This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/D32i6_dCWTSsyvln6Op_fVc7ifQ.roa File: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (raw, json) Hash identifier: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A= Subject key identifier: 0F:7D:A2:EB:F7:42:59:34:AC:CA:F9:67:E8:EA:7F:7D:57:3B:89:F4 Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Certificate serial: 019B7AC8B5548B0814B0318C92722EA04FE5 Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/D32i6_dCWTSsyvln6Op_fVc7ifQ.roa Signing time: Thu 01 Jan 2026 18:18:52 +0000 ROA not before: Thu 01 Jan 2026 18:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 185.245.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b5:54:8b:08:14:b0:31:8c:92:72:2e:a0:4f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Validity Not Before: Jan 1 18:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f7da2ebf7425934accaf967e8ea7f7d573b89f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:ce:3e:1a:a6:d3:4a:4a:15:16:61:21:32: d7:b5:be:9c:ef:1d:b1:f1:74:02:61:83:ae:90:b8: 9d:80:b3:aa:a5:45:bd:29:8c:7b:95:73:77:02:16: 62:da:5a:c4:47:c7:6a:48:be:2c:00:15:2b:f5:63: a5:99:17:e0:3d:d0:92:26:a2:eb:ab:eb:55:39:4f: f4:ee:f8:42:c6:f5:04:07:f7:e8:9b:3b:ad:06:c1: 18:78:57:b8:c0:92:74:83:b3:00:fe:88:4b:5e:99: b3:b7:f2:63:31:d6:93:12:ed:d1:1e:13:bb:d9:67: 46:f9:b4:2b:e0:6a:09:4f:cc:36:6c:14:66:ee:98: 21:19:93:f6:cf:11:2a:12:3c:cd:56:98:c6:55:dc: ef:b9:5c:e3:d9:3b:4e:49:16:20:b2:03:f3:6b:f4: 22:05:f7:b8:c4:26:d6:75:0a:01:a1:85:f3:c9:06: a9:3d:fa:89:c7:5f:48:b8:94:48:34:b1:56:aa:21: 6c:6d:87:bc:90:df:de:30:80:3f:df:c8:b9:ff:7e: 32:a7:56:ff:f1:55:54:57:a5:85:06:a8:63:d0:6c: ed:09:a8:99:7a:4d:31:46:b5:22:f0:dd:8f:a1:33: 7d:4c:21:c8:9c:aa:8c:16:c5:32:64:03:cc:a0:4f: a6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7D:A2:EB:F7:42:59:34:AC:CA:F9:67:E8:EA:7F:7D:57:3B:89:F4 X509v3 Authority Key Identifier: keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/D32i6_dCWTSsyvln6Op_fVc7ifQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.100.0/24 Signature Algorithm: sha256WithRSAEncryption 11:21:87:fd:90:af:de:07:ad:fa:5d:cc:f9:0d:ae:11:fc:49: 4a:10:9b:fb:7f:93:c7:85:62:c7:e7:b8:60:79:ad:56:d7:2a: 4f:e6:63:bc:3f:bd:3e:93:ce:39:e8:cd:2c:26:ca:35:98:01: 71:17:9c:90:11:1a:45:a9:b9:30:cd:7d:4b:bc:af:83:7c:ec: 30:fa:d2:6b:d5:22:19:b4:6a:16:13:33:c1:98:3f:fc:b1:30: 76:9f:a3:6d:e5:03:a0:4d:bf:6a:36:24:3a:5b:15:15:97:0f: 8b:28:e9:a4:86:09:d3:64:92:1e:5d:cc:9d:2c:38:3a:73:b0: 2f:6c:a4:44:07:15:63:74:25:c0:45:d7:4a:a2:83:73:3f:5c: ba:5f:ed:b3:f8:c4:f3:8f:bb:ed:51:af:74:91:17:2d:49:5e: d5:18:44:6c:49:5a:93:3c:eb:5d:7e:1f:8a:a5:95:8c:61:6c: 77:56:af:9f:5c:40:52:02:50:7e:aa:f0:77:0c:ee:de:25:1b: cd:0f:b3:6d:10:78:fa:98:fe:dd:00:2e:8c:96:bf:e4:f3:5a: ed:42:09:8a:03:62:92:30:6c:fc:64:7d:10:38:42:17:45:79: 59:58:b0:b9:57:8e:d9:a4:b3:f7:e1:bd:b8:3f:a8:71:3a:a8: 78:25:f1:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yLVUiwgUsDGMknIuoE/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw NDI3NGMwHhcNMjYwMTAxMTgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjdkYTJlYmY3NDI1OTM0YWNjYWY5NjdlOGVhN2Y3ZDU3M2I4OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLfOPhqm00pKFRZhITLXtb6c7x2x 8XQCYYOukLidgLOqpUW9KYx7lXN3AhZi2lrER8dqSL4sABUr9WOlmRfgPdCSJqLr q+tVOU/07vhCxvUEB/fomzutBsEYeFe4wJJ0g7MA/ohLXpmzt/JjMdaTEu3RHhO7 2WdG+bQr4GoJT8w2bBRm7pghGZP2zxEqEjzNVpjGVdzvuVzj2TtOSRYgsgPza/Qi Bfe4xCbWdQoBoYXzyQapPfqJx19IuJRINLFWqiFsbYe8kN/eMIA/38i5/34yp1b/ 8VVUV6WFBqhj0GztCaiZek0xRrUi8N2PoTN9TCHInKqMFsUyZAPMoE+mhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA99ouv3Qlk0rMr5Z+jqf31XO4n0MB8GA1UdIwQY MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt N2ZlMzk1MWE3MzViLzEvRDMyaTZfZENXVFNzeXZsbjZPcF9mVmM3aWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufVkMA0G CSqGSIb3DQEBCwUAA4IBAQARIYf9kK/eB636Xcz5Da4R/ElKEJv7f5PHhWLH57hg ea1W1ypP5mO8P70+k8456M0sJso1mAFxF5yQERpFqbkwzX1LvK+DfOww+tJr1SIZ tGoWEzPBmD/8sTB2n6Nt5QOgTb9qNiQ6WxUVlw+LKOmkhgnTZJIeXcydLDg6c7Av bKREBxVjdCXARddKooNzP1y6X+2z+MTzj7vtUa90kRctSV7VGERsSVqTPOtdfh+K pZWMYWx3Vq+fXEBSAlB+qvB3DO7eJRvND7NtEHj6mP7dAC6Mlr/k81rtQgmKA2KS MGz8ZH0QOEIXRXlZWLC5V47ZpLP34b24P6hxOqh4JfFi -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:57 2026 by rpki-client