This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/tdnQohzHZr8uW9f2J4849lgRnNs.roa File: tdnQohzHZr8uW9f2J4849lgRnNs.roa (raw, json) Hash identifier: R/F7DsXRI6l5OyjK0XOgTrIjrxtiZQtQIcujVHWYsus= Subject key identifier: B5:D9:D0:A2:1C:C7:66:BF:2E:5B:D7:F6:27:8F:38:F6:58:11:9C:DB Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019B7D5C448FF6E2BB604244B1BB75C3D82F Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/tdnQohzHZr8uW9f2J4849lgRnNs.roa Signing time: Fri 02 Jan 2026 06:19:17 +0000 ROA not before: Fri 02 Jan 2026 06:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51264 IP address blocks: 94.131.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:44:8f:f6:e2:bb:60:42:44:b1:bb:75:c3:d8:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 2 06:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b5d9d0a21cc766bf2e5bd7f6278f38f658119cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:cd:cd:19:e6:92:8a:31:54:ae:ea:ac:7b: 55:4d:80:59:53:83:60:95:ad:ef:7c:0b:d7:95:98: 4f:65:34:c9:43:db:bf:b5:04:da:2d:c0:bb:5b:10: 20:25:fb:d9:aa:6c:5b:f9:16:3c:42:23:16:84:0b: 44:70:7f:76:ac:b7:f4:29:17:03:63:c1:a7:55:71: c7:56:72:e0:72:a5:a3:8d:37:87:f3:65:76:dd:49: 27:48:a7:4a:14:6a:35:2b:9a:8a:ac:5b:14:c8:3d: d5:c5:bb:2c:c5:a0:78:cd:a0:31:72:58:3a:2f:84: 46:ff:1e:c5:6e:55:17:34:0a:fa:48:86:52:ae:88: e3:f4:7c:93:35:98:05:f8:3f:b4:9d:9f:81:40:24: 3c:5c:5c:26:e6:f7:7f:e3:2c:09:e8:22:4b:71:92: a0:55:cd:4b:ec:3f:0c:7c:c7:1a:c6:0a:6a:93:b6: d7:b1:01:4e:2d:fc:7e:61:72:8e:7b:0c:f2:cd:6d: 17:75:43:67:5f:fa:20:59:1f:69:b6:61:c7:46:62: e4:98:cd:ba:7b:0c:e1:af:9f:c3:c1:d3:4d:95:d1: 26:02:76:6e:e1:6e:ad:90:07:5b:1a:e4:47:9b:41: 13:86:3f:6c:36:c2:63:a6:e5:ca:fc:e5:c1:31:da: 2e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D9:D0:A2:1C:C7:66:BF:2E:5B:D7:F6:27:8F:38:F6:58:11:9C:DB X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/tdnQohzHZr8uW9f2J4849lgRnNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.125.0/24 Signature Algorithm: sha256WithRSAEncryption 30:79:a7:50:3b:a9:fb:2f:55:ca:37:e0:91:f5:43:c8:5f:dc: 45:92:bf:4e:54:e0:39:ca:06:9a:14:23:1c:b9:af:ad:c4:66: e3:80:6c:58:48:d5:23:a8:b0:e1:f9:9e:fc:95:4d:cc:73:03: 63:1e:ef:2a:99:01:e1:09:5f:af:ca:9f:90:7c:8a:cd:5e:fc: 42:6d:3a:5e:0e:bf:0f:d9:0d:43:c0:5c:2a:f1:95:88:78:2e: 0b:52:a4:80:be:c8:4c:b2:79:5f:92:ae:7f:a9:e4:36:a5:0f: 4f:6e:21:5b:b1:f5:36:3c:7d:57:6e:44:7d:8c:78:fc:c1:84: 8c:bf:5c:b8:39:d1:bd:15:51:81:c0:c4:2b:e5:54:48:e2:94: 1d:a4:b8:42:86:5a:e6:a7:ac:a1:9c:45:29:20:a8:e8:77:db: 3e:0b:b6:6d:e1:1d:93:98:7e:d4:d3:f2:da:44:c5:54:d0:a0: 3a:33:dc:42:3a:98:e2:e0:26:a1:2f:15:59:58:a5:af:40:f7: 99:b5:10:e6:e9:64:72:6a:23:33:d6:2f:5f:35:67:bf:4a:2c: e6:1e:46:3f:a0:95:e3:12:bd:1b:53:4f:75:d3:10:2b:7a:d3: 6c:62:0c:88:9c:2b:2e:26:15:86:cf:25:7d:c5:fb:53:af:05: 1c:30:cc:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XESP9uK7YEJEsbt1w9gvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTAyMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNWQ5ZDBhMjFjYzc2NmJmMmU1YmQ3ZjYyNzhmMzhmNjU4MTE5Y2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntLNzRnmkooxVK7qrHtVTYBZU4Ng la3vfAvXlZhPZTTJQ9u/tQTaLcC7WxAgJfvZqmxb+RY8QiMWhAtEcH92rLf0KRcD Y8GnVXHHVnLgcqWjjTeH82V23UknSKdKFGo1K5qKrFsUyD3VxbssxaB4zaAxclg6 L4RG/x7FblUXNAr6SIZSrojj9HyTNZgF+D+0nZ+BQCQ8XFwm5vd/4ywJ6CJLcZKg Vc1L7D8MfMcaxgpqk7bXsQFOLfx+YXKOewzyzW0XdUNnX/ogWR9ptmHHRmLkmM26 ewzhr5/DwdNNldEmAnZu4W6tkAdbGuRHm0EThj9sNsJjpuXK/OXBMdouvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLXZ0KIcx2a/LlvX9iePOPZYEZzbMB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvdGRuUW9oekhacjh1VzlmMko0ODQ5bGdSbk5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXoN9MA0G CSqGSIb3DQEBCwUAA4IBAQAweadQO6n7L1XKN+CR9UPIX9xFkr9OVOA5ygaaFCMc ua+txGbjgGxYSNUjqLDh+Z78lU3McwNjHu8qmQHhCV+vyp+QfIrNXvxCbTpeDr8P 2Q1DwFwq8ZWIeC4LUqSAvshMsnlfkq5/qeQ2pQ9PbiFbsfU2PH1XbkR9jHj8wYSM v1y4OdG9FVGBwMQr5VRI4pQdpLhChlrmp6yhnEUpIKjod9s+C7Zt4R2TmH7U0/La RMVU0KA6M9xCOpji4CahLxVZWKWvQPeZtRDm6WRyaiMz1i9fNWe/SizmHkY/oJXj Er0bU0910xAretNsYgyInCsuJhWGzyV9xftTrwUcMMwV -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:18 2026 by rpki-client