This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa File: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (raw, json) Hash identifier: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4= Subject key identifier: D0:F7:79:83:2D:61:68:AE:2F:E8:E9:53:68:B3:C3:46:6B:71:5A:9A Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B7AC7902F6B63B6EF14C95221A5AA240A Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203735 IP address blocks: 94.231.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:90:2f:6b:63:b6:ef:14:c9:52:21:a5:aa:24:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0f779832d6168ae2fe8e95368b3c3466b715a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:5e:94:69:a0:cf:1a:c1:4d:7a:38:bd:bc: 51:16:1b:8a:69:8a:6a:b9:e0:11:49:4f:d5:54:e3: 58:55:ed:2c:ef:3f:ea:ae:9f:3d:69:84:80:95:42: a2:31:82:89:3f:5a:e6:ef:42:89:fb:0a:23:8d:f4: aa:8a:81:ea:ad:36:27:c5:83:8e:d8:8a:11:1d:c1: 3e:9e:0c:20:81:dc:23:2f:74:97:3e:d0:b3:f1:85: 53:2f:ba:21:35:95:bd:6e:45:c6:20:1c:75:49:8f: 5f:20:4e:f2:e9:76:1c:3b:a2:19:c0:1a:eb:5f:d0: 12:1b:67:9b:84:59:60:d1:7d:0e:d4:88:a8:1b:5a: 9a:a6:8a:35:72:1e:0d:64:49:26:84:9b:32:91:ca: 6f:3f:03:d5:b5:74:75:06:7e:ea:3f:69:77:0c:d6: 8d:80:9a:88:8c:eb:bd:57:bc:99:06:fd:71:25:f8: 81:d3:22:af:f5:ca:81:33:88:aa:42:d6:9d:36:e8: 73:dc:46:39:c5:30:9c:fa:b2:d4:ba:c2:81:49:18: b2:bf:2c:a2:99:f2:0d:50:a7:79:00:1f:ec:54:74: d3:22:a1:7a:3a:f8:e6:ac:22:ab:e0:e8:a3:95:25: 5e:6b:d3:0c:93:ae:f1:5d:08:09:c1:e3:ee:8e:62: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:79:83:2D:61:68:AE:2F:E8:E9:53:68:B3:C3:46:6B:71:5A:9A X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.199.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a4:fe:87:31:4f:64:4a:54:76:1b:93:59:40:a5:50:51:f0: 6c:a0:4d:5a:55:dc:45:0f:31:8d:0d:4f:3e:34:84:2e:35:38: 1b:1f:0c:3b:de:7a:7a:8a:1d:68:dd:e8:91:d9:90:7d:5f:dc: f5:94:e5:03:6d:51:08:a2:01:a7:47:a1:aa:1e:b8:66:6b:0f: ab:05:c3:9e:b4:91:11:5d:56:a6:4a:a1:6b:6f:0a:ef:25:aa: 20:4b:6d:68:79:69:92:dd:d5:39:dd:b5:12:75:99:4b:ea:74: ff:82:29:86:ac:b8:b3:5d:b1:50:41:5d:16:24:85:f8:4e:20: c4:2a:25:0b:bd:cd:21:1e:8c:b1:d9:2a:59:6b:35:e7:a6:df: 9c:fa:cf:a6:33:18:0d:61:9d:ff:c5:dc:28:33:61:41:85:93: 4d:24:d5:84:82:f6:73:bf:3c:b7:47:3a:74:e9:c8:ce:b2:bd: 00:88:d0:bb:02:b4:ad:be:ea:71:e9:c5:e4:d1:ef:5d:4f:a4: 0e:17:59:4c:ff:8e:3f:6f:22:95:e6:91:ff:1b:48:3d:be:a9: 79:47:a3:e5:ad:6a:ce:5b:b5:d8:26:d1:f8:58:0f:97:f2:31: 34:a5:fb:82:5d:c4:33:66:0f:c3:0d:9c:8e:34:f9:40:43:c1: 33:de:20:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5Ava2O27xTJUiGlqiQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGY3Nzk4MzJkNjE2OGFlMmZlOGU5NTM2OGIzYzM0NjZiNzE1YTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyotelGmgzxrBTXo4vbxRFhuKaYpq ueARSU/VVONYVe0s7z/qrp89aYSAlUKiMYKJP1rm70KJ+wojjfSqioHqrTYnxYOO 2IoRHcE+ngwggdwjL3SXPtCz8YVTL7ohNZW9bkXGIBx1SY9fIE7y6XYcO6IZwBrr X9ASG2ebhFlg0X0O1IioG1qapoo1ch4NZEkmhJsykcpvPwPVtXR1Bn7qP2l3DNaN gJqIjOu9V7yZBv1xJfiB0yKv9cqBM4iqQtadNuhz3EY5xTCc+rLUusKBSRiyvyyi mfINUKd5AB/sVHTTIqF6OvjmrCKr4OijlSVea9MMk67xXQgJwePujmLuwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFND3eYMtYWiuL+jpU2izw0ZrcVqaMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvMFBkNWd5MWhhSzR2Nk9sVGFMUERSbXR4V3BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufHMA0G CSqGSIb3DQEBCwUAA4IBAQBQpP6HMU9kSlR2G5NZQKVQUfBsoE1aVdxFDzGNDU8+ NIQuNTgbHww73np6ih1o3eiR2ZB9X9z1lOUDbVEIogGnR6GqHrhmaw+rBcOetJER XVamSqFrbwrvJaogS21oeWmS3dU53bUSdZlL6nT/gimGrLizXbFQQV0WJIX4TiDE KiULvc0hHoyx2SpZazXnpt+c+s+mMxgNYZ3/xdwoM2FBhZNNJNWEgvZzvzy3Rzp0 6cjOsr0AiNC7ArStvupx6cXk0e9dT6QOF1lM/44/byKV5pH/G0g9vql5R6PlrWrO W7XYJtH4WA+X8jE0pfuCXcQzZg/DDZyONPlAQ8Ez3iBe -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:34 2026 by rpki-client