This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/I3CJ2ykzKKTfnFq3HxPt9b8x1Ko.roa File: I3CJ2ykzKKTfnFq3HxPt9b8x1Ko.roa (raw, json) Hash identifier: DNPGdnY6P8diuwsnS1hz516SI5nDOZyK+3z8qXN5jzA= Subject key identifier: 23:70:89:DB:29:33:28:A4:DF:9C:5A:B7:1F:13:ED:F5:BF:31:D4:AA Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA41290D6B1849F2E1FA7D6D7E9DC9F Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/I3CJ2ykzKKTfnFq3HxPt9b8x1Ko.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205507 IP address blocks: 185.112.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:12:90:d6:b1:84:9f:2e:1f:a7:d6:d7:e9:dc:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=237089db293328a4df9c5ab71f13edf5bf31d4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:a4:42:d1:b2:b7:c3:2c:31:43:00:8d:fc: 88:f3:64:6f:7b:4e:a1:d1:bf:eb:9e:7f:33:cb:23: 7d:49:09:96:a5:13:17:c0:a3:aa:74:2a:fd:2a:89: 52:48:65:76:64:e1:07:0f:fe:75:96:c5:8c:1b:91: 4e:31:f1:8e:05:a7:d3:47:ea:6a:86:63:67:bc:3f: 11:f1:55:27:88:ed:30:29:e7:c9:af:11:d6:0f:77: bb:cf:9c:3f:cc:c1:1d:03:5b:a9:ce:cd:62:17:67: 8e:61:00:55:03:5e:36:d2:7e:16:b3:26:bb:20:36: 9b:cc:2b:54:ee:c0:59:00:15:48:91:9e:49:43:16: 6f:19:fb:58:5e:22:4f:cd:14:65:29:8b:97:e8:87: 3a:33:27:fb:bc:ce:29:98:07:89:5f:23:51:63:d5: 23:09:d0:6e:af:91:0b:63:c3:63:f7:fb:0b:fc:34: 0c:bc:b1:1e:2d:e6:2a:94:6a:c0:e6:05:bc:75:36: 0a:aa:d7:44:bb:3a:30:7f:16:0a:30:72:a5:42:ed: b9:aa:4a:f8:de:65:9e:16:cc:6f:ae:bf:3f:cf:51: 28:9e:d3:4f:7f:31:7c:69:98:06:50:d4:df:0d:2b: 13:11:26:46:1e:57:b1:46:7e:aa:45:9a:01:22:08: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:70:89:DB:29:33:28:A4:DF:9C:5A:B7:1F:13:ED:F5:BF:31:D4:AA X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/I3CJ2ykzKKTfnFq3HxPt9b8x1Ko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.81.0/24 Signature Algorithm: sha256WithRSAEncryption 07:00:4e:ab:87:38:ff:ad:ca:28:43:54:b5:14:9e:43:ac:06: 02:0b:ff:37:b4:96:7b:7a:50:e0:d0:4f:87:68:ec:87:d5:a4: 57:ba:84:3c:f9:f3:90:da:3b:58:60:0f:35:7e:9f:d3:2a:ae: b6:f9:2d:dc:41:21:38:59:a6:f8:3e:9e:90:63:c8:ea:a2:b3: 4a:d6:d0:d4:d3:dd:c4:66:b6:02:47:65:47:00:af:48:b9:58: e9:23:15:e6:79:7d:fb:6c:ad:5d:f5:58:e9:10:87:8b:83:4e: 8f:77:f8:bf:10:86:e6:06:fa:3e:1c:32:35:9f:c4:f9:04:b6: e1:15:6c:46:9e:cc:81:24:35:8b:dc:dd:ed:06:dd:38:70:b9: c2:77:2a:bd:fa:eb:fc:e8:0f:0c:8f:d2:13:06:11:f8:54:79: 61:08:00:97:1a:c9:9a:21:fc:ec:07:93:82:fa:a2:19:4f:fa: db:e0:aa:12:51:53:07:5d:24:33:07:5b:b5:38:66:bc:1b:5d: e8:da:9f:68:85:55:d9:cb:79:3e:cb:58:06:c7:be:a1:22:c8: c8:d7:96:ca:e5:c0:53:b6:2d:55:a8:f8:c9:b1:49:df:0c:ee: 16:e9:10:d4:e2:7a:6e:c3:f7:c0:89:cd:35:b7:b6:96:63:f5: 21:9d:07:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pBKQ1rGEny4fp9bX6dyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzcwODlkYjI5MzMyOGE0ZGY5YzVhYjcxZjEzZWRmNWJmMzFkNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CikQtGyt8MsMUMAjfyI82Rve06h 0b/rnn8zyyN9SQmWpRMXwKOqdCr9KolSSGV2ZOEHD/51lsWMG5FOMfGOBafTR+pq hmNnvD8R8VUniO0wKefJrxHWD3e7z5w/zMEdA1upzs1iF2eOYQBVA1420n4Wsya7 IDabzCtU7sBZABVIkZ5JQxZvGftYXiJPzRRlKYuX6Ic6Myf7vM4pmAeJXyNRY9Uj CdBur5ELY8Nj9/sL/DQMvLEeLeYqlGrA5gW8dTYKqtdEuzowfxYKMHKlQu25qkr4 3mWeFsxvrr8/z1EontNPfzF8aZgGUNTfDSsTESZGHlexRn6qRZoBIgivAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNwidspMyik35xatx8T7fW/MdSqMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvSTNDSjJ5a3pLS1RmbkZxM0h4UHQ5Yjh4MUtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXBRMA0G CSqGSIb3DQEBCwUAA4IBAQAHAE6rhzj/rcooQ1S1FJ5DrAYCC/83tJZ7elDg0E+H aOyH1aRXuoQ8+fOQ2jtYYA81fp/TKq62+S3cQSE4Wab4Pp6QY8jqorNK1tDU093E ZrYCR2VHAK9IuVjpIxXmeX37bK1d9VjpEIeLg06Pd/i/EIbmBvo+HDI1n8T5BLbh FWxGnsyBJDWL3N3tBt04cLnCdyq9+uv86A8Mj9ITBhH4VHlhCACXGsmaIfzsB5OC +qIZT/rb4KoSUVMHXSQzB1u1OGa8G13o2p9ohVXZy3k+y1gGx76hIsjI15bK5cBT ti1VqPjJsUnfDO4W6RDU4npuw/fAic01t7aWY/UhnQcN -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:18 2026 by rpki-client