This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t0djXaplHpApO8r13KODOvltsK8.roa File: t0djXaplHpApO8r13KODOvltsK8.roa (raw, json) Hash identifier: Ug0cN45F9sAD7GNMSNMqTI7vXdaZZKd359n4yEpau+s= Subject key identifier: B7:47:63:5D:AA:65:1E:90:29:3B:CA:F5:DC:A3:83:3A:F9:6D:B0:AF Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C13629D943770EFE6CD90DADE3894CB Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t0djXaplHpApO8r13KODOvltsK8.roa Signing time: Fri 02 Jan 2026 00:20:03 +0000 ROA not before: Fri 02 Jan 2026 00:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 185.223.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:62:9d:94:37:70:ef:e6:cd:90:da:de:38:94:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b747635daa651e90293bcaf5dca3833af96db0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:ec:4f:8f:95:e4:a6:1c:38:bc:1d:b4:c0: 0b:78:34:0e:3e:77:d2:14:26:2b:f7:77:12:1b:af: 80:90:47:3c:80:4c:0e:36:c1:d2:12:71:ca:b3:12: 32:ce:40:0d:c7:6d:61:b1:d4:e4:83:19:df:bb:15: 45:94:b0:df:63:6d:82:e9:a8:9f:6c:20:0b:ef:a6: f6:57:91:1d:29:c1:6a:2b:6d:17:a4:b4:d3:3e:aa: 92:ba:80:ea:72:6b:2b:a4:56:03:7b:c9:dd:a7:a8: 44:ec:44:d5:ab:c9:33:70:5e:f6:36:f5:2a:43:03: 5c:b4:ce:7c:86:2a:8f:9c:7e:7c:6f:e6:f5:7c:13: e9:dc:ea:07:19:23:8c:81:e5:e9:8d:75:0c:35:77: 85:e5:24:33:c3:2d:2a:38:c9:89:1e:ca:4b:d5:c6: f4:93:bf:88:a1:24:75:dd:a3:92:91:ce:ed:d2:66: 0c:ee:a8:08:77:31:fb:3b:17:a9:57:df:91:2f:c7: 9b:e2:77:bd:54:67:67:cc:4f:e7:66:a2:13:eb:f5: 2a:f7:8c:99:b1:c7:33:02:19:55:9e:90:7e:0b:2a: bf:22:6e:51:aa:7a:36:2d:34:43:3f:23:c3:52:06: dc:1e:d9:97:c6:c9:a2:b0:b0:f7:24:a8:b9:86:52: 80:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:47:63:5D:AA:65:1E:90:29:3B:CA:F5:DC:A3:83:3A:F9:6D:B0:AF X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t0djXaplHpApO8r13KODOvltsK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.153.0/24 Signature Algorithm: sha256WithRSAEncryption 95:7b:6f:58:1e:9b:8f:42:c7:8b:0b:e0:6a:1e:60:f2:d0:a0: 1c:fc:38:4a:40:69:70:94:85:8e:d2:3b:80:77:e9:86:2a:59: d9:d9:96:39:b6:fa:66:22:aa:8a:04:24:e5:98:07:b9:b4:19: 45:19:db:a0:da:c5:a0:9d:fa:a6:45:ba:09:66:93:0f:e9:2c: d0:d8:d9:92:25:c9:f0:81:3e:08:eb:e4:76:82:66:06:db:08: 74:03:ae:e5:f8:c4:aa:e9:98:ed:88:4f:e5:cf:04:72:0a:9c: f8:60:8a:8d:75:45:e7:af:f2:c0:02:53:1d:41:96:df:b4:29: 35:a6:a9:6a:db:80:20:20:35:c9:a1:6c:cd:b3:d2:6f:d6:71: 5a:0f:9f:a0:87:a4:e9:85:8e:28:9f:f2:dc:7e:07:f4:98:c5: cd:58:51:cd:2a:df:3d:02:ac:1b:b1:91:f9:02:d9:d5:d8:ef: 10:61:e8:71:4a:20:f6:a4:b3:f1:53:21:cd:3b:ed:29:55:c2: c5:5c:43:a0:9b:4e:f6:5b:6f:14:d5:59:e4:34:8d:20:15:32: 10:95:10:98:43:e8:48:cd:63:00:05:ed:55:f1:0b:d4:3d:11: ed:81:5e:03:17:51:56:ea:4b:6b:70:43:60:a8:86:95:41:0a: 51:e5:c0:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2KdlDdw7+bNkNreOJTLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQ3NjM1ZGFhNjUxZTkwMjkzYmNhZjVkY2EzODMzYWY5NmRiMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw/sT4+V5KYcOLwdtMALeDQOPnfS FCYr93cSG6+AkEc8gEwONsHSEnHKsxIyzkANx21hsdTkgxnfuxVFlLDfY22C6aif bCAL76b2V5EdKcFqK20XpLTTPqqSuoDqcmsrpFYDe8ndp6hE7ETVq8kzcF72NvUq QwNctM58hiqPnH58b+b1fBPp3OoHGSOMgeXpjXUMNXeF5SQzwy0qOMmJHspL1cb0 k7+IoSR13aOSkc7t0mYM7qgIdzH7OxepV9+RL8eb4ne9VGdnzE/nZqIT6/Uq94yZ scczAhlVnpB+Cyq/Im5Rqno2LTRDPyPDUgbcHtmXxsmisLD3JKi5hlKARwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdHY12qZR6QKTvK9dyjgzr5bbCvMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdDBkalhhcGxIcEFwTzhyMTNLT0RPdmx0c0s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud+ZMA0G CSqGSIb3DQEBCwUAA4IBAQCVe29YHpuPQseLC+BqHmDy0KAc/DhKQGlwlIWO0juA d+mGKlnZ2ZY5tvpmIqqKBCTlmAe5tBlFGdug2sWgnfqmRboJZpMP6SzQ2NmSJcnw gT4I6+R2gmYG2wh0A67l+MSq6ZjtiE/lzwRyCpz4YIqNdUXnr/LAAlMdQZbftCk1 pqlq24AgIDXJoWzNs9Jv1nFaD5+gh6TphY4on/Lcfgf0mMXNWFHNKt89AqwbsZH5 AtnV2O8QYehxSiD2pLPxUyHNO+0pVcLFXEOgm072W28U1VnkNI0gFTIQlRCYQ+hI zWMABe1V8QvUPRHtgV4DF1FW6ktrcENgqIaVQQpR5cBE -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:15 2026 by rpki-client