This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/DNgtSNREU7e38HPDvDfUwURcRwU.roa File: DNgtSNREU7e38HPDvDfUwURcRwU.roa (raw, json) Hash identifier: 2i6FjX7aJLl4QAraJ2mJKm7amhaFw8DzHX5qPNeYmW4= Subject key identifier: 0C:D8:2D:48:D4:44:53:B7:B7:F0:73:C3:BC:37:D4:C1:44:5C:47:05 Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019B7758CFD627E8A6CF5E1907BF2B710921 Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/DNgtSNREU7e38HPDvDfUwURcRwU.roa Signing time: Thu 01 Jan 2026 02:17:47 +0000 ROA not before: Thu 01 Jan 2026 02:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140224 IP address blocks: 185.238.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cf:d6:27:e8:a6:cf:5e:19:07:bf:2b:71:09:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Jan 1 02:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0cd82d48d44453b7b7f073c3bc37d4c1445c4705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:74:46:ec:cb:5f:48:2a:01:43:75:b3:67: 38:96:73:bc:a9:44:67:50:01:60:bf:9b:e5:e4:18: 28:64:eb:cf:60:ad:ad:24:bd:74:94:77:ef:2f:a6: 99:89:e8:ab:96:43:34:32:6d:51:1d:b9:d5:5d:fc: 46:19:55:46:ac:8d:34:97:c0:91:9b:d4:54:c1:9c: c0:62:88:c7:9e:7e:e7:bd:d9:60:2d:88:a5:d3:0c: 40:ee:cd:e5:6d:a1:8a:9c:29:68:1f:fc:6a:a7:3d: 5b:a6:8a:d4:98:69:44:d6:22:a6:f3:0a:20:12:b3: d5:74:05:69:76:50:c3:6b:03:07:f8:b6:4f:9b:f1: e1:a7:25:ed:6e:58:12:e1:3e:21:26:37:0f:ff:ba: 70:5c:9c:2b:14:cf:c9:ca:6f:ae:2c:d6:04:99:c0: ea:79:d3:21:12:e0:8d:ab:56:6f:e5:05:cf:ef:25: c6:7b:1d:2d:62:bb:2e:ce:4d:65:43:a2:6a:9d:3b: 75:b7:14:27:d6:9c:35:d7:20:6d:1a:27:04:81:e5: 72:a4:7d:83:68:d9:3b:ab:da:4f:44:fb:18:d0:97: d4:0d:29:63:44:36:9a:e7:4f:dd:01:ee:4d:9a:80: af:a1:67:33:2f:f5:b9:b8:5d:ef:96:cd:dd:42:27: 74:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:2D:48:D4:44:53:B7:B7:F0:73:C3:BC:37:D4:C1:44:5C:47:05 X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/DNgtSNREU7e38HPDvDfUwURcRwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.212.0/23 Signature Algorithm: sha256WithRSAEncryption 75:dd:b8:4f:53:b9:0b:b4:9e:96:18:bd:c5:ca:06:eb:93:0d: e8:1a:43:3e:d3:d3:70:5a:7d:8e:09:84:14:e5:43:7f:99:cc: 1c:4b:2f:dd:4a:aa:f6:af:be:6d:8a:4c:d0:29:10:2c:95:5d: f2:9e:67:3c:60:c6:99:30:b5:72:95:26:01:55:ea:6e:d1:87: 32:89:0c:29:92:26:63:1d:56:df:6c:ca:c0:cc:e6:9f:cd:ea: 0a:85:7c:4d:23:23:cd:6d:2a:b8:d4:64:9c:2a:0b:f0:8a:bc: f2:5b:dc:de:e0:a0:44:d5:c0:32:1a:ac:25:88:b1:74:e7:3f: e6:7f:a4:37:88:00:ac:08:04:99:e3:e9:4e:53:e7:5f:d4:11: 4f:d7:0f:5b:24:6f:55:3e:59:b6:22:c4:60:d5:a5:57:a6:ed: 2c:11:1f:a2:a9:0e:b9:85:bd:76:df:b3:12:97:4d:2d:1c:cd: c7:0b:e1:30:05:57:c1:e6:be:ef:45:09:0c:c2:e4:4b:5e:0c: f7:ad:8d:3a:0a:5a:35:a8:65:87:07:ee:83:fb:f6:7a:76:a7: 5e:a6:33:84:aa:df:10:4f:75:4c:ac:ae:a2:8d:ff:25:7e:b9: 75:ca:a6:49:97:c5:75:5f:3c:ea:19:d5:23:96:ae:88:12:75: e8:1b:d9:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WM/WJ+imz14ZB78rcQkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2Q4MmQ0OGQ0NDQ1M2I3YjdmMDczYzNiYzM3ZDRjMTQ0NWM0NzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysV0RuzLX0gqAUN1s2c4lnO8qURn UAFgv5vl5BgoZOvPYK2tJL10lHfvL6aZieirlkM0Mm1RHbnVXfxGGVVGrI00l8CR m9RUwZzAYojHnn7nvdlgLYil0wxA7s3lbaGKnCloH/xqpz1bporUmGlE1iKm8wog ErPVdAVpdlDDawMH+LZPm/HhpyXtblgS4T4hJjcP/7pwXJwrFM/Jym+uLNYEmcDq edMhEuCNq1Zv5QXP7yXGex0tYrsuzk1lQ6JqnTt1txQn1pw11yBtGicEgeVypH2D aNk7q9pPRPsY0JfUDSljRDaa50/dAe5NmoCvoWczL/W5uF3vls3dQid0QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzYLUjURFO3t/Bzw7w31MFEXEcFMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEvRE5ndFNOUkVVN2UzOEhQRHZEZlV3VVJjUndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G CSqGSIb3DQEBCwUAA4IBAQB13bhPU7kLtJ6WGL3Fygbrkw3oGkM+09NwWn2OCYQU 5UN/mcwcSy/dSqr2r75tikzQKRAslV3ynmc8YMaZMLVylSYBVepu0YcyiQwpkiZj HVbfbMrAzOafzeoKhXxNIyPNbSq41GScKgvwirzyW9ze4KBE1cAyGqwliLF05z/m f6Q3iACsCASZ4+lOU+df1BFP1w9bJG9VPlm2IsRg1aVXpu0sER+iqQ65hb1237MS l00tHM3HC+EwBVfB5r7vRQkMwuRLXgz3rY06Clo1qGWHB+6D+/Z6dqdepjOEqt8Q T3VMrK6ijf8lfrl1yqZJl8V1XzzqGdUjlq6IEnXoG9nC -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:54 2026 by rpki-client