This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/ndFKEl0wI8WgAsJHTynnR8s626U.roa File: ndFKEl0wI8WgAsJHTynnR8s626U.roa (raw, json) Hash identifier: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU= Subject key identifier: 9D:D1:4A:12:5D:30:23:C5:A0:02:C2:47:4F:29:E7:47:CB:3A:DB:A5 Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Certificate serial: 019B797E574452451E3718C249E2CC19F45F Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/ndFKEl0wI8WgAsJHTynnR8s626U.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16344 IP address blocks: 217.145.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:57:44:52:45:1e:37:18:c2:49:e2:cc:19:f4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dd14a125d3023c5a002c2474f29e747cb3adba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:bb:ac:d1:8e:3c:21:3a:2d:a9:15:e9:7c: 20:1e:cd:c0:ec:7f:50:81:24:91:fd:df:b6:66:79: 3c:73:c2:8b:03:03:f1:60:77:87:2f:df:ad:81:3c: eb:bc:56:5d:1a:f9:a3:c0:59:92:fe:42:6e:c2:43: 73:94:b0:79:50:85:79:41:14:2c:5b:e0:df:62:35: 56:70:99:71:8d:24:58:23:b4:c2:17:20:97:08:40: 16:42:be:26:58:12:13:b3:08:99:af:88:04:33:90: 1d:c2:5f:94:b7:5f:cd:d0:a1:14:3f:29:fe:e3:5c: db:75:da:55:31:60:12:e1:6f:f1:9e:1c:17:e9:a0: a3:fe:88:6f:1f:45:74:47:a8:38:34:b2:bc:67:4f: 10:01:49:d4:a5:57:7e:4b:b6:b4:c0:d6:dc:ff:09: 30:ef:42:76:1b:4f:5e:e1:2d:52:05:8c:83:ec:d6: 18:8b:6a:01:60:98:d9:99:64:27:2b:29:f3:89:fd: 9f:80:fb:d7:a1:a9:a9:ad:43:a7:50:fa:7a:66:34: 0c:5c:5f:12:71:2c:59:bd:97:72:5b:26:11:d7:b0: 43:9a:ae:d4:b2:b4:a1:ee:0c:a8:3e:32:66:67:8a: 63:4e:e5:5b:2f:7d:96:7a:75:5d:86:8d:14:2b:d6: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:4A:12:5D:30:23:C5:A0:02:C2:47:4F:29:E7:47:CB:3A:DB:A5 X509v3 Authority Key Identifier: keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/ndFKEl0wI8WgAsJHTynnR8s626U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.160.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:80:3c:51:e3:1c:a4:2a:b2:e4:6a:3c:17:c9:bf:d8:af:0d: 71:10:17:df:1d:02:61:12:f9:0a:27:24:29:c5:aa:c1:33:6e: 59:5b:3c:d3:0a:cb:ca:d6:3e:83:e1:27:e0:bc:1f:e2:65:46: cc:bf:f7:f1:21:81:ad:49:99:5a:fe:e7:72:85:29:d8:2d:35: 9e:01:d8:25:a4:be:7c:2e:90:6a:90:5d:86:53:24:a9:d6:3f: b5:69:8b:5f:72:48:f5:7a:f7:21:b6:34:31:24:96:b9:a3:1c: 37:0d:72:e3:aa:a8:93:d4:cc:52:83:39:81:da:7f:be:5a:87: b7:28:0a:7c:37:c8:97:08:26:17:a8:ac:fd:ff:52:c8:c0:71: 89:82:a8:38:56:36:15:b6:6f:69:d2:14:2d:54:12:36:09:67: ff:46:25:18:36:e5:6e:84:64:4a:49:43:5f:ee:f7:69:7f:e1: 85:89:ee:86:ed:26:e0:c6:40:c7:39:60:2a:64:b4:7a:16:22: 59:e5:9a:38:df:f5:31:64:f7:d0:29:aa:eb:5c:fc:9f:40:67: c1:36:72:cc:3e:2b:f7:21:4c:19:12:5a:e2:a7:12:61:1a:10: cd:18:76:04:0c:8e:1a:d8:51:f1:8e:00:49:ee:86:fd:23:71: 95:cf:66:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fldEUkUeNxjCSeLMGfRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZWQxZDYwNjZmNGU0NjU0ZWY1ZjNjYzcwYTVkOTA1YTlh ZjgyOTAwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGQxNGExMjVkMzAyM2M1YTAwMmMyNDc0ZjI5ZTc0N2NiM2FkYmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswq7rNGOPCE6LakV6XwgHs3A7H9Q gSSR/d+2Znk8c8KLAwPxYHeHL9+tgTzrvFZdGvmjwFmS/kJuwkNzlLB5UIV5QRQs W+DfYjVWcJlxjSRYI7TCFyCXCEAWQr4mWBITswiZr4gEM5Adwl+Ut1/N0KEUPyn+ 41zbddpVMWAS4W/xnhwX6aCj/ohvH0V0R6g4NLK8Z08QAUnUpVd+S7a0wNbc/wkw 70J2G09e4S1SBYyD7NYYi2oBYJjZmWQnKynzif2fgPvXoamprUOnUPp6ZjQMXF8S cSxZvZdyWyYR17BDmq7UsrSh7gyoPjJmZ4pjTuVbL32WenVdho0UK9awqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ3RShJdMCPFoALCR08p50fLOtulMB8GA1UdIwQY MBaAFLLtHWBm9ORlTvXzzHCl2QWpr4KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYt NDZiNDZmYzBlNDk2LzEvbmRGS0VsMHdJOFdnQXNKSFR5bm5SOHM2MjZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8xMTgyY2ItNWY5NS00Y2Q0LWI3MmYtNDZiNDZmYzBlNDk2 LzEvc3UwZFlHYjA1R1ZPOWZQTWNLWFpCYW12Z3BBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZGgMA0G CSqGSIb3DQEBCwUAA4IBAQA7gDxR4xykKrLkajwXyb/Yrw1xEBffHQJhEvkKJyQp xarBM25ZWzzTCsvK1j6D4SfgvB/iZUbMv/fxIYGtSZla/udyhSnYLTWeAdglpL58 LpBqkF2GUySp1j+1aYtfckj1evchtjQxJJa5oxw3DXLjqqiT1MxSgzmB2n++Woe3 KAp8N8iXCCYXqKz9/1LIwHGJgqg4VjYVtm9p0hQtVBI2CWf/RiUYNuVuhGRKSUNf 7vdpf+GFie6G7SbgxkDHOWAqZLR6FiJZ5Zo43/UxZPfQKarrXPyfQGfBNnLMPiv3 IUwZElripxJhGhDNGHYEDI4a2FHxjgBJ7ob9I3GVz2a9 -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:26 2026 by rpki-client