This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/349FQFd5GuBNHJ1XSdLWCNh7MgE.roa File: 349FQFd5GuBNHJ1XSdLWCNh7MgE.roa (raw, json) Hash identifier: X07/rOHAvRnDnhTDeHpviTIJqNY8MhsZ5tUjK1kXVRQ= Subject key identifier: DF:8F:45:40:57:79:1A:E0:4D:1C:9D:57:49:D2:D6:08:D8:7B:32:01 Certificate issuer: /CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Certificate serial: 019B7E3926AA62D3CC7476E3BD14612FCF9C Authority key identifier: 2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/349FQFd5GuBNHJ1XSdLWCNh7MgE.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 185.145.240.0/24 maxlen: 24 185.145.241.0/24 maxlen: 24 185.145.242.0/24 maxlen: 24 185.145.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.mft rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:aa:62:d3:cc:74:76:e3:bd:14:61:2f:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dfef2b839ad07786833b1bedca8b0b19203e111 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df8f454057791ae04d1c9d5749d2d608d87b3201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:7e:45:77:9b:95:97:39:ed:1e:53:02:84: b5:6e:cc:d9:68:42:9e:1a:a7:43:d4:91:db:5b:45: 4b:79:43:1b:fa:33:c5:8b:fc:be:cc:a1:a9:c0:3d: 75:8f:fb:81:65:f8:17:f3:17:16:a2:7a:d9:55:56: b7:bd:1e:08:1a:15:3d:10:b1:65:0c:53:37:42:51: ac:5b:b0:c3:b0:f2:e0:78:e6:aa:4f:54:e1:db:70: ce:7a:e0:2b:0e:8a:34:94:69:28:cf:af:ca:63:f5: 75:c3:c1:df:a0:a6:57:ae:f3:f3:c2:28:76:ca:de: 50:ce:ab:d5:7d:c7:19:33:7a:25:31:db:b7:2e:97: 5e:c4:da:15:65:96:0b:47:7b:dd:d2:c2:dc:74:f2: 57:82:5b:be:89:64:17:23:b2:2c:e0:1b:9b:e9:18: dc:c0:9c:19:8c:32:26:86:a2:e9:7e:13:e9:ba:50: 33:be:21:a2:1c:3e:c4:c5:99:e6:cd:0b:65:e2:0c: a1:63:5d:8d:ac:56:de:f0:37:ed:e4:9b:56:ed:2e: 6e:c6:5f:4c:17:6d:8e:ac:7f:86:62:7f:43:35:11: 61:41:26:77:26:c3:2b:f5:a8:3f:52:77:88:ce:a6: f1:14:88:5c:91:f6:ee:7b:54:3e:cc:78:05:ef:08: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8F:45:40:57:79:1A:E0:4D:1C:9D:57:49:D2:D6:08:D8:7B:32:01 X509v3 Authority Key Identifier: keyid:2D:FE:F2:B8:39:AD:07:78:68:33:B1:BE:DC:A8:B0:B1:92:03:E1:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lf7yuDmtB3hoM7G-3KiwsZID4RE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/349FQFd5GuBNHJ1XSdLWCNh7MgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/0357e8-3ea0-4968-9ef9-7d70519b76da/1/Lf7yuDmtB3hoM7G-3KiwsZID4RE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.240.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:71:8d:16:27:ea:03:15:1d:e9:57:0d:7d:a1:4d:bd:68:08: 5d:57:df:fc:4e:ee:8b:8c:eb:af:d8:4f:cd:8d:b7:23:96:5f: 4b:be:60:90:4b:2b:fe:ac:5f:37:a9:18:91:fd:8d:7c:1c:76: 22:0e:94:fd:44:c9:a4:58:3f:4a:70:d0:3f:bd:ff:41:78:68: 0d:95:83:3f:5a:17:50:05:79:f6:d6:14:26:34:10:a5:d8:e8: 80:d6:71:a0:35:f5:38:33:45:f7:a3:da:9c:fc:00:82:b7:be: 29:3b:84:a6:cf:38:be:65:36:f3:81:61:e8:00:65:90:82:b6: e9:70:46:45:0c:8d:f5:f8:91:ca:32:7d:6e:62:3d:a0:c2:97: 13:c0:2a:b3:b4:f1:e5:7b:24:60:0f:90:d3:93:ad:fe:0d:a6: 0c:cf:61:20:06:3f:f4:27:cb:37:7a:cf:e4:38:c7:66:99:50: 16:52:8f:99:87:d9:2e:49:92:ff:ba:3d:60:46:2f:71:5c:3b: 32:8e:1f:8f:ab:e5:f2:a5:06:b2:27:91:c9:00:b0:4c:cf:e3: c7:77:5f:5e:93:de:68:9c:6d:c9:9e:bd:b2:7d:56:e4:46:38: 44:90:f5:74:be:de:27:94:f8:47:88:90:13:af:c5:22:ed:05: 15:32:5b:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSaqYtPMdHbjvRRhL8+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZmVmMmI4MzlhZDA3Nzg2ODMzYjFiZWRjYThiMGIxOTIw M2UxMTEwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjhmNDU0MDU3NzkxYWUwNGQxYzlkNTc0OWQyZDYwOGQ4N2IzMjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukV+RXeblZc57R5TAoS1bszZaEKe GqdD1JHbW0VLeUMb+jPFi/y+zKGpwD11j/uBZfgX8xcWonrZVVa3vR4IGhU9ELFl DFM3QlGsW7DDsPLgeOaqT1Th23DOeuArDoo0lGkoz6/KY/V1w8HfoKZXrvPzwih2 yt5QzqvVfccZM3olMdu3LpdexNoVZZYLR3vd0sLcdPJXglu+iWQXI7Is4Bub6Rjc wJwZjDImhqLpfhPpulAzviGiHD7ExZnmzQtl4gyhY12NrFbe8Dft5JtW7S5uxl9M F22OrH+GYn9DNRFhQSZ3JsMr9ag/UneIzqbxFIhckfbue1Q+zHgF7wgSfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+PRUBXeRrgTRydV0nS1gjYezIBMB8GA1UdIwQY MBaAFC3+8rg5rQd4aDOxvtyosLGSA+ERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjkt N2Q3MDUxOWI3NmRhLzEvMzQ5RlFGZDVHdUJOSEoxWFNkTFdDTmg3TWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMzU3ZTgtM2VhMC00OTY4LTllZjktN2Q3MDUxOWI3NmRh LzEvTGY3eXVEbXRCM2hvTTdHLTNLaXdzWklENFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZHwMA0G CSqGSIb3DQEBCwUAA4IBAQAucY0WJ+oDFR3pVw19oU29aAhdV9/8Tu6LjOuv2E/N jbcjll9LvmCQSyv+rF83qRiR/Y18HHYiDpT9RMmkWD9KcNA/vf9BeGgNlYM/WhdQ BXn21hQmNBCl2OiA1nGgNfU4M0X3o9qc/ACCt74pO4Smzzi+ZTbzgWHoAGWQgrbp cEZFDI31+JHKMn1uYj2gwpcTwCqztPHleyRgD5DTk63+DaYMz2EgBj/0J8s3es/k OMdmmVAWUo+Zh9kuSZL/uj1gRi9xXDsyjh+Pq+XypQayJ5HJALBMz+PHd19ek95o nG3Jnr2yfVbkRjhEkPV0vt4nlPhHiJATr8Ui7QUVMlsf -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:59 2026 by rpki-client