This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/DVjlzf9-odFEmzfa3WbgW4SKOHc.roa File: DVjlzf9-odFEmzfa3WbgW4SKOHc.roa (raw, json) Hash identifier: G99ptyhMQXh4T7sxQFOQiD1Ft8xrRXqhmTKs+Lr/jf8= Subject key identifier: 0D:58:E5:CD:FF:7E:A1:D1:44:9B:37:DA:DD:66:E0:5B:84:8A:38:77 Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f Certificate serial: 019B77595C3B06DA44CDB25036B1638E28D6 Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/DVjlzf9-odFEmzfa3WbgW4SKOHc.roa Signing time: Thu 01 Jan 2026 02:18:23 +0000 ROA not before: Thu 01 Jan 2026 02:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59828 IP address blocks: 185.70.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:5c:3b:06:da:44:cd:b2:50:36:b1:63:8e:28:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f Validity Not Before: Jan 1 02:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d58e5cdff7ea1d1449b37dadd66e05b848a3877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6d:04:ba:76:5b:64:1a:65:d1:26:bc:b8:95: d4:20:d3:33:f5:fd:3a:6a:22:8d:31:e8:da:e7:89: 21:10:09:0c:14:81:a2:56:e1:1d:95:68:92:c4:56: 69:c2:a8:1b:34:b3:32:c0:a0:7f:b1:a1:42:42:1f: 74:05:f5:7e:f5:8e:88:e3:02:0a:27:56:83:6b:79: 53:bc:85:70:d9:30:1b:23:3c:00:cd:c6:ef:3e:39: 37:a6:43:f4:22:69:d6:d3:7c:18:05:2d:87:af:56: 90:10:28:62:53:36:cb:0e:ae:fb:1b:bb:b0:49:85: ab:85:51:60:98:6b:04:61:20:9a:98:e3:61:bf:65: 33:42:e4:34:f9:86:49:3e:2c:1d:7b:e4:09:4a:9c: 44:57:79:32:9a:c5:84:9d:4b:17:38:0d:77:40:5d: e3:8c:e7:81:51:89:df:16:a4:36:8f:0f:ee:c0:d8: 58:80:26:c2:72:58:10:60:55:25:35:ad:a7:2b:59: 11:e0:88:69:0e:2d:e3:98:c0:4c:0c:0e:c7:ba:99: 4e:de:68:bb:c0:4a:91:c0:04:1e:74:87:ef:83:aa: e5:66:c1:ae:80:a5:ed:0a:e6:18:62:1e:39:42:07: 13:c6:62:2c:dc:49:94:0e:08:d1:f9:08:d1:b8:35: 41:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:E5:CD:FF:7E:A1:D1:44:9B:37:DA:DD:66:E0:5B:84:8A:38:77 X509v3 Authority Key Identifier: keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/DVjlzf9-odFEmzfa3WbgW4SKOHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.36.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:b7:34:40:ab:26:1c:de:98:d3:e2:9a:40:f1:dd:e5:19:56: 57:03:87:35:e6:26:bc:e3:5f:ed:af:0d:60:0f:31:6d:84:fe: 2e:96:7a:ff:2f:b9:0b:7d:0b:9f:d3:36:c4:88:82:f5:b2:10: e1:a1:ca:bd:ee:d0:b8:ca:e3:5b:2c:5f:95:fa:d3:70:52:4d: a5:86:b3:25:0d:7e:de:1d:02:e4:35:9c:bf:dc:d9:a9:b7:86: d7:9c:3d:f5:7b:5c:58:78:2b:4d:52:71:98:32:28:5c:6d:27: e8:ce:4b:9e:dc:56:08:ea:66:c2:4a:07:cc:46:cf:7e:33:b5: 44:72:81:97:91:8e:fc:a9:d1:64:ce:aa:b2:a8:3f:b8:0a:76: ec:c6:19:94:ef:28:bf:1f:b5:ff:05:a2:03:c9:5b:23:a2:e8: a8:8d:8a:3b:13:c2:d0:c0:a9:4d:35:9a:57:b3:ee:f6:e4:65: d7:d3:33:47:cb:28:32:03:c5:4b:9e:5d:19:7a:fe:30:d2:3d: 10:a2:7a:bc:53:96:e7:a0:9f:09:a5:61:e7:83:e5:a7:75:a4: f0:6d:65:e9:5f:4b:d2:eb:05:70:b9:c2:07:b2:fd:52:c2:e4: 39:42:c5:99:a9:7b:ae:06:9b:73:d9:00:cc:10:be:76:60:9d: 87:38:c1:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVw7BtpEzbJQNrFjjijWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2RhNTY4YWQwMjdiOWUyNDljMTNlMjIzZDMyMjc2OTg4 MWEyOWYwHhcNMjYwMTAxMDIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDU4ZTVjZGZmN2VhMWQxNDQ5YjM3ZGFkZDY2ZTA1Yjg0OGEzODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx20EunZbZBpl0Sa8uJXUINMz9f06 aiKNMeja54khEAkMFIGiVuEdlWiSxFZpwqgbNLMywKB/saFCQh90BfV+9Y6I4wIK J1aDa3lTvIVw2TAbIzwAzcbvPjk3pkP0ImnW03wYBS2Hr1aQEChiUzbLDq77G7uw SYWrhVFgmGsEYSCamONhv2UzQuQ0+YZJPiwde+QJSpxEV3kymsWEnUsXOA13QF3j jOeBUYnfFqQ2jw/uwNhYgCbCclgQYFUlNa2nK1kR4IhpDi3jmMBMDA7HuplO3mi7 wEqRwAQedIfvg6rlZsGugKXtCuYYYh45QgcTxmIs3EmUDgjR+QjRuDVBrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1Y5c3/fqHRRJs32t1m4FuEijh3MB8GA1UdIwQY MBaAFF99pWitAnueJJwT4iPTInaYgaKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUt Mzc1NzUzOWMyYWM5LzEvRFZqbHpmOS1vZEZFbXpmYTNXYmdXNFNLT0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wNTQ4OGYtZjRlMC00ZTZjLTk0ZjUtMzc1NzUzOWMyYWM5 LzEvWDMybGFLMENlNTRrbkJQaUk5TWlkcGlCb3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUYkMA0G CSqGSIb3DQEBCwUAA4IBAQCetzRAqyYc3pjT4ppA8d3lGVZXA4c15ia841/trw1g DzFthP4ulnr/L7kLfQuf0zbEiIL1shDhocq97tC4yuNbLF+V+tNwUk2lhrMlDX7e HQLkNZy/3Nmpt4bXnD31e1xYeCtNUnGYMihcbSfozkue3FYI6mbCSgfMRs9+M7VE coGXkY78qdFkzqqyqD+4CnbsxhmU7yi/H7X/BaIDyVsjouiojYo7E8LQwKlNNZpX s+725GXX0zNHyygyA8VLnl0Zev4w0j0Qonq8U5bnoJ8JpWHng+WndaTwbWXpX0vS 6wVwucIHsv1SwuQ5QsWZqXuuBptz2QDMEL52YJ2HOME3 -----END CERTIFICATE-----Generated at Mon Jan 26 12:27:04 2026 by rpki-client