This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/R0klPunBOqp25e5iaWkRszu-ET8.roa File: R0klPunBOqp25e5iaWkRszu-ET8.roa (raw, json) Hash identifier: VdL7X950DAJPhtKYFbxaa5UQZUjNVMuXiqFZIijFTEU= Subject key identifier: 47:49:25:3E:E9:C1:3A:AA:76:E5:EE:62:69:69:11:B3:3B:BE:11:3F Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Certificate serial: 019B78A2F5AC22A698A941AF0C5FD5C472AF Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/R0klPunBOqp25e5iaWkRszu-ET8.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214361 IP address blocks: 185.161.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:ac:22:a6:98:a9:41:af:0c:5f:d5:c4:72:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4749253ee9c13aaa76e5ee62696911b33bbe113f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:3c:7c:cd:12:1d:88:1b:43:5a:f9:40:cf: 42:aa:c9:8f:a8:1e:28:7d:5c:7e:80:8d:3e:2d:45: 5a:a3:3d:12:09:b6:36:75:89:15:81:cd:df:76:8a: 19:fa:fd:9c:fd:42:db:93:c0:08:b2:58:f3:0d:10: 57:75:ab:7e:5c:77:13:4e:54:ea:41:87:a1:6d:8f: bc:cb:34:0e:40:79:cc:28:36:43:59:4b:8e:fb:fb: e0:85:e8:6e:36:63:7c:13:ed:43:9a:b0:c5:61:e8: a4:7d:1e:02:4b:b3:2a:e1:71:83:3e:75:b0:5d:5f: 04:b4:4b:f8:3a:1b:0c:ad:62:60:4f:b5:8c:93:c4: e0:29:04:2c:15:07:77:0f:f5:bc:47:87:0d:a5:80: 62:70:98:8d:d8:fd:48:ff:30:dc:86:9b:6d:43:b2: 9b:b0:9b:30:b6:ec:d2:fb:a2:8a:25:66:77:68:9f: 96:0c:a7:f7:bb:ac:df:c4:58:c9:e0:15:2c:11:89: ba:73:7a:64:83:c3:a6:40:ba:07:b8:56:54:c2:d6: dc:f1:8b:bc:7e:43:0b:d4:21:44:d6:39:af:d3:ad: 75:81:8b:54:24:4c:a4:d0:74:c9:f6:1f:81:9f:ba: 5f:96:91:07:bd:0c:be:d5:3d:3c:dc:6e:ca:f8:7c: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:49:25:3E:E9:C1:3A:AA:76:E5:EE:62:69:69:11:B3:3B:BE:11:3F X509v3 Authority Key Identifier: keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/R0klPunBOqp25e5iaWkRszu-ET8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.36.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ae:d0:e1:c8:4a:03:8c:95:b2:61:21:b6:2a:e2:b0:60:d2: 75:fc:32:73:bc:ff:da:12:1c:5b:d9:e1:22:21:18:b7:64:06: a1:8a:62:f8:bb:67:13:b4:e4:18:ba:f2:ef:7d:66:ae:03:c7: c5:25:3a:e4:76:f7:43:81:1b:55:58:a2:af:0f:2a:03:57:6e: 5b:d2:46:06:7c:6f:60:a1:83:60:c6:76:47:ae:2c:8c:d9:5c: dd:70:9e:73:f6:65:55:93:22:de:d4:f0:34:aa:e6:18:ca:d3: 87:c2:c0:ba:40:a8:68:75:49:c6:57:72:87:ec:5e:31:a0:29: e4:e7:0f:fb:8a:4c:8d:c7:ff:28:87:d3:68:e3:b1:f2:c1:45: 57:1e:ab:8e:2e:f0:c8:cf:10:44:78:a2:26:48:75:d6:63:7d: 7d:05:a9:36:3b:10:23:ba:03:22:43:00:26:93:2c:4b:5e:67: ef:1f:a1:7a:6c:be:ce:ec:2a:7c:d2:d6:8a:3e:99:ea:00:c7: 15:e9:76:d2:0e:c3:09:f0:a1:2b:c0:06:fe:89:8d:95:25:0f: 7d:29:ad:42:f1:6c:c0:94:7a:21:9a:d5:ab:87:c7:c7:ee:51: b0:27:a2:ec:26:4c:87:67:f8:e7:36:94:89:f6:a2:28:ee:a8: b6:cb:52:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovWsIqaYqUGvDF/VxHKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3 NmNjNDAwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzQ5MjUzZWU5YzEzYWFhNzZlNWVlNjI2OTY5MTFiMzNiYmUxMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSs8fM0SHYgbQ1r5QM9CqsmPqB4o fVx+gI0+LUVaoz0SCbY2dYkVgc3fdooZ+v2c/ULbk8AIsljzDRBXdat+XHcTTlTq QYehbY+8yzQOQHnMKDZDWUuO+/vghehuNmN8E+1DmrDFYeikfR4CS7Mq4XGDPnWw XV8EtEv4OhsMrWJgT7WMk8TgKQQsFQd3D/W8R4cNpYBicJiN2P1I/zDchpttQ7Kb sJswtuzS+6KKJWZ3aJ+WDKf3u6zfxFjJ4BUsEYm6c3pkg8OmQLoHuFZUwtbc8Yu8 fkML1CFE1jmv0611gYtUJEyk0HTJ9h+Bn7pflpEHvQy+1T083G7K+HzNOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEdJJT7pwTqqduXuYmlpEbM7vhE/MB8GA1UdIwQY MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt YTljMzg0MTI4ZDQyLzEvUjBrbFB1bkJPcXAyNWU1aWFXa1JzenUtRVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaEkMA0G CSqGSIb3DQEBCwUAA4IBAQABrtDhyEoDjJWyYSG2KuKwYNJ1/DJzvP/aEhxb2eEi IRi3ZAahimL4u2cTtOQYuvLvfWauA8fFJTrkdvdDgRtVWKKvDyoDV25b0kYGfG9g oYNgxnZHriyM2VzdcJ5z9mVVkyLe1PA0quYYytOHwsC6QKhodUnGV3KH7F4xoCnk 5w/7ikyNx/8oh9No47HywUVXHquOLvDIzxBEeKImSHXWY319Bak2OxAjugMiQwAm kyxLXmfvH6F6bL7O7Cp80taKPpnqAMcV6XbSDsMJ8KErwAb+iY2VJQ99Ka1C8WzA lHohmtWrh8fH7lGwJ6LsJkyHZ/jnNpSJ9qIo7qi2y1Ln -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:22 2026 by rpki-client