This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Prd_DeyZaRIc9NdYUbUH6Uu8KDQ.roa File: Prd_DeyZaRIc9NdYUbUH6Uu8KDQ.roa (raw, json) Hash identifier: OuigzOA+cB50OxXuyj9ZQ7B796yhByhb0emfcxII70c= Subject key identifier: 3E:B7:7F:0D:EC:99:69:12:1C:F4:D7:58:51:B5:07:E9:4B:BC:28:34 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69766C3A8DE3CC901AED65785D87A Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Prd_DeyZaRIc9NdYUbUH6Uu8KDQ.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21299 IP address blocks: 188.130.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:66:c3:a8:de:3c:c9:01:ae:d6:57:85:d8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb77f0dec9969121cf4d75851b507e94bbc2834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:17:e9:41:f9:b3:f3:89:02:bb:fa:27:0c: 8a:2c:cc:fd:6f:c1:4c:65:9d:d7:bc:02:f4:b3:b3: fc:a5:16:a7:03:89:53:52:b4:37:eb:d8:29:ab:1e: 42:60:2e:41:1e:a3:ac:fe:f3:a0:a2:3f:20:d6:ad: 47:11:17:ff:74:d2:6e:e2:2e:b2:a3:a9:8f:ce:4f: 14:1d:f4:5d:bd:84:01:ad:ef:4f:fc:43:c5:d3:e8: b1:c7:7e:92:75:78:f7:9a:ef:e9:14:ca:df:c7:e1: d2:db:b0:de:ed:45:88:2f:5f:10:da:c5:63:26:92: e4:17:06:36:1b:7a:f4:5e:bb:f7:94:51:d0:cc:73: 8f:11:48:38:7a:db:28:62:5a:19:c7:bf:f7:70:0c: c4:3d:b0:14:00:f6:f6:60:78:3d:ba:9b:38:9c:73: e4:d9:c5:0c:04:1f:de:dd:00:a6:d1:28:c4:2d:35: 9b:ab:a9:b1:26:20:a4:16:a0:85:1f:98:6c:35:e6: e4:37:31:5e:13:26:0d:30:26:f9:0e:fa:e5:01:0c: 01:01:72:e0:f2:ea:02:3a:ce:f6:0d:b4:9a:ac:8b: 73:b5:66:81:e4:8a:10:1e:18:6b:b6:47:a9:72:60: 96:86:24:4f:4f:8e:9b:fd:7f:fc:73:41:cd:1a:20: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:7F:0D:EC:99:69:12:1C:F4:D7:58:51:B5:07:E9:4B:BC:28:34 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Prd_DeyZaRIc9NdYUbUH6Uu8KDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.246.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f4:f7:71:42:0e:96:46:f9:21:b7:e6:96:53:31:bb:cc:6c: 92:11:a6:7e:5f:5b:d8:fb:ae:cb:a1:ec:31:e2:ba:29:7c:4f: 11:a4:08:80:54:36:fd:3b:9b:33:29:ad:35:68:5c:ba:aa:21: 5e:37:c9:46:64:82:f5:f8:d4:8f:6c:69:b9:48:9d:b6:77:70: a5:bd:fd:c8:55:e2:16:26:5d:af:b9:41:c4:e9:3e:b2:da:39: 9c:57:ec:1f:fb:85:db:02:17:35:39:8c:df:b6:ef:38:04:9a: 6b:30:dc:b3:b5:1f:5d:ca:ed:6a:d2:aa:e9:4a:11:17:4a:48: e4:c2:87:54:fd:8f:f9:05:b6:b5:72:17:39:8f:36:13:7d:34: 77:19:d8:e3:f4:8c:b6:58:8b:99:fc:24:15:0c:17:c9:89:6d: 02:ab:99:39:70:ae:80:78:2e:dc:da:39:2b:dd:2a:6c:74:38: 5d:2f:86:06:e1:ab:fc:e8:18:ec:b4:11:f6:54:7c:a9:98:34: a0:8f:03:26:1b:56:85:73:92:bd:e9:08:55:5e:84:76:6f:e9: 00:5e:f6:c5:38:84:fc:82:70:91:99:87:dd:5a:f8:ab:4b:fa: 04:e3:2d:bc:27:30:5b:90:29:4a:8e:96:b0:39:e2:52:1c:2f: 2e:85:cf:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpdmw6jePMkBrtZXhdh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWI3N2YwZGVjOTk2OTEyMWNmNGQ3NTg1MWI1MDdlOTRiYmMyODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnMX6UH5s/OJArv6JwyKLMz9b8FM ZZ3XvAL0s7P8pRanA4lTUrQ369gpqx5CYC5BHqOs/vOgoj8g1q1HERf/dNJu4i6y o6mPzk8UHfRdvYQBre9P/EPF0+ixx36SdXj3mu/pFMrfx+HS27De7UWIL18Q2sVj JpLkFwY2G3r0Xrv3lFHQzHOPEUg4etsoYloZx7/3cAzEPbAUAPb2YHg9ups4nHPk 2cUMBB/e3QCm0SjELTWbq6mxJiCkFqCFH5hsNebkNzFeEyYNMCb5DvrlAQwBAXLg 8uoCOs72DbSarItztWaB5IoQHhhrtkepcmCWhiRPT46b/X/8c0HNGiCgtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD63fw3smWkSHPTXWFG1B+lLvCg0MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvUHJkX0RleVphUkljOU5kWVViVUg2VXU4S0RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIL2MA0G CSqGSIb3DQEBCwUAA4IBAQCp9PdxQg6WRvkht+aWUzG7zGySEaZ+X1vY+67Loewx 4ropfE8RpAiAVDb9O5szKa01aFy6qiFeN8lGZIL1+NSPbGm5SJ22d3Clvf3IVeIW Jl2vuUHE6T6y2jmcV+wf+4XbAhc1OYzftu84BJprMNyztR9dyu1q0qrpShEXSkjk wodU/Y/5Bba1chc5jzYTfTR3Gdjj9Iy2WIuZ/CQVDBfJiW0Cq5k5cK6AeC7c2jkr 3SpsdDhdL4YG4av86BjstBH2VHypmDSgjwMmG1aFc5K96QhVXoR2b+kAXvbFOIT8 gnCRmYfdWvirS/oE4y28JzBbkClKjpawOeJSHC8uhc8w -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:35 2026 by rpki-client