This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/dXpQm6W-fzeDoM6ANaDna4LeJJw.roa File: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (raw, json) Hash identifier: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8= Subject key identifier: 75:7A:50:9B:A5:BE:7F:37:83:A0:CE:80:35:A0:E7:6B:82:DE:24:9C Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019B7B362556DE5982ADAFDB4AFBFDB7F879 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/dXpQm6W-fzeDoM6ANaDna4LeJJw.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209428 IP address blocks: 194.180.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:25:56:de:59:82:ad:af:db:4a:fb:fd:b7:f8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=757a509ba5be7f3783a0ce8035a0e76b82de249c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:15:eb:30:d7:9d:f8:c3:bb:57:a3:4f:17: a3:b2:94:8c:bc:a3:c9:96:2f:32:29:e1:36:13:77: 30:53:d7:a0:47:5a:9d:2d:47:92:c3:ee:32:40:01: 58:82:e2:d1:56:79:d7:d9:50:ac:58:c5:02:eb:28: 84:76:bb:1a:00:10:73:37:37:79:2d:84:27:c6:95: 5d:04:9d:1b:dc:b0:e9:09:72:c9:eb:72:70:80:8d: 92:82:0c:3f:5b:10:21:a1:d7:1e:2f:f2:0f:8e:1a: 0b:f2:a7:d5:d3:af:19:cb:e4:38:c8:c0:32:68:9d: 15:e7:33:c9:95:2a:b6:bc:d3:cb:79:b4:e1:e9:be: 83:50:0d:c8:25:4c:c6:3e:9c:24:69:d1:39:4f:22: b7:a8:66:4e:97:df:04:7e:65:c8:69:c8:cc:df:db: fe:12:c2:ef:56:50:29:15:aa:7a:f6:10:d1:f8:6d: b9:e9:4a:9d:cc:e7:b5:65:fc:b5:64:05:0c:ba:da: fa:21:bc:16:fd:d8:02:e0:36:ca:60:1b:f0:04:a9: 2b:60:9e:42:a9:78:f2:fb:22:6e:3a:19:88:56:55: 1d:d3:59:d2:33:26:9b:cf:db:06:90:18:db:03:8c: be:cb:82:ea:85:a5:92:18:ae:80:9d:e2:5e:3e:79: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7A:50:9B:A5:BE:7F:37:83:A0:CE:80:35:A0:E7:6B:82:DE:24:9C X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/dXpQm6W-fzeDoM6ANaDna4LeJJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.225.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:b7:a7:c2:4a:9c:f2:2e:3b:59:ec:f3:8c:05:85:31:81:42: 9a:55:0c:60:51:f4:2d:46:58:a5:7e:f1:8e:d6:3a:9c:55:aa: 23:61:72:be:d3:62:1c:b6:02:0c:75:9b:92:30:93:56:ac:1c: 63:f0:1e:b4:f0:56:27:e7:41:94:c0:43:ec:84:71:06:83:63: 84:74:05:ec:49:1b:e9:72:19:b8:4c:b2:d9:c5:c9:b5:5f:1a: 98:d3:64:7a:a4:bc:12:ae:7f:4e:ff:40:fc:88:65:be:95:6f: 74:77:da:ee:b2:12:fc:81:98:fc:ec:39:f3:9c:eb:50:0f:6d: 8c:c7:9a:2c:f9:49:b3:5c:dd:cd:5b:f5:18:09:18:26:33:05: 01:6a:fb:21:59:d3:85:ab:32:00:85:d6:8a:15:55:94:8b:dd: ac:b3:03:54:d2:ea:0e:27:f6:f0:14:fb:d9:7a:f3:66:f9:a2: 37:bc:0a:83:4f:61:ab:1c:23:40:63:d3:b2:1d:21:9e:45:0c: 91:0a:a9:e0:ea:fd:c6:0f:92:63:aa:76:21:1d:08:fa:cb:43: a7:67:50:98:bc:a5:a7:b3:96:92:9a:1e:0f:2f:2c:c2:15:45: f6:57:e6:e1:b3:b0:af:21:ce:36:fa:b1:7a:ab:f7:72:8a:fe: 12:60:d9:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NiVW3lmCra/bSvv9t/h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTdhNTA5YmE1YmU3ZjM3ODNhMGNlODAzNWEwZTc2YjgyZGUyNDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWcV6zDXnfjDu1ejTxejspSMvKPJ li8yKeE2E3cwU9egR1qdLUeSw+4yQAFYguLRVnnX2VCsWMUC6yiEdrsaABBzNzd5 LYQnxpVdBJ0b3LDpCXLJ63JwgI2Sggw/WxAhodceL/IPjhoL8qfV068Zy+Q4yMAy aJ0V5zPJlSq2vNPLebTh6b6DUA3IJUzGPpwkadE5TyK3qGZOl98EfmXIacjM39v+ EsLvVlApFap69hDR+G256UqdzOe1Zfy1ZAUMutr6IbwW/dgC4DbKYBvwBKkrYJ5C qXjy+yJuOhmIVlUd01nSMyabz9sGkBjbA4y+y4LqhaWSGK6AneJePnkIJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHV6UJulvn83g6DOgDWg52uC3iScMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvZFhwUW02Vy1memVEb002QU5hRG5hNExlSkp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrThMA0G CSqGSIb3DQEBCwUAA4IBAQCMt6fCSpzyLjtZ7POMBYUxgUKaVQxgUfQtRlilfvGO 1jqcVaojYXK+02IctgIMdZuSMJNWrBxj8B608FYn50GUwEPshHEGg2OEdAXsSRvp chm4TLLZxcm1XxqY02R6pLwSrn9O/0D8iGW+lW90d9rushL8gZj87DnznOtQD22M x5os+UmzXN3NW/UYCRgmMwUBavshWdOFqzIAhdaKFVWUi92sswNU0uoOJ/bwFPvZ evNm+aI3vAqDT2GrHCNAY9OyHSGeRQyRCqng6v3GD5JjqnYhHQj6y0OnZ1CYvKWn s5aSmh4PLyzCFUX2V+bhs7CvIc42+rF6q/dyiv4SYNlx -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:52 2026 by rpki-client