This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa File: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (raw, json) Hash identifier: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk= Subject key identifier: 8C:EE:2E:19:D7:7D:FA:D8:82:76:AC:F7:C1:02:72:AF:56:4B:49:0D Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019B79ED31A6E63399E35F8E01DEA8BF83C3 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204229 IP address blocks: 185.241.116.0/23 maxlen: 23 185.241.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:31:a6:e6:33:99:e3:5f:8e:01:de:a8:bf:83:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cee2e19d77dfad88276acf7c10272af564b490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:33:4f:ad:ed:a0:36:00:b4:42:38:13:3b: a5:e1:f6:9b:4b:cc:d3:01:f1:c0:20:8b:fb:ed:4a: 31:3a:13:9a:10:90:c6:38:55:27:dd:37:b2:f0:be: 20:64:13:22:ab:c4:87:7c:1d:dc:4e:40:ba:7e:c7: 68:7e:48:fe:22:4e:fc:3f:85:d9:58:7a:91:96:ba: 6a:6c:32:ad:a4:1b:a9:f7:09:f1:05:9a:74:6e:af: c9:da:c6:dd:84:5b:da:97:2c:f0:fe:59:54:f0:a2: c1:f4:1f:6a:d6:a2:e9:86:1d:37:42:e2:e1:8c:62: 8b:b4:6c:74:53:22:46:35:df:51:94:39:53:24:35: d4:67:32:cd:ab:be:c1:5a:cd:f7:e9:2c:6b:e6:2a: 6a:31:e0:bd:16:cc:5f:aa:76:17:d2:8e:8a:b0:d2: a8:24:76:a9:a6:c5:94:15:2d:ea:37:d0:27:6c:3c: 0f:3e:d6:ab:9d:3d:41:0c:52:02:e9:45:f3:f1:af: 82:1f:78:77:ca:e3:da:0c:fc:69:0a:1e:41:a4:b3: 93:4c:3b:55:ef:26:2b:60:b4:1d:87:ae:a8:64:f3: 64:e7:71:81:eb:6c:13:80:9e:1e:6f:8b:f7:1a:82: fb:51:bb:91:7d:32:13:22:f6:b9:f1:ad:30:22:73: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EE:2E:19:D7:7D:FA:D8:82:76:AC:F7:C1:02:72:AF:56:4B:49:0D X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.116.0/22 Signature Algorithm: sha256WithRSAEncryption 80:5f:04:44:0b:66:26:48:03:10:f3:67:28:50:49:88:a8:31: 58:f0:dd:06:e6:89:04:f4:8a:cf:fc:87:e1:95:40:fc:82:00: c5:d1:d6:df:17:eb:d1:c1:cd:67:ff:b7:1c:43:01:a6:3d:f8: fc:4c:c7:d2:15:6d:f0:e9:6c:e8:2a:80:86:0f:e3:11:67:06: 0e:9e:3c:31:51:bf:63:f5:1f:92:c3:d7:e3:76:78:71:c8:93: 07:38:28:c0:b2:fe:7e:c9:72:2f:88:2a:e3:bb:fd:42:a7:27: 17:2a:c5:b7:58:e4:32:88:fe:c6:89:ef:fb:59:81:ff:70:05: af:c5:af:83:49:2d:05:dc:24:d0:3d:8a:c6:16:2a:dd:b0:21: 1c:c6:c6:f5:a4:77:32:17:f7:7b:2a:e4:0a:3c:ab:9a:ac:25: eb:5a:00:1b:9c:65:d1:0b:05:80:65:8e:b9:72:8d:47:d9:80: a2:b1:ee:bc:03:ab:72:b7:83:ab:7b:c6:7e:b8:5f:9b:ac:c8: 5d:45:b3:4a:5a:33:13:57:38:ea:47:14:59:bf:fe:95:11:0e: 78:b6:44:53:12:0e:4a:04:05:b2:e0:44:69:e6:05:53:05:60: 8a:44:27:ac:c1:e5:86:8d:11:4b:bf:01:04:de:9f:20:02:55: 9f:a7:ce:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TGm5jOZ41+OAd6ov4PDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2VlMmUxOWQ3N2RmYWQ4ODI3NmFjZjdjMTAyNzJhZjU2NGI0OTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7ozT63toDYAtEI4Ezul4fabS8zT AfHAIIv77UoxOhOaEJDGOFUn3Tey8L4gZBMiq8SHfB3cTkC6fsdofkj+Ik78P4XZ WHqRlrpqbDKtpBup9wnxBZp0bq/J2sbdhFvalyzw/llU8KLB9B9q1qLphh03QuLh jGKLtGx0UyJGNd9RlDlTJDXUZzLNq77BWs336Sxr5ipqMeC9FsxfqnYX0o6KsNKo JHappsWUFS3qN9AnbDwPPtarnT1BDFIC6UXz8a+CH3h3yuPaDPxpCh5BpLOTTDtV 7yYrYLQdh66oZPNk53GB62wTgJ4eb4v3GoL7UbuRfTITIva58a0wInOf/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzuLhnXffrYgnas98ECcq9WS0kNMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvak80dUdkZDktdGlDZHF6M3dRSnlyMVpMU1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufF0MA0G CSqGSIb3DQEBCwUAA4IBAQCAXwREC2YmSAMQ82coUEmIqDFY8N0G5okE9IrP/Ifh lUD8ggDF0dbfF+vRwc1n/7ccQwGmPfj8TMfSFW3w6WzoKoCGD+MRZwYOnjwxUb9j 9R+Sw9fjdnhxyJMHOCjAsv5+yXIviCrju/1CpycXKsW3WOQyiP7Gie/7WYH/cAWv xa+DSS0F3CTQPYrGFirdsCEcxsb1pHcyF/d7KuQKPKuarCXrWgAbnGXRCwWAZY65 co1H2YCise68A6tyt4Ore8Z+uF+brMhdRbNKWjMTVzjqRxRZv/6VEQ54tkRTEg5K BAWy4ERp5gVTBWCKRCesweWGjRFLvwEE3p8gAlWfp84G -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:10 2026 by rpki-client