This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/P12Bd5VdoMxJk2YYVATcG1-aLsk.roa File: P12Bd5VdoMxJk2YYVATcG1-aLsk.roa (raw, json) Hash identifier: tMed7m101KjSKZGY84e4m62zANDxSX8qjIVWkfIG7SI= Subject key identifier: 3F:5D:81:77:95:5D:A0:CC:49:93:66:18:54:04:DC:1B:5F:9A:2E:C9 Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B78343F5FC4DC8D677EC7EE01DE1C624E Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/P12Bd5VdoMxJk2YYVATcG1-aLsk.roa Signing time: Thu 01 Jan 2026 06:17:28 +0000 ROA not before: Thu 01 Jan 2026 06:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39577 IP address blocks: 92.118.74.0/24 maxlen: 24 92.118.75.0/24 maxlen: 24 185.230.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3f:5f:c4:dc:8d:67:7e:c7:ee:01:de:1c:62:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5d8177955da0cc499366185404dc1b5f9a2ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:91:7d:e3:7a:08:a1:14:0e:a8:37:22:2d: fb:b1:93:b5:fe:57:9d:0a:1b:00:06:31:e8:56:f0: 5f:41:3d:b3:6d:84:02:79:e7:d1:c6:87:81:2e:f9: 8b:35:be:ae:ea:6a:7b:20:8b:0d:4b:b9:dd:44:4c: 73:4f:66:ed:ff:78:8c:5a:19:75:63:f9:f7:11:1e: 5e:2b:95:8d:3e:9a:db:2a:c4:85:40:b9:2f:77:1f: d2:04:3f:34:8f:82:b9:09:e2:28:b2:a0:d8:f3:98: fc:f2:10:c3:7d:b0:a3:ff:1f:f5:8a:df:98:18:b7: 7b:0f:7f:a0:d5:ac:ec:7e:87:5c:e7:8a:04:42:ea: ab:ca:24:d1:3c:86:bc:8a:db:90:e5:66:dc:c3:c8: 41:13:ac:c6:3d:1d:74:d4:8c:c1:3e:c2:5b:6b:c9: da:4b:c6:a7:79:af:c1:f5:e6:c3:8d:32:bd:89:ac: 0b:4e:b2:b0:2a:23:1b:03:cf:af:6e:fb:ff:43:5b: 27:31:be:5b:54:8b:fe:73:64:a9:d5:20:18:e8:22: ab:d4:1f:a0:e2:13:26:df:13:3e:b1:76:88:05:f6: df:f2:7b:55:c2:2d:c5:c6:79:c4:b3:21:25:4c:ae: 75:6a:81:ce:b4:2f:da:07:dd:82:cc:68:e4:60:06: 53:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5D:81:77:95:5D:A0:CC:49:93:66:18:54:04:DC:1B:5F:9A:2E:C9 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/P12Bd5VdoMxJk2YYVATcG1-aLsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.74.0/23 185.230.243.0/24 Signature Algorithm: sha256WithRSAEncryption 14:9c:cc:bd:e8:66:3a:4d:55:fe:59:ea:4c:e2:45:47:d2:7d: d2:3d:30:51:1a:79:f4:58:8c:cf:6e:bb:02:77:56:5b:73:9d: 10:9b:40:4f:07:aa:4b:9b:0a:15:00:c8:0f:32:c8:00:67:47: 26:3f:51:d1:79:a0:15:65:c7:9f:93:e1:e1:da:a0:b6:8c:56: c3:f1:f1:fd:8b:74:58:06:dd:e9:ea:32:d2:6a:dc:7c:1a:1f: 32:22:e4:8b:2d:a5:83:49:9b:67:b6:62:8e:00:7c:3f:10:cf: 90:c9:13:05:e8:cd:29:5c:e7:9f:ef:d1:d7:03:30:1e:59:95: 85:81:7e:6a:ff:4b:47:8c:6d:82:d6:bd:02:17:6b:98:43:05: ba:8c:55:79:6c:be:4b:11:25:fd:ad:bd:af:ea:3b:50:3a:0c: 91:cd:12:ff:f5:70:13:16:e0:ba:04:de:37:96:61:2b:3f:e1: 47:93:15:90:cf:fa:0c:cc:c6:92:24:f0:6b:c4:34:8a:4c:10: ff:c8:d9:39:bf:08:da:43:9a:4d:62:35:c2:08:97:0d:6d:90: 2e:31:8f:05:62:3c:bd:5c:6a:24:34:ee:f1:0a:d7:f2:b3:b8: da:b6:83:f6:3f:c0:b4:fa:06:72:7e:f6:32:ec:0a:20:df:88: 8d:89:8f:bf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ND9fxNyNZ37H7gHeHGJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjVkODE3Nzk1NWRhMGNjNDk5MzY2MTg1NDA0ZGMxYjVmOWEyZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhORfeN6CKEUDqg3Ii37sZO1/led ChsABjHoVvBfQT2zbYQCeefRxoeBLvmLNb6u6mp7IIsNS7ndRExzT2bt/3iMWhl1 Y/n3ER5eK5WNPprbKsSFQLkvdx/SBD80j4K5CeIosqDY85j88hDDfbCj/x/1it+Y GLd7D3+g1azsfodc54oEQuqryiTRPIa8ituQ5Wbcw8hBE6zGPR101IzBPsJba8na S8anea/B9ebDjTK9iawLTrKwKiMbA8+vbvv/Q1snMb5bVIv+c2Sp1SAY6CKr1B+g 4hMm3xM+sXaIBfbf8ntVwi3FxnnEsyElTK51aoHOtC/aB92CzGjkYAZTXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD9dgXeVXaDMSZNmGFQE3Btfmi7JMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvUDEyQmQ1VmRvTXhKazJZWVZBVGNHMS1hTHNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXHZKAwQA uebzMA0GCSqGSIb3DQEBCwUAA4IBAQAUnMy96GY6TVX+WepM4kVH0n3SPTBRGnn0 WIzPbrsCd1Zbc50Qm0BPB6pLmwoVAMgPMsgAZ0cmP1HReaAVZcefk+Hh2qC2jFbD 8fH9i3RYBt3p6jLSatx8Gh8yIuSLLaWDSZtntmKOAHw/EM+QyRMF6M0pXOef79HX AzAeWZWFgX5q/0tHjG2C1r0CF2uYQwW6jFV5bL5LESX9rb2v6jtQOgyRzRL/9XAT FuC6BN43lmErP+FHkxWQz/oMzMaSJPBrxDSKTBD/yNk5vwjaQ5pNYjXCCJcNbZAu MY8FYjy9XGokNO7xCtfys7jatoP2P8C0+gZyfvYy7Aog34iNiY+/ -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:57 2026 by rpki-client