This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nDvAbrGJmc4O-g38KDST-6V1roA.roa File: nDvAbrGJmc4O-g38KDST-6V1roA.roa (raw, json) Hash identifier: 4A0rIA7hVyb29aj7CY1IwOjk6KdfYRWCD+AQV1GEiXQ= Subject key identifier: 9C:3B:C0:6E:B1:89:99:CE:0E:FA:0D:FC:28:34:93:FB:A5:75:AE:80 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA8DD9E898E00D4623DE873E699BC Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nDvAbrGJmc4O-g38KDST-6V1roA.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56594 IP address blocks: 217.145.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a8:dd:9e:89:8e:00:d4:62:3d:e8:73:e6:99:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c3bc06eb18999ce0efa0dfc283493fba575ae80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:47:94:f7:b8:6f:4e:f2:9d:0c:25:78:ae:3a: f8:53:c8:d4:6d:c8:71:a6:1d:0d:74:0c:80:b8:64: bb:e6:db:f8:73:d7:5d:33:84:d1:d3:66:4d:cd:0d: 02:ba:59:73:7c:09:fd:c6:7b:32:31:e9:7b:da:91: ca:5d:f6:c2:b0:26:72:b9:7b:33:21:37:c5:66:e0: 73:14:32:0f:54:5c:c5:4f:72:b9:b8:74:f7:5f:f5: 3c:7c:1a:07:8a:f0:d9:d4:cd:e0:1b:aa:4b:e0:b6: 08:1d:d0:61:ee:83:e1:1d:2d:0a:a5:e5:e3:30:22: 35:f9:db:13:70:ba:3a:dd:57:fa:ec:8e:99:82:de: 1c:ae:b6:6a:9e:75:04:e8:1d:7d:41:8b:9c:1c:eb: 5f:4b:a4:1b:6f:3b:62:54:a2:58:65:79:38:46:51: c5:c4:b4:ba:dd:3f:4b:c3:7b:03:6c:f6:34:55:96: 1a:33:91:87:9c:94:88:7d:2a:ee:ed:52:94:7c:2b: 04:e7:55:2b:48:e0:97:cd:ca:52:27:76:39:3d:59: a4:41:2b:25:92:28:7a:9a:c2:1d:fa:3b:1f:03:9f: ac:68:11:d7:d5:06:1d:78:6a:bb:f1:30:31:9f:90: 82:d3:49:d1:47:50:e0:3a:95:99:4e:ea:a8:4f:26: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:C0:6E:B1:89:99:CE:0E:FA:0D:FC:28:34:93:FB:A5:75:AE:80 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/nDvAbrGJmc4O-g38KDST-6V1roA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.145.79.0/24 Signature Algorithm: sha256WithRSAEncryption a5:23:19:99:a2:83:1b:04:e4:26:11:e5:6a:b6:40:9b:36:8b: f2:be:a3:bb:cd:05:58:8d:40:cc:3f:94:c1:43:ec:30:f6:f4: f0:9d:b9:e4:02:5c:4a:55:a6:66:d7:34:35:e2:80:79:cc:dd: 36:ea:0f:a0:41:cb:7a:35:30:2b:2b:57:58:1b:d6:b6:51:4b: b2:2c:7a:c6:55:4e:0d:4b:e7:f4:63:6e:bb:62:53:64:7f:8a: 2a:b6:99:67:33:df:40:28:04:85:28:e7:67:58:26:47:6b:fb: 5c:3a:91:90:86:16:73:3f:11:88:4c:db:eb:82:b7:61:de:2d: 3a:bd:7b:27:cb:ed:f2:29:9f:c4:01:e3:ff:63:f4:ee:ea:36: 00:eb:48:1d:a6:ad:9b:e2:b2:7e:58:da:dd:d7:8a:f9:9f:20: a2:c8:65:04:df:88:0a:09:d1:cf:8d:3d:1a:84:e9:99:47:bb: ac:77:a7:15:7f:28:62:22:14:57:5c:81:69:bc:59:d3:68:f1: 6b:c8:70:58:87:cf:89:5a:64:dd:ec:92:b3:92:b2:9d:37:2a: bb:5b:16:e5:50:43:2c:93:ac:90:6b:6f:c6:29:ac:e1:a8:12: 08:fa:e6:ce:5b:5e:18:ed:fb:93:f2:1a:5f:05:b6:e5:c1:64: 0f:42:56:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqjdnomOANRiPehz5pm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzNiYzA2ZWIxODk5OWNlMGVmYTBkZmMyODM0OTNmYmE1NzVhZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EeU97hvTvKdDCV4rjr4U8jUbchx ph0NdAyAuGS75tv4c9ddM4TR02ZNzQ0CullzfAn9xnsyMel72pHKXfbCsCZyuXsz ITfFZuBzFDIPVFzFT3K5uHT3X/U8fBoHivDZ1M3gG6pL4LYIHdBh7oPhHS0KpeXj MCI1+dsTcLo63Vf67I6Zgt4crrZqnnUE6B19QYucHOtfS6QbbztiVKJYZXk4RlHF xLS63T9Lw3sDbPY0VZYaM5GHnJSIfSru7VKUfCsE51UrSOCXzcpSJ3Y5PVmkQSsl kih6msId+jsfA5+saBHX1QYdeGq78TAxn5CC00nRR1DgOpWZTuqoTyYjdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJw7wG6xiZnODvoN/Cg0k/ulda6AMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvbkR2QWJyR0ptYzRPLWczOEtEU1QtNlYxcm9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZFPMA0G CSqGSIb3DQEBCwUAA4IBAQClIxmZooMbBOQmEeVqtkCbNovyvqO7zQVYjUDMP5TB Q+ww9vTwnbnkAlxKVaZm1zQ14oB5zN026g+gQct6NTArK1dYG9a2UUuyLHrGVU4N S+f0Y267YlNkf4oqtplnM99AKASFKOdnWCZHa/tcOpGQhhZzPxGITNvrgrdh3i06 vXsny+3yKZ/EAeP/Y/Tu6jYA60gdpq2b4rJ+WNrd14r5nyCiyGUE34gKCdHPjT0a hOmZR7usd6cVfyhiIhRXXIFpvFnTaPFryHBYh8+JWmTd7JKzkrKdNyq7WxblUEMs k6yQa2/GKazhqBII+ubOW14Y7fuT8hpfBbblwWQPQlZq -----END CERTIFICATE-----Generated at Sun Jan 25 07:16:43 2026 by rpki-client