This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/0DUJcdpv-70K2I2pApN-2y0bFD8.roa File: 0DUJcdpv-70K2I2pApN-2y0bFD8.roa (raw, json) Hash identifier: IK8mSj+BVFz2D1LxDiQjQX/83kI7ub1AwIT2Qy6hem4= Subject key identifier: D0:35:09:71:DA:6F:FB:BD:0A:D8:8D:A9:02:93:7E:DB:2D:1B:14:3F Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e Certificate serial: 019B7AC8AF569C2088FE720759A657D8B45E Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/0DUJcdpv-70K2I2pApN-2y0bFD8.roa Signing time: Thu 01 Jan 2026 18:18:50 +0000 ROA not before: Thu 01 Jan 2026 18:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21100 IP address blocks: 5.34.180.0/23 maxlen: 23 46.28.65.0/24 maxlen: 24 46.28.66.0/24 maxlen: 24 46.28.68.0/24 maxlen: 24 46.28.69.0/24 maxlen: 24 82.118.16.0/24 maxlen: 24 82.118.19.0/24 maxlen: 24 185.14.28.0/22 maxlen: 22 195.123.216.0/21 maxlen: 21 217.12.200.0/23 maxlen: 23 217.12.208.0/23 maxlen: 23 217.12.218.0/24 maxlen: 24 217.12.219.0/24 maxlen: 24 217.12.220.0/24 maxlen: 24 2a02:27a9::/32 maxlen: 32 2a02:27ab::/32 maxlen: 32 2a02:27ae::/32 maxlen: 32 2a02:27af::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.mft rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:af:56:9c:20:88:fe:72:07:59:a6:57:d8:b4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0350971da6ffbbd0ad88da902937edb2d1b143f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:4f:d4:b6:13:02:21:56:74:c0:d0:7d:a2: db:d3:ea:43:58:59:41:25:3c:74:4a:f0:a0:95:81: 2c:97:54:b5:ea:6d:07:23:67:5c:d8:a7:10:6d:45: fa:54:78:96:2a:3a:01:f0:1c:d2:d9:99:b7:bf:d0: 57:3a:2c:79:81:a7:33:90:e5:3b:7f:55:0d:ed:5e: 33:a7:d9:37:d3:1b:d6:aa:66:e3:84:5b:8f:45:56: 31:f4:0c:68:b8:8b:48:6d:9a:97:7e:2d:5b:c4:03: e5:19:ad:85:0c:6c:7a:3b:0d:02:50:4b:2e:31:a9: d1:fe:66:b6:e7:26:e2:40:9c:8f:25:2c:ce:51:ad: 96:91:ab:7a:05:61:fe:54:78:36:ae:12:c9:4f:21: 3c:31:a9:1b:3d:a4:8f:7d:69:a9:36:b6:27:73:da: eb:8d:69:0a:f1:39:92:bb:30:1e:ce:9e:ca:a3:b5: 00:af:3e:18:8f:4e:0c:68:1c:27:06:84:a3:e1:e5: 5b:0b:1e:d1:93:cb:18:25:d3:61:19:82:6d:4b:e0: 37:11:16:3a:2b:c7:3f:a7:4e:a5:5e:6e:7c:39:35: 70:76:2b:f1:d2:d4:42:6e:61:9a:88:19:93:dd:d2: a4:c5:07:78:cc:f4:5e:da:29:5c:c6:6c:a7:a7:61: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:35:09:71:DA:6F:FB:BD:0A:D8:8D:A9:02:93:7E:DB:2D:1B:14:3F X509v3 Authority Key Identifier: keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/0DUJcdpv-70K2I2pApN-2y0bFD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.180.0/23 46.28.65.0-46.28.66.255 46.28.68.0/23 