This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/1dnMq6ZCcFb70edGxGmL0hiobfI.roa File: 1dnMq6ZCcFb70edGxGmL0hiobfI.roa (raw, json) Hash identifier: +vsRlNxh8n7NYthhGysqntNveXYKCA8nzfq82JjmeCw= Subject key identifier: D5:D9:CC:AB:A6:42:70:56:FB:D1:E7:46:C4:69:8B:D2:18:A8:6D:F2 Certificate issuer: /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d Certificate serial: 019B7EA5220B851A02A18803E344D8A7E50A Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/1dnMq6ZCcFb70edGxGmL0hiobfI.roa Signing time: Fri 02 Jan 2026 12:18:29 +0000 ROA not before: Fri 02 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60111 IP address blocks: 185.183.40.0/22 maxlen: 22 2a0b:380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:22:0b:85:1a:02:a1:88:03:e3:44:d8:a7:e5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d Validity Not Before: Jan 2 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5d9ccaba6427056fbd1e746c4698bd218a86df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:47:7c:f4:2b:9b:72:47:97:0f:69:fe:41: 1b:6c:75:f2:ec:73:02:f4:fa:fa:52:57:74:3a:51: 25:53:35:9a:8b:1c:c6:f0:1d:90:1e:b6:dd:79:dc: 67:13:e7:3b:0b:9a:6b:a4:b9:cf:23:8c:ba:71:24: a8:56:03:6b:3d:00:c5:35:5c:30:a5:9b:97:6d:d8: e3:03:2e:86:48:ba:ca:f9:8b:12:3c:42:fd:9d:31: 11:74:6a:3b:0b:9d:4f:b0:14:02:5b:a6:19:c5:c4: f0:18:22:73:2b:55:1e:80:b6:a0:0d:8c:4d:03:fd: 71:aa:36:4f:bc:4d:a7:60:35:10:a0:ad:53:c2:33: b4:18:aa:3c:0a:43:92:76:0b:f6:57:fc:c7:9c:2d: 28:fc:29:41:de:22:1d:47:7c:a9:ee:fe:ae:8d:af: 51:ed:33:47:63:13:03:5c:64:f2:2e:37:50:79:56: bb:71:f1:a7:ee:81:76:cd:76:e9:a7:87:4a:fd:8e: 24:d9:61:b9:bf:df:f4:44:6c:44:7d:4a:6d:ef:12: 6f:1a:26:64:06:6f:ab:02:80:1e:1c:52:61:e8:a0: 87:52:f5:68:35:b6:18:f6:2a:c4:5c:c7:19:fa:85: 46:71:a3:4b:47:b0:e3:ea:38:ba:71:9b:1f:95:a5: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:CC:AB:A6:42:70:56:FB:D1:E7:46:C4:69:8B:D2:18:A8:6D:F2 X509v3 Authority Key Identifier: keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/1dnMq6ZCcFb70edGxGmL0hiobfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.40.0/22 IPv6: 2a0b:380::/29 Signature Algorithm: sha256WithRSAEncryption 80:38:85:aa:26:f8:ae:68:81:79:de:2a:50:16:e5:4f:13:09: 53:db:7a:27:8a:ca:56:b9:66:66:11:26:5b:1d:39:75:9d:49: 7a:10:89:cd:c4:d4:1c:23:2a:06:5d:34:03:c2:8d:8d:3c:bc: b1:bd:42:c8:0a:d0:5a:27:50:01:45:ae:9b:e9:29:72:08:67: 6f:01:1f:84:57:9d:50:b5:cd:b8:f8:56:42:5b:aa:1d:33:2b: 96:0d:9f:ed:cc:51:77:a8:92:e4:0c:c7:50:42:da:93:32:33: e5:84:82:d7:bc:4e:66:4d:a3:d7:5d:c4:c4:5c:91:e9:4f:da: 50:2a:43:2e:51:7a:2c:c4:41:dc:90:f4:c0:03:30:da:30:7e: f9:71:db:23:ba:68:c9:af:3f:e5:26:58:18:ed:c4:9a:a5:de: 1e:bf:68:15:e5:ca:2e:e9:67:e5:54:1f:a0:96:80:ae:8e:65: f5:d1:d9:4c:e9:8a:75:cf:57:b8:09:de:d1:9c:b4:5b:be:6b: 83:63:a5:ad:ce:f3:a1:00:7c:0d:30:ec:21:d1:81:9e:5c:a0: 5c:f4:82:89:03:7b:17:16:bb:91:7a:c0:98:4c:23:95:af:9f: 74:06:28:1a:9f:8d:a7:0e:04:f0:62:f8:7d:71:20:3b:1c:af: 10:59:3e:87 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pSILhRoCoYgD40TYp+UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1M2YxN2Y0YmJiMTkzNDZkYzVhZmMwYzIzNTg3OWZiZTYz NTdjNmQwHhcNMjYwMTAyMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWQ5Y2NhYmE2NDI3MDU2ZmJkMWU3NDZjNDY5OGJkMjE4YTg2ZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf1HfPQrm3JHlw9p/kEbbHXy7HMC 9Pr6Uld0OlElUzWaixzG8B2QHrbdedxnE+c7C5prpLnPI4y6cSSoVgNrPQDFNVww pZuXbdjjAy6GSLrK+YsSPEL9nTERdGo7C51PsBQCW6YZxcTwGCJzK1UegLagDYxN A/1xqjZPvE2nYDUQoK1TwjO0GKo8CkOSdgv2V/zHnC0o/ClB3iIdR3yp7v6uja9R 7TNHYxMDXGTyLjdQeVa7cfGn7oF2zXbpp4dK/Y4k2WG5v9/0RGxEfUpt7xJvGiZk Bm+rAoAeHFJh6KCHUvVoNbYY9irEXMcZ+oVGcaNLR7Dj6ji6cZsflaXOEwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNXZzKumQnBW+9HnRsRpi9IYqG3yMB8GA1UdIwQY MBaAFDU/F/S7sZNG3Fr8DCNYefvmNXxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjct OWZkODRjNzliMGVmLzEvMWRuTXE2WkNjRmI3MGVkR3hHbUwwaGlvYmZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjctOWZkODRjNzliMGVm LzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubcoMA0E AgACMAcDBQMqCwOAMA0GCSqGSIb3DQEBCwUAA4IBAQCAOIWqJviuaIF53ipQFuVP EwlT23onispWuWZmESZbHTl1nUl6EInNxNQcIyoGXTQDwo2NPLyxvULICtBaJ1AB Ra6b6SlyCGdvAR+EV51Qtc24+FZCW6odMyuWDZ/tzFF3qJLkDMdQQtqTMjPlhILX vE5mTaPXXcTEXJHpT9pQKkMuUXosxEHckPTAAzDaMH75cdsjumjJrz/lJlgY7cSa pd4ev2gV5cou6WflVB+gloCujmX10dlM6Yp1z1e4Cd7RnLRbvmuDY6WtzvOhAHwN MOwh0YGeXKBc9IKJA3sXFruResCYTCOVr590Bigan42nDgTwYvh9cSA7HK8QWT6H -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:45 2026 by rpki-client