This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pAQchKKTZ4o4JXmnXdjRkOx4TPs.roa File: pAQchKKTZ4o4JXmnXdjRkOx4TPs.roa (raw, json) Hash identifier: fw9adc6OhytxqXH4xBTufbJ1PnGOzQ50KDanEKWKyjo= Subject key identifier: A4:04:1C:84:A2:93:67:8A:38:25:79:A7:5D:D8:D1:90:EC:78:4C:FB Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D38CEC97370170B43D4C0FEE86274 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pAQchKKTZ4o4JXmnXdjRkOx4TPs.roa Signing time: Fri 02 Jan 2026 06:20:19 +0000 ROA not before: Fri 02 Jan 2026 06:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32002 IP address blocks: 185.165.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:38:ce:c9:73:70:17:0b:43:d4:c0:fe:e8:62:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4041c84a293678a382579a75dd8d190ec784cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:38:d4:9d:54:29:5e:a6:b0:f5:35:d6:c8: 89:65:11:1a:ee:fd:6b:63:75:74:f2:29:5b:32:5b: 23:e9:46:5a:fd:47:70:68:21:11:5a:0a:b1:c3:32: 3f:36:65:04:38:52:ff:4f:a1:2f:3f:10:e5:5d:91: 98:9f:99:97:e2:15:e9:bf:5d:bc:5c:93:9e:5b:02: b7:73:e2:29:ad:4c:09:4e:fb:d8:4e:23:24:74:d1: 20:e3:2c:3c:95:c2:12:46:2c:c9:09:87:e4:86:ce: 12:e5:dd:dc:fa:65:49:94:c4:ea:a4:32:18:90:b8: ea:0e:21:cd:39:de:7b:dc:18:ed:42:06:a3:4f:96: 9b:0f:d2:c6:2e:f6:fd:6a:82:b0:2f:90:76:aa:d6: a7:ca:be:00:97:1c:8c:1f:13:ba:2e:cd:37:98:0e: 45:db:89:98:ce:b6:82:27:af:d1:58:60:65:64:e6: de:33:60:02:1f:fd:a3:cc:8b:af:71:77:f7:e2:33: d2:8c:91:b1:8f:f5:ac:84:1d:6a:0c:ec:e7:a4:1e: 0b:f5:3e:64:e9:6d:9d:64:e2:22:fe:93:f8:a5:b5: 79:81:7e:2e:dc:f6:6d:b7:d1:c9:69:95:2c:4b:53: d3:07:0b:93:c5:87:53:86:48:02:54:be:8e:2f:95: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:04:1C:84:A2:93:67:8A:38:25:79:A7:5D:D8:D1:90:EC:78:4C:FB X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/pAQchKKTZ4o4JXmnXdjRkOx4TPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.44.0/24 Signature Algorithm: sha256WithRSAEncryption 54:c1:e8:34:51:bb:a2:50:3c:86:61:ed:bd:82:6b:5d:ea:99: ec:ff:47:20:d7:aa:00:7c:f5:29:7d:98:3e:59:68:73:6f:dd: 05:57:35:0c:f2:e9:06:ee:6c:5d:36:34:c9:b8:a3:de:6c:1e: d1:89:02:a4:97:06:49:30:cc:4e:3f:33:38:4c:45:ea:8e:76: 82:49:da:15:0b:20:b9:8b:63:33:58:d4:48:19:a3:d2:ba:9f: 86:56:44:9b:dc:d6:b8:a1:d7:cb:86:a7:5a:0c:55:e2:3e:98: 5d:23:c0:f3:89:c6:4c:d2:d8:95:86:78:84:e7:e7:23:ba:ad: 09:45:8b:64:aa:5a:37:59:57:9b:12:20:76:fd:bf:d1:9b:a5: e4:d6:31:6b:aa:62:74:07:6a:bd:26:36:f7:9c:9c:5b:19:21: 58:07:99:91:d5:be:f1:3d:84:48:99:f9:b2:dd:a9:10:eb:00: ad:92:b5:7e:ad:20:3b:7f:e5:b3:f9:5e:b2:eb:aa:b5:6a:de: b4:98:63:9f:6d:70:26:32:99:d3:70:32:f5:91:24:05:c1:10: a1:ad:07:57:1b:62:d3:06:71:ea:70:5a:16:a0:4c:c1:9a:09: 09:35:17:73:c9:23:2e:ff:7d:b5:da:30:0a:81:44:a2:06:8c: 9e:ec:9c:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTjOyXNwFwtD1MD+6GJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDA0MWM4NGEyOTM2NzhhMzgyNTc5YTc1ZGQ4ZDE5MGVjNzg0Y2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc841J1UKV6msPU11siJZREa7v1r Y3V08ilbMlsj6UZa/UdwaCERWgqxwzI/NmUEOFL/T6EvPxDlXZGYn5mX4hXpv128 XJOeWwK3c+IprUwJTvvYTiMkdNEg4yw8lcISRizJCYfkhs4S5d3c+mVJlMTqpDIY kLjqDiHNOd573BjtQgajT5abD9LGLvb9aoKwL5B2qtanyr4AlxyMHxO6Ls03mA5F 24mYzraCJ6/RWGBlZObeM2ACH/2jzIuvcXf34jPSjJGxj/WshB1qDOznpB4L9T5k 6W2dZOIi/pP4pbV5gX4u3PZtt9HJaZUsS1PTBwuTxYdThkgCVL6OL5WdBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQEHISik2eKOCV5p13Y0ZDseEz7MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvcEFRY2hLS1RaNG80SlhtblhkalJrT3g0VFBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaUsMA0G CSqGSIb3DQEBCwUAA4IBAQBUweg0UbuiUDyGYe29gmtd6pns/0cg16oAfPUpfZg+ WWhzb90FVzUM8ukG7mxdNjTJuKPebB7RiQKklwZJMMxOPzM4TEXqjnaCSdoVCyC5 i2MzWNRIGaPSup+GVkSb3Na4odfLhqdaDFXiPphdI8DzicZM0tiVhniE5+cjuq0J RYtkqlo3WVebEiB2/b/Rm6Xk1jFrqmJ0B2q9Jjb3nJxbGSFYB5mR1b7xPYRImfmy 3akQ6wCtkrV+rSA7f+Wz+V6y66q1at60mGOfbXAmMpnTcDL1kSQFwRChrQdXG2LT BnHqcFoWoEzBmgkJNRdzySMu/3212jAKgUSiBoye7JzU -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client