This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa File: cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa (raw, json) Hash identifier: SUSOfIvJ0FegXPx9bBr1JRLYC/VJEW0GnploXLv94LU= Subject key identifier: 71:30:EE:9E:2C:91:AC:B9:D6:A6:31:EB:7E:60:03:E9:9B:1D:30:A6 Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Certificate serial: 019B7F156A69633C409A2CC4A003EFAF71AF Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa Signing time: Fri 02 Jan 2026 14:21:08 +0000 ROA not before: Fri 02 Jan 2026 14:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214104 IP address blocks: 185.56.115.0/24 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6a:69:63:3c:40:9a:2c:c4:a0:03:ef:af:71:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0 Validity Not Before: Jan 2 14:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7130ee9e2c91acb9d6a631eb7e6003e99b1d30a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4b:2f:6d:11:a5:b4:0c:e4:38:ea:0e:f2:e3: e6:fd:44:b6:94:86:8b:a9:7b:e0:64:51:26:88:9d: d4:0a:5b:47:d5:37:60:e9:e9:df:f7:40:a0:2b:62: b3:a2:c5:99:0d:9b:54:14:bd:84:7d:4a:33:a8:bd: d1:ab:d9:18:cc:44:76:99:ea:a2:9f:aa:67:a9:03: c0:07:36:81:af:25:88:db:f7:f8:1a:10:82:ce:d3: 3f:3f:ac:4e:0b:08:d3:b5:89:b7:ea:9a:f8:aa:d4: 8b:e4:d8:37:d4:be:23:e2:88:7a:77:f6:f6:86:12: fd:b0:39:7c:27:c5:bf:b0:08:d6:80:97:73:bc:ec: 63:67:da:bc:58:6d:d0:b5:b1:8a:44:95:73:b6:09: 44:69:72:ea:56:fe:ac:db:97:d9:b7:6a:08:8a:6d: 81:21:68:02:94:aa:d5:3d:c2:55:f0:ea:81:1c:6b: 78:ce:6e:c7:ee:40:23:4e:a5:d1:60:cd:08:d7:32: 33:b5:03:ae:4a:61:e3:00:36:42:c6:ad:2f:fb:f2: 63:c8:e7:ec:b0:3d:e4:da:99:8e:4d:13:4a:82:61: e9:31:e7:dc:40:76:b5:5d:0a:29:28:c3:93:4c:92: d6:d7:6f:49:9f:09:a9:18:ce:27:3a:77:44:b7:cc: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:EE:9E:2C:91:AC:B9:D6:A6:31:EB:7E:60:03:E9:9B:1D:30:A6 X509v3 Authority Key Identifier: keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.115.0/24 Signature Algorithm: sha256WithRSAEncryption 21:7c:f6:b4:93:1f:98:e6:30:05:10:d0:13:bd:a8:80:d5:c5: a4:f0:07:b0:25:14:e7:3f:79:22:34:b5:04:38:aa:48:3f:c4: 04:e6:87:aa:8e:5b:8e:30:34:ed:8c:fe:d1:9b:f4:2f:20:7e: 8e:a8:af:c5:f7:90:8f:66:2c:90:ab:f5:de:ad:d7:05:0d:ef: 21:52:4a:a8:fb:ed:ac:df:c7:a3:7e:6c:79:01:03:b3:95:34: 71:2c:e5:06:ed:a5:ab:f0:0e:41:1a:68:02:1b:1c:c6:d9:61: 9a:f3:15:a1:2c:c8:f9:46:40:5a:22:79:01:59:3e:03:aa:8c: 3d:aa:59:5b:36:1f:c9:f1:ad:fa:04:83:e5:74:c0:d2:fc:0f: cd:0d:0f:02:3c:f0:5b:db:37:0f:57:88:a7:2a:21:08:63:62: 17:15:b1:d2:09:16:ca:b7:97:8d:f3:86:e3:28:d8:b8:bf:e7: 37:49:aa:5b:62:86:60:29:29:df:88:56:01:54:8d:c3:df:6c: 5c:69:dd:94:a0:be:f4:a8:46:c7:e8:fc:fd:7f:13:ed:1b:c8: a2:fb:fd:6b:5c:09:bc:f0:8b:e4:c0:d0:ff:88:f4:00:b1:76: 30:87:99:92:89:8e:95:16:6c:44:2d:ae:b7:d0:5f:e1:b3:80: be:4b:77:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWppYzxAmizEoAPvr3GvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMmY1MTdiMDgxODJjNmVkYTFiM2Y5ODhlZTAxODE2ZWUy NjRkYzAwHhcNMjYwMTAyMTQyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTMwZWU5ZTJjOTFhY2I5ZDZhNjMxZWI3ZTYwMDNlOTliMWQzMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkksvbRGltAzkOOoO8uPm/US2lIaL qXvgZFEmiJ3UCltH1Tdg6enf90CgK2KzosWZDZtUFL2EfUozqL3Rq9kYzER2meqi n6pnqQPABzaBryWI2/f4GhCCztM/P6xOCwjTtYm36pr4qtSL5Ng31L4j4oh6d/b2 hhL9sDl8J8W/sAjWgJdzvOxjZ9q8WG3QtbGKRJVztglEaXLqVv6s25fZt2oIim2B IWgClKrVPcJV8OqBHGt4zm7H7kAjTqXRYM0I1zIztQOuSmHjADZCxq0v+/JjyOfs sD3k2pmOTRNKgmHpMefcQHa1XQopKMOTTJLW129JnwmpGM4nOndEt8xN7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEw7p4skay51qYx635gA+mbHTCmMB8GA1UdIwQY MBaAFGIvUXsIGCxu2hs/mI7gGBbuJk3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgt ZDkyZGFlODYxYTdkLzEvY1REdW5peVJyTG5XcGpIcmZtQUQ2WnNkTUtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zNDUzYjItOTc3My00NTVlLThiMDgtZDkyZGFlODYxYTdk LzEvWWk5UmV3Z1lMRzdhR3otWWp1QVlGdTRtVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuThzMA0G CSqGSIb3DQEBCwUAA4IBAQAhfPa0kx+Y5jAFENATvaiA1cWk8AewJRTnP3kiNLUE OKpIP8QE5oeqjluOMDTtjP7Rm/QvIH6OqK/F95CPZiyQq/XerdcFDe8hUkqo++2s 38ejfmx5AQOzlTRxLOUG7aWr8A5BGmgCGxzG2WGa8xWhLMj5RkBaInkBWT4Dqow9 qllbNh/J8a36BIPldMDS/A/NDQ8CPPBb2zcPV4inKiEIY2IXFbHSCRbKt5eN84bj KNi4v+c3SapbYoZgKSnfiFYBVI3D32xcad2UoL70qEbH6Pz9fxPtG8ii+/1rXAm8 8IvkwND/iPQAsXYwh5mSiY6VFmxELa630F/hs4C+S3eQ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:44 2026 by rpki-client