This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/0dMJhsxjgnbAU5WFa10AoRaFilA.roa File: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (raw, json) Hash identifier: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8= Subject key identifier: D1:D3:09:86:CC:63:82:76:C0:53:95:85:6B:5D:00:A1:16:85:8A:50 Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019B77C672F24013E30078A4712B123EE13E Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/0dMJhsxjgnbAU5WFa10AoRaFilA.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204540 IP address blocks: 185.112.172.0/24 maxlen: 24 185.112.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:f2:40:13:e3:00:78:a4:71:2b:12:3e:e1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1d30986cc638276c05395856b5d00a116858a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:62:77:7f:f6:a3:38:5d:64:09:b7:ed:08: 1c:31:ae:87:19:56:71:ac:7f:43:0e:95:b7:ab:8e: cf:e9:70:81:05:57:17:b7:b8:f4:01:dc:f4:a1:71: bf:b1:36:51:8d:97:f6:a9:0d:55:40:a8:8f:aa:a4: a2:66:89:5e:85:af:81:1f:c9:a3:69:cf:2c:72:dc: 80:40:37:77:ff:70:4e:f2:34:00:6c:16:c1:92:c3: e1:db:26:07:03:f7:f6:ee:b4:c2:f0:c3:51:db:50: 0d:9f:da:1c:40:91:36:f8:da:ee:a3:ed:2d:95:06: e3:83:20:05:64:21:0a:a4:13:4a:54:6d:ca:0f:82: 3e:39:9f:82:8c:86:87:ec:a1:d0:41:c8:8c:9c:60: b8:37:12:53:09:e4:3d:45:1d:3e:63:4e:fd:4b:b8: 4d:68:c1:27:65:91:a6:c1:7d:6a:06:ad:15:d2:5d: f9:de:44:8b:48:6d:66:a0:3d:9b:df:f3:81:ed:14: 13:17:dc:ce:1e:6f:1f:19:e9:45:38:47:8a:ef:47: 62:31:60:65:2e:2b:36:85:8b:0e:55:39:a5:45:90: e8:4c:79:ae:3d:db:30:37:9c:ee:57:ad:ff:5a:af: 03:d4:5b:14:85:28:e2:26:41:1d:26:e2:61:a5:c9: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:09:86:CC:63:82:76:C0:53:95:85:6B:5D:00:A1:16:85:8A:50 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/0dMJhsxjgnbAU5WFa10AoRaFilA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.172.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:2b:ab:5b:d7:61:c5:94:89:7a:bf:35:3c:4c:08:cb:e8:69: 32:39:f0:97:c4:41:08:e4:fa:b9:6e:0a:c6:04:22:f1:6e:ff: c0:ff:ca:ec:d2:a8:a2:70:55:7b:52:86:65:57:0f:7d:7c:c3: eb:f3:25:0c:32:a2:02:a5:bd:a9:28:29:3e:71:de:8f:5b:70: 75:5c:c5:ad:e6:2a:dd:9c:a1:bc:b8:e9:88:7d:8e:db:5f:3a: c6:7a:8f:ea:81:90:c5:c2:e9:e1:29:33:16:6e:ed:31:cf:fd: 5d:79:91:51:6f:ec:e3:6c:8a:f0:33:ce:33:ff:42:e8:3b:35: 24:09:69:ff:51:48:8b:1e:5a:88:e3:6c:a5:63:27:9c:f3:8f: b0:39:4e:2f:43:69:16:b3:a8:7f:dd:66:5b:cb:02:a7:fc:82: 68:ad:bd:cb:cd:84:68:d5:45:d6:f3:73:21:26:fa:3f:ae:bf: 6d:51:ef:0a:4f:dd:e3:f3:5b:40:58:e2:15:21:72:d8:c5:f8: 91:2f:12:cc:70:d3:62:9f:2e:cd:ec:d5:31:61:ef:85:aa:7b: 82:8e:1d:8f:ba:1a:2e:1e:9c:b9:5b:df:be:28:9c:90:d9:27: cb:a7:f1:81:8a:55:1f:82:52:0b:d4:8c:66:46:e2:e8:e8:97: b7:9f:a7:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnLyQBPjAHikcSsSPuE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWQzMDk4NmNjNjM4Mjc2YzA1Mzk1ODU2YjVkMDBhMTE2ODU4YTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDJid3/2ozhdZAm37QgcMa6HGVZx rH9DDpW3q47P6XCBBVcXt7j0Adz0oXG/sTZRjZf2qQ1VQKiPqqSiZoleha+BH8mj ac8sctyAQDd3/3BO8jQAbBbBksPh2yYHA/f27rTC8MNR21ANn9ocQJE2+Nruo+0t lQbjgyAFZCEKpBNKVG3KD4I+OZ+CjIaH7KHQQciMnGC4NxJTCeQ9RR0+Y079S7hN aMEnZZGmwX1qBq0V0l353kSLSG1moD2b3/OB7RQTF9zOHm8fGelFOEeK70diMWBl Lis2hYsOVTmlRZDoTHmuPdswN5zuV63/Wq8D1FsUhSjiJkEdJuJhpckivwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNHTCYbMY4J2wFOVhWtdAKEWhYpQMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvMGRNSmhzeGpnbmJBVTVXRmExMEFvUmFGaWxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXCsMA0G CSqGSIb3DQEBCwUAA4IBAQALK6tb12HFlIl6vzU8TAjL6GkyOfCXxEEI5Pq5bgrG BCLxbv/A/8rs0qiicFV7UoZlVw99fMPr8yUMMqICpb2pKCk+cd6PW3B1XMWt5ird nKG8uOmIfY7bXzrGeo/qgZDFwunhKTMWbu0xz/1deZFRb+zjbIrwM84z/0LoOzUk CWn/UUiLHlqI42ylYyec84+wOU4vQ2kWs6h/3WZbywKn/IJorb3LzYRo1UXW83Mh Jvo/rr9tUe8KT93j81tAWOIVIXLYxfiRLxLMcNNiny7N7NUxYe+FqnuCjh2Puhou Hpy5W9++KJyQ2SfLp/GBilUfglIL1IxmRuLo6Je3n6fD -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:24 2026 by rpki-client