This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/0tgdN2qxcJplebNaaWT9iaqWv6s.roa File: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (raw, json) Hash identifier: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU= Subject key identifier: D2:D8:1D:37:6A:B1:70:9A:65:79:B3:5A:69:64:FD:89:AA:96:BF:AB Certificate issuer: /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Certificate serial: 019B791121E0D0B6F34FFEBDC84BC821AF83 Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/0tgdN2qxcJplebNaaWT9iaqWv6s.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 87.236.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 04:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:21:e0:d0:b6:f3:4f:fe:bd:c8:4b:c8:21:af:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d81d376ab1709a6579b35a6964fd89aa96bfab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:e6:88:7c:7a:c9:af:55:43:2b:f1:84:91: b1:2a:b0:ad:3d:de:87:2f:8e:71:0d:c2:7a:39:1f: d5:8d:0c:84:93:70:11:a4:a2:e9:c4:66:ef:b4:3f: 4d:98:e5:71:18:2b:79:64:7b:c8:86:a3:b9:66:3c: b3:f7:a0:5b:2b:a0:14:36:2c:18:b4:aa:26:90:8d: e5:a8:af:1c:b0:e4:ed:3a:bd:a5:ba:58:bf:c3:87: fd:cb:63:f6:2e:73:9c:07:83:56:8a:fc:6c:00:63: f5:d1:64:4e:49:03:59:51:ea:45:f8:d3:ef:11:d8: c1:72:fd:74:21:e8:0f:8f:06:6a:58:8c:02:a9:78: 21:37:de:a7:bc:2a:fc:3b:ac:d4:53:89:98:5a:9a: 70:8c:ad:d1:e6:d1:60:f2:38:c6:d2:54:b3:65:d8: 37:13:bf:87:e7:8b:72:84:0d:10:1e:88:4c:aa:0f: a1:de:6a:be:ff:9d:b8:0c:5d:cd:f8:00:ba:36:47: 0c:6a:3b:e9:8e:d2:74:45:09:81:19:71:69:e5:3a: 1c:b4:45:e5:2f:bb:81:c3:d5:ee:13:bd:56:c9:80: 14:0e:57:5d:9e:3a:ae:67:bb:d6:91:43:e0:d1:28: 3a:bc:f1:d8:ba:60:b0:94:2b:bc:9e:10:04:7e:b4: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D8:1D:37:6A:B1:70:9A:65:79:B3:5A:69:64:FD:89:AA:96:BF:AB X509v3 Authority Key Identifier: keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/0tgdN2qxcJplebNaaWT9iaqWv6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.164.0/24 Signature Algorithm: sha256WithRSAEncryption 93:35:6e:d2:29:eb:b5:0b:29:d3:4d:cc:75:98:b4:a4:92:88: 8e:cb:b7:a7:9b:43:e6:aa:2b:ce:e5:13:81:2b:b1:df:b1:54: d9:34:c5:57:50:ba:14:05:ee:78:44:bc:e5:37:ca:4a:9e:0b: 6d:00:f3:84:d1:92:c1:45:fe:ef:04:00:6a:e9:e7:b5:59:a7: d2:97:cc:e7:ba:7e:50:cb:9a:36:c8:de:bf:ab:6c:9e:a7:bb: a2:69:82:a2:47:63:ad:bb:1c:e0:56:83:dc:a5:be:ae:4c:f4: 6a:75:42:f1:f9:1b:3d:a7:26:ff:bf:94:fb:d9:db:ac:d8:75: 7b:3a:65:53:64:a8:ee:af:90:8c:ee:29:61:62:23:eb:9e:d6: 53:5e:6b:66:2e:3d:82:52:6c:15:2f:05:e6:7a:ff:f0:16:24: b5:01:fe:22:da:d9:67:df:5a:d2:7c:c0:e3:37:f2:7a:9d:e0: aa:e7:3a:9e:59:e0:94:6c:d5:29:fb:62:5d:60:c8:ac:12:1f: 55:fc:2b:7c:98:fd:d9:9e:c2:12:e4:84:70:63:06:a3:12:b9: 5c:4e:9e:cd:67:46:df:30:5b:09:f3:9d:30:c7:c6:4d:c6:15: 86:50:8c:b2:70:32:39:bd:7f:c0:a7:18:38:11:99:d9:ca:64: 8b:89:b8:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESHg0LbzT/69yEvIIa+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YTRmN2Y0ZTRlOWU3MmMzYTMzOTNmYjVkNmVhNzQyYmMx YjRjMjgwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQ4MWQzNzZhYjE3MDlhNjU3OWIzNWE2OTY0ZmQ4OWFhOTZiZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2PmiHx6ya9VQyvxhJGxKrCtPd6H L45xDcJ6OR/VjQyEk3ARpKLpxGbvtD9NmOVxGCt5ZHvIhqO5Zjyz96BbK6AUNiwY tKomkI3lqK8csOTtOr2luli/w4f9y2P2LnOcB4NWivxsAGP10WROSQNZUepF+NPv EdjBcv10IegPjwZqWIwCqXghN96nvCr8O6zUU4mYWppwjK3R5tFg8jjG0lSzZdg3 E7+H54tyhA0QHohMqg+h3mq+/524DF3N+AC6NkcMajvpjtJ0RQmBGXFp5ToctEXl L7uBw9XuE71WyYAUDlddnjquZ7vWkUPg0Sg6vPHYumCwlCu8nhAEfrRTIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLYHTdqsXCaZXmzWmlk/Ymqlr+rMB8GA1UdIwQY MBaAFAmk9/Tk6ecsOjOT+11up0K8G0woMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUt Mjg0YzgyZGVjN2M2LzEvMHRnZE4ycXhjSnBsZWJOYWFXVDlpYXFXdjZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYjQ4ZDUtMjhkYS00Mzg1LTkzOTUtMjg0YzgyZGVjN2M2 LzEvQ2FUMzlPVHA1eXc2TTVQN1hXNm5RcndiVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+ykMA0G CSqGSIb3DQEBCwUAA4IBAQCTNW7SKeu1CynTTcx1mLSkkoiOy7enm0PmqivO5ROB K7HfsVTZNMVXULoUBe54RLzlN8pKngttAPOE0ZLBRf7vBABq6ee1WafSl8znun5Q y5o2yN6/q2yep7uiaYKiR2OtuxzgVoPcpb6uTPRqdULx+Rs9pyb/v5T72dus2HV7 OmVTZKjur5CM7ilhYiPrntZTXmtmLj2CUmwVLwXmev/wFiS1Af4i2tln31rSfMDj N/J6neCq5zqeWeCUbNUp+2JdYMisEh9V/Ct8mP3ZnsIS5IRwYwajErlcTp7NZ0bf MFsJ850wx8ZNxhWGUIyycDI5vX/Apxg4EZnZymSLibgX -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:08 2026 by rpki-client