This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/d5PdMaYecTYrcLACxbZLnFI-Ttw.roa File: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (raw, json) Hash identifier: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y= Subject key identifier: 77:93:DD:31:A6:1E:71:36:2B:70:B0:02:C5:B6:4B:9C:52:3E:4E:DC Certificate issuer: /CN=41251342e05d58b3b7fc93a15cba1eb71e542385 Certificate serial: 019B7910C0AD767240B5B394F7C2C4C9467F Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/d5PdMaYecTYrcLACxbZLnFI-Ttw.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201691 IP address blocks: 185.165.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c0:ad:76:72:40:b5:b3:94:f7:c2:c4:c9:46:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385 Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7793dd31a61e71362b70b002c5b64b9c523e4edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:df:46:10:cc:06:81:32:df:4a:a5:46:48:5a: 23:d3:ae:ae:40:b4:da:a7:d4:dd:51:b5:59:9d:47: c7:96:7f:3a:14:c4:7d:52:93:06:c1:a8:8c:83:99: 2f:b3:84:40:6b:4e:fa:7f:80:4b:15:e3:c3:00:ff: 7b:f4:0a:15:cf:57:e9:82:9b:7e:a7:6e:b7:78:4b: 36:59:77:bd:87:fb:d4:36:a0:7b:89:54:eb:d8:d2: 3a:d3:48:98:d5:51:13:1c:99:71:b6:82:89:86:45: 8a:3b:e5:b5:ce:69:ad:9f:c9:37:17:d7:42:3b:21: b5:27:3e:da:fe:72:8c:e1:1f:07:0d:a6:f6:59:29: 90:af:fc:d5:4f:ef:59:5c:8d:a0:8f:91:00:17:af: 2f:4a:4f:e3:40:8e:25:bb:41:17:43:1f:51:b2:19: f2:f1:ea:8f:1b:83:b7:32:92:d3:2d:84:9e:aa:a5: 2a:05:f0:7e:6a:98:79:43:f3:c3:fb:d8:9d:ac:60: 60:ff:fa:fe:d0:7c:90:2f:99:56:9e:66:30:8e:01: 3e:9d:e1:a5:45:a4:b6:7f:f2:4b:70:ad:66:6f:9f: 55:06:a7:ee:39:dd:79:1e:a2:a2:d4:2d:d6:31:e1: d3:28:31:b4:86:af:23:41:ba:36:fc:6e:b9:57:98: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:93:DD:31:A6:1E:71:36:2B:70:B0:02:C5:B6:4B:9C:52:3E:4E:DC X509v3 Authority Key Identifier: keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/d5PdMaYecTYrcLACxbZLnFI-Ttw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:b2:a8:0f:83:86:af:28:a9:35:da:3d:4d:c0:cd:f8:56:13: 70:58:f4:18:72:eb:e2:4f:f2:26:ad:52:68:4f:5a:c6:09:46: 3e:e8:eb:2d:51:65:10:41:5f:df:f3:c8:fe:a3:04:37:67:5f: 34:7c:d0:c6:4e:ef:92:8f:c8:03:cd:f6:b6:1c:44:fe:9b:6d: f3:56:0d:7b:07:1d:73:ab:f6:cd:38:d2:a1:12:8d:0b:f6:2a: fc:b6:d8:70:99:1c:c5:45:78:2f:c5:5b:44:c1:58:cc:df:a2: d3:c6:86:b8:c2:15:52:1c:60:f4:45:21:2e:18:b7:4b:bc:7a: 3b:8c:4f:7d:29:e4:2c:81:91:bb:4b:b3:c9:01:7b:0e:c2:62: 94:09:5f:25:3c:0a:aa:a2:27:b6:ad:89:c1:77:59:fe:2e:9e: b6:fb:b8:3d:d7:ba:5a:b3:b9:49:29:2e:c3:c9:8f:42:88:67: f0:c7:d1:db:e2:03:2c:3a:01:3e:ca:46:09:9d:bb:62:4b:c4: ce:32:ed:cf:70:53:e1:00:4a:ba:41:da:77:e4:07:c2:24:65: f3:ca:5d:b7:ab:92:5c:af:1d:16:52:2f:fd:9c:96:f1:2d:63: ac:92:71:a9:60:cc:d9:cb:71:c5:12:f3:b4:c4:57:35:65:71: f0:3d:71:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EMCtdnJAtbOU98LEyUZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjUxMzQyZTA1ZDU4YjNiN2ZjOTNhMTVjYmExZWI3MWU1 NDIzODUwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzkzZGQzMWE2MWU3MTM2MmI3MGIwMDJjNWI2NGI5YzUyM2U0ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt9GEMwGgTLfSqVGSFoj066uQLTa p9TdUbVZnUfHln86FMR9UpMGwaiMg5kvs4RAa076f4BLFePDAP979AoVz1fpgpt+ p263eEs2WXe9h/vUNqB7iVTr2NI600iY1VETHJlxtoKJhkWKO+W1zmmtn8k3F9dC OyG1Jz7a/nKM4R8HDab2WSmQr/zVT+9ZXI2gj5EAF68vSk/jQI4lu0EXQx9Rshny 8eqPG4O3MpLTLYSeqqUqBfB+aph5Q/PD+9idrGBg//r+0HyQL5lWnmYwjgE+neGl RaS2f/JLcK1mb59VBqfuOd15HqKi1C3WMeHTKDG0hq8jQbo2/G65V5iz3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeT3TGmHnE2K3CwAsW2S5xSPk7cMB8GA1UdIwQY MBaAFEElE0LgXVizt/yToVy6HrceVCOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGIt YzM2NjhiNTAzYTFjLzEvZDVQZE1hWWVjVFlyY0xBQ3hiWkxuRkktVHR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9hZDYwM2YtOGZlYS00ODQ5LTllZGItYzM2NjhiNTAzYTFj LzEvUVNVVFF1QmRXTE8zX0pPaFhMb2V0eDVVSTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaUfMA0G CSqGSIb3DQEBCwUAA4IBAQA6sqgPg4avKKk12j1NwM34VhNwWPQYcuviT/ImrVJo T1rGCUY+6OstUWUQQV/f88j+owQ3Z180fNDGTu+Sj8gDzfa2HET+m23zVg17Bx1z q/bNONKhEo0L9ir8tthwmRzFRXgvxVtEwVjM36LTxoa4whVSHGD0RSEuGLdLvHo7 jE99KeQsgZG7S7PJAXsOwmKUCV8lPAqqoie2rYnBd1n+Lp62+7g917pas7lJKS7D yY9CiGfwx9Hb4gMsOgE+ykYJnbtiS8TOMu3PcFPhAEq6Qdp35AfCJGXzyl23q5Jc rx0WUi/9nJbxLWOsknGpYMzZy3HFEvO0xFc1ZXHwPXGI -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:25 2026 by rpki-client