This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/cdbequdWz-xAkJleNGiLDk_Jz3M.roa File: cdbequdWz-xAkJleNGiLDk_Jz3M.roa (raw, json) Hash identifier: HI+pTuLCHVDyiJQKC1oiE5CPWcrcJlPJsbkgYVNmobE= Subject key identifier: 71:D6:DE:AA:E7:56:CF:EC:40:90:99:5E:34:68:8B:0E:4F:C9:CF:73 Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c Certificate serial: 019B7AC7D7669375EA150E3D7B6A123A8407 Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/cdbequdWz-xAkJleNGiLDk_Jz3M.roa Signing time: Thu 01 Jan 2026 18:17:55 +0000 ROA not before: Thu 01 Jan 2026 18:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35132 IP address blocks: 185.165.196.0/22 maxlen: 22 2a0a:2200::/29 maxlen: 29 2a0a:2200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d7:66:93:75:ea:15:0e:3d:7b:6a:12:3a:84:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887e81ba84344598c61462833aadf3204eae087c Validity Not Before: Jan 1 18:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d6deaae756cfec4090995e34688b0e4fc9cf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:c0:7e:9a:6d:10:76:c9:d4:14:e1:e1:6e: 43:50:91:94:31:e6:40:a7:3f:80:83:d2:6f:f3:5a: 4a:97:35:93:05:d4:78:83:02:e4:91:27:0d:f0:4e: 5d:8a:ab:83:68:bd:29:1d:c0:84:8a:c0:04:83:03: e5:8a:b1:bb:79:7e:44:88:38:19:15:9b:7f:2c:c0: 77:e6:82:1b:30:b2:92:3a:e3:76:07:30:8b:dc:b4: e5:10:55:7f:7e:a7:79:99:7d:9f:d6:d3:ab:01:dd: 48:f2:b3:88:61:3e:2a:36:db:55:76:91:04:17:be: 8e:f7:27:4d:4a:cb:20:b9:1f:70:21:68:d6:01:c6: 2b:a4:f0:7d:e4:48:b6:98:d2:96:ac:b8:ad:d0:0e: 1e:3e:17:01:69:7a:94:17:f5:28:e4:03:f7:91:99: 72:08:86:8a:f2:cc:a1:50:c0:d0:58:2b:51:51:99: 22:f9:8d:9f:67:b4:26:ef:33:21:25:26:f0:f6:15: ab:a1:49:58:dd:b3:20:e8:f3:e6:5e:45:dd:72:c9: 75:d4:ef:17:ad:4d:8e:c1:cc:7d:f4:29:b3:8e:f1: a4:1d:23:75:d2:aa:31:64:a0:b7:80:67:94:b8:52: df:a3:33:25:60:be:a8:56:23:5b:68:48:fc:bc:3b: 28:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D6:DE:AA:E7:56:CF:EC:40:90:99:5E:34:68:8B:0E:4F:C9:CF:73 X509v3 Authority Key Identifier: keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/cdbequdWz-xAkJleNGiLDk_Jz3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.196.0/22 IPv6: 2a0a:2200::/29 Signature Algorithm: sha256WithRSAEncryption 0f:03:99:59:30:a9:75:96:26:42:76:bd:07:12:4b:03:de:4c: 5d:73:88:4d:b5:5c:bd:ea:08:ee:3c:83:4d:ca:91:b8:30:e6: 8e:f1:35:7e:c9:49:32:1e:79:4f:35:ff:3b:00:e9:aa:9f:71: e0:59:2c:0e:1f:30:c3:8b:30:aa:b6:df:1b:db:49:c0:eb:a2: 19:dc:e7:7d:73:eb:01:b1:32:8b:30:fc:5a:55:db:a2:a1:1e: a8:09:6c:37:58:40:41:6b:ee:c0:a2:37:2b:33:83:35:54:5c: e3:91:93:64:2e:5b:ff:25:24:c3:bc:71:e9:02:30:85:36:1e: 2f:07:02:6c:24:34:a2:55:0a:c2:29:d1:8d:7e:48:5b:31:0a: 7b:a2:8d:7e:65:46:9b:9b:3d:36:0e:e5:6b:d4:9b:9a:3b:47: 33:d7:eb:8e:db:6d:94:d5:00:4f:46:ca:b4:a2:5a:9a:ab:f4: 37:53:a6:e7:fc:1d:d4:2c:58:44:25:b3:b8:f3:68:07:20:57: fd:3e:38:66:0e:d5:d1:11:cf:40:3d:c9:e9:62:13:83:18:2c: 4c:b4:fb:6c:76:84:32:7c:f8:70:18:10:3d:0b:fe:93:a6:ec: 65:a4:5a:c4:f5:5b:e1:3d:79:35:a8:75:07:98:29:c3:94:99: 97:c9:09:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x9dmk3XqFQ49e2oSOoQHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh ZTA4N2MwHhcNMjYwMTAxMTgxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQ2ZGVhYWU3NTZjZmVjNDA5MDk5NWUzNDY4OGIwZTRmYzljZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbfAfpptEHbJ1BTh4W5DUJGUMeZA pz+Ag9Jv81pKlzWTBdR4gwLkkScN8E5diquDaL0pHcCEisAEgwPlirG7eX5EiDgZ FZt/LMB35oIbMLKSOuN2BzCL3LTlEFV/fqd5mX2f1tOrAd1I8rOIYT4qNttVdpEE F76O9ydNSssguR9wIWjWAcYrpPB95Ei2mNKWrLit0A4ePhcBaXqUF/Uo5AP3kZly CIaK8syhUMDQWCtRUZki+Y2fZ7Qm7zMhJSbw9hWroUlY3bMg6PPmXkXdcsl11O8X rU2Owcx99CmzjvGkHSN10qoxZKC3gGeUuFLfozMlYL6oViNbaEj8vDsoowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHHW3qrnVs/sQJCZXjRoiw5Pyc9zMB8GA1UdIwQY MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt ZTAxNjI0MDFmZjdhLzEvY2RiZXF1ZFd6LXhBa0psZU5HaUxEa19KejNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaXEMA0E AgACMAcDBQMqCiIAMA0GCSqGSIb3DQEBCwUAA4IBAQAPA5lZMKl1liZCdr0HEksD 3kxdc4hNtVy96gjuPINNypG4MOaO8TV+yUkyHnlPNf87AOmqn3HgWSwOHzDDizCq tt8b20nA66IZ3Od9c+sBsTKLMPxaVduioR6oCWw3WEBBa+7AojcrM4M1VFzjkZNk Llv/JSTDvHHpAjCFNh4vBwJsJDSiVQrCKdGNfkhbMQp7oo1+ZUabmz02DuVr1Jua O0cz1+uO222U1QBPRsq0olqaq/Q3U6bn/B3ULFhEJbO482gHIFf9PjhmDtXREc9A PcnpYhODGCxMtPtsdoQyfPhwGBA9C/6TpuxlpFrE9VvhPXk1qHUHmCnDlJmXyQmh -----END CERTIFICATE-----Generated at Sun Jan 18 19:21:41 2026 by rpki-client