This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa File: PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa (raw, json) Hash identifier: YWw0xEJYfH26bXcOtAt0QTYng83/pphUu49fNcxHt/0= Subject key identifier: 3D:D0:90:B4:5A:35:31:97:58:B1:AF:97:EB:1F:F2:09:E4:0F:ED:63 Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1 Certificate serial: 019B7C125E5D70AE3EF63C7A5B0FF5E752C6 Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa Signing time: Fri 02 Jan 2026 00:18:57 +0000 ROA not before: Fri 02 Jan 2026 00:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202604 IP address blocks: 185.159.96.0/22 maxlen: 23 2a07:b380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 03:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:5e:5d:70:ae:3e:f6:3c:7a:5b:0f:f5:e7:52:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dd090b45a35319758b1af97eb1ff209e40fed63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:cf:8e:56:4b:e0:49:64:06:e6:d3:88:e7: 87:f2:48:d6:4c:64:32:03:ef:0b:54:4c:81:ac:90: 93:c2:14:de:3e:c9:26:c2:fa:e1:52:34:82:5b:fe: 76:a0:af:54:7b:5f:4f:12:d3:ce:e1:d2:d6:38:2f: f1:70:2f:79:c0:b4:78:1e:bd:36:2e:b7:8d:3e:95: 9d:63:01:fd:58:d8:f4:a9:c4:ab:98:59:62:13:8e: a1:41:7b:6d:a4:d8:7a:a9:0d:77:44:bb:0b:d4:73: a0:59:06:9e:fc:48:09:bc:51:de:16:7a:33:76:9b: 3b:19:f2:4f:da:af:9f:c5:42:de:47:86:85:fa:cb: d3:97:f4:57:34:61:ff:97:95:dc:af:07:13:7d:ff: 22:37:35:22:f6:95:64:0b:99:68:61:8e:d9:31:58: c4:6c:5f:2b:fb:9a:21:d0:3f:b1:2e:0f:ef:fd:6b: c7:1a:14:54:a0:e5:9d:65:99:7d:bd:ec:8d:97:72: e7:77:f5:f2:00:9c:2a:f8:d1:89:b7:81:14:23:a0: a2:18:1c:55:d9:58:f3:90:be:b8:ce:22:c1:aa:e4: ed:2e:9f:7d:49:94:f8:d3:f6:c3:9c:43:81:e7:e9: 8a:0d:53:b9:35:b2:a0:83:e5:f6:b1:ec:98:82:e3: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D0:90:B4:5A:35:31:97:58:B1:AF:97:EB:1F:F2:09:E4:0F:ED:63 X509v3 Authority Key Identifier: keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.96.0/22 IPv6: 2a07:b380::/29 Signature Algorithm: sha256WithRSAEncryption 64:da:21:d2:67:e0:6a:e2:a2:a6:f2:6f:3b:fc:63:4b:78:84: f0:c0:ec:74:fb:06:42:ef:1b:b6:28:27:11:ca:3f:23:47:a2: c4:af:07:c3:5b:20:60:e8:2a:9e:c4:1d:ed:59:94:1d:e5:e7: eb:e0:41:bf:1c:b7:1d:ab:9c:42:33:82:44:72:cd:e4:40:17: b2:80:f6:64:1c:7d:d1:32:66:db:7e:58:54:28:57:e1:3b:a2: 24:78:d0:f0:61:26:46:be:b8:82:8d:62:4e:b0:b2:0c:bc:07: 36:2e:ad:07:5e:3e:9e:94:8c:38:f4:72:8b:64:71:7e:a5:61: 1e:d8:c4:54:56:97:9e:26:5c:21:1f:4b:87:8f:6a:de:74:5b: 32:84:49:bf:18:65:a1:67:fd:3a:2a:4d:28:22:81:93:e4:40: 16:a7:28:ba:f1:5e:fe:f4:62:85:9a:b1:ed:49:74:82:c5:9c: 98:de:78:ec:e2:f6:91:ba:5f:89:bf:b1:da:58:6c:a5:0e:09: bf:96:11:35:63:99:04:bb:31:1f:ee:89:fb:5e:31:c6:71:cd: 7c:56:ef:c2:c8:b1:98:5e:88:80:f8:85:1b:f0:cb:e3:84:7a: 88:4c:26:42:5e:3f:17:e0:62:6f:f6:0c:12:1c:f9:9a:5e:23: 7f:1f:19:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8El5dcK4+9jx6Ww/151LGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTI3MWYwZTE1ODdjMTQ0MzRmMjQ4MGY5MTQxMDE4NTUw N2NmYTEwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQwOTBiNDVhMzUzMTk3NThiMWFmOTdlYjFmZjIwOWU0MGZlZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaXPjlZL4ElkBubTiOeH8kjWTGQy A+8LVEyBrJCTwhTePskmwvrhUjSCW/52oK9Ue19PEtPO4dLWOC/xcC95wLR4Hr02 LreNPpWdYwH9WNj0qcSrmFliE46hQXttpNh6qQ13RLsL1HOgWQae/EgJvFHeFnoz dps7GfJP2q+fxULeR4aF+svTl/RXNGH/l5XcrwcTff8iNzUi9pVkC5loYY7ZMVjE bF8r+5oh0D+xLg/v/WvHGhRUoOWdZZl9veyNl3Lnd/XyAJwq+NGJt4EUI6CiGBxV 2VjzkL64ziLBquTtLp99SZT40/bDnEOB5+mKDVO5NbKgg+X2seyYguO0/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD3QkLRaNTGXWLGvl+sf8gnkD+1jMB8GA1UdIwQY MBaAFL5ScfDhWHwUQ08kgPkUEBhVB8+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEt NGQ2ZDEyNTZiZjliLzEvUGRDUXRGbzFNWmRZc2EtWDZ4X3lDZVFQN1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny83NmRiYTAtZDg2Yi00ZDg0LWIxNWEtNGQ2ZDEyNTZiZjli LzEvdmxKeDhPRllmQlJEVHlTQS1SUVFHRlVIejZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZ9gMA0E AgACMAcDBQMqB7OAMA0GCSqGSIb3DQEBCwUAA4IBAQBk2iHSZ+Bq4qKm8m87/GNL eITwwOx0+wZC7xu2KCcRyj8jR6LErwfDWyBg6CqexB3tWZQd5efr4EG/HLcdq5xC M4JEcs3kQBeygPZkHH3RMmbbflhUKFfhO6IkeNDwYSZGvriCjWJOsLIMvAc2Lq0H Xj6elIw49HKLZHF+pWEe2MRUVpeeJlwhH0uHj2redFsyhEm/GGWhZ/06Kk0oIoGT 5EAWpyi68V7+9GKFmrHtSXSCxZyY3njs4vaRul+Jv7HaWGylDgm/lhE1Y5kEuzEf 7on7XjHGcc18Vu/CyLGYXoiA+IUb8MvjhHqITCZCXj8X4GJv9gwSHPmaXiN/Hxl8 -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:27 2026 by rpki-client