This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ACDdEn4AYkA1iN0Tv7VNNi1ph_8.roa File: ACDdEn4AYkA1iN0Tv7VNNi1ph_8.roa (raw, json) Hash identifier: 5PczZSshZ92tAD/Dmr7LjZwks5HlTmq1cr3JLmgkIS0= Subject key identifier: 00:20:DD:12:7E:00:62:40:35:88:DD:13:BF:B5:4D:36:2D:69:87:FF Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447 Certificate serial: 019B7CECFFCE5E4CE7DB28528F6778E2ED31 Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ACDdEn4AYkA1iN0Tv7VNNi1ph_8.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 37.98.224.0/21 maxlen: 24 85.113.90.0/23 maxlen: 24 85.194.196.0/22 maxlen: 24 109.205.112.0/21 maxlen: 24 185.76.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ff:ce:5e:4c:e7:db:28:52:8f:67:78:e2:ed:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebf760c05773c15d73676450344668fefb723447 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0020dd127e0062403588dd13bfb54d362d6987ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0c:b8:66:fc:a5:6f:d5:20:91:94:2c:4f:4c: 1a:37:93:4d:72:e9:a7:84:f5:0f:ce:31:8b:9f:96: 34:19:ba:20:d3:1e:83:df:91:25:7b:05:44:97:98: 5f:04:3a:f1:7c:8e:f7:43:ef:b6:81:35:d0:dd:94: a9:a5:e6:57:28:a9:0b:8b:69:ae:fb:a8:37:a8:8d: 93:56:8a:fc:77:d3:84:c8:99:98:2c:eb:d7:f5:52: 31:1d:de:b1:aa:89:43:38:e5:56:f0:e9:b6:95:62: 04:d3:5f:bd:43:93:68:7a:f7:98:1d:15:ab:47:9f: 1a:3c:bd:11:0e:2e:ce:ee:c0:88:0d:58:b1:1b:32: e9:fc:19:52:1d:8a:df:d5:d9:f6:27:55:f3:0c:f8: 1f:3d:13:ab:9c:f3:c7:4b:69:c1:08:c7:ec:a6:b0: 09:18:12:53:83:0f:2c:75:d5:db:bd:67:88:e1:5f: 55:aa:d4:9d:a1:37:b7:65:82:20:29:96:7b:6d:3c: 4a:57:46:68:96:b4:7a:9c:b7:dc:ae:d3:13:5a:84: 80:7f:43:6a:c4:6a:fd:fe:29:a1:be:2e:21:fa:f7: 27:ed:38:d9:06:df:d6:7c:bb:f3:8d:4c:9a:44:0a: f1:72:d3:1f:1e:15:c7:24:c6:c9:92:bd:ab:3b:77: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:20:DD:12:7E:00:62:40:35:88:DD:13:BF:B5:4D:36:2D:69:87:FF X509v3 Authority Key Identifier: keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/ACDdEn4AYkA1iN0Tv7VNNi1ph_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.98.224.0/21 85.113.90.0/23 85.194.196.0/22 109.205.112.0/21 185.76.32.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:d0:ad:3b:05:af:05:89:40:eb:75:ee:ab:34:1d:91:23:35: da:2b:43:ba:f3:b9:3d:eb:30:d9:20:bb:2b:81:9e:4a:7a:1a: 7c:e8:d0:77:8b:ca:ea:b5:d0:19:3e:a4:e6:26:c9:03:bb:1f: 6b:cb:5a:71:9a:06:78:a1:ae:de:be:a1:42:57:fb:27:9a:74: 00:41:80:44:aa:f1:de:5d:da:4b:cd:34:69:c7:1d:73:0b:74: be:61:3f:da:6f:b6:13:7c:29:9c:cf:03:83:38:17:d6:bd:4f: 74:49:b6:dc:fd:f5:aa:f4:d6:54:e2:9f:a3:f2:32:9a:1f:b5: 1b:4a:80:a0:91:d7:05:15:30:c4:de:08:3f:73:d4:bc:55:6f: e5:3f:0a:2a:26:ad:09:4d:ae:42:7d:e1:24:65:d7:df:e9:b9: 49:5b:28:fa:7b:31:63:1b:58:a6:b8:e2:fb:de:38:b3:c4:59: 6d:e4:88:00:96:93:5e:98:a5:3a:61:fe:76:8c:ff:e3:15:0d: 51:dc:fd:fe:39:98:92:3b:7c:f6:ee:1b:34:d2:65:d5:e4:29: 7d:4d:a5:ad:68:de:a6:e1:09:81:5f:21:0e:eb:85:82:bc:d0: b8:10:fe:a2:ad:0a:9e:28:8b:af:71:63:9f:64:a5:53:40:8d: f6:98:2e:33 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87P/OXkzn2yhSj2d44u0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZjc2MGMwNTc3M2MxNWQ3MzY3NjQ1MDM0NDY2OGZlZmI3 MjM0NDcwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDIwZGQxMjdlMDA2MjQwMzU4OGRkMTNiZmI1NGQzNjJkNjk4N2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qy4Zvylb9UgkZQsT0waN5NNcumn hPUPzjGLn5Y0Gbog0x6D35ElewVEl5hfBDrxfI73Q++2gTXQ3ZSppeZXKKkLi2mu +6g3qI2TVor8d9OEyJmYLOvX9VIxHd6xqolDOOVW8Om2lWIE01+9Q5NoeveYHRWr R58aPL0RDi7O7sCIDVixGzLp/BlSHYrf1dn2J1XzDPgfPROrnPPHS2nBCMfsprAJ GBJTgw8sddXbvWeI4V9VqtSdoTe3ZYIgKZZ7bTxKV0ZolrR6nLfcrtMTWoSAf0Nq xGr9/imhvi4h+vcn7TjZBt/WfLvzjUyaRArxctMfHhXHJMbJkr2rO3f5XQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAAg3RJ+AGJANYjdE7+1TTYtaYf/MB8GA1UdIwQY MBaAFOv3YMBXc8Fdc2dkUDRGaP77cjRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYt NDkwOTg4OTdlZTRhLzEvQUNEZEVuNEFZa0ExaU4wVHY3Vk5OaTFwaF84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy85MzFmODEtYzQwOS00ZDNhLTk1ZGYtNDkwOTg4OTdlZTRh LzEvNl9kZ3dGZHp3VjF6WjJSUU5FWm9fdnR5TkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDJWLgAwQB VXFaAwQCVcLEAwQDbc1wAwQCuUwgMA0GCSqGSIb3DQEBCwUAA4IBAQBd0K07Ba8F iUDrde6rNB2RIzXaK0O687k96zDZILsrgZ5Kehp86NB3i8rqtdAZPqTmJskDux9r y1pxmgZ4oa7evqFCV/snmnQAQYBEqvHeXdpLzTRpxx1zC3S+YT/ab7YTfCmczwOD OBfWvU90Sbbc/fWq9NZU4p+j8jKaH7UbSoCgkdcFFTDE3gg/c9S8VW/lPwoqJq0J Ta5CfeEkZdff6blJWyj6ezFjG1imuOL73jizxFlt5IgAlpNemKU6Yf52jP/jFQ1R 3P3+OZiSO3z27hs00mXV5Cl9TaWtaN6m4QmBXyEO64WCvNC4EP6irQqeKIuvcWOf ZKVTQI32mC4z -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client