This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa File: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (raw, json) Hash identifier: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8= Subject key identifier: 49:DB:A7:03:F2:C3:C3:41:91:29:1A:22:0A:71:37:98:99:0E:D1:8C Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7753C9B3FA4AF8F679331D1F0B80C Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28886 IP address blocks: 176.103.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:3c:9b:3f:a4:af:8f:67:93:31:d1:f0:b8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49dba703f2c3c34191291a220a713798990ed18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7f:37:06:1b:b0:77:0c:08:3a:3c:d0:6e:14: cf:74:1a:e3:72:41:28:49:de:9e:a8:88:10:98:bd: ac:60:81:3e:ce:48:48:1c:16:d5:54:43:5d:73:b7: 3f:37:20:f2:3f:f7:70:cf:99:b7:6b:45:81:71:89: 90:81:36:ce:2c:82:2f:ea:25:89:e1:57:d3:04:e0: ba:07:65:29:8a:db:b1:e5:72:f4:c3:9b:51:37:3f: 97:fa:c2:a7:25:df:23:b8:42:fb:9e:b6:65:3a:11: 51:68:08:e2:ce:d8:ec:00:10:e2:87:d9:8a:89:6b: bf:22:08:5d:3b:8d:b6:a4:be:5c:dc:2f:a3:17:f9: 38:5b:a1:4a:c0:c6:f9:a9:b7:71:7d:57:33:4c:9f: a8:b9:d8:38:64:50:ae:de:90:e3:cb:29:af:80:1d: de:f3:b0:34:87:5b:d9:92:9e:64:0b:e9:7c:fc:55: 95:40:ea:84:a1:fb:36:67:5e:ba:df:b6:e1:3a:b5: 14:50:82:85:59:de:ba:dd:6a:7c:ff:c3:93:40:ca: 73:c0:bb:e0:df:83:1b:8d:a7:3b:f0:59:ac:16:fe: 36:25:d7:7c:60:20:18:18:17:d5:08:14:42:5b:c8: 04:a6:f0:a5:cf:af:2b:d9:6f:15:83:38:c7:7f:2f: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DB:A7:03:F2:C3:C3:41:91:29:1A:22:0A:71:37:98:99:0E:D1:8C X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.184.0/24 Signature Algorithm: sha256WithRSAEncryption 64:df:60:b8:b4:35:bb:9a:3e:b7:c4:94:43:6e:cf:d3:2a:7a: 64:fe:ad:41:e6:d4:f1:68:17:71:e6:35:fa:73:8e:03:25:fc: 7f:b6:15:fa:e1:93:74:ba:16:02:5f:69:1a:d0:27:d5:47:3c: 3b:68:7f:3d:17:57:d9:38:23:fb:a4:be:39:72:68:a4:8b:98: bf:50:20:fd:24:5c:e0:3e:ea:2a:c4:b1:30:55:35:0b:c1:d6: fd:da:c4:c8:d7:7b:81:68:4b:35:f1:81:c5:6b:f1:36:e8:18: 83:6f:4f:7f:5b:08:1d:70:03:36:00:ce:87:5f:36:af:d2:81: a9:80:59:45:45:ad:cd:4b:ba:4a:0e:82:d9:92:49:3b:71:33: 7f:35:9c:c1:8b:3a:8c:4a:a2:de:98:8b:ee:f5:25:2e:cc:6f: dd:ac:a9:1a:fe:19:32:4d:61:0a:ea:08:2a:46:3d:e5:76:68: 79:58:35:57:fb:83:1c:37:68:24:73:90:15:a2:02:20:74:fc: ec:03:58:a7:cf:9b:b8:d4:e3:bb:93:ab:2e:c1:d2:51:b3:ea: 7e:b5:62:f6:59:e9:ac:c3:1d:8c:ec:c2:98:6d:ed:24:1c:f6: 7c:29:7d:c9:a7:9d:43:38:60:4b:99:05:da:0f:2e:96:cf:0b: 02:81:db:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3U8mz+kr49nkzHR8LgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWRiYTcwM2YyYzNjMzQxOTEyOTFhMjIwYTcxMzc5ODk5MGVkMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX83BhuwdwwIOjzQbhTPdBrjckEo Sd6eqIgQmL2sYIE+zkhIHBbVVENdc7c/NyDyP/dwz5m3a0WBcYmQgTbOLIIv6iWJ 4VfTBOC6B2Upitux5XL0w5tRNz+X+sKnJd8juEL7nrZlOhFRaAjiztjsABDih9mK iWu/IghdO422pL5c3C+jF/k4W6FKwMb5qbdxfVczTJ+oudg4ZFCu3pDjyymvgB3e 87A0h1vZkp5kC+l8/FWVQOqEofs2Z16637bhOrUUUIKFWd663Wp8/8OTQMpzwLvg 34Mbjac78FmsFv42Jdd8YCAYGBfVCBRCW8gEpvClz68r2W8VgzjHfy8PxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEnbpwPyw8NBkSkaIgpxN5iZDtGMMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvU2R1bkFfTER3MEdSS1JvaUNuRTNtSmtPMFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGe4MA0G CSqGSIb3DQEBCwUAA4IBAQBk32C4tDW7mj63xJRDbs/TKnpk/q1B5tTxaBdx5jX6 c44DJfx/thX64ZN0uhYCX2ka0CfVRzw7aH89F1fZOCP7pL45cmiki5i/UCD9JFzg PuoqxLEwVTULwdb92sTI13uBaEs18YHFa/E26BiDb09/WwgdcAM2AM6HXzav0oGp gFlFRa3NS7pKDoLZkkk7cTN/NZzBizqMSqLemIvu9SUuzG/drKka/hkyTWEK6ggq Rj3ldmh5WDVX+4McN2gkc5AVogIgdPzsA1inz5u41OO7k6suwdJRs+p+tWL2Wems wx2M7MKYbe0kHPZ8KX3Jp51DOGBLmQXaDy6WzwsCgduh -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:27 2026 by rpki-client