This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/yCDwwVBWdVeCJB3paV68yEm0bEQ.roa File: yCDwwVBWdVeCJB3paV68yEm0bEQ.roa (raw, json) Hash identifier: jb11BCbq+94ZB4w8Ms7QY8fhTLtofYi5pYcgB+s+Sf0= Subject key identifier: C8:20:F0:C1:50:56:75:57:82:24:1D:E9:69:5E:BC:C8:49:B4:6C:44 Certificate issuer: /CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Certificate serial: 019BF9EA733C26F7FB0CD6953060A5B7652B Authority key identifier: 31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/yCDwwVBWdVeCJB3paV68yEm0bEQ.roa Signing time: Mon 26 Jan 2026 10:47:30 +0000 ROA not before: Mon 26 Jan 2026 10:47:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140224 IP address blocks: 185.238.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.mft rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:ea:73:3c:26:f7:fb:0c:d6:95:30:60:a5:b7:65:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db847d1db1e0b2c2c25502210ff5a719967a19 Validity Not Before: Jan 26 10:47:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c820f0c15056755782241de9695ebcc849b46c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:79:33:74:22:ca:3d:e0:9d:8f:3c:f0:98:bb: 40:4d:a5:ab:4b:40:04:8c:6e:ed:1f:01:5e:b4:9b: 7e:6c:8a:bb:eb:11:54:e3:f1:79:99:de:fd:ee:69: 3e:25:f1:af:d2:21:f0:90:e8:7f:fc:b4:ce:d7:d4: a1:5e:de:2c:86:d3:05:60:c6:f8:97:33:9c:d4:5b: d9:a3:73:3d:5e:86:8c:12:d5:f7:4f:09:07:77:db: 72:74:56:c9:8b:f9:ae:0a:a1:95:85:e2:ca:d1:d0: e7:28:6b:49:b5:72:f4:8b:94:b7:e7:7d:1e:21:f7: 84:c8:44:bc:17:b0:80:f3:3d:21:dd:46:df:16:ad: cb:3d:ec:2d:92:1e:17:30:ba:4d:1b:57:cd:48:35: 89:7f:9a:d8:bb:aa:a8:34:0c:16:dd:32:82:a6:1b: 69:3d:5c:4f:32:39:6e:16:ea:7e:d2:07:11:be:25: fe:c4:20:28:cd:37:0c:e2:5f:38:ce:d4:46:dd:2a: 94:a3:b3:6a:0a:a9:43:66:0f:92:4a:40:4e:80:25: 44:e1:34:42:5c:34:ae:7c:ba:3d:d5:63:19:0f:d3: 3f:28:c3:2f:16:43:c4:a3:84:2e:0c:b5:2b:91:13: 47:d4:96:84:62:40:4e:ad:94:b1:15:47:54:01:7f: f3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:F0:C1:50:56:75:57:82:24:1D:E9:69:5E:BC:C8:49:B4:6C:44 X509v3 Authority Key Identifier: keyid:31:DB:84:7D:1D:B1:E0:B2:C2:C2:55:02:21:0F:F5:A7:19:96:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MduEfR2x4LLCwlUCIQ_1pxmWehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/yCDwwVBWdVeCJB3paV68yEm0bEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3dbd39-5f9f-48fb-9c01-bd6e3b026c37/1/MduEfR2x4LLCwlUCIQ_1pxmWehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.212.0/23 