This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/t0APLAezC2-JJ39E7QcTC5DxFWk.roa File: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (raw, json) Hash identifier: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk= Subject key identifier: B7:40:0F:2C:07:B3:0B:6F:89:27:7F:44:ED:07:13:0B:90:F1:15:69 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019B79ED305522067D446D2999DC0A99EB6F Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/t0APLAezC2-JJ39E7QcTC5DxFWk.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 31.130.242.0/24 maxlen: 24 31.130.243.0/24 maxlen: 24 178.212.58.0/24 maxlen: 24 178.212.59.0/24 maxlen: 24 185.191.60.0/24 maxlen: 24 185.191.61.0/24 maxlen: 24 185.191.62.0/24 maxlen: 24 185.191.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:30:55:22:06:7d:44:6d:29:99:dc:0a:99:eb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7400f2c07b30b6f89277f44ed07130b90f11569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:69:42:de:77:11:37:4e:01:51:c4:58:31: 55:a1:c1:b1:35:f3:c6:a1:d7:56:12:d9:c0:64:09: 20:89:46:6c:f0:f0:21:62:6f:95:01:09:b3:3f:30: af:f7:1a:a4:20:d7:5b:d8:9d:3e:c0:53:fa:42:70: 7a:cc:e3:4f:f5:f2:f2:fb:da:72:20:d8:a5:3e:f8: d6:90:55:c0:13:97:e5:5c:c1:0e:d8:06:13:8c:f4: 32:67:4e:d3:f5:6f:7b:dc:0f:db:f9:a8:3c:07:4e: 2f:17:4a:e3:8b:07:53:8e:17:cf:5f:35:c2:b4:40: fa:71:14:ee:d6:3f:c2:6f:e0:00:ca:1c:a9:84:de: c1:d3:79:3c:e1:ed:04:67:0f:33:54:be:fd:a3:b1: f1:2e:71:95:6a:c9:9a:5e:e8:2d:5f:e3:42:63:cd: 87:44:0f:33:dc:93:21:3c:9f:38:32:14:c6:2b:f3: e0:92:47:4d:50:c7:c9:8a:61:52:d7:a6:17:b8:33: 08:9e:7e:d2:26:83:82:d5:9e:98:26:ff:39:9e:8f: 7c:0f:c2:26:a1:c2:39:6d:c8:67:f2:91:60:27:18: e7:cc:2c:56:cd:02:57:a6:6b:2f:21:30:83:9d:21: 2c:5e:ad:08:74:aa:c1:00:e1:f0:1e:1b:89:8e:37: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:0F:2C:07:B3:0B:6F:89:27:7F:44:ED:07:13:0B:90:F1:15:69 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/t0APLAezC2-JJ39E7QcTC5DxFWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.242.0/23 178.212.58.0/23 185.191.60.0/22 Signature Algorithm: sha256WithRSAEncryption 89:97:ba:69:60:33:63:37:24:c6:59:d2:2d:44:b1:35:ee:2e: a8:86:fb:6c:22:a2:4c:f4:a9:48:04:37:5f:ff:29:c7:f0:5e: 23:46:19:69:fe:b0:62:c5:1f:b0:30:37:2d:20:11:37:10:31: 48:c6:e4:6a:79:dc:93:65:e3:62:5b:54:7c:a0:ef:be:8a:a3: 73:c5:b4:95:db:aa:46:4d:b3:99:05:dc:68:99:f4:7e:24:ff: 5d:90:83:ef:b1:c6:a8:ca:6a:6a:43:f2:44:e4:2a:8c:82:7c: 2c:eb:7c:95:83:c8:96:ff:3d:36:d5:0f:27:86:43:3c:c7:5b: 1d:c1:bf:17:50:7a:07:42:ea:1a:37:89:90:8e:b2:bb:c2:88: 86:7e:f1:4c:b3:eb:d5:8f:d3:a3:6c:35:c1:a3:05:56:ad:c7: 5f:03:7f:97:c2:99:44:6a:27:41:61:da:17:2e:19:1a:4e:0a: f0:0a:1f:cf:23:4e:d9:6c:c5:fc:43:c4:9f:56:a6:be:f2:0d: 49:92:48:a8:3e:bf:09:98:30:76:6c:2e:d8:66:f5:2d:50:fc: ab:7b:ff:9c:89:3b:0b:9c:60:73:24:ef:55:f1:40:e0:ab:01: 60:8e:ca:4d:e0:b1:f7:80:4f:4f:3b:e3:23:6f:49:eb:89:08: b5:62:6e:d8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57TBVIgZ9RG0pmdwKmetvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQwMGYyYzA3YjMwYjZmODkyNzdmNDRlZDA3MTMwYjkwZjExNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oppQt53ETdOAVHEWDFVocGxNfPG oddWEtnAZAkgiUZs8PAhYm+VAQmzPzCv9xqkINdb2J0+wFP6QnB6zONP9fLy+9py INilPvjWkFXAE5flXMEO2AYTjPQyZ07T9W973A/b+ag8B04vF0rjiwdTjhfPXzXC tED6cRTu1j/Cb+AAyhyphN7B03k84e0EZw8zVL79o7HxLnGVasmaXugtX+NCY82H RA8z3JMhPJ84MhTGK/PgkkdNUMfJimFS16YXuDMInn7SJoOC1Z6YJv85no98D8Im ocI5bchn8pFgJxjnzCxWzQJXpmsvITCDnSEsXq0IdKrBAOHwHhuJjjedaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLdADywHswtviSd/RO0HEwuQ8RVpMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEvdDBBUExBZXpDMi1KSjM5RTdRY1RDNUR4RldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBH4LyAwQB stQ6AwQCub88MA0GCSqGSIb3DQEBCwUAA4IBAQCJl7ppYDNjNyTGWdItRLE17i6o hvtsIqJM9KlIBDdf/ynH8F4jRhlp/rBixR+wMDctIBE3EDFIxuRqedyTZeNiW1R8 oO++iqNzxbSV26pGTbOZBdxomfR+JP9dkIPvscaoympqQ/JE5CqMgnws63yVg8iW /z021Q8nhkM8x1sdwb8XUHoHQuoaN4mQjrK7woiGfvFMs+vVj9OjbDXBowVWrcdf A3+XwplEaidBYdoXLhkaTgrwCh/PI07ZbMX8Q8SfVqa+8g1JkkioPr8JmDB2bC7Y ZvUtUPyre/+ciTsLnGBzJO9V8UDgqwFgjspN4LH3gE9PO+Mjb0nriQi1Ym7Y -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:04 2026 by rpki-client