This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/0MDmf31Geq28sqW5uhK6N30LoZg.roa File: 0MDmf31Geq28sqW5uhK6N30LoZg.roa (raw, json) Hash identifier: EpA+5vkgIFjeVI3itIuTpuLJ6aAzCK55k0xhYt0MpnY= Subject key identifier: D0:C0:E6:7F:7D:46:7A:AD:BC:B2:A5:B9:BA:12:BA:37:7D:0B:A1:98 Certificate issuer: /CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Certificate serial: 019B7E38FE8472188CD7ABD93E562C3B206C Authority key identifier: AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/0MDmf31Geq28sqW5uhK6N30LoZg.roa Signing time: Fri 02 Jan 2026 10:20:22 +0000 ROA not before: Fri 02 Jan 2026 10:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205800 IP address blocks: 185.206.124.0/24 maxlen: 24 185.206.125.0/24 maxlen: 24 185.206.126.0/24 maxlen: 24 185.206.127.0/24 maxlen: 24 2a0b:d3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.mft rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:fe:84:72:18:8c:d7:ab:d9:3e:56:2c:3b:20:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9092bbc2cacae247774f62b0fdbdc44a974cf2 Validity Not Before: Jan 2 10:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0c0e67f7d467aadbcb2a5b9ba12ba377d0ba198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8e:8b:7d:6c:4b:35:45:bc:31:1c:2d:18:0c: 58:22:13:4f:fa:45:f2:04:4e:73:d2:7b:d6:9b:5e: 85:f2:95:2c:ba:9f:56:a9:d0:80:e8:26:59:f2:e6: d8:46:6e:53:64:27:36:ed:a3:81:93:50:97:45:2f: b5:db:2d:23:d1:cd:db:a1:3c:d2:f2:81:2b:87:c2: dc:91:22:9c:13:42:bf:42:1c:af:d8:e2:be:74:49: 04:d8:07:f1:60:05:fa:67:27:e4:a6:42:fa:20:0d: e5:b4:c7:ef:50:e7:8b:d8:d3:04:eb:10:21:6c:60: 11:e7:76:cd:08:e8:ba:26:9e:b8:90:e4:ef:3b:c7: f9:93:a4:86:03:a7:4d:98:83:22:1e:30:53:ba:97: d5:f9:8e:42:89:0d:a8:b2:85:f6:4f:e2:d0:3c:c1: 6c:29:e3:82:be:23:49:dd:87:8d:bf:60:e8:54:ee: 66:98:f8:33:d2:c2:be:79:9b:d0:5c:de:73:26:94: 7c:b4:c9:3b:b0:4a:12:54:14:7d:76:10:a5:f5:c7: 10:aa:86:1c:cf:69:d1:86:41:a4:f9:44:ca:40:09: 31:f5:9e:03:60:dc:7e:84:32:00:49:9e:c6:fd:87: 2e:8d:19:55:ce:5f:a7:1c:04:1f:81:15:f9:c1:47: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C0:E6:7F:7D:46:7A:AD:BC:B2:A5:B9:BA:12:BA:37:7D:0B:A1:98 X509v3 Authority Key Identifier: keyid:AC:90:92:BB:C2:CA:CA:E2:47:77:4F:62:B0:FD:BD:C4:4A:97:4C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJCSu8LKyuJHd09isP29xEqXTPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/0MDmf31Geq28sqW5uhK6N30LoZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/c96349-0a22-4247-9943-a3fc196aabb3/1/rJCSu8LKyuJHd09isP29xEqXTPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.124.0/22 