This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/ddjD16rm4JILTdAjj-sSBzq-X1k.roa File: ddjD16rm4JILTdAjj-sSBzq-X1k.roa (raw, json) Hash identifier: L1W0Os3qTK0wbx8L6WCdIflXsRPDUvdKdtqZMMyv5RY= Subject key identifier: 75:D8:C3:D7:AA:E6:E0:92:0B:4D:D0:23:8F:EB:12:07:3A:BE:5F:59 Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Certificate serial: 019B7A5B1665C13F768627ABA95B0B2FAFE1 Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/ddjD16rm4JILTdAjj-sSBzq-X1k.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60087 IP address blocks: 46.252.144.0/20 maxlen: 24 81.28.8.0/22 maxlen: 24 86.107.96.0/22 maxlen: 24 89.40.172.0/22 maxlen: 24 185.19.208.0/22 maxlen: 24 185.31.64.0/22 maxlen: 24 2a03:a500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:65:c1:3f:76:86:27:ab:a9:5b:0b:2f:af:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d8c3d7aae6e0920b4dd0238feb12073abe5f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5a:a8:55:de:44:2a:f0:8e:cb:74:a9:b1:16: b2:d6:2d:f7:18:5a:5d:54:93:ac:31:0e:5d:b8:2d: f9:a7:88:e2:77:5a:b7:52:09:0e:a8:de:8d:45:88: 7f:fd:52:79:5e:78:1c:f7:4d:7d:84:7a:55:86:11: 72:0c:2e:a7:65:fb:05:65:94:9e:e2:93:e4:90:68: 3d:3c:46:bf:c8:27:ea:2c:79:5d:93:0c:64:00:48: 26:a7:bf:0b:1a:34:1f:75:dc:cf:a0:7c:aa:54:f9: 13:c4:23:18:57:a7:f9:40:cb:5a:3e:4e:66:e2:0e: 91:32:18:1e:d4:a5:c0:50:e1:b4:19:b3:e8:9b:47: e1:ad:78:03:76:43:6e:61:40:4f:42:51:03:85:1e: 35:b1:e6:51:54:bc:ce:9a:32:b1:20:38:fc:cd:a8: fa:b8:88:ac:b6:c0:e3:32:53:0d:db:62:0d:9e:6a: 9c:7d:93:86:48:27:cf:88:4f:f6:42:be:b4:d4:eb: 49:bc:b5:8d:9e:71:e2:1f:ca:89:82:cd:07:3e:0b: 0a:42:b0:67:01:73:22:98:2a:89:77:37:51:4d:72: 68:ce:a5:db:e1:90:80:1c:4c:9d:66:b3:8c:d9:d7: fa:6d:15:f2:ef:69:fc:3b:b0:8c:9f:32:d7:93:30: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D8:C3:D7:AA:E6:E0:92:0B:4D:D0:23:8F:EB:12:07:3A:BE:5F:59 X509v3 Authority Key Identifier: keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/ddjD16rm4JILTdAjj-sSBzq-X1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.144.0/20 81.28.8.0/22 86.107.96.0/22 89.40.172.0/22 185.19.208.0/22 185.31.64.0/22 IPv6: 2a03:a500::/32 Signature Algorithm: sha256WithRSAEncryption 4b:82:3e:99:0f:f1:40:7e:71:7b:45:d4:81:0b:0c:72:66:79: 8c:99:07:f0:e9:1a:8b:04:e5:b0:f6:e8:16:5f:ca:f0:e1:65: e8:20:a5:8a:42:ba:2a:c8:42:76:16:d0:0a:62:c6:a1:37:0c: 8e:c4:fd:77:38:f0:2e:d7:cc:b5:d4:72:a7:4a:6d:a4:0c:f7: c4:d3:79:38:11:ec:a3:c7:7d:44:50:cd:08:de:ca:8b:1f:02: 03:4f:c3:4a:86:94:3b:70:bd:bc:e6:79:52:c6:46:8c:c6:a4: 19:d0:0d:30:02:19:72:3a:3c:e8:94:80:b8:c8:2d:4c:dc:8e: 2f:7f:02:e9:7b:3c:55:2b:95:3a:5c:e3:b0:4e:66:7d:3b:cd: 98:e4:c7:2f:ff:73:d6:fd:4b:27:27:9e:a9:48:84:99:4a:66: ec:e3:c7:2d:3f:5d:e8:64:4f:bf:31:f0:cb:fc:82:bc:d9:17: cc:a4:b4:dc:9c:f6:c8:81:5f:1c:e2:24:3d:e5:46:28:40:cb: 2b:95:73:81:1b:f8:51:c4:ca:87:fa:ec:a7:c8:8c:fd:a1:62: 96:8d:76:32:51:c3:63:b9:9b:93:d7:1d:5d:c8:eb:27:be:16: 2d:b4:13:fc:9c:b2:91:84:5a:05:bc:16:de:7e:2b:08:22:a0: 5f:b1:09:96 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt6WxZlwT92hierqVsLL6/hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMmViYmJjYmUxYmY2MzQ2ZWQ0NzZiODNjN2UxM2E3ODQ0 MTdhY2QwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQ4YzNkN2FhZTZlMDkyMGI0ZGQwMjM4ZmViMTIwNzNhYmU1ZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVqoVd5EKvCOy3SpsRay1i33GFpd VJOsMQ5duC35p4jid1q3UgkOqN6NRYh//VJ5Xngc9019hHpVhhFyDC6nZfsFZZSe 4pPkkGg9PEa/yCfqLHldkwxkAEgmp78LGjQfddzPoHyqVPkTxCMYV6f5QMtaPk5m 4g6RMhge1KXAUOG0GbPom0fhrXgDdkNuYUBPQlEDhR41seZRVLzOmjKxIDj8zaj6 uIistsDjMlMN22INnmqcfZOGSCfPiE/2Qr601OtJvLWNnnHiH8qJgs0HPgsKQrBn AXMimCqJdzdRTXJozqXb4ZCAHEydZrOM2df6bRXy72n8O7CMnzLXkzCIswIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFHXYw9eq5uCSC03QI4/rEgc6vl9ZMB8GA1UdIwQY MBaAFJouu7y+G/Y0btR2uDx+E6eEQXrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEt NDRlMjE5YTllOTZlLzEvZGRqRDE2cm00SklMVGRBamotc1NCenEtWDFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8xYTFjYmUtMjE3ZC00MzRiLWFkYTEtNDRlMjE5YTllOTZl LzEvbWk2N3ZMNGI5alJ1MUhhNFBINFRwNFJCZXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQELvyQAwQC URwIAwQCVmtgAwQCWSisAwQCuRPQAwQCuR9AMA0EAgACMAcDBQAqA6UAMA0GCSqG SIb3DQEBCwUAA4IBAQBLgj6ZD/FAfnF7RdSBCwxyZnmMmQfw6RqLBOWw9ugWX8rw 4WXoIKWKQroqyEJ2FtAKYsahNwyOxP13OPAu18y11HKnSm2kDPfE03k4Eeyjx31E UM0I3sqLHwIDT8NKhpQ7cL285nlSxkaMxqQZ0A0wAhlyOjzolIC4yC1M3I4vfwLp ezxVK5U6XOOwTmZ9O82Y5Mcv/3PW/UsnJ56pSISZSmbs48ctP13oZE+/MfDL/IK8 2RfMpLTcnPbIgV8c4iQ95UYoQMsrlXOBG/hRxMqH+uynyIz9oWKWjXYyUcNjuZuT 1x1dyOsnvhYttBP8nLKRhFoFvBbefisIIqBfsQmW -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:29 2026 by rpki-client