This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/_wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa File: _wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa (raw, json) Hash identifier: xAETLQSOhALtmZdJmJO16llGLniZWhsZVgeHdBOnhYY= Subject key identifier: FF:00:D2:D7:FD:55:64:36:4B:87:55:74:62:2F:C9:DE:B0:FF:84:BF Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Certificate serial: 019B7C1248E1053B3141F547E791DB5DB330 Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/_wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa Signing time: Fri 02 Jan 2026 00:18:51 +0000 ROA not before: Fri 02 Jan 2026 00:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41050 IP address blocks: 185.254.120.0/24 maxlen: 24 2a10:bb40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:48:e1:05:3b:31:41:f5:47:e7:91:db:5d:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520 Validity Not Before: Jan 2 00:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff00d2d7fd5564364b875574622fc9deb0ff84bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:1d:24:ec:28:fc:c0:a8:12:4e:65:f8:c0: 2b:61:4f:57:fb:6e:6e:78:af:a0:63:e3:4f:39:83: 54:9c:8d:d8:17:7a:37:4a:b2:1d:c5:10:07:b6:8c: bd:6f:d7:f3:21:6a:c5:44:d4:d8:d2:e8:40:e8:22: 91:52:50:e0:e8:08:ca:91:64:47:9d:51:cc:5b:57: 11:8c:7f:76:f2:1c:55:e9:a2:cc:3b:42:29:23:1a: b6:09:07:ec:b8:07:51:3c:03:1d:3c:00:4e:f4:4d: 82:da:e4:9c:62:9d:81:5f:4d:cc:f8:ca:7b:dc:1d: 55:60:d3:5d:53:14:7c:84:de:13:b8:95:e2:18:8e: 78:b9:5b:37:cc:05:8e:68:eb:9b:95:7f:1d:bd:a6: b2:5e:c8:84:09:ef:43:1a:1b:99:66:b7:3b:a0:01: ad:dc:53:a1:4c:05:ea:92:41:31:91:a2:d4:0b:31: 02:02:f8:d5:ef:1e:24:89:63:8b:9d:43:95:aa:38: 5e:d6:e9:a3:86:23:5a:28:af:16:46:3f:44:25:8a: 5d:a4:59:20:a7:5c:54:f6:d0:6e:31:2b:cf:36:88: 4a:f6:e1:bd:9b:e2:8a:d7:ae:df:5a:e4:61:b1:fa: f8:a4:bf:e5:c8:48:8b:6a:91:fb:e3:1b:7b:01:56: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:00:D2:D7:FD:55:64:36:4B:87:55:74:62:2F:C9:DE:B0:FF:84:BF X509v3 Authority Key Identifier: keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/_wDS1_1VZDZLh1V0Yi_J3rD_hL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.120.0/24 IPv6: 2a10:bb40::/29 Signature Algorithm: sha256WithRSAEncryption 07:82:b6:3f:18:99:9e:32:54:f9:4e:31:97:48:46:99:8d:41: 33:51:6a:88:bd:25:6d:f0:70:4d:f8:ba:f4:d6:87:c6:6f:9b: 99:5e:49:58:eb:44:ac:31:18:83:5e:18:58:bc:ad:2b:b5:bd: 95:d7:57:ea:9b:5f:d0:57:09:83:63:42:9a:ca:c3:82:8b:24: 7e:83:da:38:63:2a:e8:06:05:83:a9:6d:26:36:74:3a:32:d4: ca:74:8e:73:fd:02:5a:18:e3:90:76:33:4e:a7:b8:48:85:b9: 73:71:73:0b:45:bf:33:e7:c7:70:41:df:cd:37:59:43:fc:02: 94:ee:70:45:5d:28:f3:d4:1e:ac:1c:ab:05:fd:56:c0:7e:11: bf:6a:8a:34:18:e8:2e:b6:52:91:84:a2:e3:5a:8c:7c:34:9f: 8c:05:85:25:b7:9c:82:b6:90:fd:f4:a4:88:29:7f:78:88:8b: 47:50:38:72:02:ba:2b:53:68:bb:12:d0:33:fe:d6:f6:b8:73: a8:f7:23:35:e9:e1:4a:5c:83:13:52:fb:2a:05:eb:36:69:c4: bd:f7:98:5c:c4:9a:cc:d1:64:9b:52:d7:14:8a:c6:1d:db:79: df:46:96:84:3d:4c:b7:83:de:e7:6e:ed:7b:c9:60:80:da:a1: 97:e2:91:a9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EkjhBTsxQfVH55HbXbMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw MTE1MjAwHhcNMjYwMTAyMDAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjAwZDJkN2ZkNTU2NDM2NGI4NzU1NzQ2MjJmYzlkZWIwZmY4NGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0IdJOwo/MCoEk5l+MArYU9X+25u eK+gY+NPOYNUnI3YF3o3SrIdxRAHtoy9b9fzIWrFRNTY0uhA6CKRUlDg6AjKkWRH nVHMW1cRjH928hxV6aLMO0IpIxq2CQfsuAdRPAMdPABO9E2C2uScYp2BX03M+Mp7 3B1VYNNdUxR8hN4TuJXiGI54uVs3zAWOaOublX8dvaayXsiECe9DGhuZZrc7oAGt 3FOhTAXqkkExkaLUCzECAvjV7x4kiWOLnUOVqjhe1umjhiNaKK8WRj9EJYpdpFkg p1xU9tBuMSvPNohK9uG9m+KK167fWuRhsfr4pL/lyEiLapH74xt7AValEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP8A0tf9VWQ2S4dVdGIvyd6w/4S/MB8GA1UdIwQY MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt MTJlNmE2ZWRkMTI0LzEvX3dEUzFfMVZaRFpMaDFWMFlpX0ozckRfaEw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0 LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuf54MA0E AgACMAcDBQMqELtAMA0GCSqGSIb3DQEBCwUAA4IBAQAHgrY/GJmeMlT5TjGXSEaZ jUEzUWqIvSVt8HBN+Lr01ofGb5uZXklY60SsMRiDXhhYvK0rtb2V11fqm1/QVwmD Y0KaysOCiyR+g9o4YyroBgWDqW0mNnQ6MtTKdI5z/QJaGOOQdjNOp7hIhblzcXML Rb8z58dwQd/NN1lD/AKU7nBFXSjz1B6sHKsF/VbAfhG/aoo0GOgutlKRhKLjWox8 NJ+MBYUlt5yCtpD99KSIKX94iItHUDhyArorU2i7EtAz/tb2uHOo9yM16eFKXIMT UvsqBes2acS995hcxJrM0WSbUtcUisYd23nfRpaEPUy3g97nbu17yWCA2qGX4pGp -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:10 2026 by rpki-client