82.118.16.0/24 82.118.19.0/24 185.14.28.0/22 195.123.216.0/21 217.12.200.0/23 217.12.208.0/23 217.12.218.0-217.12.220.255 IPv6: 2a02:27a9::/32 2a02:27ab::/32 2a02:27ae::/31 Signature Algorithm: sha256WithRSAEncryption 5d:38:79:5a:41:46:07:f7:0e:96:ba:d0:a8:d9:4f:69:77:88: 0b:cf:57:ff:00:9f:24:4e:2d:08:16:de:15:cb:21:92:17:d8: 4e:b0:b1:6f:5c:fd:6e:ca:70:00:84:85:e4:94:89:76:a0:f8: c5:2a:3d:ab:93:40:c8:ac:ef:53:73:9b:db:2e:ed:bb:f7:55: 67:e4:b9:d8:a4:2a:f1:14:5f:48:06:a8:19:4b:a2:71:4c:0a: 77:fd:e3:e7:78:b3:c9:0c:52:e1:d8:f1:83:d6:bb:eb:01:4e: 23:e9:1c:e2:3f:80:11:52:27:15:39:ad:cf:95:5d:9c:33:00: 1a:ab:c7:7a:22:a1:fc:6a:c3:dd:db:93:3a:bc:ec:62:a6:0a: 29:5e:dc:14:8c:d9:53:4a:83:e7:30:48:dd:6f:1d:9d:23:14: c7:23:64:64:5c:cc:c0:3d:41:c1:cc:13:59:5b:ec:f2:40:90: 2b:96:7e:8b:50:6a:37:6a:f7:2a:78:4f:ab:ea:4b:f8:fd:1c: 01:69:41:1a:77:c1:a5:39:44:ae:68:cf:12:01:f4:15:0d:0e: 3c:99:68:a1:6f:82:d2:36:7e:e8:ea:e1:3e:11:67:3f:1b:8e: e5:45:f7:9a:17:7e:9d:43:f2:51:ba:da:a2:5e:c8:fb:e5:a0: cb:eb:5d:c5 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt6yK9WnCCI/nIHWaZX2LReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh MzRmNWUwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDM1MDk3MWRhNmZmYmJkMGFkODhkYTkwMjkzN2VkYjJkMWIxNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsetP1LYTAiFWdMDQfaLb0+pDWFlB JTx0SvCglYEsl1S16m0HI2dc2KcQbUX6VHiWKjoB8BzS2Zm3v9BXOix5gaczkOU7 f1UN7V4zp9k30xvWqmbjhFuPRVYx9AxouItIbZqXfi1bxAPlGa2FDGx6Ow0CUEsu ManR/ma25ybiQJyPJSzOUa2Wkat6BWH+VHg2rhLJTyE8MakbPaSPfWmpNrYnc9rr jWkK8TmSuzAezp7Ko7UArz4Yj04MaBwnBoSj4eVbCx7Rk8sYJdNhGYJtS+A3ERY6 K8c/p06lXm58OTVwdivx0tRCbmGaiBmT3dKkxQd4zPRe2ilcxmynp2G7JwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFNA1CXHab/u9CtiNqQKTftstGxQ/MB8GA1UdIwQY MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt ODdkMTdkZjc0YzdlLzEvMERVSmNkcHYtNzBLMkkycEFwTi0yeTBiRkQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwUgQCAAEwTAMEAQUitDAM AwQALhxBAwQALhxCAwQBLhxEAwQAUnYQAwQAUnYTAwQCuQ4cAwQDw3vYAwQB2QzI AwQB2QzQMAwDBAHZDNoDBADZDNwwGwQCAAIwFQMFACoCJ6kDBQAqAierAwUBKgIn rjANBgkqhkiG9w0BAQsFAAOCAQEAXTh5WkFGB/cOlrrQqNlPaXeIC89X/wCfJE4t CBbeFcshkhfYTrCxb1z9bspwAISF5JSJdqD4xSo9q5NAyKzvU3Ob2y7tu/dVZ+S5 2KQq8RRfSAaoGUuicUwKd/3j53izyQxS4djxg9a76wFOI+kc4j+AEVInFTmtz5Vd nDMAGqvHeiKh/GrD3duTOrzsYqYKKV7cFIzZU0qD5zBI3W8dnSMUxyNkZFzMwD1B wcwTWVvs8kCQK5Z+i1BqN2r3KnhPq+pL+P0cAWlBGnfBpTlErmjPEgH0FQ0OPJlo oW+C0jZ+6OrhPhFnPxuO5UX3mhd+nUPyUbraol7I++Wgy+tdxQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:08 2026 by rpki-client