This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/pDdqFlhTT6n733LQaQQ7TCBSXcg.roa File: pDdqFlhTT6n733LQaQQ7TCBSXcg.roa (raw, json) Hash identifier: y/yS34tEnIbcwWxOV4E2MBN0KHxaZeS4yhE1CXNP2f0= Subject key identifier: A4:37:6A:16:58:53:4F:A9:FB:DF:72:D0:69:04:3B:4C:20:52:5D:C8 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019B7F8396448C8926A1F2CEF888E09E2721 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/pDdqFlhTT6n733LQaQQ7TCBSXcg.roa Signing time: Fri 02 Jan 2026 16:21:28 +0000 ROA not before: Fri 02 Jan 2026 16:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136796 IP address blocks: 194.61.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:96:44:8c:89:26:a1:f2:ce:f8:88:e0:9e:27:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jan 2 16:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4376a1658534fa9fbdf72d069043b4c20525dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:26:47:e4:14:ab:ca:02:a4:10:92:d2:dd: 10:48:9d:9b:ec:f8:d4:38:55:78:4e:66:d1:2d:a2: 4a:d7:fc:f8:92:d0:9a:d7:0c:98:29:b4:98:44:14: 0f:b3:c5:34:3d:12:c8:19:84:22:16:73:8f:3c:73: a4:12:e2:96:8b:23:fd:ed:1d:e8:a3:c5:0d:f1:fc: 9c:e8:75:7f:7d:9c:0c:56:52:92:bc:16:e2:fc:f8: 41:5b:f4:e2:d5:6d:1f:df:ce:07:53:9d:e1:96:f1: 92:56:25:ed:38:10:20:6d:82:c7:2a:f8:29:71:a2: 0c:53:f5:1f:ac:cb:41:ea:35:49:84:96:3b:0f:88: 7b:f4:90:c2:74:18:de:da:d2:3f:1a:6c:bc:0d:e4: 9b:b5:30:fa:fc:f1:c6:57:4a:d4:f5:ce:9f:bc:cd: 96:56:4f:0b:01:1c:67:f5:63:68:80:9b:8d:39:73: ec:36:32:04:e0:ce:6c:ea:da:76:5c:11:c4:21:31: d5:6a:58:2e:fe:96:27:9b:a1:08:9f:4b:ad:04:b2: 5c:4b:d1:c8:db:d1:f2:eb:ca:dd:bd:d2:e6:3a:c2: f9:a1:e3:8b:ce:69:14:90:43:a6:ba:5a:6a:e3:26: b0:8a:19:ea:3f:ea:ba:d6:23:ff:e0:1a:2a:ba:80: a2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:6A:16:58:53:4F:A9:FB:DF:72:D0:69:04:3B:4C:20:52:5D:C8 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/pDdqFlhTT6n733LQaQQ7TCBSXcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.236.0/23 Signature Algorithm: sha256WithRSAEncryption 03:89:ad:83:49:50:cd:9e:50:75:17:cb:1b:67:7f:a9:69:a5: d6:13:24:b9:30:f9:5b:52:02:36:eb:ec:1f:67:84:76:4c:23: 43:ec:21:7d:41:a2:9e:01:23:10:11:3b:ae:a9:2d:75:68:a7: a0:5b:82:8c:33:b3:70:28:fb:2c:dd:13:b4:45:7f:6b:a1:79: 4e:08:8f:f8:35:96:d2:0f:2a:e7:a5:b6:92:c3:1c:49:05:a8: e7:55:6f:9e:f3:59:8c:5a:6d:c5:6e:dc:1f:4b:d0:73:7e:5f: b6:1f:ee:5e:3f:c0:d7:aa:06:b9:0a:c7:8c:f7:7c:35:61:b7: 04:7d:17:30:21:f1:a7:2c:e4:45:99:9c:85:31:09:d9:af:21: 8a:c2:94:cf:55:04:75:81:c1:e6:b4:26:bf:fb:ad:b4:40:be: ff:a3:8f:d9:cb:65:4d:d0:91:cc:36:5a:4a:d4:cd:7d:3b:32: 70:74:36:dd:6d:3f:60:38:60:b9:76:92:c4:4a:a3:2d:71:c2: 85:a1:41:e1:92:9b:8b:04:68:09:80:e2:21:47:6e:a5:9a:f8: a3:45:8e:3c:3d:6b:61:ab:8a:47:2f:7d:e6:89:cc:4d:9b:d6: b8:db:10:de:c6:d0:6a:56:c0:64:39:43:0b:7b:e1:11:1a:91: 1f:cf:03:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g5ZEjIkmofLO+IjgnichMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjYwMTAyMTYyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDM3NmExNjU4NTM0ZmE5ZmJkZjcyZDA2OTA0M2I0YzIwNTI1ZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnYmR+QUq8oCpBCS0t0QSJ2b7PjU OFV4TmbRLaJK1/z4ktCa1wyYKbSYRBQPs8U0PRLIGYQiFnOPPHOkEuKWiyP97R3o o8UN8fyc6HV/fZwMVlKSvBbi/PhBW/Ti1W0f384HU53hlvGSViXtOBAgbYLHKvgp caIMU/UfrMtB6jVJhJY7D4h79JDCdBje2tI/Gmy8DeSbtTD6/PHGV0rU9c6fvM2W Vk8LARxn9WNogJuNOXPsNjIE4M5s6tp2XBHEITHValgu/pYnm6EIn0utBLJcS9HI 29Hy68rdvdLmOsL5oeOLzmkUkEOmulpq4yawihnqP+q61iP/4BoquoCi5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQ3ahZYU0+p+99y0GkEO0wgUl3IMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvcERkcUZsaFRUNm43MzNMUWFRUTdUQ0JTWGNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwj3sMA0G CSqGSIb3DQEBCwUAA4IBAQADia2DSVDNnlB1F8sbZ3+paaXWEyS5MPlbUgI26+wf Z4R2TCND7CF9QaKeASMQETuuqS11aKegW4KMM7NwKPss3RO0RX9roXlOCI/4NZbS DyrnpbaSwxxJBajnVW+e81mMWm3FbtwfS9Bzfl+2H+5eP8DXqga5CseM93w1YbcE fRcwIfGnLORFmZyFMQnZryGKwpTPVQR1gcHmtCa/+620QL7/o4/Zy2VN0JHMNlpK 1M19OzJwdDbdbT9gOGC5dpLESqMtccKFoUHhkpuLBGgJgOIhR26lmvijRY48PWth q4pHL33micxNm9a42xDextBqVsBkOUMLe+ERGpEfzwMG -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:18 2026 by rpki-client