This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/ditshtsYxKYvOT3dCWLRDUMEGJ0.roa File: ditshtsYxKYvOT3dCWLRDUMEGJ0.roa (raw, json) Hash identifier: o6hcseRZVR0gI7jc0jlgzutuSsEvFXNX+MVW1GVHnBQ= Subject key identifier: 76:2B:6C:86:DB:18:C4:A6:2F:39:3D:DD:09:62:D1:0D:43:04:18:9D Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245 Certificate serial: 019B7D5C729F8AE9EE4B038DD4B51DA767A7 Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/ditshtsYxKYvOT3dCWLRDUMEGJ0.roa Signing time: Fri 02 Jan 2026 06:19:29 +0000 ROA not before: Fri 02 Jan 2026 06:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211732 IP address blocks: 185.243.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:72:9f:8a:e9:ee:4b:03:8d:d4:b5:1d:a7:67:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245 Validity Not Before: Jan 2 06:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=762b6c86db18c4a62f393ddd0962d10d4304189d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:ce:59:40:b0:92:e8:83:a9:b4:3c:58:4e: 12:03:19:a7:d8:66:d2:0d:58:7d:5e:f9:da:66:09: 99:f1:10:2e:37:14:31:e5:c4:6b:82:ef:62:94:ea: dc:7b:48:60:aa:2c:9e:61:ac:eb:82:76:86:11:0e: 29:65:99:1a:e8:6d:78:f5:da:95:fc:3d:95:58:90: 8d:98:96:30:59:17:43:1e:07:d2:86:e9:1e:c5:59: ce:e8:9c:b7:8f:c1:e0:3f:87:05:c7:5f:2d:b6:d6: 91:c7:b6:31:a0:0b:74:c1:53:eb:59:d8:1a:f7:c3: 8b:0f:e2:10:ef:2a:4f:19:9e:34:9e:f7:7c:5b:78: 45:99:6a:1f:e8:dc:5f:ee:e9:04:3c:df:da:fa:a4: 92:69:05:b6:7a:16:6b:55:95:22:43:1b:3f:44:2c: 9f:1d:47:c3:40:85:28:47:f4:3c:c9:79:12:c9:6e: 65:44:c1:1b:7f:61:b7:fa:5f:e7:be:8c:93:b4:57: 11:31:1b:25:5b:8e:49:eb:de:5a:e8:61:a0:76:01: 3b:17:4c:c1:4e:4d:d5:c9:13:b4:c3:ff:aa:da:42: 21:28:f3:1f:0c:be:91:74:ff:fe:0a:83:a9:bd:80: 1f:de:9c:cb:74:97:56:0c:b7:7e:1c:b2:29:fc:95: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2B:6C:86:DB:18:C4:A6:2F:39:3D:DD:09:62:D1:0D:43:04:18:9D X509v3 Authority Key Identifier: keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/ditshtsYxKYvOT3dCWLRDUMEGJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.128.0/24 Signature Algorithm: sha256WithRSAEncryption 45:60:98:ee:56:bb:3e:00:cb:71:98:b0:a2:f4:13:73:20:ef: 8f:1d:72:56:3c:2d:e0:de:c7:66:55:b9:15:50:d6:e5:eb:0d: 8f:c5:49:c9:ef:46:a5:3f:cc:dc:19:cb:69:aa:08:d5:3b:73: a3:01:aa:29:a9:ff:0b:5b:7e:e2:61:36:43:0f:a0:47:95:0d: b0:0b:59:6f:7f:3d:61:8c:0e:81:87:b5:32:3f:19:a6:df:36: 6d:22:3a:ce:4c:9a:b3:9c:d3:d0:9f:e1:0b:66:2f:4d:fa:1a: 3d:b9:69:c5:76:2b:8d:02:ca:a9:b7:fb:79:f4:91:06:28:2e: 42:0c:f8:cd:fa:53:cd:11:2e:78:6d:d5:cb:b4:89:9b:1b:0d: e7:1a:f2:02:10:b8:1f:5c:d5:57:35:02:61:ab:b0:d1:1a:99: f8:7d:44:cc:25:ea:5c:74:78:1e:52:28:c5:4c:92:f0:d9:54: 98:14:ba:30:aa:01:6c:52:23:0d:7e:1c:c8:5e:1d:80:33:10: 54:a6:52:5d:d5:08:38:01:d3:71:9a:11:e2:78:c0:07:01:23: 72:53:bb:c6:4b:0d:79:a4:7d:74:5d:72:2a:e1:ef:3b:08:ed: 83:5e:f3:ce:54:e3:77:0d:34:f0:20:d4:cd:31:44:f5:f8:d3: d8:43:48:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHKfiunuSwON1LUdp2enMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDViM2QzNzlkMjExNjJlMmI1MjJjNDM4MDFmYjk2MDM5 ODgyNDUwHhcNMjYwMTAyMDYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjJiNmM4NmRiMThjNGE2MmYzOTNkZGQwOTYyZDEwZDQzMDQxODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrbOWUCwkuiDqbQ8WE4SAxmn2GbS DVh9XvnaZgmZ8RAuNxQx5cRrgu9ilOrce0hgqiyeYazrgnaGEQ4pZZka6G149dqV /D2VWJCNmJYwWRdDHgfShukexVnO6Jy3j8HgP4cFx18tttaRx7YxoAt0wVPrWdga 98OLD+IQ7ypPGZ40nvd8W3hFmWof6Nxf7ukEPN/a+qSSaQW2ehZrVZUiQxs/RCyf HUfDQIUoR/Q8yXkSyW5lRMEbf2G3+l/nvoyTtFcRMRslW45J695a6GGgdgE7F0zB Tk3VyRO0w/+q2kIhKPMfDL6RdP/+CoOpvYAf3pzLdJdWDLd+HLIp/JUh+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHYrbIbbGMSmLzk93Qli0Q1DBBidMB8GA1UdIwQY MBaAFLjVs9N50hFi4rUixDgB+5YDmIJFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMt YjNlOTI1NWQyYjNlLzEvZGl0c2h0c1l4S1l2T1QzZENXTFJEVU1FR0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMtYjNlOTI1NWQyYjNl LzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufOAMA0G CSqGSIb3DQEBCwUAA4IBAQBFYJjuVrs+AMtxmLCi9BNzIO+PHXJWPC3g3sdmVbkV UNbl6w2PxUnJ70alP8zcGctpqgjVO3OjAaopqf8LW37iYTZDD6BHlQ2wC1lvfz1h jA6Bh7UyPxmm3zZtIjrOTJqznNPQn+ELZi9N+ho9uWnFdiuNAsqpt/t59JEGKC5C DPjN+lPNES54bdXLtImbGw3nGvICELgfXNVXNQJhq7DRGpn4fUTMJepcdHgeUijF TJLw2VSYFLowqgFsUiMNfhzIXh2AMxBUplJd1Qg4AdNxmhHieMAHASNyU7vGSw15 pH10XXIq4e87CO2DXvPOVON3DTTwINTNMUT1+NPYQ0jJ -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:11 2026 by rpki-client