This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/T3IIdcu9O4RqtWN63OnvjHlxoHA.roa File: T3IIdcu9O4RqtWN63OnvjHlxoHA.roa (raw, json) Hash identifier: mcKH90gzUrsNVUfzI9EqajlTYUwudYLzyU2jnBM19/w= Subject key identifier: 4F:72:08:75:CB:BD:3B:84:6A:B5:63:7A:DC:E9:EF:8C:79:71:A0:70 Certificate issuer: /CN=a09fda047b3a0b1c820435e699388660da32c63f Certificate serial: 019B797EF7CCFC71AED6573FB3B1AFA40B6A Authority key identifier: A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/T3IIdcu9O4RqtWN63OnvjHlxoHA.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 185.18.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.mft rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:cc:fc:71:ae:d6:57:3f:b3:b1:af:a4:0b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a09fda047b3a0b1c820435e699388660da32c63f Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f720875cbbd3b846ab5637adce9ef8c7971a070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:46:4d:6a:6c:1c:1d:3b:79:65:71:3f:d9:99: df:33:06:0f:d7:93:b4:22:8c:f9:c4:81:a1:05:1f: 8f:0e:50:b2:32:1c:b3:a2:59:22:f6:8c:c7:cb:90: 9a:f9:01:75:99:e7:4c:fe:3f:3c:96:73:0a:41:3b: 9f:47:75:a2:42:f9:32:1a:f2:98:ef:13:cd:db:34: b9:24:c0:1b:4f:2e:5b:5b:9e:4f:eb:a0:27:fa:da: f6:0e:4b:f2:3e:c7:29:16:d5:b2:f1:db:28:72:c4: bd:9a:13:77:e3:dc:29:f5:1f:9c:86:cb:f0:6b:30: 98:d3:46:a2:b6:fd:02:bd:89:bc:e7:ef:36:6f:cd: 35:0a:64:ba:54:30:70:d9:cf:b7:17:ff:6a:cd:33: f6:1d:1a:26:b1:1c:f6:b3:57:a7:e5:41:79:8e:90: 40:a7:8f:1e:e8:1a:a2:5d:bb:5e:5d:f1:5c:02:ad: 9b:cd:31:9c:8d:1b:62:ac:11:c0:af:2c:f8:bb:98: 23:7d:93:58:3a:f0:a2:24:a3:62:f1:c1:29:56:a5: d8:87:1b:d4:aa:7e:fe:06:04:75:8e:32:b3:82:4c: 54:e7:e1:a7:eb:2b:21:97:ce:41:f1:46:ec:0b:78: b8:08:3b:1f:ca:a7:43:94:87:3f:18:8f:f7:74:08: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:72:08:75:CB:BD:3B:84:6A:B5:63:7A:DC:E9:EF:8C:79:71:A0:70 X509v3 Authority Key Identifier: keyid:A0:9F:DA:04:7B:3A:0B:1C:82:04:35:E6:99:38:86:60:DA:32:C6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/T3IIdcu9O4RqtWN63OnvjHlxoHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8b4d32-0365-4daa-9d5b-29920e5167d9/1/oJ_aBHs6CxyCBDXmmTiGYNoyxj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.18.222.0/24 Signature Algorithm: sha256WithRSAEncryption 69:0e:78:7a:a7:64:63:ff:8f:c3:9e:f5:93:dd:be:ef:0e:16: a4:f5:49:f6:45:13:6a:f5:84:f9:4f:22:b3:a7:0d:e7:02:74: ca:cf:e8:75:60:d4:1a:6b:c5:a3:70:4f:c6:ed:1c:f7:9a:18: f1:bf:61:b9:87:11:61:4b:a6:22:64:4f:58:80:4b:e7:01:19: b4:3c:54:2f:d0:9f:ab:17:79:5b:dc:7b:76:fc:98:f0:8d:19: d1:21:32:58:d2:87:cb:af:1c:d3:c5:d1:b4:25:ee:5d:1b:fb: c1:e9:31:96:31:ff:04:e8:4f:30:30:9a:42:3f:a4:31:8e:81: 09:17:eb:e5:94:21:9a:8d:f8:f2:2d:17:9b:2c:92:46:a1:ed: bc:af:9f:b4:46:07:72:41:3b:d2:e3:47:b1:3e:df:dc:6b:43: cb:2b:41:5d:bf:6f:72:69:66:c5:fc:65:0f:8b:d8:82:c5:60: 56:a7:af:f7:30:c7:6d:98:ed:2b:66:49:40:88:fc:ca:df:db: b3:46:08:e3:51:e3:b6:01:51:47:ae:0d:88:9a:17:8a:79:11: 03:5c:ca:c3:65:8a:1c:5a:11:91:27:f2:dc:33:ad:34:ca:d7: f7:38:9d:59:01:e3:80:09:59:7c:c7:58:ca:0f:72:f0:5c:a3: 09:d8:4e:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvfM/HGu1lc/s7GvpAtqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOWZkYTA0N2IzYTBiMWM4MjA0MzVlNjk5Mzg4NjYwZGEz MmM2M2YwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjcyMDg3NWNiYmQzYjg0NmFiNTYzN2FkY2U5ZWY4Yzc5NzFhMDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40ZNamwcHTt5ZXE/2ZnfMwYP15O0 Ioz5xIGhBR+PDlCyMhyzolki9ozHy5Ca+QF1medM/j88lnMKQTufR3WiQvkyGvKY 7xPN2zS5JMAbTy5bW55P66An+tr2DkvyPscpFtWy8dsocsS9mhN349wp9R+chsvw azCY00aitv0CvYm85+82b801CmS6VDBw2c+3F/9qzTP2HRomsRz2s1en5UF5jpBA p48e6BqiXbteXfFcAq2bzTGcjRtirBHAryz4u5gjfZNYOvCiJKNi8cEpVqXYhxvU qn7+BgR1jjKzgkxU5+Gn6yshl85B8UbsC3i4CDsfyqdDlIc/GI/3dAjEQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9yCHXLvTuEarVjetzp74x5caBwMB8GA1UdIwQY MBaAFKCf2gR7OgscggQ15pk4hmDaMsY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0pfYUJIczZDeHlDQkRYbW1UaUdZTm95eGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84YjRkMzItMDM2NS00ZGFhLTlkNWIt Mjk5MjBlNTE2N2Q5LzEvVDNJSWRjdTlPNFJxdFdONjNPbnZqSGx4b0hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84YjRkMzItMDM2NS00ZGFhLTlkNWItMjk5MjBlNTE2N2Q5 LzEvb0pfYUJIczZDeHlDQkRYbW1UaUdZTm95eGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRLeMA0G CSqGSIb3DQEBCwUAA4IBAQBpDnh6p2Rj/4/DnvWT3b7vDhak9Un2RRNq9YT5TyKz pw3nAnTKz+h1YNQaa8WjcE/G7Rz3mhjxv2G5hxFhS6YiZE9YgEvnARm0PFQv0J+r F3lb3Ht2/JjwjRnRITJY0ofLrxzTxdG0Je5dG/vB6TGWMf8E6E8wMJpCP6QxjoEJ F+vllCGajfjyLRebLJJGoe28r5+0RgdyQTvS40exPt/ca0PLK0Fdv29yaWbF/GUP i9iCxWBWp6/3MMdtmO0rZklAiPzK39uzRgjjUeO2AVFHrg2ImheKeREDXMrDZYoc WhGRJ/LcM600ytf3OJ1ZAeOACVl8x1jKD3LwXKMJ2E7f -----END CERTIFICATE-----Generated at Sun Jan 25 10:06:56 2026 by rpki-client