This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/ctdO6KeqKtoQl8jil7v642rgLAY.roa File: ctdO6KeqKtoQl8jil7v642rgLAY.roa (raw, json) Hash identifier: 0Ysbxgr5wlnCLuuipo5HyI6PWUVSDIOqUxGUbxE7UC8= Subject key identifier: 72:D7:4E:E8:A7:AA:2A:DA:10:97:C8:E2:97:BB:FA:E3:6A:E0:2C:06 Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Certificate serial: 019B7F13B4D8A8B8F1927EC20767D8018B29 Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/ctdO6KeqKtoQl8jil7v642rgLAY.roa Signing time: Fri 02 Jan 2026 14:19:16 +0000 ROA not before: Fri 02 Jan 2026 14:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48355 IP address blocks: 185.1.137.0/24 maxlen: 24 2001:7f8:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:b4:d8:a8:b8:f1:92:7e:c2:07:67:d8:01:8b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3 Validity Not Before: Jan 2 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72d74ee8a7aa2ada1097c8e297bbfae36ae02c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:76:12:60:ad:64:13:bd:99:1b:72:ea:79:61: 59:c4:7c:a0:bc:6d:1b:22:9b:31:cf:f4:a6:4a:8e: 84:cf:2e:ec:fa:fd:0b:df:fb:95:05:6e:e0:f2:23: 17:48:36:a5:9e:6c:ba:80:e3:55:0d:46:71:a9:41: a8:49:35:0b:4a:db:db:fa:46:f5:1e:8b:77:52:dd: e1:4f:9f:69:37:a7:ef:4f:b8:fc:a5:c3:47:e0:e6: 23:e7:6f:6b:74:34:e2:00:5a:ba:93:82:95:f6:1d: 15:2d:ef:7f:a9:87:dd:c5:41:82:f6:7e:ac:33:c9: 10:db:d3:3a:dd:60:0d:4b:6b:c1:fc:b6:d0:9a:81: ee:da:c9:50:32:bd:53:aa:7a:f6:63:ad:72:51:50: 05:23:63:2a:72:f0:0c:70:8c:01:12:2c:38:35:d8: 08:5a:e4:d2:85:8d:31:e0:5b:38:63:59:70:e5:d1: 74:22:0d:3e:94:95:2d:4f:df:6c:ee:33:da:8b:a6: fb:63:6a:1b:12:e1:40:12:7d:44:14:9e:b2:48:50: 8a:89:41:95:a9:24:03:83:d1:02:0f:38:8a:40:72: 9c:e9:cb:cd:6d:30:9c:3d:7d:47:b6:c8:0c:c7:95: 19:13:8f:7d:05:81:31:41:3a:43:c1:64:20:e5:53: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D7:4E:E8:A7:AA:2A:DA:10:97:C8:E2:97:BB:FA:E3:6A:E0:2C:06 X509v3 Authority Key Identifier: keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/ctdO6KeqKtoQl8jil7v642rgLAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.137.0/24 IPv6: 2001:7f8:db::/48 Signature Algorithm: sha256WithRSAEncryption 7e:de:87:d0:3f:25:47:0e:bb:d6:52:0f:b9:c0:f1:c8:2b:97: d7:f7:d5:27:e8:20:ed:38:9c:d5:39:37:1b:90:e6:ab:ca:b6: ad:da:86:48:dc:04:4c:37:1c:9c:06:45:1c:1c:06:d2:b4:9b: c9:13:8a:94:45:c0:70:b7:79:3c:11:84:12:e1:1c:eb:45:b9: 60:1f:04:25:d8:ee:7c:eb:52:45:ab:52:b9:90:3c:f6:90:f7: 51:fe:74:55:12:cf:ad:3e:0b:56:2e:99:cb:21:cf:e6:9c:d5: e8:97:28:36:7e:c3:23:15:64:46:8d:da:fd:7a:3d:4f:11:56: 13:76:31:40:d3:7e:32:51:92:c8:58:50:88:c9:9c:ed:21:cb: e8:e9:28:f5:87:45:b5:2f:54:99:56:63:2e:21:ba:c0:03:f7: b4:49:de:ac:27:0c:cc:7d:56:bd:5a:9b:f0:36:5d:c7:e2:92: d7:7d:df:4a:04:09:60:b1:17:1a:84:25:51:01:01:e1:7c:55: 08:9d:94:76:49:a5:6e:c5:51:21:ce:48:ce:e9:12:3d:1d:54: fa:5e:95:2a:dd:f8:87:a6:c6:3c:cc:64:37:a0:dc:54:ae:e7: 4b:1b:a2:4b:36:e2:b5:e4:77:2e:16:12:f6:44:06:b3:c1:da: cf:2c:62:52 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/E7TYqLjxkn7CB2fYAYspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0 YjIwYjMwHhcNMjYwMTAyMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmQ3NGVlOGE3YWEyYWRhMTA5N2M4ZTI5N2JiZmFlMzZhZTAyYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHYSYK1kE72ZG3LqeWFZxHygvG0b Ipsxz/SmSo6Ezy7s+v0L3/uVBW7g8iMXSDalnmy6gONVDUZxqUGoSTULStvb+kb1 Hot3Ut3hT59pN6fvT7j8pcNH4OYj529rdDTiAFq6k4KV9h0VLe9/qYfdxUGC9n6s M8kQ29M63WANS2vB/LbQmoHu2slQMr1Tqnr2Y61yUVAFI2MqcvAMcIwBEiw4NdgI WuTShY0x4Fs4Y1lw5dF0Ig0+lJUtT99s7jPai6b7Y2obEuFAEn1EFJ6ySFCKiUGV qSQDg9ECDziKQHKc6cvNbTCcPX1HtsgMx5UZE499BYExQTpDwWQg5VOs0QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHLXTuinqiraEJfI4pe7+uNq4CwGMB8GA1UdIwQY MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt YTc3NmZlZGU5OTA1LzEvY3RkTzZLZXFLdG9RbDhqaWw3djY0MnJnTEFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1 LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQGJMA8E AgACMAkDBwAgAQf4ANswDQYJKoZIhvcNAQELBQADggEBAH7eh9A/JUcOu9ZSD7nA 8cgrl9f31SfoIO04nNU5NxuQ5qvKtq3ahkjcBEw3HJwGRRwcBtK0m8kTipRFwHC3 eTwRhBLhHOtFuWAfBCXY7nzrUkWrUrmQPPaQ91H+dFUSz60+C1Yumcshz+ac1eiX KDZ+wyMVZEaN2v16PU8RVhN2MUDTfjJRkshYUIjJnO0hy+jpKPWHRbUvVJlWYy4h usAD97RJ3qwnDMx9Vr1am/A2Xcfiktd930oECWCxFxqEJVEBAeF8VQidlHZJpW7F USHOSM7pEj0dVPpelSrd+IemxjzMZDeg3FSu50sboks24rXkdy4WEvZEBrPB2s8s YlI= -----END CERTIFICATE-----Generated at Tue Jan 20 10:14:16 2026 by rpki-client