This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa File: ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa (raw, json) Hash identifier: Jqk77Lv//XRofZ2i9r4w2rfiDp6DOlIJobQS/uFZtSA= Subject key identifier: 95:DD:A7:54:1C:E4:75:B3:5E:1B:43:C5:63:F7:54:0B:B0:7A:58:8B Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681 Certificate serial: 019B79112FEFA04B280461B068E4BDF19CD0 Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57422 IP address blocks: 176.100.0.0/23 maxlen: 23 176.100.4.0/23 maxlen: 23 176.100.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2f:ef:a0:4b:28:04:61:b0:68:e4:bd:f1:9c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95dda7541ce475b35e1b43c563f7540bb07a588b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:b8:a6:db:19:da:e0:6f:5f:1f:ee:da:24: 7c:7a:49:02:c7:56:bd:7b:e6:d4:50:6c:fe:64:d6: 2f:44:c2:5c:95:06:3e:ec:a2:72:46:11:9d:2c:47: 01:e1:95:8d:d4:cf:b7:0f:7e:b5:a3:7e:70:84:1b: e7:a6:fa:1d:97:6d:e7:56:0f:c7:4b:65:c3:c7:f2: 32:0d:db:0a:07:a9:05:c9:43:49:87:33:4d:1f:bc: 35:c0:a0:c3:99:9c:e4:0b:43:a3:da:cf:c4:26:c8: 39:d2:06:e2:d6:58:32:e3:9c:e1:a1:30:00:43:b2: 37:93:11:c9:67:bb:4a:3b:8d:ee:d4:d7:68:9b:3e: 6e:ff:92:f0:c0:d6:71:54:b8:c7:75:da:72:a7:49: 80:f4:f0:e3:e8:3e:4a:28:e7:b5:32:13:27:df:a0: 0c:8f:01:68:9e:b4:be:68:0e:c1:68:cf:c3:9a:77: d7:b2:0d:8e:9c:0b:d7:fc:a4:3a:2e:34:20:67:98: 9f:c7:8c:00:5e:5d:92:f5:89:f4:3a:5f:17:ce:da: a8:a4:33:a3:61:9d:fa:06:8b:76:b7:fd:e6:30:b6: 16:2e:2d:45:14:fd:ea:03:6a:46:d8:f2:83:f1:f3: 05:70:3d:6f:6c:2a:9b:5d:4f:23:15:d1:4d:e5:d7: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DD:A7:54:1C:E4:75:B3:5E:1B:43:C5:63:F7:54:0B:B0:7A:58:8B X509v3 Authority Key Identifier: keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/ld2nVBzkdbNeG0PFY_dUC7B6WIs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.0.0/23 176.100.4.0/23 176.100.7.0/24 Signature Algorithm: sha256WithRSAEncryption 18:67:c8:ba:b5:9c:28:ab:f5:fc:f2:b8:18:17:da:8f:6d:40: 30:90:a3:13:af:d3:91:79:ea:18:fd:57:4c:86:75:89:f5:90: 98:72:d4:ad:1c:1a:b4:c0:84:b8:7e:86:29:5f:fa:e3:ce:ed: a0:a3:55:24:30:2e:12:3b:5f:e1:9b:ce:ce:96:89:ae:bd:bb: dc:af:72:52:ee:f8:ce:0f:19:73:ae:b1:dc:f8:c9:81:02:53: 0f:ea:43:fc:35:e7:6d:0b:bc:b5:b3:8c:0a:01:8a:76:b9:72: e9:22:78:8a:49:82:5c:98:45:6a:2c:4f:39:51:38:60:b1:73: 81:23:74:14:c3:e2:f4:ed:53:ee:18:2d:9c:b8:b8:f1:42:e3: 45:41:c1:18:d3:7a:05:d1:40:5e:02:a6:8e:51:3c:be:24:6d: 32:3a:8f:9b:c5:7c:77:e0:ae:09:cd:42:62:a1:57:0e:e4:07: 4a:e0:c1:96:b8:82:c0:7c:01:04:7e:c1:d9:87:cd:30:4b:3a: 56:43:bc:e0:24:74:37:7e:da:2a:7d:ec:e0:e8:8f:3e:02:bf: 17:4c:76:fa:2e:61:46:fa:e8:73:15:61:5d:bb:38:36:7a:e3: ca:56:8b:60:f3:e1:5d:84:57:7d:3d:d7:80:d1:c6:e7:8c:49: c8:c8:16:6f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ES/voEsoBGGwaOS98ZzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy NDg2ODEwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWRkYTc1NDFjZTQ3NWIzNWUxYjQzYzU2M2Y3NTQwYmIwN2E1ODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXq4ptsZ2uBvXx/u2iR8ekkCx1a9 e+bUUGz+ZNYvRMJclQY+7KJyRhGdLEcB4ZWN1M+3D361o35whBvnpvodl23nVg/H S2XDx/IyDdsKB6kFyUNJhzNNH7w1wKDDmZzkC0Oj2s/EJsg50gbi1lgy45zhoTAA Q7I3kxHJZ7tKO43u1Ndomz5u/5LwwNZxVLjHddpyp0mA9PDj6D5KKOe1MhMn36AM jwFonrS+aA7BaM/DmnfXsg2OnAvX/KQ6LjQgZ5ifx4wAXl2S9Yn0Ol8XztqopDOj YZ36Bot2t/3mMLYWLi1FFP3qA2pG2PKD8fMFcD1vbCqbXU8jFdFN5dcG/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJXdp1Qc5HWzXhtDxWP3VAuweliLMB8GA1UdIwQY MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt M2VhMmViZmU4NzA3LzEvbGQyblZCemtkYk5lRzBQRllfZFVDN0I2V0lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3 LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsGQAAwQB sGQEAwQAsGQHMA0GCSqGSIb3DQEBCwUAA4IBAQAYZ8i6tZwoq/X88rgYF9qPbUAw kKMTr9OReeoY/VdMhnWJ9ZCYctStHBq0wIS4foYpX/rjzu2go1UkMC4SO1/hm87O lomuvbvcr3JS7vjODxlzrrHc+MmBAlMP6kP8NedtC7y1s4wKAYp2uXLpIniKSYJc mEVqLE85UThgsXOBI3QUw+L07VPuGC2cuLjxQuNFQcEY03oF0UBeAqaOUTy+JG0y Oo+bxXx34K4JzUJioVcO5AdK4MGWuILAfAEEfsHZh80wSzpWQ7zgJHQ3ftoqfezg 6I8+Ar8XTHb6LmFG+uhzFWFduzg2euPKVotg8+FdhFd9PdeA0cbnjEnIyBZv -----END CERTIFICATE-----Generated at Mon Jan 26 03:02:37 2026 by rpki-client