This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa File: dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa (raw, json) Hash identifier: uE7jBQ3nDWE2TUDIdFmUrQEZmjWLtoSS41WGaaBfii4= Subject key identifier: 74:8A:96:67:67:16:1E:20:45:56:F6:71:A0:18:6A:5A:9B:80:C2:64 Certificate issuer: /CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Certificate serial: 019B797E8B85DF2FE9AB6652BE0E683084F3 Authority key identifier: 30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa Signing time: Thu 01 Jan 2026 12:18:15 +0000 ROA not before: Thu 01 Jan 2026 12:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50000 IP address blocks: 185.135.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.mft rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8b:85:df:2f:e9:ab:66:52:be:0e:68:30:84:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30628d9238e23d6bf4c735995c9e2dea0050f00c Validity Not Before: Jan 1 12:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=748a966767161e204556f671a0186a5a9b80c264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:f5:30:c9:2f:3a:6c:59:16:0b:14:50:d9: 87:bd:a2:51:4b:64:2e:aa:5c:53:52:98:83:ba:61: 0c:77:e8:07:15:ec:20:d3:7b:a9:cd:e9:ed:91:a0: a8:44:62:0a:9d:65:ff:ff:d0:fe:7d:1f:b6:85:0a: 1f:bf:a7:a2:26:24:be:cc:3f:43:ad:59:53:02:16: eb:19:02:71:90:52:34:d4:ed:9b:5c:b5:1c:ad:f4: 1d:5c:c8:20:bf:1b:6c:2e:7c:18:e6:39:b2:ec:74: 8b:17:6a:78:68:49:05:b0:18:b5:50:32:de:88:32: 38:42:a8:6d:73:0b:0c:ad:a6:8b:72:3b:a4:4a:0a: 8f:d8:e1:5e:3a:dd:e7:69:0a:29:63:c3:5d:07:ef: 76:46:55:f6:3d:47:f2:43:f0:51:fc:08:cd:c9:a7: 8d:ae:76:fa:21:df:a4:28:ae:df:cb:b7:96:a9:db: 96:c1:0c:9e:53:55:96:88:24:16:a5:7f:33:de:5d: 2c:f8:5c:b2:20:cb:34:b5:93:5c:63:9a:da:56:a2: 5c:49:35:37:ad:b9:64:68:db:d8:57:8a:fc:e7:56: f7:1f:0c:48:be:a7:2b:1b:80:1c:3e:21:70:0b:69: e9:29:64:8b:d5:b9:32:1d:8a:04:df:6e:b8:4f:75: 8b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8A:96:67:67:16:1E:20:45:56:F6:71:A0:18:6A:5A:9B:80:C2:64 X509v3 Authority Key Identifier: keyid:30:62:8D:92:38:E2:3D:6B:F4:C7:35:99:5C:9E:2D:EA:00:50:F0:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/dIqWZ2cWHiBFVvZxoBhqWpuAwmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/40e57e-c627-4b9b-9577-596fa8c0a57a/1/MGKNkjjiPWv0xzWZXJ4t6gBQ8Aw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.46.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:1d:c4:b8:68:d5:d8:fb:56:ea:8b:0e:94:2d:8c:0a:5a:45: 34:97:e7:7b:7d:ac:9f:7d:f8:8f:b3:25:09:50:95:11:e4:9e: b5:8c:a6:db:db:44:7e:13:43:2b:c8:56:7a:a9:fd:3f:ea:a2: c8:29:46:f9:07:58:f5:4f:d1:f2:97:4a:e2:97:d2:db:72:79: 9e:e4:b3:f4:1d:04:74:80:ca:a8:3c:6d:5c:84:34:d3:d6:d1: df:60:1c:03:01:95:d3:90:ee:7e:51:c4:e1:0f:0f:88:dd:6e: 8c:e0:7b:fc:57:1e:b3:7b:4c:75:d6:46:1d:5c:97:ed:45:aa: 7e:7f:b9:8e:fa:9f:a1:6e:e6:e2:7c:c5:be:c0:e8:1b:0b:e8: e9:06:0e:87:9f:e8:0a:cf:ec:a8:fe:d3:0f:a3:ef:eb:73:76: bf:91:0e:25:35:8f:70:a9:9c:ad:81:68:ec:aa:65:f5:42:99: 95:31:19:59:bd:79:69:c8:46:06:14:73:0b:97:c9:57:52:e1: 89:ec:9c:c1:05:2a:6f:31:f0:d4:fe:00:a6:52:cf:e4:71:9e: 97:98:33:27:d1:5f:3b:7e:54:96:5c:df:a5:6c:56:0e:1c:5a: 02:46:f0:dc:2e:60:c1:42:45:cf:d6:82:65:e5:2f:c3:dc:04: d9:aa:62:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fouF3y/pq2ZSvg5oMITzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNjI4ZDkyMzhlMjNkNmJmNGM3MzU5OTVjOWUyZGVhMDA1 MGYwMGMwHhcNMjYwMTAxMTIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDhhOTY2NzY3MTYxZTIwNDU1NmY2NzFhMDE4NmE1YTliODBjMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VH1MMkvOmxZFgsUUNmHvaJRS2Qu qlxTUpiDumEMd+gHFewg03upzentkaCoRGIKnWX//9D+fR+2hQofv6eiJiS+zD9D rVlTAhbrGQJxkFI01O2bXLUcrfQdXMggvxtsLnwY5jmy7HSLF2p4aEkFsBi1UDLe iDI4QqhtcwsMraaLcjukSgqP2OFeOt3naQopY8NdB+92RlX2PUfyQ/BR/AjNyaeN rnb6Id+kKK7fy7eWqduWwQyeU1WWiCQWpX8z3l0s+FyyIMs0tZNcY5raVqJcSTU3 rblkaNvYV4r851b3HwxIvqcrG4AcPiFwC2npKWSL1bkyHYoE3264T3WLewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHSKlmdnFh4gRVb2caAYalqbgMJkMB8GA1UdIwQY MBaAFDBijZI44j1r9Mc1mVyeLeoAUPAMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1Nzct NTk2ZmE4YzBhNTdhLzEvZElxV1oyY1dIaUJGVnZaeG9CaHFXcHVBd21RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS80MGU1N2UtYzYyNy00YjliLTk1NzctNTk2ZmE4YzBhNTdh LzEvTUdLTmtqamlQV3YweHpXWlhKNHQ2Z0JROEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYcuMA0G CSqGSIb3DQEBCwUAA4IBAQAaHcS4aNXY+1bqiw6ULYwKWkU0l+d7fayfffiPsyUJ UJUR5J61jKbb20R+E0MryFZ6qf0/6qLIKUb5B1j1T9Hyl0ril9Lbcnme5LP0HQR0 gMqoPG1chDTT1tHfYBwDAZXTkO5+UcThDw+I3W6M4Hv8Vx6ze0x11kYdXJftRap+ f7mO+p+hbubifMW+wOgbC+jpBg6Hn+gKz+yo/tMPo+/rc3a/kQ4lNY9wqZytgWjs qmX1QpmVMRlZvXlpyEYGFHMLl8lXUuGJ7JzBBSpvMfDU/gCmUs/kcZ6XmDMn0V87 flSWXN+lbFYOHFoCRvDcLmDBQkXP1oJl5S/D3ATZqmLZ -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:18 2026 by rpki-client