This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/D7RyDh7lTL4H2jBeI3MtODxeB2w.roa File: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (raw, json) Hash identifier: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw= Subject key identifier: 0F:B4:72:0E:1E:E5:4C:BE:07:DA:30:5E:23:73:2D:38:3C:5E:07:6C Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Certificate serial: 019B7C7EE18023497F4FD414F43CEA3E9D33 Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/D7RyDh7lTL4H2jBeI3MtODxeB2w.roa Signing time: Fri 02 Jan 2026 02:17:28 +0000 ROA not before: Fri 02 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2590 IP address blocks: 185.125.124.0/22 maxlen: 24 2a03:9560::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e1:80:23:49:7f:4f:d4:14:f4:3c:ea:3e:9d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Validity Not Before: Jan 2 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fb4720e1ee54cbe07da305e23732d383c5e076c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5a:41:30:ea:33:13:df:3c:5a:c3:dd:cf:74: 4d:26:1f:27:c2:7a:73:b3:86:03:a3:83:79:e2:31: 8b:59:a7:cd:7c:25:d3:b7:a5:42:ba:0e:62:ce:96: a6:8c:2e:d1:46:ea:59:c3:84:d6:b1:33:09:d6:96: 2f:9a:b8:f2:f3:cf:50:8c:a1:b3:c2:2e:75:b2:4d: 1e:9b:99:1b:7e:90:52:a4:26:10:aa:3c:8a:19:08: aa:83:eb:5b:40:f0:f8:0b:3c:8e:92:89:c1:de:48: 31:1e:78:7a:68:00:34:68:30:17:52:55:c2:e0:c3: 0f:69:b6:c9:f9:4d:5e:f1:a8:88:d1:30:e0:c5:ed: 17:df:92:bb:00:f8:fd:a4:a6:57:c9:55:50:f3:dd: 7b:6c:1e:db:14:77:96:fb:f8:92:d4:be:99:c3:70: 45:09:87:e1:be:e4:7d:ab:b5:94:f1:26:a6:cf:62: 95:59:19:a0:9e:27:4b:59:ea:7f:4b:45:85:9f:c5: ef:6d:0a:ac:21:ea:da:74:17:5f:9e:a6:65:b2:c9: 95:38:da:3f:96:9f:33:93:f4:75:d0:53:29:cf:a8: 40:41:ac:92:49:63:89:fe:1c:b2:ea:c5:6b:92:1c: bb:71:e1:5f:50:e4:bb:ed:57:fd:68:b0:5b:4e:f1: 47:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:72:0E:1E:E5:4C:BE:07:DA:30:5E:23:73:2D:38:3C:5E:07:6C X509v3 Authority Key Identifier: keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/D7RyDh7lTL4H2jBeI3MtODxeB2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.124.0/22 IPv6: 2a03:9560::/29 Signature Algorithm: sha256WithRSAEncryption 19:4f:e5:43:37:89:61:23:91:3b:bf:2d:82:dd:e5:74:d0:94: 7c:cf:a9:7e:92:0a:e5:65:cb:4c:30:a4:b4:3e:cd:5e:af:d5: dd:cf:a0:23:a6:97:c6:44:0f:95:0f:1c:ee:c5:1a:c8:f2:be: 5d:b0:ce:32:6e:da:b5:ed:d2:18:db:2d:9e:36:54:3f:cb:5d: 9e:aa:71:5c:55:c0:02:5c:4f:38:39:96:6a:8d:96:cb:00:f1: 68:28:9e:18:21:d0:83:c8:09:3d:f8:6d:95:db:5a:55:da:19: 93:f8:18:f7:9f:c7:f6:f2:46:10:07:cd:38:03:3c:24:98:a3: 5e:37:e5:bd:2e:39:7f:41:2d:35:16:91:ec:cb:86:5e:bd:5e: 22:05:0e:31:31:a8:be:cd:ae:f9:fa:f5:99:aa:6f:c9:6e:21: e4:d6:b4:d5:5a:96:f4:94:a5:a8:a2:1f:f7:ee:1b:0f:de:cf: e1:60:5b:f8:39:08:d3:ff:6c:fd:da:3d:64:f3:4e:e0:e4:d1: 4a:5d:31:a0:09:a6:0e:ff:11:67:a5:a3:51:3e:54:a7:c9:f8: 62:89:f5:57:56:e7:8b:77:e6:be:34:4f:20:d9:f2:85:9e:63: 58:84:76:d3:ff:5f:cd:28:6c:39:77:59:7a:23:4a:b3:cb:05: 6a:4d:6e:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fuGAI0l/T9QU9DzqPp0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0 Y2M4ZWQwHhcNMjYwMTAyMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmI0NzIwZTFlZTU0Y2JlMDdkYTMwNWUyMzczMmQzODNjNWUwNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lpBMOozE988WsPdz3RNJh8nwnpz s4YDo4N54jGLWafNfCXTt6VCug5izpamjC7RRupZw4TWsTMJ1pYvmrjy889QjKGz wi51sk0em5kbfpBSpCYQqjyKGQiqg+tbQPD4CzyOkonB3kgxHnh6aAA0aDAXUlXC 4MMPabbJ+U1e8aiI0TDgxe0X35K7APj9pKZXyVVQ8917bB7bFHeW+/iS1L6Zw3BF CYfhvuR9q7WU8Samz2KVWRmgnidLWep/S0WFn8XvbQqsIeradBdfnqZlssmVONo/ lp8zk/R10FMpz6hAQaySSWOJ/hyy6sVrkhy7ceFfUOS77Vf9aLBbTvFHlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA+0cg4e5Uy+B9owXiNzLTg8XgdsMB8GA1UdIwQY MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt YWQ5ZDVkYjBmMDk5LzEvRDdSeURoN2xUTDRIMmpCZUkzTXRPRHhlQjJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5 LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX18MA0E AgACMAcDBQMqA5VgMA0GCSqGSIb3DQEBCwUAA4IBAQAZT+VDN4lhI5E7vy2C3eV0 0JR8z6l+kgrlZctMMKS0Ps1er9Xdz6AjppfGRA+VDxzuxRrI8r5dsM4ybtq17dIY 2y2eNlQ/y12eqnFcVcACXE84OZZqjZbLAPFoKJ4YIdCDyAk9+G2V21pV2hmT+Bj3 n8f28kYQB804AzwkmKNeN+W9Ljl/QS01FpHsy4ZevV4iBQ4xMai+za75+vWZqm/J biHk1rTVWpb0lKWooh/37hsP3s/hYFv4OQjT/2z92j1k807g5NFKXTGgCaYO/xFn paNRPlSnyfhiifVXVueLd+a+NE8g2fKFnmNYhHbT/1/NKGw5d1l6I0qzywVqTW4h -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:53 2026 by rpki-client