Signature Algorithm: sha256WithRSAEncryption a9:2f:6b:ee:3f:ca:de:3d:26:08:df:08:c6:b9:af:c1:d1:0c: d0:b1:e1:4c:b4:e1:20:1a:8c:99:2b:48:03:d7:ea:dd:ce:6f: 2f:07:38:5a:bf:a9:6b:74:9e:46:46:03:45:46:54:94:22:b7: 72:33:b2:cf:1d:75:9e:fe:4c:79:4b:28:49:de:c0:f7:49:f9: ea:a8:d4:7a:d7:a5:01:a5:0b:dd:48:79:6a:99:50:70:5b:9e: 3c:80:d0:d9:64:81:62:81:73:43:7c:e8:13:d9:e6:a4:a9:63: b8:18:c7:d6:65:73:db:2f:76:5d:23:37:7a:03:95:9d:d0:85: 9c:25:83:7e:0d:b2:2f:1f:d9:93:58:68:a6:77:b5:8e:ac:dc: 85:ac:94:37:0d:c7:e2:19:f4:8f:55:8a:4b:ea:2f:ce:18:fb: 0d:9a:1d:40:3b:c8:3a:0d:72:e7:25:3b:9e:a4:5c:8c:4e:d6: 74:96:c9:c5:2f:3b:a9:12:ba:9b:f1:b0:7c:93:23:f3:40:c5: 4b:ef:f5:9c:bd:d8:4b:37:9c:12:b0:da:97:85:6c:4b:9f:12: 85:35:c0:2e:71:45:e3:0e:95:af:6c:2d:b3:dc:fc:6b:15:34: f2:14:be:f8:73:76:9e:7a:64:ea:13:a3:de:69:6a:f4:d0:10: 28:9c:30:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv56nM8Jvf7DNaVMGClt2UrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGI4NDdkMWRiMWUwYjJjMmMyNTUwMjIxMGZmNWE3MTk5 NjdhMTkwHhcNMjYwMTI2MTA0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODIwZjBjMTUwNTY3NTU3ODIyNDFkZTk2OTVlYmNjODQ5YjQ2YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HkzdCLKPeCdjzzwmLtATaWrS0AE jG7tHwFetJt+bIq76xFU4/F5md797mk+JfGv0iHwkOh//LTO19ShXt4shtMFYMb4 lzOc1FvZo3M9XoaMEtX3TwkHd9tydFbJi/muCqGVheLK0dDnKGtJtXL0i5S3530e IfeEyES8F7CA8z0h3UbfFq3LPewtkh4XMLpNG1fNSDWJf5rYu6qoNAwW3TKCphtp PVxPMjluFup+0gcRviX+xCAozTcM4l84ztRG3SqUo7NqCqlDZg+SSkBOgCVE4TRC XDSufLo91WMZD9M/KMMvFkPEo4QuDLUrkRNH1JaEYkBOrZSxFUdUAX/zGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMgg8MFQVnVXgiQd6WlevMhJtGxEMB8GA1UdIwQY MBaAFDHbhH0dseCywsJVAiEP9acZlnoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEt YmQ2ZTNiMDI2YzM3LzEveUNEd3dWQldkVmVDSkIzcGFWNjh5RW0wYkVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8zZGJkMzktNWY5Zi00OGZiLTljMDEtYmQ2ZTNiMDI2YzM3 LzEvTWR1RWZSMng0TExDd2xVQ0lRXzFweG1XZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue7UMA0G CSqGSIb3DQEBCwUAA4IBAQCpL2vuP8rePSYI3wjGua/B0QzQseFMtOEgGoyZK0gD 1+rdzm8vBzhav6lrdJ5GRgNFRlSUIrdyM7LPHXWe/kx5SyhJ3sD3SfnqqNR616UB pQvdSHlqmVBwW548gNDZZIFigXNDfOgT2eakqWO4GMfWZXPbL3ZdIzd6A5Wd0IWc JYN+DbIvH9mTWGimd7WOrNyFrJQ3DcfiGfSPVYpL6i/OGPsNmh1AO8g6DXLnJTue pFyMTtZ0lsnFLzupErqb8bB8kyPzQMVL7/WcvdhLN5wSsNqXhWxLnxKFNcAucUXj DpWvbC2z3PxrFTTyFL74c3aeemTqE6PeaWr00BAonDCF -----END CERTIFICATE-----Generated at Fri Jan 30 22:20:53 2026 by rpki-client