This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/cByOIhT3fXuGDdydvIZc-IHUWjo.roa File: cByOIhT3fXuGDdydvIZc-IHUWjo.roa (raw, json) Hash identifier: TQWADn0tRj6yl/idNH7Pd66wbvEQd0OEdUVpdFtspDs= Subject key identifier: 70:1C:8E:22:14:F7:7D:7B:86:0D:DC:9D:BC:86:5C:F8:81:D4:5A:3A Certificate issuer: /CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Certificate serial: 019B7C13635E42A37327B34185A91BBD7472 Authority key identifier: 81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/cByOIhT3fXuGDdydvIZc-IHUWjo.roa Signing time: Fri 02 Jan 2026 00:20:04 +0000 ROA not before: Fri 02 Jan 2026 00:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 209.35.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.mft rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:63:5e:42:a3:73:27:b3:41:85:a9:1b:bd:74:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81a2d0dcd50a682f975ea3d8c38e5e67bb0322f9 Validity Not Before: Jan 2 00:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=701c8e2214f77d7b860ddc9dbc865cf881d45a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:e5:9a:49:03:c6:7b:02:44:4b:14:27:3d: 39:c5:0a:c5:7d:ac:06:52:66:ee:51:bc:76:33:00: 00:77:b2:ed:19:96:fe:b3:2a:43:ed:45:e2:d2:96: 97:85:35:4f:6e:e2:7f:bf:99:e7:83:f0:2a:0a:8c: 0a:e7:fe:51:e5:37:d3:88:54:0d:e1:58:d3:f1:4e: 72:c0:58:38:54:05:81:3d:66:25:6f:da:58:94:e8: 12:67:ad:db:fd:01:7d:50:4f:05:51:1c:7b:d4:af: bc:86:e0:2e:c7:c3:1f:77:7f:a7:c7:bf:4f:97:20: 1a:cd:24:4c:27:5a:83:76:a6:7f:0a:6e:44:66:29: 8e:47:a2:2b:09:ff:09:17:57:c3:82:19:67:83:a2: 99:ad:f5:52:21:38:fa:3c:b0:37:d2:0c:90:e1:a7: 9a:c3:67:68:9e:32:b1:0a:3f:c2:56:3e:95:ce:4b: 9e:b9:bb:e0:58:dc:67:99:8b:36:dd:98:18:c6:14: b0:31:52:4f:1d:3b:c2:c9:39:a4:f3:8f:b7:51:05: 53:8d:50:8e:d2:29:0e:81:3d:f1:a5:c1:92:0e:ea: fe:38:d5:54:ea:e7:50:16:80:32:a3:85:8b:d6:6e: c6:be:ce:8f:cf:03:64:d5:ed:66:2a:e9:66:d4:38: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1C:8E:22:14:F7:7D:7B:86:0D:DC:9D:BC:86:5C:F8:81:D4:5A:3A X509v3 Authority Key Identifier: keyid:81:A2:D0:DC:D5:0A:68:2F:97:5E:A3:D8:C3:8E:5E:67:BB:03:22:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/cByOIhT3fXuGDdydvIZc-IHUWjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/d25a72-bbe3-4ab0-9564-fe45d5160c39/1/gaLQ3NUKaC-XXqPYw45eZ7sDIvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.35.232.0/24 Signature Algorithm: sha256WithRSAEncryption 10:32:c3:ce:4b:24:5f:7e:ca:da:9a:64:bb:75:a0:92:fd:0c: 66:e2:15:6e:95:17:df:66:18:eb:83:44:9f:3d:03:b4:a7:6d: 9e:e9:69:f8:16:30:dc:8a:08:5e:9e:f9:42:95:9c:96:3b:f2: d1:3a:5e:ac:49:8e:19:ab:28:7e:72:44:a4:28:d6:f2:6d:ce: 04:20:9e:c3:a2:c0:bd:4e:89:83:95:7b:e4:99:f6:6e:79:c8: 73:6c:0c:c6:4d:ca:66:f4:f1:6a:5b:a8:0e:10:eb:e1:2a:57: fe:43:56:19:f6:1a:cf:10:7f:9a:42:5b:3d:68:52:28:34:db: 11:2e:f2:07:b8:80:ab:68:04:ad:88:d7:74:aa:d5:f2:23:73: 45:b6:7e:20:f7:aa:6b:77:ca:bb:75:26:e0:64:02:25:00:8b: bf:8b:d6:f5:98:4d:8c:b4:de:15:2d:ca:a7:00:38:f1:d4:44: 5e:d0:4d:d0:9b:50:fe:d1:f6:bd:df:19:a0:48:df:61:ba:a0: 1d:17:de:29:3f:e4:10:cd:99:7a:96:a3:49:e6:2c:89:b9:ce: 74:b2:ae:4d:d6:63:67:53:8c:7f:60:ad:bc:9c:1b:f4:a7:ec: a1:aa:82:f0:9f:27:6a:13:93:b4:45:85:dd:e9:1c:0d:0a:5e: 3c:ad:bf:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E2NeQqNzJ7NBhakbvXRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxYTJkMGRjZDUwYTY4MmY5NzVlYTNkOGMzOGU1ZTY3YmIw MzIyZjkwHhcNMjYwMTAyMDAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDFjOGUyMjE0Zjc3ZDdiODYwZGRjOWRiYzg2NWNmODgxZDQ1YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JDlmkkDxnsCREsUJz05xQrFfawG UmbuUbx2MwAAd7LtGZb+sypD7UXi0paXhTVPbuJ/v5nng/AqCowK5/5R5TfTiFQN 4VjT8U5ywFg4VAWBPWYlb9pYlOgSZ63b/QF9UE8FURx71K+8huAux8Mfd3+nx79P lyAazSRMJ1qDdqZ/Cm5EZimOR6IrCf8JF1fDghlng6KZrfVSITj6PLA30gyQ4aea w2donjKxCj/CVj6VzkueubvgWNxnmYs23ZgYxhSwMVJPHTvCyTmk84+3UQVTjVCO 0ikOgT3xpcGSDur+ONVU6udQFoAyo4WL1m7Gvs6PzwNk1e1mKulm1DiBnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAcjiIU9317hg3cnbyGXPiB1Fo6MB8GA1UdIwQY MBaAFIGi0NzVCmgvl16j2MOOXme7AyL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQt ZmU0NWQ1MTYwYzM5LzEvY0J5T0loVDNmWHVHRGR5ZHZJWmMtSUhVV2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9kMjVhNzItYmJlMy00YWIwLTk1NjQtZmU0NWQ1MTYwYzM5 LzEvZ2FMUTNOVUthQy1YWHFQWXc0NWVaN3NESXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SPoMA0G CSqGSIb3DQEBCwUAA4IBAQAQMsPOSyRffsrammS7daCS/Qxm4hVulRffZhjrg0Sf PQO0p22e6Wn4FjDcighenvlClZyWO/LROl6sSY4Zqyh+ckSkKNbybc4EIJ7DosC9 TomDlXvkmfZuechzbAzGTcpm9PFqW6gOEOvhKlf+Q1YZ9hrPEH+aQls9aFIoNNsR LvIHuICraAStiNd0qtXyI3NFtn4g96prd8q7dSbgZAIlAIu/i9b1mE2MtN4VLcqn ADjx1ERe0E3Qm1D+0fa93xmgSN9huqAdF94pP+QQzZl6lqNJ5iyJuc50sq5N1mNn U4x/YK28nBv0p+yhqoLwnydqE5O0RYXd6RwNCl48rb9Q -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:25 2026 by rpki-client