This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/D3SELwEk6ZedlsdN5o7rDTugveU.roa File: D3SELwEk6ZedlsdN5o7rDTugveU.roa (raw, json) Hash identifier: RVH+FoSR9TEAfmeXFHh7UGFigKQlLgt943o0oaUcKAY= Subject key identifier: 0F:74:84:2F:01:24:E9:97:9D:96:C7:4D:E6:8E:EB:0D:3B:A0:BD:E5 Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403 Certificate serial: 019B7DCB623A86DD3551E82F62A67D673212 Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/D3SELwEk6ZedlsdN5o7rDTugveU.roa Signing time: Fri 02 Jan 2026 08:20:39 +0000 ROA not before: Fri 02 Jan 2026 08:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35673 IP address blocks: 82.115.36.0/24 maxlen: 24 194.187.244.0/24 maxlen: 24 194.187.245.0/24 maxlen: 24 194.187.246.0/24 maxlen: 24 194.187.247.0/24 maxlen: 24 2a11:aa80::/48 maxlen: 48 2a11:aa80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:62:3a:86:dd:35:51:e8:2f:62:a6:7d:67:32:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403 Validity Not Before: Jan 2 08:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f74842f0124e9979d96c74de68eeb0d3ba0bde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:a2:98:47:f1:c9:3e:3d:7b:87:7c:6d:b0: 83:0a:ad:57:2c:52:53:73:77:7e:2e:3d:0e:28:56: 68:92:7f:0d:81:16:29:23:52:5e:00:ec:29:7c:fd: b4:90:0a:96:95:6f:59:17:af:5e:90:5b:d3:86:bc: 80:0c:67:ff:3a:9c:da:c5:58:a7:6d:51:be:6a:c5: 50:a0:8b:57:16:41:f9:2d:4b:0c:2a:d5:fe:2a:f8: d5:07:8a:ea:39:dd:c3:45:01:a5:8a:8b:4e:84:c6: 11:0c:1c:c1:d7:72:57:f4:bb:03:4c:fa:4c:cd:b1: e6:5a:85:97:d5:fa:42:f1:90:bc:61:71:1e:95:00: 27:f1:75:b2:9a:a2:d5:b2:22:6c:83:08:82:79:a6: 72:7b:b0:78:95:71:be:c1:b2:1f:f6:35:f0:b8:39: f5:a9:1d:54:f1:8c:8b:9d:fa:88:6c:13:50:42:9c: f0:dc:9f:5b:4a:e4:ed:e6:59:a2:28:95:93:6c:e1: 05:a6:2f:26:ae:a7:a9:6f:b8:70:84:a9:81:a5:f1: 53:d6:a1:79:29:f3:35:07:96:46:cf:bc:6f:7b:b2: 19:00:ab:4b:85:13:64:1a:ce:f3:4f:5a:47:92:f7: e3:47:1e:3e:2b:06:6a:9b:3f:0d:d6:2c:ef:82:09: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:74:84:2F:01:24:E9:97:9D:96:C7:4D:E6:8E:EB:0D:3B:A0:BD:E5 X509v3 Authority Key Identifier: keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/D3SELwEk6ZedlsdN5o7rDTugveU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.36.0/24 194.187.244.0/22 IPv6: 2a11:aa80::/47 Signature Algorithm: sha256WithRSAEncryption 2f:da:a4:9b:9a:fc:62:04:c0:49:9d:d9:7a:98:f7:fd:01:e0: 