This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa File: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (raw, json) Hash identifier: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA= Subject key identifier: 0B:40:F7:5C:F1:A4:C8:2B:8F:38:6B:FD:61:6D:D6:69:0F:35:6B:D8 Certificate issuer: /CN=d301991fc343f358c0f2eebae55cf2da34521c7a Certificate serial: 019B7C12D819BB64FD0362F02EC6E09B8B56 Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57866 IP address blocks: 37.139.136.0/21 maxlen: 21 45.141.104.0/22 maxlen: 22 185.52.236.0/22 maxlen: 22 2a00:a7c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d8:19:bb:64:fd:03:62:f0:2e:c6:e0:9b:8b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b40f75cf1a4c82b8f386bfd616dd6690f356bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:00:f2:8a:9e:12:90:f8:b1:2e:17:2b:68:33: cf:83:6b:08:51:9f:0d:ca:b8:8b:4a:2b:f0:d8:6c: 7b:9e:1a:76:27:e0:05:22:9a:50:f3:3a:af:e6:d8: b1:47:87:f4:a9:f2:18:e9:ff:21:da:96:70:00:36: 8b:f0:3f:60:b4:94:40:22:81:16:74:da:a4:dc:cf: 05:35:40:a7:9e:0f:29:72:70:fc:ba:54:f0:e8:c3: 68:57:77:1b:81:64:cf:de:a9:f6:11:64:0a:f8:ed: d7:d8:d1:ae:b5:32:db:81:fb:7a:8e:4e:f4:f1:ad: 0a:e6:8f:2f:61:b3:cb:51:72:b3:71:86:84:f1:f6: 6e:dd:4d:da:6f:e7:93:cf:c9:db:27:9b:9b:9d:92: a0:4a:a7:12:bc:02:6d:24:81:e5:3c:0d:d1:de:3f: 8a:78:c7:cd:75:46:13:87:17:8e:cc:97:51:f3:a4: 4e:3e:08:f9:3a:41:90:b6:95:b6:48:13:e1:ee:49: 6c:57:47:64:5b:88:16:36:39:6b:66:1f:31:0b:61: 3d:a5:ae:cd:c3:0b:0a:8b:58:3c:6c:70:53:2f:f0: 45:2d:b9:52:d9:36:cb:a7:4a:9b:30:74:e6:aa:72: a5:cb:2b:4f:ea:17:d4:0c:03:08:4f:fd:e8:6d:77: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:40:F7:5C:F1:A4:C8:2B:8F:38:6B:FD:61:6D:D6:69:0F:35:6B:D8 X509v3 Authority Key Identifier: keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.136.0/21 45.141.104.0/22 185.52.236.0/22 IPv6: 2a00:a7c0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:00:5c:24:35:3a:82:3a:ab:87:57:0e:75:de:7f:f4:b5:cb: 84:16:eb:6c:f7:33:22:99:6f:18:26:16:0c:1b:37:4e:eb:de: bf:f6:6d:df:7d:00:92:96:1c:30:cc:0f:42:b1:cc:ed:bc:04: 7c:e3:fe:58:14:a2:fd:68:0c:dd:92:37:eb:27:a4:93:f8:a3: 4f:04:0e:1b:67:66:9a:e7:2c:bb:e3:14:3b:97:d3:4e:66:de: 89:a9:54:30:28:72:ac:d1:02:ce:46:e1:a6:0f:b4:69:94:f3: b9:9a:c9:e6:01:bf:5c:26:60:0f:33:05:8f:9c:10:ac:96:6c: 2e:68:90:01:55:36:bb:c4:5d:d2:5c:18:3f:69:93:b4:bd:b9: 59:b6:d9:73:23:c5:2f:d1:ca:f6:b3:7c:1b:d7:91:d8:8c:82: bf:26:9f:62:97:d2:5c:86:3b:d1:bb:65:01:bb:27:4b:23:d2: 53:2e:5c:db:d2:77:a4:78:37:d8:b8:70:7c:1f:88:f8:11:21: 03:e5:e4:a5:f9:0e:21:fa:89:06:58:34:d0:cc:b3:a9:85:68: 9f:40:be:b0:df:91:08:c8:6d:9e:31:1d:eb:c3:3c:50:f0:65: 0a:85:b7:62:39:59:48:63:c2:b9:43:2b:54:15:c7:cf:36:15: cb:45:f1:54 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8EtgZu2T9A2LwLsbgm4tWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMDE5OTFmYzM0M2YzNThjMGYyZWViYWU1NWNmMmRhMzQ1 MjFjN2EwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjQwZjc1Y2YxYTRjODJiOGYzODZiZmQ2MTZkZDY2OTBmMzU2YmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ADyip4SkPixLhcraDPPg2sIUZ8N yriLSivw2Gx7nhp2J+AFIppQ8zqv5tixR4f0qfIY6f8h2pZwADaL8D9gtJRAIoEW dNqk3M8FNUCnng8pcnD8ulTw6MNoV3cbgWTP3qn2EWQK+O3X2NGutTLbgft6jk70 8a0K5o8vYbPLUXKzcYaE8fZu3U3ab+eTz8nbJ5ubnZKgSqcSvAJtJIHlPA3R3j+K eMfNdUYThxeOzJdR86ROPgj5OkGQtpW2SBPh7klsV0dkW4gWNjlrZh8xC2E9pa7N wwsKi1g8bHBTL/BFLblS2TbLp0qbMHTmqnKlyytP6hfUDAMIT/3obXd4RQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAtA91zxpMgrjzhr/WFt1mkPNWvYMB8GA1UdIwQY MBaAFNMBmR/DQ/NYwPLuuuVc8to0Uhx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHdHWkg4TkQ4MWpBOHU2NjVWenkyalJTSEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jMzZmODMtOGIzNS00ZDA1LWEzMzQt Zjk4YzQ4MzAxNWQ3LzEvQzBEM1hQR2t5Q3VQT0d2OVlXM1dhUTgxYTlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9jMzZmODMtOGIzNS00ZDA1LWEzMzQtZjk4YzQ4MzAxNWQ3 LzEvMHdHWkg4TkQ4MWpBOHU2NjVWenkyalJTSEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJYuIAwQC LY1oAwQCuTTsMA0EAgACMAcDBQAqAKfAMA0GCSqGSIb3DQEBCwUAA4IBAQAqAFwk NTqCOquHVw513n/0tcuEFuts9zMimW8YJhYMGzdO696/9m3ffQCSlhwwzA9Csczt vAR84/5YFKL9aAzdkjfrJ6ST+KNPBA4bZ2aa5yy74xQ7l9NOZt6JqVQwKHKs0QLO RuGmD7RplPO5msnmAb9cJmAPMwWPnBCslmwuaJABVTa7xF3SXBg/aZO0vblZttlz I8Uv0cr2s3wb15HYjIK/Jp9il9JchjvRu2UBuydLI9JTLlzb0nekeDfYuHB8H4j4 ESED5eSl+Q4h+okGWDTQzLOphWifQL6w35EIyG2eMR3rwzxQ8GUKhbdiOVlIY8K5 QytUFcfPNhXLRfFU -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:28 2026 by rpki-client