IPv6: 2a0b:d3c0::/32 Signature Algorithm: sha256WithRSAEncryption 97:a1:d4:de:b7:a2:81:e0:5a:4c:cf:2b:79:e8:d3:ab:94:39: dd:eb:f8:a6:eb:1b:21:03:fd:c8:a3:6b:5f:4b:f3:d7:76:c5: 65:8c:09:f2:b8:c2:68:70:19:90:55:bf:ae:04:5d:a1:83:90: 97:55:cd:e2:2e:3b:f3:ae:f7:99:70:fb:2a:ad:70:3a:6d:12: 6f:3c:c1:7c:2c:63:bd:11:01:30:1f:a6:1d:d7:be:30:88:ef: e2:ca:cc:50:00:64:d4:72:73:db:59:b6:24:ee:a3:04:f1:7a: 17:11:9e:6e:2c:56:e0:8f:1f:a1:52:0e:8e:04:4f:cd:e7:16: 18:29:04:e6:71:fd:2c:db:17:4d:3d:57:3a:78:fb:71:b1:96: 52:86:1e:b3:be:37:f6:07:d4:f2:45:d4:fa:0b:39:06:10:87: 71:33:e0:4c:69:20:91:e1:70:5c:ff:ea:53:89:00:8d:40:02: de:b9:e6:45:86:b4:f8:b3:00:b8:d7:72:93:48:c2:46:9b:b7: 96:20:f2:40:66:9f:37:e4:cd:62:b9:d1:5d:86:c4:e6:41:c2: 9c:7a:20:6a:14:0d:9e:73:7f:57:ab:f2:f7:ba:8c:f1:5d:81: 4d:11:bd:32:c3:5c:06:5e:a0:69:e4:5c:b0:60:82:13:c0:3d: 35:5c:ad:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OP6EchiM16vZPlYsOyBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOTA5MmJiYzJjYWNhZTI0Nzc3NGY2MmIwZmRiZGM0NGE5 NzRjZjIwHhcNMjYwMTAyMTAyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGMwZTY3ZjdkNDY3YWFkYmNiMmE1YjliYTEyYmEzNzdkMGJhMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro6LfWxLNUW8MRwtGAxYIhNP+kXy BE5z0nvWm16F8pUsup9WqdCA6CZZ8ubYRm5TZCc27aOBk1CXRS+12y0j0c3boTzS 8oErh8LckSKcE0K/Qhyv2OK+dEkE2AfxYAX6ZyfkpkL6IA3ltMfvUOeL2NME6xAh bGAR53bNCOi6Jp64kOTvO8f5k6SGA6dNmIMiHjBTupfV+Y5CiQ2osoX2T+LQPMFs KeOCviNJ3YeNv2DoVO5mmPgz0sK+eZvQXN5zJpR8tMk7sEoSVBR9dhCl9ccQqoYc z2nRhkGk+UTKQAkx9Z4DYNx+hDIASZ7G/YcujRlVzl+nHAQfgRX5wUecSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNDA5n99RnqtvLKluboSujd9C6GYMB8GA1UdIwQY MBaAFKyQkrvCysriR3dPYrD9vcRKl0zyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMt YTNmYzE5NmFhYmIzLzEvME1EbWYzMUdlcTI4c3FXNXVoSzZOMzBMb1pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9jOTYzNDktMGEyMi00MjQ3LTk5NDMtYTNmYzE5NmFhYmIz LzEvckpDU3U4TEt5dUpIZDA5aXNQMjl4RXFYVFBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuc58MA0E AgACMAcDBQAqC9PAMA0GCSqGSIb3DQEBCwUAA4IBAQCXodTet6KB4FpMzyt56NOr lDnd6/im6xshA/3Io2tfS/PXdsVljAnyuMJocBmQVb+uBF2hg5CXVc3iLjvzrveZ cPsqrXA6bRJvPMF8LGO9EQEwH6Yd174wiO/iysxQAGTUcnPbWbYk7qME8XoXEZ5u LFbgjx+hUg6OBE/N5xYYKQTmcf0s2xdNPVc6ePtxsZZShh6zvjf2B9TyRdT6CzkG EIdxM+BMaSCR4XBc/+pTiQCNQALeueZFhrT4swC413KTSMJGm7eWIPJAZp835M1i udFdhsTmQcKceiBqFA2ec39Xq/L3uozxXYFNEb0yw1wGXqBp5FywYIITwD01XK3H -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:23 2026 by rpki-client