This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa File: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (raw, json) Hash identifier: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs= Subject key identifier: 00:3A:58:D1:12:C3:0A:99:24:1E:D8:8A:3D:13:4E:BC:85:93:73:CA Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311 Certificate serial: 019B77C6F2DA4218ADA86EB277FC71248263 Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa Signing time: Thu 01 Jan 2026 04:18:05 +0000 ROA not before: Thu 01 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 188.92.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f2:da:42:18:ad:a8:6e:b2:77:fc:71:24:82:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311 Validity Not Before: Jan 1 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=003a58d112c30a99241ed88a3d134ebc859373ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:6f:51:f4:4f:58:dc:e7:5e:dc:c2:93:4f: 29:45:72:13:24:c7:ed:8d:9b:55:5c:c9:8e:01:4c: 34:0f:8c:bc:18:6c:82:8a:da:e3:ff:d9:0d:b6:b4: 2d:7a:ce:41:71:47:a7:63:1f:e7:11:89:b8:9e:da: 5d:7d:f2:12:5c:ba:ff:4f:bf:db:02:41:b1:83:a3: fb:6b:c0:32:50:bd:b3:82:1c:89:72:18:f0:65:f1: 39:b5:15:c7:6a:bf:97:bb:6a:0f:7e:0c:e3:e0:ce: 37:98:41:53:55:8c:38:e1:d2:2f:30:8d:8b:28:0a: fe:e8:c9:19:72:6b:fd:5e:d1:04:1d:4a:0e:4a:94: ee:5b:bc:e3:b3:ec:e7:50:a5:d2:b5:a0:06:d9:2f: c7:45:dc:7c:26:e7:58:ca:48:ee:58:24:52:4d:27: f6:e6:d5:0e:aa:c1:5a:ff:7f:38:a7:83:5a:7f:2b: 6e:e8:c7:26:5a:ee:40:15:f8:fb:df:4c:f3:f4:ca: 66:a5:48:9f:c2:f6:10:eb:24:9c:aa:0a:5c:bc:f5: f5:05:f9:1a:ef:5e:9a:34:ed:9d:b6:1f:56:25:df: 1e:10:4d:5f:4b:7a:98:29:d5:09:74:3f:ce:2f:8b: de:9a:42:9b:17:1a:73:3b:48:31:9f:a7:e2:09:b1: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3A:58:D1:12:C3:0A:99:24:1E:D8:8A:3D:13:4E:BC:85:93:73:CA X509v3 Authority Key Identifier: keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.120.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:2b:b4:2f:81:61:ca:a3:3a:a3:ac:36:f9:8c:50:fc:dd:df: 33:0f:a3:de:e3:9d:b2:d0:49:b1:a1:79:db:91:0c:09:17:c9: 26:5c:92:97:48:27:78:fb:9f:c5:79:fb:f4:5a:41:76:87:7f: a4:ba:3d:00:91:69:a5:8f:d6:e2:ec:80:2f:ef:e9:0d:1c:11: 51:1b:f7:36:98:31:9c:a5:58:9c:40:46:96:f5:9f:fc:66:29: 2c:72:7f:6a:22:2b:e3:88:5b:98:bb:49:e4:85:80:52:79:6d: 14:9d:2f:89:ed:6c:58:14:d3:c1:26:17:7e:9f:ce:2e:a2:d8: d8:7a:2a:5b:7e:88:48:0a:46:b6:e7:97:12:ed:fb:2c:8c:59: a7:e4:87:10:6e:b2:b7:57:26:45:31:9d:19:22:d5:bc:7f:1a: 38:b3:8d:d4:b0:1f:36:82:b7:0f:d3:91:cd:29:b5:0c:fe:da: 80:7d:97:ef:fd:cd:39:f5:c0:ff:c6:ef:df:dc:50:0a:dc:87: c0:23:37:e9:3d:56:52:fc:e7:6a:5b:a5:9c:de:20:82:e3:8f: 88:37:22:e8:3b:28:0b:18:25:53:2d:cf:8d:80:31:0c:dc:25: 03:57:d5:cf:4e:47:62:64:9f:07:5f:f5:0c:1e:12:cd:09:2a: 13:c1:40:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvLaQhitqG6yd/xxJIJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiODcwMzNmYzZhODdkM2I4ZDBjYjNjZTFhYjJiYWJiZTUy YmEzMTEwHhcNMjYwMTAxMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDNhNThkMTEyYzMwYTk5MjQxZWQ4OGEzZDEzNGViYzg1OTM3M2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rlvUfRPWNznXtzCk08pRXITJMft jZtVXMmOAUw0D4y8GGyCitrj/9kNtrQtes5BcUenYx/nEYm4ntpdffISXLr/T7/b AkGxg6P7a8AyUL2zghyJchjwZfE5tRXHar+Xu2oPfgzj4M43mEFTVYw44dIvMI2L KAr+6MkZcmv9XtEEHUoOSpTuW7zjs+znUKXStaAG2S/HRdx8JudYykjuWCRSTSf2 5tUOqsFa/384p4Nafytu6McmWu5AFfj730zz9MpmpUifwvYQ6yScqgpcvPX1Bfka 716aNO2dth9WJd8eEE1fS3qYKdUJdD/OL4vemkKbFxpzO0gxn6fiCbEnDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAA6WNESwwqZJB7Yij0TTryFk3PKMB8GA1UdIwQY MBaAFEuHAz/GqH07jQyzzhqyurvlK6MRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUt YTc3OGEwYzE0ODU5LzEvQURwWTBSTERDcGtrSHRpS1BSTk92SVdUYzhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZGZiY2YtMzEzYi00N2I5LWJmOGUtYTc3OGEwYzE0ODU5 LzEvUzRjRFA4YW9mVHVORExQT0dySzZ1LVVyb3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvFx4MA0G CSqGSIb3DQEBCwUAA4IBAQB6K7QvgWHKozqjrDb5jFD83d8zD6Pe452y0EmxoXnb kQwJF8kmXJKXSCd4+5/Fefv0WkF2h3+kuj0AkWmlj9bi7IAv7+kNHBFRG/c2mDGc pVicQEaW9Z/8Zikscn9qIivjiFuYu0nkhYBSeW0UnS+J7WxYFNPBJhd+n84uotjY eipbfohICka255cS7fssjFmn5IcQbrK3VyZFMZ0ZItW8fxo4s43UsB82grcP05HN KbUM/tqAfZfv/c059cD/xu/f3FAK3IfAIzfpPVZS/OdqW6Wc3iCC44+INyLoOygL GCVTLc+NgDEM3CUDV9XPTkdiZJ8HX/UMHhLNCSoTwUA4 -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:36 2026 by rpki-client