3e:9b:e0:35:5c:3c:0a:3e:3c:31:04:d0:f4:42:49:fb:a7:d5: da:eb:c8:3f:c3:a9:8e:ec:8f:bb:54:12:70:fd:1d:01:ec:b0: b4:82:9b:83:9f:fb:a1:2b:65:ea:8c:f7:0d:3f:2a:8e:7f:0f: df:55:91:61:e7:04:03:19:2e:63:d1:93:73:b9:79:36:91:ca: b4:bf:a7:88:4f:26:ab:c6:fd:4c:4c:e4:ab:64:60:d8:11:c4: 34:3a:16:7b:fc:aa:df:52:ba:d4:6b:8c:34:ab:b8:52:9d:f5: 66:78:e2:96:06:f3:ab:ce:fb:64:e3:4b:31:52:e0:d4:4c:09: 7d:41:e1:90:fc:c2:94:a7:6f:3b:f8:6f:ea:2c:ce:b7:90:b1: 2a:84:a9:08:4f:fd:be:4d:2f:07:f5:54:c2:18:02:01:66:9b: 4c:bf:17:bd:f5:30:d6:f2:7c:c7:15:56:2b:7b:42:34:4b:36: 53:4c:e1:65:bb:93:8a:45:85:bf:b1:39:2f:e6:da:56:ec:05: dd:2d:fa:c3:f3:06:ff:74:6d:06:dd:f2:1d:32:3b:aa:2c:33: 95:50:0f:48:50:26:52:13:c4:dd:bc:f1:dd:03:a1:d7:4c:69: 58:df:89:d5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9y2I6ht01UegvYqZ9ZzISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ODdiOWNkYTc1NjAzZWIwZDllMzc3MTY3YmY3ZTBjOGU0 NDA0MDMwHhcNMjYwMTAyMDgyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjc0ODQyZjAxMjRlOTk3OWQ5NmM3NGRlNjhlZWIwZDNiYTBiZGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXGimEfxyT49e4d8bbCDCq1XLFJT c3d+Lj0OKFZokn8NgRYpI1JeAOwpfP20kAqWlW9ZF69ekFvThryADGf/OpzaxVin bVG+asVQoItXFkH5LUsMKtX+KvjVB4rqOd3DRQGliotOhMYRDBzB13JX9LsDTPpM zbHmWoWX1fpC8ZC8YXEelQAn8XWymqLVsiJsgwiCeaZye7B4lXG+wbIf9jXwuDn1 qR1U8YyLnfqIbBNQQpzw3J9bSuTt5lmiKJWTbOEFpi8mrqepb7hwhKmBpfFT1qF5 KfM1B5ZGz7xve7IZAKtLhRNkGs7zT1pHkvfjRx4+KwZqmz8N1izvgglPnwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFA90hC8BJOmXnZbHTeaO6w07oL3lMB8GA1UdIwQY MBaAFMWHuc2nVgPrDZ43cWe/fgyORAQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUt ZTc1M2NmNzY4YzE0LzEvRDNTRUx3RWs2WmVkbHNkTjVvN3JEVHVndmVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi81MGQ0OGUtNDk0Zi00ZDE0LTlmMDUtZTc1M2NmNzY4YzE0 LzEveFllNXphZFdBLXNObmpkeFo3OS1ESTVFQkFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAUnMkAwQC wrv0MA8EAgACMAkDBwEqEaqAAAAwDQYJKoZIhvcNAQELBQADggEBAC/apJua/GIE wEmd2XqY9/0B4D6b4DVcPAo+PDEE0PRCSfun1drryD/DqY7sj7tUEnD9HQHssLSC m4Of+6ErZeqM9w0/Ko5/D99VkWHnBAMZLmPRk3O5eTaRyrS/p4hPJqvG/UxM5Ktk YNgRxDQ6Fnv8qt9SutRrjDSruFKd9WZ44pYG86vO+2TjSzFS4NRMCX1B4ZD8wpSn bzv4b+oszreQsSqEqQhP/b5NLwf1VMIYAgFmm0y/F731MNbyfMcVVit7QjRLNlNM 4WW7k4pFhb+xOS/m2lbsBd0t+sPzBv90bQbd8h0yO6osM5VQD0hQJlITxN288d0D oddMaVjfidU= -----END CERTIFICATE-----Generated at Mon Jan 26 22:32:00 2026 by rpki-client