This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/10BdE3my9_k5K4EpYYsh6X3f_NM.roa File: 10BdE3my9_k5K4EpYYsh6X3f_NM.roa (raw, json) Hash identifier: tEsWyEym+Bw4UIKHsPhz46jcXrMp6TDNqmX/N/wgteo= Subject key identifier: D7:40:5D:13:79:B2:F7:F9:39:2B:81:29:61:8B:21:E9:7D:DF:FC:D3 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910696C73E1B3B6E6BF811F94AE7537 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/10BdE3my9_k5K4EpYYsh6X3f_NM.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211682 IP address blocks: 188.132.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:69:6c:73:e1:b3:b6:e6:bf:81:1f:94:ae:75:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7405d1379b2f7f9392b8129618b21e97ddffcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:c1:af:03:ff:43:97:e6:84:36:b3:96:c5: 8d:20:67:b0:ed:92:bf:4c:48:ac:30:10:90:26:36: 73:04:18:f6:e4:da:d0:c3:95:a4:30:9f:97:5b:f2: 20:d9:5a:08:83:3d:81:0f:b5:68:4e:21:0d:63:91: 19:77:0a:0a:d0:8e:df:76:c7:7c:29:27:17:f7:bc: cc:84:32:7a:93:c8:c5:d5:60:17:09:ed:d6:f6:fb: 06:bf:1b:f0:1c:37:86:ed:0a:04:a2:61:ca:96:b4: 93:1e:31:d2:2b:ce:66:56:a2:3f:74:d2:3a:50:37: 3a:36:73:28:c3:06:d0:28:b8:1c:8a:8f:9c:9e:b6: ae:cd:c1:3c:9f:a8:9f:75:f3:84:bc:0c:df:ea:f9: 5e:2f:a0:93:4a:d0:4c:46:b5:ef:6b:ce:45:c9:18: 4a:ce:ee:94:6f:c4:c1:93:9e:45:91:91:6b:cd:46: 58:09:f2:c5:ea:80:74:b8:ee:aa:ce:08:87:fe:3f: da:f0:21:73:4b:f8:2e:4e:9d:de:e9:40:95:45:a3: 79:47:00:d1:f7:f7:bf:50:c0:d1:12:01:4b:2f:d5: f2:da:a5:32:85:79:d3:dc:1b:95:b6:a6:f2:5b:97: 3c:46:3c:78:ea:32:16:88:f2:b6:6b:cd:fb:ce:c8: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:40:5D:13:79:B2:F7:F9:39:2B:81:29:61:8B:21:E9:7D:DF:FC:D3 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/10BdE3my9_k5K4EpYYsh6X3f_NM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.236.0/24 Signature Algorithm: sha256WithRSAEncryption 93:56:c7:6e:8c:60:bc:91:0d:e6:a6:81:cb:96:8f:af:38:5a: 69:ef:a8:70:68:bb:32:72:49:a1:54:48:16:5f:fb:54:ba:a9: 6b:47:27:09:a8:38:39:47:f3:f8:3f:cd:ef:b2:5a:c5:2e:43: cd:01:0e:df:04:39:7d:21:3c:7a:6f:9f:24:ec:93:f3:84:d4: 20:3e:2f:31:c0:48:75:89:0d:dd:f9:b3:2c:e0:52:ee:b0:8f: 1d:61:1f:f3:d3:f8:eb:4a:7c:b6:37:e2:ae:dc:34:e7:29:f7: c5:c7:d6:19:8f:6e:c3:f7:d6:30:ef:7e:90:80:1c:47:f4:6d: 33:b5:48:ef:f1:10:3d:ea:32:2e:e4:fc:c4:42:0e:6c:3b:6f: c6:ca:e9:90:53:f3:67:b1:ec:91:1a:ad:2b:b5:b1:d5:c6:93: 1e:9d:eb:29:3a:11:65:45:9b:8d:c1:a0:c3:b4:68:d8:a2:e2: 7d:24:5a:66:bc:3c:e5:57:a4:eb:e7:98:44:eb:5c:8e:e3:0e: 71:75:46:71:2c:0b:71:6c:69:f6:dd:be:82:c8:53:58:1d:24: 83:01:0f:60:b0:af:43:73:b7:07:e8:93:80:0f:75:98:58:49: d4:90:84:cc:a1:ea:82:91:a1:be:d5:53:ea:89:00:26:e3:e0: 86:77:d9:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGlsc+Gztua/gR+UrnU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzQwNWQxMzc5YjJmN2Y5MzkyYjgxMjk2MThiMjFlOTdkZGZmY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbDBrwP/Q5fmhDazlsWNIGew7ZK/ TEisMBCQJjZzBBj25NrQw5WkMJ+XW/Ig2VoIgz2BD7VoTiENY5EZdwoK0I7fdsd8 KScX97zMhDJ6k8jF1WAXCe3W9vsGvxvwHDeG7QoEomHKlrSTHjHSK85mVqI/dNI6 UDc6NnMowwbQKLgcio+cnrauzcE8n6ifdfOEvAzf6vleL6CTStBMRrXva85FyRhK zu6Ub8TBk55FkZFrzUZYCfLF6oB0uO6qzgiH/j/a8CFzS/guTp3e6UCVRaN5RwDR 9/e/UMDREgFLL9Xy2qUyhXnT3BuVtqbyW5c8Rjx46jIWiPK2a837zsjz2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdAXRN5svf5OSuBKWGLIel93/zTMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMTBCZEUzbXk5X2s1SzRFcFlZc2g2WDNmX05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITsMA0G CSqGSIb3DQEBCwUAA4IBAQCTVsdujGC8kQ3mpoHLlo+vOFpp76hwaLsyckmhVEgW X/tUuqlrRycJqDg5R/P4P83vslrFLkPNAQ7fBDl9ITx6b58k7JPzhNQgPi8xwEh1 iQ3d+bMs4FLusI8dYR/z0/jrSny2N+Ku3DTnKffFx9YZj27D99Yw736QgBxH9G0z tUjv8RA96jIu5PzEQg5sO2/GyumQU/NnseyRGq0rtbHVxpMenespOhFlRZuNwaDD tGjYouJ9JFpmvDzlV6Tr55hE61yO4w5xdUZxLAtxbGn23b6CyFNYHSSDAQ9gsK9D c7cH6JOAD3WYWEnUkITMoeqCkaG+1VPqiQAm4+CGd9ma -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:43 2026 by rpki-client