This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/IADl1Gv9BuddIG-0OHvNCj39-5w.roa File: IADl1Gv9BuddIG-0OHvNCj39-5w.roa (raw, json) Hash identifier: S9Dxk12pt58eWH9jO5GDFxrOLIjhAQo2JWChQTtOvm0= Subject key identifier: 20:00:E5:D4:6B:FD:06:E7:5D:20:6F:B4:38:7B:CD:0A:3D:FD:FB:9C Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Certificate serial: 019B7F13B5F9700C2C77251AE2DDB13911F6 Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/IADl1Gv9BuddIG-0OHvNCj39-5w.roa Signing time: Fri 02 Jan 2026 14:19:16 +0000 ROA not before: Fri 02 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203917 IP address blocks: 194.38.37.0/24 maxlen: 24 2a09:6d41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b5:f9:70:0c:2c:77:25:1a:e2:dd:b1:39:11:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Validity Not Before: Jan 2 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2000e5d46bfd06e75d206fb4387bcd0a3dfdfb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:67:ab:ad:14:4a:5d:29:dc:57:ae:eb:e5: bb:5d:f5:12:b1:dd:6e:2f:e4:88:59:69:62:ed:be: 56:23:21:34:4f:ca:f6:d0:52:79:5c:87:c2:f6:54: 66:e2:b8:04:ee:df:f8:d0:5f:e6:a2:3a:b1:f0:cd: 7f:7b:d7:8d:5b:6b:bd:33:65:9f:52:17:0c:14:72: c6:c2:17:4a:37:4f:9b:f5:e2:c4:d9:88:5e:e6:b7: b3:55:39:ef:4e:05:51:9b:a9:de:de:74:ab:89:5f: c5:8e:b4:2a:91:5c:0c:74:fa:d8:8a:26:3f:70:a3: 5b:ad:09:29:4e:2d:30:56:e7:69:eb:05:68:d6:b9: cb:e7:1d:3d:e7:f3:60:6f:aa:c8:95:b0:9b:05:23: 47:1a:58:0b:35:97:97:14:14:12:d1:29:af:b2:4b: ca:02:49:f3:41:c7:72:2f:ec:21:7e:c8:8b:0a:cd: df:71:82:32:5a:09:e4:c4:40:36:59:ba:d7:14:51: 06:4a:19:08:fa:6a:e5:68:e8:83:a3:0b:59:1e:67: f4:a2:38:93:df:2c:94:cd:2f:9a:6f:44:23:2c:a9: d9:92:ff:0b:e6:3f:d5:92:3b:53:85:5d:74:21:56: ef:9e:8b:b3:49:97:da:14:d6:69:4e:35:0d:72:c2: b2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:E5:D4:6B:FD:06:E7:5D:20:6F:B4:38:7B:CD:0A:3D:FD:FB:9C X509v3 Authority Key Identifier: keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/IADl1Gv9BuddIG-0OHvNCj39-5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.38.37.0/24 IPv6: 2a09:6d41::/32 Signature Algorithm: sha256WithRSAEncryption c6:94:e0:8f:25:7a:e1:47:8a:28:f3:ac:70:ca:4a:a9:7d:37: be:5d:b9:21:d3:35:da:ad:b7:fc:86:e3:f5:8e:79:f4:23:f3: 12:85:1f:86:b7:5c:b3:fc:dd:98:92:41:5f:dc:d4:85:fd:e0: ba:19:40:ea:93:d4:a4:96:8b:25:76:f1:6c:ea:37:7a:98:fc: c6:bf:b4:20:fd:2d:d2:4a:fd:61:09:a3:03:1a:f4:72:7c:2a: 68:85:1d:41:bb:6a:8f:d9:1b:9a:35:6e:87:c1:8f:54:a5:7b: 52:e1:f9:14:1f:df:30:5f:4d:67:27:8c:b8:e0:87:87:a8:4f: 14:48:fe:c7:2e:dc:cc:63:30:6b:3b:63:2c:e4:68:c6:27:31: 61:b9:8a:7e:4a:a1:ea:6c:57:2d:5c:43:ee:5a:f2:ad:08:e1: 21:c0:66:76:a4:f0:8b:8d:7c:10:3d:6c:cf:a1:be:ee:01:b2: 72:ce:ea:fb:d2:7a:b5:19:ed:e8:54:e2:7c:63:6e:5c:83:1e: 8a:5d:75:1c:e7:fd:3f:51:c3:87:a0:53:a7:59:7e:a5:01:4e: d9:b2:d1:68:b0:23:f2:72:00:97:03:88:81:a0:df:9c:d0:1d: 42:c5:dd:18:03:8f:8f:51:82:c9:b2:e8:d9:54:64:ae:55:7e: 9f:ac:4e:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E7X5cAwsdyUa4t2xORH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0 YjIwYjMwHhcNMjYwMTAyMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDAwZTVkNDZiZmQwNmU3NWQyMDZmYjQzODdiY2QwYTNkZmRmYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6pnq60USl0p3Feu6+W7XfUSsd1u L+SIWWli7b5WIyE0T8r20FJ5XIfC9lRm4rgE7t/40F/mojqx8M1/e9eNW2u9M2Wf UhcMFHLGwhdKN0+b9eLE2Yhe5rezVTnvTgVRm6ne3nSriV/FjrQqkVwMdPrYiiY/ cKNbrQkpTi0wVudp6wVo1rnL5x095/Ngb6rIlbCbBSNHGlgLNZeXFBQS0SmvskvK AknzQcdyL+whfsiLCs3fcYIyWgnkxEA2WbrXFFEGShkI+mrlaOiDowtZHmf0ojiT 3yyUzS+ab0QjLKnZkv8L5j/VkjtThV10IVbvnouzSZfaFNZpTjUNcsKyzwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCAA5dRr/QbnXSBvtDh7zQo9/fucMB8GA1UdIwQY MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt YTc3NmZlZGU5OTA1LzEvSUFEbDFHdjlCdWRkSUctME9Idk5DajM5LTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1 LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwiYlMA0E AgACMAcDBQAqCW1BMA0GCSqGSIb3DQEBCwUAA4IBAQDGlOCPJXrhR4oo86xwykqp fTe+Xbkh0zXarbf8huP1jnn0I/MShR+Gt1yz/N2YkkFf3NSF/eC6GUDqk9Sklosl dvFs6jd6mPzGv7Qg/S3SSv1hCaMDGvRyfCpohR1Bu2qP2RuaNW6HwY9UpXtS4fkU H98wX01nJ4y44IeHqE8USP7HLtzMYzBrO2Ms5GjGJzFhuYp+SqHqbFctXEPuWvKt COEhwGZ2pPCLjXwQPWzPob7uAbJyzur70nq1Ge3oVOJ8Y25cgx6KXXUc5/0/UcOH oFOnWX6lAU7ZstFosCPycgCXA4iBoN+c0B1Cxd0YA4+PUYLJsujZVGSuVX6frE58 -----END CERTIFICATE-----Generated at Tue Jan 20 06:59:13 2026 by rpki-client