This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa File: ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa (raw, json) Hash identifier: FmLB19l/QiUZ+HMpkAjjIF13qdNaGpMhZk/VbgzVjic= Subject key identifier: 75:D3:27:51:5F:D0:A5:21:7B:66:D9:C5:94:0F:A3:18:A1:AB:6F:97 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B7C111B25CD8FCEADD4626E3F97D34AC0 Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210876 IP address blocks: 217.67.161.0/24 maxlen: 24 217.67.162.0/23 maxlen: 24 217.67.166.0/23 maxlen: 23 217.67.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1b:25:cd:8f:ce:ad:d4:62:6e:3f:97:d3:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d327515fd0a5217b66d9c5940fa318a1ab6f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:00:ef:e6:d8:d1:73:03:64:a8:ce:ca:77: 5b:28:88:8a:98:fd:8a:eb:ac:20:a9:25:2d:ed:cc: b9:2a:24:8c:dd:f8:3b:f1:7f:c7:52:2b:ee:3d:a8: c5:0f:47:62:7a:eb:40:e2:c1:bd:af:37:d4:54:39: ef:2f:5e:0d:81:df:52:2f:7c:bc:05:64:c1:84:51: 8b:92:85:e5:4b:77:b4:68:70:22:03:05:c6:58:77: 01:42:3a:7d:8d:56:9e:f3:ba:23:75:9d:44:da:ab: 34:0e:96:c5:66:6a:83:f1:75:d8:9f:77:5c:af:8a: 2d:a0:d8:43:72:57:b8:29:7f:5c:9c:45:07:57:33: 5d:17:cf:87:c1:6f:06:62:30:da:eb:eb:a0:2f:89: a6:9d:c4:12:45:95:10:f8:1c:21:eb:51:7f:7e:bc: dc:82:73:b8:1b:c1:28:7d:0e:f3:4d:32:9f:99:78: 3f:cb:9b:3e:b4:b6:4b:6c:10:ec:1c:89:3c:22:73: 60:bc:07:95:ca:90:5e:2e:4f:f3:18:58:a1:7b:8d: de:36:f5:1a:49:55:2d:9f:b9:af:22:cd:0d:96:da: 4f:00:7e:6b:7c:b0:58:c3:91:7d:18:53:b4:69:f0: 37:21:f6:1e:60:fb:04:6f:92:40:22:f6:c9:95:4a: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D3:27:51:5F:D0:A5:21:7B:66:D9:C5:94:0F:A3:18:A1:AB:6F:97 X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/ddMnUV_QpSF7ZtnFlA-jGKGrb5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.67.161.0-217.67.163.255 217.67.166.0-217.67.171.255 Signature Algorithm: sha256WithRSAEncryption 94:2e:92:4c:b6:ba:91:95:77:12:58:c5:81:85:3f:ea:a6:a9: 59:5c:4d:fa:fd:06:31:94:d5:2d:ee:e8:7b:d7:e6:cd:62:17: 01:02:ec:8e:1c:b7:d5:f6:f9:94:8b:43:d8:1b:cb:38:1a:a3: d4:ef:30:79:bb:8c:f3:13:45:c6:eb:96:a9:65:19:a1:f4:98: 1b:1a:d8:97:d7:d8:16:63:44:6e:2b:81:50:4a:00:93:99:6f: ab:5f:fa:ff:0f:d1:09:fb:40:22:ef:58:2a:fd:f7:54:3a:39: 05:27:15:17:06:3d:50:f9:28:3a:5d:25:53:1e:6c:67:d4:95: c9:19:4f:b4:96:f7:ad:a5:47:49:4e:67:7e:75:ab:4a:44:af: 02:a4:a6:38:57:ac:5b:a0:80:00:f8:33:fe:2a:b0:97:1d:ca: d0:e8:5e:47:ac:96:20:79:93:93:10:74:12:8e:1c:39:20:39: 15:d4:45:03:1e:cf:88:1a:44:c6:c5:41:4a:8b:f5:55:d9:96: 42:d7:c9:0f:0f:f5:9d:ff:b4:8f:29:bd:50:a5:49:e9:e4:2a: e7:ba:62:6e:0f:35:62:e3:8c:54:63:86:7c:b5:4e:95:d3:17: 1a:28:a0:04:c8:11:91:26:0c:d0:d2:f3:a4:d4:59:5b:4f:00: 14:3d:69:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt8ERslzY/OrdRibj+X00rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQzMjc1MTVmZDBhNTIxN2I2NmQ5YzU5NDBmYTMxOGExYWI2Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RwA7+bY0XMDZKjOyndbKIiKmP2K 66wgqSUt7cy5KiSM3fg78X/HUivuPajFD0dieutA4sG9rzfUVDnvL14Ngd9SL3y8 BWTBhFGLkoXlS3e0aHAiAwXGWHcBQjp9jVae87ojdZ1E2qs0DpbFZmqD8XXYn3dc r4otoNhDcle4KX9cnEUHVzNdF8+HwW8GYjDa6+ugL4mmncQSRZUQ+Bwh61F/frzc gnO4G8EofQ7zTTKfmXg/y5s+tLZLbBDsHIk8InNgvAeVypBeLk/zGFihe43eNvUa SVUtn7mvIs0NltpPAH5rfLBYw5F9GFO0afA3IfYeYPsEb5JAIvbJlUq6wQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFHXTJ1Ff0KUhe2bZxZQPoxihq2+XMB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvZGRNblVWX1FwU0Y3WnRuRmxBLWpHS0dyYjVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBADZQ6ED BALZQ6AwDAMEAdlDpgMEAtlDqDANBgkqhkiG9w0BAQsFAAOCAQEAlC6STLa6kZV3 EljFgYU/6qapWVxN+v0GMZTVLe7oe9fmzWIXAQLsjhy31fb5lItD2BvLOBqj1O8w ebuM8xNFxuuWqWUZofSYGxrYl9fYFmNEbiuBUEoAk5lvq1/6/w/RCftAIu9YKv33 VDo5BScVFwY9UPkoOl0lUx5sZ9SVyRlPtJb3raVHSU5nfnWrSkSvAqSmOFesW6CA APgz/iqwlx3K0OheR6yWIHmTkxB0Eo4cOSA5FdRFAx7PiBpExsVBSov1VdmWQtfJ Dw/1nf+0jym9UKVJ6eQq57pibg81YuOMVGOGfLVOldMXGiigBMgRkSYM0NLzpNRZ W08AFD1pBw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:52 2026 by rpki-client