This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/RD70gI6DbY3Y3IIxRA9flssalPw.roa File: RD70gI6DbY3Y3IIxRA9flssalPw.roa (raw, json) Hash identifier: yJ8sH45Tb62MqvEI7jo74oVGi/WCbsasTNuzFL7GWU0= Subject key identifier: 44:3E:F4:80:8E:83:6D:8D:D8:DC:82:31:44:0F:5F:96:CB:1A:94:FC Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a Certificate serial: 019B7B36D71DDBEB9E98A8C8C18410FCB324 Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/RD70gI6DbY3Y3IIxRA9flssalPw.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 185.226.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d7:1d:db:eb:9e:98:a8:c8:c1:84:10:fc:b3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=443ef4808e836d8dd8dc8231440f5f96cb1a94fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:f1:92:3c:f5:e6:95:83:f1:eb:5a:27:47: a5:9b:9e:fd:e3:bb:a0:5b:24:40:89:70:00:b3:9b: 80:a9:88:76:a2:11:eb:55:ee:a9:00:2d:b1:33:fd: b2:5e:cd:3e:58:59:ba:bb:1c:dc:24:be:a9:96:4a: 72:c5:c1:ab:54:66:8a:27:4d:02:a9:76:86:e5:44: 36:50:07:ba:6c:81:c4:72:48:2e:66:98:fb:4b:21: db:4c:fd:3b:89:36:97:63:96:9e:5f:2f:4a:31:6c: d7:d6:fa:11:bc:18:53:28:03:2d:80:df:9f:c5:44: 78:31:ae:e0:bf:d9:b4:09:f2:1e:f2:5d:2a:f4:f1: 8a:93:7b:5c:94:b9:72:d3:9c:47:98:3e:a0:2f:0e: 4e:85:87:f9:0b:94:be:29:d6:b4:bd:62:5c:7a:b1: 91:39:49:e2:39:03:c6:a7:8e:4c:88:e0:2d:ec:a5: c0:1e:68:63:8c:ca:97:a0:8a:d1:32:d2:1e:e4:95: ed:45:8a:fc:00:f4:8c:29:ff:c7:07:12:91:88:1b: ae:3e:1b:f1:5f:d0:74:80:2e:43:04:29:59:45:8c: bf:bc:5f:fc:9a:07:2a:32:e3:10:cd:d6:de:c5:1f: bb:c9:86:f8:67:06:e6:b2:f9:b7:72:74:43:31:07: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3E:F4:80:8E:83:6D:8D:D8:DC:82:31:44:0F:5F:96:CB:1A:94:FC X509v3 Authority Key Identifier: keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/RD70gI6DbY3Y3IIxRA9flssalPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.242.0/24 Signature Algorithm: sha256WithRSAEncryption 88:b0:72:e5:c9:55:b7:cd:63:13:4d:d4:0f:50:44:a2:7c:a3: cb:ba:c4:c4:dc:0f:70:0d:22:ec:a7:f1:99:88:cc:43:f5:18: c6:f9:7f:e1:b3:ad:ce:e4:a8:16:b1:aa:37:35:65:c2:89:75: 75:79:43:65:cd:88:4d:36:99:ff:04:94:e1:14:1e:b3:b3:31: 8f:b0:08:15:01:a1:22:72:63:e5:2b:38:cf:b3:7d:c9:76:da: f0:0a:b9:4e:66:bc:d8:d2:7e:42:6c:bb:44:a9:2d:c6:93:72: 4c:06:77:33:86:78:39:09:31:c4:f6:86:74:9d:9a:52:6b:b2: a5:6c:e7:b1:ad:21:57:d1:26:e6:fc:5e:89:69:5d:bd:90:71: a9:44:6b:5f:53:57:bf:16:36:21:33:93:4e:0c:8f:a8:a2:83: e5:cf:2c:05:a1:97:c2:d3:a3:e9:6e:47:8c:db:05:b6:57:a9: 6d:70:4c:df:d8:7a:10:2a:65:87:7d:ea:68:b9:9e:b2:91:b0: 4a:2b:c2:91:4f:08:47:01:17:b2:28:d2:fb:74:9d:c4:a5:89: 01:ea:7f:c3:f0:4e:32:16:94:dd:23:27:f4:c6:63:53:16:31: e7:ae:1d:a2:7c:ae:32:03:d1:70:23:34:43:c8:d2:1f:81:52: 23:c3:fc:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ntcd2+uemKjIwYQQ/LMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy OTU1NGEwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDNlZjQ4MDhlODM2ZDhkZDhkYzgyMzE0NDBmNWY5NmNiMWE5NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3v/xkjz15pWD8etaJ0elm57947ug WyRAiXAAs5uAqYh2ohHrVe6pAC2xM/2yXs0+WFm6uxzcJL6plkpyxcGrVGaKJ00C qXaG5UQ2UAe6bIHEckguZpj7SyHbTP07iTaXY5aeXy9KMWzX1voRvBhTKAMtgN+f xUR4Ma7gv9m0CfIe8l0q9PGKk3tclLly05xHmD6gLw5OhYf5C5S+Kda0vWJcerGR OUniOQPGp45MiOAt7KXAHmhjjMqXoIrRMtIe5JXtRYr8APSMKf/HBxKRiBuuPhvx X9B0gC5DBClZRYy/vF/8mgcqMuMQzdbexR+7yYb4Zwbmsvm3cnRDMQckWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQ+9ICOg22N2NyCMUQPX5bLGpT8MB8GA1UdIwQY MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct ZjczNWUzZGFmZDUzLzEvUkQ3MGdJNkRiWTNZM0lJeFJBOWZsc3NhbFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueLyMA0G CSqGSIb3DQEBCwUAA4IBAQCIsHLlyVW3zWMTTdQPUESifKPLusTE3A9wDSLsp/GZ iMxD9RjG+X/hs63O5KgWsao3NWXCiXV1eUNlzYhNNpn/BJThFB6zszGPsAgVAaEi cmPlKzjPs33JdtrwCrlOZrzY0n5CbLtEqS3Gk3JMBnczhng5CTHE9oZ0nZpSa7Kl bOexrSFX0Sbm/F6JaV29kHGpRGtfU1e/FjYhM5NODI+oooPlzywFoZfC06PpbkeM 2wW2V6ltcEzf2HoQKmWHfepouZ6ykbBKK8KRTwhHAReyKNL7dJ3EpYkB6n/D8E4y FpTdIyf0xmNTFjHnrh2ifK4yA9FwIzRDyNIfgVIjw/yY -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:53 2026 by rpki-client