This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/CDpMD_YtLf5sr3vUWD2b37ldTHA.roa File: CDpMD_YtLf5sr3vUWD2b37ldTHA.roa (raw, json) Hash identifier: GiFS9+M5y+qgplPNTHBHIZf4CKfaw5vBcEKWbsoxSkk= Subject key identifier: 08:3A:4C:0F:F6:2D:2D:FE:6C:AF:7B:D4:58:3D:9B:DF:B9:5D:4C:70 Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781 Certificate serial: 019B7911312CBEF1E10F26E88FA2AD46FF6A Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/CDpMD_YtLf5sr3vUWD2b37ldTHA.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203606 IP address blocks: 185.123.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:31:2c:be:f1:e1:0f:26:e8:8f:a2:ad:46:ff:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083a4c0ff62d2dfe6caf7bd4583d9bdfb95d4c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:77:6b:3c:5d:11:81:cf:c7:9a:e8:f4:c8: 62:1e:d2:0a:bd:88:64:c4:33:97:42:6f:4d:55:94: ad:91:da:3a:ef:a0:fa:f5:5f:3b:d7:a9:b6:a8:32: 9a:79:ba:59:80:51:d5:19:0c:5b:8a:f6:47:45:91: 2d:33:e1:38:b7:7d:ab:78:a7:b1:11:c7:3f:fd:e1: 8c:90:d8:64:96:70:36:1f:9d:fb:42:4c:21:88:0e: f1:b7:45:b5:10:5f:e9:9c:86:33:9b:c9:41:75:22: 23:73:5b:cc:26:1f:85:fb:62:4d:81:09:e9:4d:4b: c1:a6:2b:9c:7e:aa:e3:9f:cf:37:82:cf:a8:5f:ff: 1b:50:26:92:db:86:00:5b:4f:95:3f:47:04:d6:ad: e3:72:c0:4c:ed:e8:ea:ed:b5:b8:58:3e:02:3b:07: ce:73:40:42:41:19:19:32:3b:46:e7:bc:63:89:8f: 13:37:99:8d:82:5a:59:af:4e:dd:29:0c:b6:6a:af: 4f:bc:d9:17:71:98:73:58:50:98:74:9d:c6:c0:7a: 89:44:91:12:bd:fd:a4:5b:e7:fe:50:bf:2d:71:73: ec:8b:73:dc:bf:85:b8:62:83:71:c0:dc:c9:4e:37: f9:85:cb:c3:4c:7b:0b:15:b2:58:50:11:7a:04:86: 44:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3A:4C:0F:F6:2D:2D:FE:6C:AF:7B:D4:58:3D:9B:DF:B9:5D:4C:70 X509v3 Authority Key Identifier: keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/CDpMD_YtLf5sr3vUWD2b37ldTHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.104.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:f7:c1:10:6e:6a:ae:08:fb:6a:ff:b7:9f:70:8d:b5:85:f8: a4:ab:ae:43:f7:57:4e:3c:58:c3:2c:d6:04:ea:e6:52:8c:a6: 10:01:6b:f0:a7:7b:70:15:71:5e:59:d0:81:5b:a3:50:5b:b0: 08:f0:bc:1f:ed:b8:4c:f0:da:7e:59:2a:53:35:db:da:58:cd: 02:f3:22:32:4f:5e:b1:32:8c:68:13:39:6f:b9:d4:b3:c0:35: 0f:db:d7:05:a6:0f:ca:a3:8e:43:b2:7c:77:ea:5c:1a:ea:5e: 21:15:31:87:28:86:2d:2d:de:c4:f2:b3:dc:4e:57:de:cd:9f: e3:b3:a3:19:ee:c4:d8:c5:52:f5:77:37:c4:c2:6c:7a:12:ff: 5a:50:b7:ec:9e:51:3a:f5:4c:9c:b5:2b:d8:47:65:e8:bd:d7: b5:6c:99:e9:9a:af:0a:32:ef:28:a0:11:5d:0e:6f:49:57:6c: 1a:20:cc:78:29:5c:cb:d1:a3:6a:f0:7a:0f:94:ee:f9:4d:5c: d9:10:cb:ed:b9:ac:e4:dc:8c:97:28:d8:08:b3:8b:d2:03:fb: ae:88:7e:ea:fa:89:1e:f3:6f:ce:5b:0b:51:85:b6:1c:9e:70: 4e:d4:f0:4b:c9:06:72:d1:6e:7b:b7:41:97:89:33:4d:ec:46: 40:80:69:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETEsvvHhDyboj6KtRv9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODFiZGE2OTEwNzlmN2FiMjM1Zjc5ZDljMGVmNzUyYmZj MDM3ODEwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNhNGMwZmY2MmQyZGZlNmNhZjdiZDQ1ODNkOWJkZmI5NWQ0YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuid3azxdEYHPx5ro9MhiHtIKvYhk xDOXQm9NVZStkdo676D69V8716m2qDKaebpZgFHVGQxbivZHRZEtM+E4t32reKex Ecc//eGMkNhklnA2H537QkwhiA7xt0W1EF/pnIYzm8lBdSIjc1vMJh+F+2JNgQnp TUvBpiucfqrjn883gs+oX/8bUCaS24YAW0+VP0cE1q3jcsBM7ejq7bW4WD4COwfO c0BCQRkZMjtG57xjiY8TN5mNglpZr07dKQy2aq9PvNkXcZhzWFCYdJ3GwHqJRJES vf2kW+f+UL8tcXPsi3Pcv4W4YoNxwNzJTjf5hcvDTHsLFbJYUBF6BIZERQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg6TA/2LS3+bK971Fg9m9+5XUxwMB8GA1UdIwQY MBaAFIaBvaaRB596sjX3nZwO91K/wDeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDkt ZjQyODUwZjgwY2E0LzEvQ0RwTURfWXRMZjVzcjN2VVdEMmIzN2xkVEhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0 LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXtoMA0G CSqGSIb3DQEBCwUAA4IBAQBt98EQbmquCPtq/7efcI21hfikq65D91dOPFjDLNYE 6uZSjKYQAWvwp3twFXFeWdCBW6NQW7AI8Lwf7bhM8Np+WSpTNdvaWM0C8yIyT16x MoxoEzlvudSzwDUP29cFpg/Ko45Dsnx36lwa6l4hFTGHKIYtLd7E8rPcTlfezZ/j s6MZ7sTYxVL1dzfEwmx6Ev9aULfsnlE69UyctSvYR2Xovde1bJnpmq8KMu8ooBFd Dm9JV2waIMx4KVzL0aNq8HoPlO75TVzZEMvtuazk3IyXKNgIs4vSA/uuiH7q+oke 82/OWwtRhbYcnnBO1PBLyQZy0W57t0GXiTNN7EZAgGnv -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:00 2026 by rpki-client