This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/34AOfKbgJV0eeVitxA19IftKXKo.roa File: 34AOfKbgJV0eeVitxA19IftKXKo.roa (raw, json) Hash identifier: NU6imnpnMjlAQflio6rHLunXZRGGMVr0Vah49xBuM9A= Subject key identifier: DF:80:0E:7C:A6:E0:25:5D:1E:79:58:AD:C4:0D:7D:21:FB:4A:5C:AA Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97 Certificate serial: 019B775884FA6D8EF01F68BC3DAD8794BE20 Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/34AOfKbgJV0eeVitxA19IftKXKo.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12989 IP address blocks: 185.142.236.0/24 maxlen: 24 185.142.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:fa:6d:8e:f0:1f:68:bc:3d:ad:87:94:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df800e7ca6e0255d1e7958adc40d7d21fb4a5caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:64:c9:25:f5:19:77:1b:40:43:4a:46:75: 69:0a:ce:7e:59:cc:f2:7e:1a:9f:8e:68:62:8b:d0: 0a:db:95:d0:1f:bc:15:f1:d1:50:c8:50:bd:cb:c2: 1d:d2:79:13:19:a9:6c:80:0b:02:fe:f5:85:48:3a: eb:cb:83:17:40:2d:37:15:26:a3:50:14:c0:54:28: fd:2a:5f:31:e9:ba:3d:37:b6:e1:7e:64:bb:a1:b1: f6:63:b9:da:ba:8c:5e:d7:fa:e4:4c:86:3b:ac:22: 43:74:4b:d6:f4:0d:02:7f:a1:ec:3c:ae:dd:75:a4: a1:03:82:06:6b:45:92:03:77:de:a5:27:58:b7:05: c0:55:3e:55:7e:bb:2a:9e:1e:52:73:0b:60:22:5b: 6b:3d:a2:5c:36:78:3d:35:68:d0:0c:9d:2c:cf:49: 29:48:ee:6b:af:d4:a2:2e:f2:3b:7c:4a:87:0b:8a: 89:56:cc:86:64:43:d5:1f:40:2f:d4:22:97:f9:4b: c8:1a:08:63:e2:49:91:56:cd:9f:83:ba:73:a2:d1: 83:78:66:6a:b0:cd:2d:66:f0:13:4e:75:aa:83:48: a4:d3:2d:8c:1f:85:0c:2b:1b:77:55:6d:24:ee:ea: 05:32:9a:1f:6a:cc:7e:38:c7:5e:e2:03:4a:d5:db: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:80:0E:7C:A6:E0:25:5D:1E:79:58:AD:C4:0D:7D:21:FB:4A:5C:AA X509v3 Authority Key Identifier: keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/34AOfKbgJV0eeVitxA19IftKXKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.236.0/24 185.142.238.0/23 Signature Algorithm: sha256WithRSAEncryption 78:e3:66:e9:84:fd:8d:85:ac:4a:d8:f1:fd:8d:e0:c2:66:06: 8e:2d:a3:9a:83:69:92:7b:bd:06:4c:5c:9f:d3:97:5b:7a:e8: 2c:e3:63:98:1f:c7:24:83:c2:a3:9c:92:de:4e:35:4f:24:99: 6c:2b:b8:f6:7f:bc:41:55:60:17:0f:e9:34:f4:45:a1:a9:80: 14:82:ae:8c:ac:0b:24:a3:34:bb:0c:9e:c4:7d:e0:f6:80:fe: be:b9:cf:f3:da:54:92:bf:91:aa:15:2b:6f:75:9c:49:c5:84: d0:a6:a5:9d:c0:2c:fe:69:98:38:a9:2c:93:84:8c:98:3b:a6: 8e:e5:9a:4d:7f:b0:46:80:63:db:bd:4a:00:7f:44:e4:98:7b: 88:cd:10:f9:bd:8c:48:2e:f7:54:9f:65:7c:31:48:6d:d1:e8: bd:61:b5:d4:c8:1f:db:1d:87:9c:3c:15:66:bf:a8:6d:b3:a8: 14:f7:5f:97:67:4b:99:e9:0a:dc:63:f9:e4:d1:4e:31:11:d0: 2c:5d:e1:86:be:13:e7:6f:d6:8f:e5:14:e2:e5:ea:3b:0f:b0: 9f:81:b6:0b:77:64:aa:a3:c3:8a:a5:20:67:19:4f:66:63:0f: 36:2c:45:99:cc:14:86:cd:16:80:2b:40:db:d7:4e:a3:26:75: eb:32:29:01 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WIT6bY7wH2i8Pa2HlL4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTg0MmU2NzE0NzI1MjUwNWY0MTU1MWYwZjczNWI3Zjcy ZTNlOTcwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjgwMGU3Y2E2ZTAyNTVkMWU3OTU4YWRjNDBkN2QyMWZiNGE1Y2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbxkySX1GXcbQENKRnVpCs5+Wczy fhqfjmhii9AK25XQH7wV8dFQyFC9y8Id0nkTGalsgAsC/vWFSDrry4MXQC03FSaj UBTAVCj9Kl8x6bo9N7bhfmS7obH2Y7nauoxe1/rkTIY7rCJDdEvW9A0Cf6HsPK7d daShA4IGa0WSA3fepSdYtwXAVT5Vfrsqnh5ScwtgIltrPaJcNng9NWjQDJ0sz0kp SO5rr9SiLvI7fEqHC4qJVsyGZEPVH0Av1CKX+UvIGghj4kmRVs2fg7pzotGDeGZq sM0tZvATTnWqg0ik0y2MH4UMKxt3VW0k7uoFMpofasx+OMde4gNK1dvHzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN+ADnym4CVdHnlYrcQNfSH7SlyqMB8GA1UdIwQY MBaAFO+oQuZxRyUlBfQVUfD3Nbf3Lj6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYt OGUwYzMxMjIzZGI4LzEvMzRBT2ZLYmdKVjBlZVZpdHhBMTlJZnRLWEtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lOWM4ZTktYjk1NC00ZDIwLWE0MjYtOGUwYzMxMjIzZGI4 LzEvNzZoQzVuRkhKU1VGOUJWUjhQYzF0X2N1UHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY7sAwQB uY7uMA0GCSqGSIb3DQEBCwUAA4IBAQB442bphP2NhaxK2PH9jeDCZgaOLaOag2mS e70GTFyf05dbeugs42OYH8ckg8KjnJLeTjVPJJlsK7j2f7xBVWAXD+k09EWhqYAU gq6MrAskozS7DJ7EfeD2gP6+uc/z2lSSv5GqFStvdZxJxYTQpqWdwCz+aZg4qSyT hIyYO6aO5ZpNf7BGgGPbvUoAf0TkmHuIzRD5vYxILvdUn2V8MUht0ei9YbXUyB/b HYecPBVmv6hts6gU91+XZ0uZ6QrcY/nk0U4xEdAsXeGGvhPnb9aP5RTi5eo7D7Cf gbYLd2Sqo8OKpSBnGU9mYw82LEWZzBSGzRaAK0Db106jJnXrMikB -----END CERTIFICATE-----Generated at Thu Jan 1 13:47:58 2026 by rpki-client