This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa File: Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa (raw, json) Hash identifier: JIVZInEs3qX488BMPJFD+ldY4NUedBvpDHZsEFrw4pk= Subject key identifier: 0F:0D:BD:34:9F:DC:B6:B3:A9:7A:27:86:60:18:02:A9:50:0E:AA:A6 Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Certificate serial: 019B7B357A330F703777865931A28A855286 Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 45.139.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7a:33:0f:70:37:77:86:59:31:a2:8a:85:52:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f0dbd349fdcb6b3a97a2786601802a9500eaaa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:35:99:9f:c5:bd:67:6b:3d:d4:79:dd:5d: 58:c7:c6:66:fe:7d:b7:2e:55:03:3b:f7:9f:23:f4: b4:3f:84:d4:af:44:c0:84:1d:6a:88:93:80:65:cc: 54:7d:3b:53:6d:75:89:f4:ae:fc:30:b5:9e:a4:49: 5d:38:47:69:26:1c:59:f5:30:1e:57:69:42:69:fe: 76:83:21:16:63:30:e2:c5:7f:39:5f:0c:91:85:83: 31:6b:cd:c1:3f:37:30:ae:dd:43:f4:1a:a8:b6:9e: cd:e9:90:20:ad:16:6a:6a:cb:79:72:8c:d7:e8:ca: 47:4d:56:93:9e:3c:21:7e:55:2b:6f:c0:ca:dd:15: 99:12:ea:7b:42:05:60:d7:a4:87:1d:8a:1b:e6:71: 72:21:a9:ad:b1:cc:a4:5f:fa:0b:4f:e2:99:ef:da: 8f:00:85:ad:1b:50:69:03:26:81:da:78:ea:cd:4a: 1b:3c:50:b0:47:bc:e8:58:7d:e3:a2:39:d0:de:5b: bf:a0:79:02:31:67:2f:93:10:45:9a:4d:55:46:b8: 0e:7d:57:7a:bf:46:30:d6:a4:6c:be:67:27:5a:ad: a6:0c:00:cf:d2:0f:c6:e0:30:2c:a1:eb:d4:c4:bc: 4c:ef:56:0a:47:84:68:ba:6e:41:20:d1:0a:90:e1: 3c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0D:BD:34:9F:DC:B6:B3:A9:7A:27:86:60:18:02:A9:50:0E:AA:A6 X509v3 Authority Key Identifier: keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/Dw29NJ_ctrOpeieGYBgCqVAOqqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.211.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:8f:51:ec:27:f8:4e:f3:86:04:45:0b:7e:60:b5:73:34:e2: 60:9c:27:7c:cd:ed:dc:f0:38:c1:da:56:ed:e1:98:47:7f:5f: ab:93:01:15:dc:f5:bc:b7:db:b9:da:e3:8e:01:04:36:fd:1e: 52:68:f8:5a:36:be:9e:51:7c:1a:37:db:bc:24:ca:02:2f:74: 62:f8:9e:15:43:4b:58:5d:0d:92:c8:ab:20:33:70:18:da:fc: 17:56:98:f4:3b:be:1d:a3:0b:0e:9d:b1:23:04:f0:17:5b:78: b4:c3:11:7b:0e:e8:82:76:90:f6:33:65:3b:7e:5d:b3:b1:e7: da:07:ad:2a:6d:2a:1c:4f:56:89:5b:c8:cd:09:ae:4f:b6:f3: fb:d7:f4:3e:2c:b1:19:75:02:8f:fc:52:bb:d0:37:de:3e:b6: bb:1d:9d:31:52:14:07:1e:ed:4d:0b:c7:65:80:eb:8d:07:5b: 52:f4:d4:e8:ed:05:cb:26:cb:3c:45:c3:66:c1:b3:47:4f:20: 33:1e:be:a6:19:15:68:3e:0c:f9:75:d0:e3:94:3b:f6:c6:60: 85:63:a5:1e:72:bf:3f:5d:e2:39:e2:6f:8e:fe:09:8d:b6:bc: 0b:39:86:1c:86:dd:f9:84:e1:62:93:92:d5:87:70:2a:87:4d: 26:de:95:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXozD3A3d4ZZMaKKhVKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk Mzk4YTMwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjBkYmQzNDlmZGNiNmIzYTk3YTI3ODY2MDE4MDJhOTUwMGVhYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTw1mZ/FvWdrPdR53V1Yx8Zm/n23 LlUDO/efI/S0P4TUr0TAhB1qiJOAZcxUfTtTbXWJ9K78MLWepEldOEdpJhxZ9TAe V2lCaf52gyEWYzDixX85XwyRhYMxa83BPzcwrt1D9Bqotp7N6ZAgrRZqast5cozX 6MpHTVaTnjwhflUrb8DK3RWZEup7QgVg16SHHYob5nFyIamtscykX/oLT+KZ79qP AIWtG1BpAyaB2njqzUobPFCwR7zoWH3jojnQ3lu/oHkCMWcvkxBFmk1VRrgOfVd6 v0Yw1qRsvmcnWq2mDADP0g/G4DAsoevUxLxM71YKR4Roum5BINEKkOE8UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8NvTSf3LazqXonhmAYAqlQDqqmMB8GA1UdIwQY MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt YzhmOWJlN2QxOWRmLzEvRHcyOU5KX2N0ck9wZWllR1lCZ0NxVkFPcXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYvTMA0G CSqGSIb3DQEBCwUAA4IBAQCKj1HsJ/hO84YERQt+YLVzNOJgnCd8ze3c8DjB2lbt 4ZhHf1+rkwEV3PW8t9u52uOOAQQ2/R5SaPhaNr6eUXwaN9u8JMoCL3Ri+J4VQ0tY XQ2SyKsgM3AY2vwXVpj0O74dowsOnbEjBPAXW3i0wxF7DuiCdpD2M2U7fl2zsefa B60qbSocT1aJW8jNCa5PtvP71/Q+LLEZdQKP/FK70DfePra7HZ0xUhQHHu1NC8dl gOuNB1tS9NTo7QXLJss8RcNmwbNHTyAzHr6mGRVoPgz5ddDjlDv2xmCFY6Uecr8/ XeI54m+O/gmNtrwLOYYcht35hOFik5LVh3Aqh00m3pUY -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:33 2026 by rpki-client