:26:47:f9:49:c9:8e:4d: 6b:88:34:27:eb:0c:bf:3f:59:81:5a:4d:03:4a:ee:ae:9e:0c: 7d:88:17:fe:79:4c:4f:8e:b9:b1:d8:c9:40:83:5c:15:9f:0d: 05:a7:3d:61:f9:ee:84:8d:f2:93:3c:6c:bf:ee:39:8f:59:ee: 75:f4:75:80:d2:fc:c9:09:d0:b1:6e:d4:5a:52:6a:75:96:fd: 09:31:bc:61:7d:e3:91:65:0a:91:b8:0e:9a:45:66:fa:61:59: 11:89:c3:4f:af:d8:83:4b:84:b7:87:96:c7:f8:04:66:06:a0: 6e:51:db:fe:c6:11:7f:96:6f:47:3e:fc:ca:52:fd:96:58:48: 3c:34:07:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pMUBHyddprbmg3Vw1bayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjM2NiMjBjNWNhN2M0ZWQ4ZTQyMDc4YjFhNjcyODdhMGQ5 OTFjZWMwHhcNMjYwMTAyMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQ1NTQ5ZTBkYThkN2Y4MWE2NDc4N2VmYjBiYjRjMGFkMjIyMGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t1M73qBn5X8SA0tm3Kqg3Bf4QSi hFA9KTNLwHBzTT2KFvtnbbU9MZ2Gg4XaawldNWgNL1QrKLZrk2lzxjtYqv9MOPRn WVV2EYc5Ix6yGZpg6GVY/wEJ3KDVxGGd2R2+/SavSB5YKTRsKOXISS+4StZHJyTk vURvoLeffDrWWYcDHW11GS4r+xSN7C+DPPjdWOHF/evZH6RWmpMQrcWm7yKzK/lb XiNaRhFMfYFRoRj7uws6FhDnL1IAE+lg/s9FIynvw90tqFTegLjVe+GotrAW25QI 0LgiT/kAUjDIwOPXbv1lGvLL2Wy4nYJAbSlLujvFvqJzQcqS68ZlYtzocwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKdFVJ4NqNf4GmR4fvsLtMCtIiC+MB8GA1UdIwQY MBaAFNw8sgxcp8TtjkIHixpnKHoNmRzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjkt ODI2NjBlZTRlYWM0LzEvcDBWVW5nMm8xX2dhWkhoLS13dTB3SzBpSUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hODVmM2QtNjVhMi00ZjZjLTljYjktODI2NjBlZTRlYWM0 LzEvM0R5eURGeW54TzJPUWdlTEdtY29lZzJaSE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuRLGAwQA uURvMA0GCSqGSIb3DQEBCwUAA4IBAQAkibEdm7W/9giNH5ew1E/b3umZ8uacWahj EtLkxGxSXgubNoFmKPZKJ2enxnvNhzH6bXrts9vu55ZOB9ju4NUIiQb9eVDoRelL lTWPtJtbGzhNjSM8oHnnO0XSHe0lPbiv1P7l+fa2xTQPG7ShXe0GPbRjOcE1qiZH +UnJjk1riDQn6wy/P1mBWk0DSu6ungx9iBf+eUxPjrmx2MlAg1wVnw0Fpz1h+e6E jfKTPGy/7jmPWe519HWA0vzJCdCxbtRaUmp1lv0JMbxhfeORZQqRuA6aRWb6YVkR icNPr9iDS4S3h5bH+ARmBqBuUdv+xhF/lm9HPvzKUv2WWEg8NAcQ -----END CERTIFICATE-----Generated at Tue Jan 27 02:19:02 2026 by rpki-client