This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa File: 0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa (raw, json) Hash identifier: /s2MC65jvamRWE4E3LzZLmVB6N6rAH4buP8PZFgnBKc= Subject key identifier: D0:CD:82:3D:D5:7B:5E:3B:ED:EE:7A:D1:A8:D8:B8:F5:8F:F9:43:4C Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019B79EBCE3FB34EC625FA7F2C145F0ABB40 Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa Signing time: Thu 01 Jan 2026 14:17:35 +0000 ROA not before: Thu 01 Jan 2026 14:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47554 IP address blocks: 185.170.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ce:3f:b3:4e:c6:25:fa:7f:2c:14:5f:0a:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0cd823dd57b5e3bedee7ad1a8d8b8f58ff9434c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:b0:3f:85:81:11:ac:26:61:4f:09:f8:72: ff:60:82:24:43:99:51:83:0c:fa:27:90:03:a6:4b: bb:4b:33:b1:ff:28:bb:9d:d1:db:f7:cc:d0:91:f9: 97:9b:ec:c9:e6:aa:b2:86:87:a2:60:53:3b:88:36: 10:39:a4:02:3b:15:05:b5:24:22:6e:cc:8b:13:33: ba:b6:a7:d6:5a:eb:bd:0d:b1:b9:ba:e7:e7:6b:86: da:24:f5:af:b9:5d:f0:fa:32:e7:bd:0e:90:b9:ae: 16:23:2a:24:63:65:d5:48:de:d2:8b:42:0b:d9:7b: 04:2b:35:18:85:cc:df:01:68:e8:c3:2d:df:00:3f: 3f:53:4d:ca:c3:c9:ae:2c:2b:b2:d9:3f:be:50:bb: 54:ff:62:c3:f1:eb:44:ea:d5:1b:a4:de:f5:fe:f3: 6a:ac:9a:3f:5c:a9:f3:00:3a:ab:76:7f:e0:f6:ba: 39:b4:08:eb:8a:a8:11:90:8f:b4:2d:71:26:0b:c9: 18:91:6f:22:10:08:83:5c:b4:59:61:28:1b:d1:78: 77:d8:22:b8:ac:f7:28:fb:d3:1b:77:b7:d9:a9:04: 78:23:4e:64:ad:eb:83:7d:e3:3b:2a:01:9d:29:e3: 06:a2:28:f0:cc:cf:15:23:01:db:50:4c:f4:57:ea: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CD:82:3D:D5:7B:5E:3B:ED:EE:7A:D1:A8:D8:B8:F5:8F:F9:43:4C X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.170.236.0/22 Signature Algorithm: sha256WithRSAEncryption 40:1d:9d:6d:4a:d7:fc:c4:e0:82:45:9a:02:d2:3d:46:ed:f9: 20:08:18:fb:e4:a0:60:c6:5e:5f:fc:7c:4e:d2:ca:f2:5d:18: 16:8c:8f:c0:51:01:3d:6b:59:13:9a:89:28:89:13:35:5e:33: 24:ba:68:ef:12:69:65:3a:ee:3c:14:47:57:fa:01:26:b2:e7: e8:13:be:28:c7:e9:4d:5b:47:c7:37:3d:36:5b:10:c9:94:47: bf:8f:31:94:13:42:62:86:7c:eb:bf:91:80:a3:3c:91:12:a9: fa:3f:01:ab:68:26:4d:a9:8e:86:d4:6d:c8:c7:0c:09:ff:5d: 9d:36:9c:36:86:50:40:92:16:44:be:36:31:f2:3d:2c:df:91: a8:56:3d:fb:e0:9b:4c:6a:73:6c:31:29:7e:1e:ee:07:4f:b4: 6c:f1:1e:99:8c:77:9e:62:61:b7:02:3c:9c:80:65:35:9c:c5: 73:3d:7d:33:1a:16:08:2b:36:da:34:04:34:28:6e:f8:95:d0: 8c:60:19:92:1f:71:7b:51:4c:0d:b8:20:5c:24:bc:a3:db:0f: 64:1f:25:93:18:61:52:25:5a:2a:5a:dd:09:96:f0:ab:1b:81: da:bd:61:52:27:e4:ac:f2:bd:fd:0d:5d:da:28:28:f5:e6:b8: 88:1d:9c:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5684/s07GJfp/LBRfCrtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGNkODIzZGQ1N2I1ZTNiZWRlZTdhZDFhOGQ4YjhmNThmZjk0MzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkewP4WBEawmYU8J+HL/YIIkQ5lR gwz6J5ADpku7SzOx/yi7ndHb98zQkfmXm+zJ5qqyhoeiYFM7iDYQOaQCOxUFtSQi bsyLEzO6tqfWWuu9DbG5uufna4baJPWvuV3w+jLnvQ6Qua4WIyokY2XVSN7Si0IL 2XsEKzUYhczfAWjowy3fAD8/U03Kw8muLCuy2T++ULtU/2LD8etE6tUbpN71/vNq rJo/XKnzADqrdn/g9ro5tAjriqgRkI+0LXEmC8kYkW8iEAiDXLRZYSgb0Xh32CK4 rPco+9Mbd7fZqQR4I05kreuDfeM7KgGdKeMGoijwzM8VIwHbUEz0V+qYnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDNgj3Ve1477e560ajYuPWP+UNMMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvME0yQ1BkVjdYanZ0N25yUnFOaTQ5WV81UTB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuarsMA0G CSqGSIb3DQEBCwUAA4IBAQBAHZ1tStf8xOCCRZoC0j1G7fkgCBj75KBgxl5f/HxO 0sryXRgWjI/AUQE9a1kTmokoiRM1XjMkumjvEmllOu48FEdX+gEmsufoE74ox+lN W0fHNz02WxDJlEe/jzGUE0Jihnzrv5GAozyREqn6PwGraCZNqY6G1G3IxwwJ/12d Npw2hlBAkhZEvjYx8j0s35GoVj374JtManNsMSl+Hu4HT7Rs8R6ZjHeeYmG3Ajyc gGU1nMVzPX0zGhYIKzbaNAQ0KG74ldCMYBmSH3F7UUwNuCBcJLyj2w9kHyWTGGFS JVoqWt0JlvCrG4HavWFSJ+Ss8r39DV3aKCj15riIHZxo -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:18 2026 by rpki-client