This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/rDbD36OC2clR1VcH9ybYG4X8bCg.roa File: rDbD36OC2clR1VcH9ybYG4X8bCg.roa (raw, json) Hash identifier: KScj6dQC600LiAKS+yk/LqkmCh6S5faudW7dbCKNdtE= Subject key identifier: AC:36:C3:DF:A3:82:D9:C9:51:D5:57:07:F7:26:D8:1B:85:FC:6C:28 Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc Certificate serial: 019B7E3933628CB0A95E51B8F6E05BEA325F Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/rDbD36OC2clR1VcH9ybYG4X8bCg.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21096 IP address blocks: 176.103.114.0/23 maxlen: 23 193.29.204.0/24 maxlen: 24 193.109.8.0/22 maxlen: 22 194.42.202.0/24 maxlen: 24 194.42.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:33:62:8c:b0:a9:5e:51:b8:f6:e0:5b:ea:32:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac36c3dfa382d9c951d55707f726d81b85fc6c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2e:69:f8:92:54:fa:33:00:90:36:ce:12:9f: f0:e7:7d:bd:96:1c:5f:df:ac:0b:8b:41:ad:62:af: 94:45:ab:ce:ab:34:d9:d8:ab:da:55:16:56:18:96: b6:1f:45:7a:86:44:5e:e8:17:47:8c:34:70:2a:cb: 60:67:05:61:57:94:b9:78:44:3f:4b:36:d7:d5:69: 10:39:47:97:75:35:7e:40:88:95:d9:e8:cb:35:55: 6e:58:56:8d:98:60:05:a2:ea:4f:83:2b:75:7a:97: 21:1b:dd:22:d1:86:5e:b5:66:3b:cc:23:a4:1d:dc: 28:00:2c:36:3e:60:6a:45:0a:90:d1:64:33:ac:95: 34:d8:bd:ce:9f:c6:fd:b7:a7:76:d7:93:56:65:89: 0d:e7:65:38:fc:b7:44:d7:cc:57:62:dd:e3:2c:36: 6a:6e:d8:5a:19:78:07:49:f3:b0:e8:40:c9:ae:3e: 94:2f:d2:66:90:b9:08:9c:dd:20:a2:10:72:40:4b: 58:cb:8f:d3:da:62:cb:b8:50:e0:b5:ab:0b:70:fa: fb:02:be:6a:b4:51:57:7c:91:13:73:e9:0e:ab:ff: 36:06:59:09:26:7b:29:9f:95:1a:3f:02:9b:d7:33: 6c:08:72:b6:88:12:76:3b:f6:d7:f3:09:2f:99:66: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:36:C3:DF:A3:82:D9:C9:51:D5:57:07:F7:26:D8:1B:85:FC:6C:28 X509v3 Authority Key Identifier: keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/rDbD36OC2clR1VcH9ybYG4X8bCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.114.0/23 193.29.204.0/24 193.109.8.0/22 194.42.202.0/23 Signature Algorithm: sha256WithRSAEncryption 91:fd:22:fa:22:46:79:cf:69:3c:02:c3:71:0d:06:07:88:67: 4e:af:4a:46:42:6f:ee:df:3d:09:d1:ce:d8:9b:7e:82:60:e5: 1a:0f:f8:16:10:10:26:f2:d5:8f:b5:08:6b:91:38:93:85:49: c1:fd:6e:e5:fa:a4:46:13:59:98:ca:cd:92:8b:41:b5:e2:ab: 1d:9b:e2:66:5f:20:51:21:8a:fa:99:6b:c3:37:f8:84:96:67: 27:3b:a5:37:e6:7e:c8:b4:8b:a0:2d:3a:d8:2b:7b:7d:29:06: 5c:f4:b5:46:91:17:6f:0c:b9:ff:e1:0f:d5:8b:53:76:4d:f7: 83:df:a9:6b:ec:25:c4:c8:f4:8b:48:5d:70:de:95:21:24:78: 45:e6:7c:dc:2c:e9:12:cf:23:16:fe:dd:7d:ae:cc:4b:38:cc: 29:62:fe:17:ac:c9:ad:5c:e1:94:d8:19:57:ce:a1:b8:0b:4a: be:fb:d3:fb:d5:e4:3c:6d:93:36:e3:09:e0:b8:78:05:32:f0: 9c:da:3d:b7:94:13:1e:e1:ca:6c:35:bb:bc:00:5f:b6:69:1c: 28:43:6a:af:29:4d:8a:a0:c5:24:f7:9f:c9:7c:4f:2a:45:9c: ef:c3:b1:3e:2b:0d:6e:b3:9f:9a:c8:bb:c8:30:4b:d9:ad:d8: ef:42:58:bd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OTNijLCpXlG49uBb6jJfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNmE1YzdlZWJiOGQ1ODhmMmZmMjJjNzc1YzFjMWExNDRj MjJkYmMwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzM2YzNkZmEzODJkOWM5NTFkNTU3MDdmNzI2ZDgxYjg1ZmM2YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y5p+JJU+jMAkDbOEp/w5329lhxf 36wLi0GtYq+URavOqzTZ2KvaVRZWGJa2H0V6hkRe6BdHjDRwKstgZwVhV5S5eEQ/ SzbX1WkQOUeXdTV+QIiV2ejLNVVuWFaNmGAFoupPgyt1epchG90i0YZetWY7zCOk HdwoACw2PmBqRQqQ0WQzrJU02L3On8b9t6d215NWZYkN52U4/LdE18xXYt3jLDZq bthaGXgHSfOw6EDJrj6UL9JmkLkInN0gohByQEtYy4/T2mLLuFDgtasLcPr7Ar5q tFFXfJETc+kOq/82BlkJJnspn5UaPwKb1zNsCHK2iBJ2O/bX8wkvmWY25QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKw2w9+jgtnJUdVXB/cm2BuF/GwoMB8GA1UdIwQY MBaAFPtqXH7ruNWI8v8ix3XBwaFEwi28MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0ycGNmdXU0MVlqeV95TEhkY0hCb1VUQ0xidy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhl LTk0NGNkOTJjMGMwZi8xL3JEYkQzNk9DMmNsUjFWY0g5eWJZRzRYOGJDZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhlLTk0NGNkOTJjMGMw Zi8xLzEtMnBjZnV1NDFZanlfeUxIZGNIQm9VVENMYncuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAGwZ3ID BADBHcwDBALBbQgDBAHCKsowDQYJKoZIhvcNAQELBQADggEBAJH9IvoiRnnPaTwC w3ENBgeIZ06vSkZCb+7fPQnRztibfoJg5RoP+BYQECby1Y+1CGuROJOFScH9buX6 pEYTWZjKzZKLQbXiqx2b4mZfIFEhivqZa8M3+ISWZyc7pTfmfsi0i6AtOtgre30p Blz0tUaRF28Muf/hD9WLU3ZN94PfqWvsJcTI9ItIXXDelSEkeEXmfNws6RLPIxb+ 3X2uzEs4zCli/hesya1c4ZTYGVfOobgLSr770/vV5DxtkzbjCeC4eAUy8JzaPbeU Ex7hymw1u7wAX7ZpHChDaq8pTYqgxST3n8l8TypFnO/DsT4rDW6zn5rIu8gwS9mt 2O9CWL0= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:33 2026 by rpki-client