This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0qDxZDgU3RvZdnf7dLpOoaNe2XQ.roa File: 0qDxZDgU3RvZdnf7dLpOoaNe2XQ.roa (raw, json) Hash identifier: DCUC/h22l1a9L8eH+1Y+8HSgT0X9di7jhql4ucBfFnE= Subject key identifier: D2:A0:F1:64:38:14:DD:1B:D9:76:77:FB:74:BA:4E:A1:A3:5E:D9:74 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BDF9FAFC66D6B5871610584A7E122957C Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0qDxZDgU3RvZdnf7dLpOoaNe2XQ.roa Signing time: Wed 21 Jan 2026 08:15:42 +0000 ROA not before: Wed 21 Jan 2026 08:15:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 80.240.95.0/24 maxlen: 24 81.168.125.0/24 maxlen: 24 89.213.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:9f:af:c6:6d:6b:58:71:61:05:84:a7:e1:22:95:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 21 08:15:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2a0f1643814dd1bd97677fb74ba4ea1a35ed974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:db:9e:eb:8f:17:5f:68:84:d6:eb:06:73:c4: 9f:7c:21:c2:33:44:f2:d7:3e:3e:92:de:99:c0:ad: 66:f2:64:a3:f8:e7:71:b9:2f:8c:0e:42:da:db:0b: 79:a9:d6:28:47:2d:10:57:e7:63:2a:9b:88:ee:1c: d7:14:60:b7:77:c8:2f:7f:dd:79:bd:0f:ab:c4:6f: 4e:51:6d:20:ba:f3:54:15:18:78:33:48:c5:91:53: 4c:ea:63:8c:c5:00:21:19:27:3e:d2:d6:c9:d8:9c: 41:73:a4:64:2f:bf:8a:86:c9:14:0a:4d:e3:4e:cb: d2:6d:fb:c8:17:b1:d5:c3:96:30:8e:f8:d0:1f:5d: 4e:ba:62:6a:26:b3:c4:c5:1d:fe:5f:04:23:d6:c6: 60:53:b1:dc:58:75:fb:94:59:c5:ff:de:e3:13:e1: 30:99:eb:c8:63:72:7d:5a:10:1d:ce:d6:36:a9:2d: 83:56:15:92:71:94:54:2a:a6:77:68:24:f6:6e:2f: 75:4e:25:08:ae:ca:fb:3a:34:36:56:fc:c8:a6:9e: 67:3a:ab:cc:4b:20:59:6c:44:c8:03:a9:5d:cc:e9: c3:98:4f:8e:2f:7d:50:f0:03:0e:bb:7a:fa:f4:16: df:40:88:d1:14:91:16:24:12:d0:1d:87:cf:27:c4: 74:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A0:F1:64:38:14:DD:1B:D9:76:77:FB:74:BA:4E:A1:A3:5E:D9:74 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0qDxZDgU3RvZdnf7dLpOoaNe2XQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.240.95.0/24 81.168.125.0/24 89.213.107.0/24 Signature Algorithm: sha256WithRSAEncryption 01:26:4b:c4:e9:26:1b:48:f5:40:ee:47:49:f1:b3:e6:f1:2d: 4e:91:44:51:a1:b8:1e:4a:74:75:b8:b5:ec:95:38:cd:af:90: aa:1e:b5:f6:78:09:bb:05:12:1f:e8:56:2e:74:6d:18:e9:2d: cf:9a:90:1c:c0:55:b4:4f:20:55:6e:38:4c:ad:bd:61:de:fc: 87:57:37:ac:53:90:bb:0d:b7:da:f2:1c:b8:76:7e:4f:44:16: 0c:3d:66:57:4a:a7:df:c4:81:88:9b:4f:03:a3:21:44:be:ef: ae:09:41:6b:03:8c:9e:dd:77:6d:e9:22:0b:ae:38:79:8d:f2: 0f:da:ed:62:70:43:3d:d8:ec:a2:a9:7d:84:c8:76:cb:1a:ed: 33:0c:5e:c3:85:bf:4a:cd:14:e0:11:27:fa:74:d6:60:76:05: 15:b6:65:29:ad:c6:db:00:c8:0f:6f:af:05:dc:61:ff:6a:48: 44:ef:6d:10:3c:42:db:7e:67:38:3e:60:1b:71:12:0a:b9:38: 04:c5:0f:79:71:d3:90:d9:aa:ae:79:f3:28:45:54:a0:9f:2f: d4:11:00:ee:e8:4c:c0:88:0d:ba:3a:d0:47:be:85:2b:c7:92: 6c:90:34:77:5d:90:76:50:25:68:76:c9:ec:44:b6:cd:c7:16: f6:e9:98:1e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvfn6/GbWtYcWEFhKfhIpV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTIxMDgxNTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmEwZjE2NDM4MTRkZDFiZDk3Njc3ZmI3NGJhNGVhMWEzNWVkOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNue648XX2iE1usGc8SffCHCM0Ty 1z4+kt6ZwK1m8mSj+OdxuS+MDkLa2wt5qdYoRy0QV+djKpuI7hzXFGC3d8gvf915 vQ+rxG9OUW0guvNUFRh4M0jFkVNM6mOMxQAhGSc+0tbJ2JxBc6RkL7+KhskUCk3j TsvSbfvIF7HVw5YwjvjQH11OumJqJrPExR3+XwQj1sZgU7HcWHX7lFnF/97jE+Ew mevIY3J9WhAdztY2qS2DVhWScZRUKqZ3aCT2bi91TiUIrsr7OjQ2VvzIpp5nOqvM SyBZbETIA6ldzOnDmE+OL31Q8AMOu3r69BbfQIjRFJEWJBLQHYfPJ8R0AwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNKg8WQ4FN0b2XZ3+3S6TqGjXtl0MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvMHFEeFpEZ1UzUnZaZG5mN2RMcE9vYU5lMlhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUPBfAwQA Uah9AwQAWdVrMA0GCSqGSIb3DQEBCwUAA4IBAQABJkvE6SYbSPVA7kdJ8bPm8S1O kURRobgeSnR1uLXslTjNr5CqHrX2eAm7BRIf6FYudG0Y6S3PmpAcwFW0TyBVbjhM rb1h3vyHVzesU5C7Dbfa8hy4dn5PRBYMPWZXSqffxIGIm08DoyFEvu+uCUFrA4ye 3Xdt6SILrjh5jfIP2u1icEM92OyiqX2EyHbLGu0zDF7Dhb9KzRTgESf6dNZgdgUV tmUprcbbAMgPb68F3GH/akhE720QPELbfmc4PmAbcRIKuTgExQ95cdOQ2aquefMo RVSgny/UEQDu6EzAiA26OtBHvoUrx5JskDR3XZB2UCVodsnsRLbNxxb26Zge -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:58 2026 by rpki-client