This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/d2D28pbUUy75o_ayovdj8OnlSSk.roa File: d2D28pbUUy75o_ayovdj8OnlSSk.roa (raw, json) Hash identifier: VCEc/3eMD6beAJR+mVre94XxkAsuGJ0/hx5+lBhoAGg= Subject key identifier: 77:60:F6:F2:96:D4:53:2E:F9:A3:F6:B2:A2:F7:63:F0:E9:E5:49:29 Certificate issuer: /CN=d1fd3436d7a19a7343fa800d87a01af183da318b Certificate serial: 019B79110B2593AB502AF02BF87A027DC0AF Authority key identifier: D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/d2D28pbUUy75o_ayovdj8OnlSSk.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199412 IP address blocks: 185.13.208.0/22 maxlen: 24 2a03:a540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.mft rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0b:25:93:ab:50:2a:f0:2b:f8:7a:02:7d:c0:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1fd3436d7a19a7343fa800d87a01af183da318b Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7760f6f296d4532ef9a3f6b2a2f763f0e9e54929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:38:2d:26:3c:c8:17:9e:e6:0f:ff:00:7d: f4:49:6e:7c:c3:9b:0b:d9:fa:dc:19:32:7a:3a:ea: 2a:49:1b:f5:1d:c4:67:a7:8a:13:02:e6:77:31:77: 7e:6d:73:fc:5f:66:5d:8f:22:78:60:8f:e1:07:46: 44:a5:ae:41:2f:d7:93:93:ea:86:1a:ca:c3:c9:f1: 61:21:61:91:47:eb:fa:73:3e:e8:9c:06:1c:83:e3: 9e:ea:85:7b:02:d2:3a:79:1f:32:47:84:36:a4:52: e0:85:b1:5d:00:f0:6c:5c:d4:2f:10:c7:91:75:ad: 45:5f:a8:3b:75:51:10:8f:a7:1b:61:15:34:09:34: 0e:fa:a8:e7:45:5f:bd:79:02:85:68:8b:c8:b9:9c: a5:5a:8b:40:4c:7e:c4:76:37:21:e6:08:80:52:8e: 7c:16:bc:4a:60:e8:74:66:aa:f5:d8:0e:1e:db:87: 53:26:5e:39:d5:82:c6:bf:ad:46:5e:c9:f1:3c:05: 4f:ec:96:93:84:96:2c:8e:bc:1b:2d:ca:5e:b5:4a: 9f:f9:4f:3d:5e:7c:75:2e:5a:c9:68:63:60:ec:8b: 4d:b7:b5:10:c7:ba:90:d8:9a:89:9d:99:aa:c7:65: 8a:63:91:d7:29:99:18:47:71:4b:3a:5f:50:02:b5: eb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:60:F6:F2:96:D4:53:2E:F9:A3:F6:B2:A2:F7:63:F0:E9:E5:49:29 X509v3 Authority Key Identifier: keyid:D1:FD:34:36:D7:A1:9A:73:43:FA:80:0D:87:A0:1A:F1:83:DA:31:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f00NtehmnND-oANh6Aa8YPaMYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/d2D28pbUUy75o_ayovdj8OnlSSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bcd5e8-5d1f-46b1-96bc-39a66cbe1e4d/1/0f00NtehmnND-oANh6Aa8YPaMYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.13.208.0/22 IPv6: 2a03:a540::/32 Signature Algorithm: sha256WithRSAEncryption 84:03:4e:ab:f8:af:05:be:7e:de:5e:6b:d5:ea:d9:e5:82:29: 36:a7:26:13:be:59:c9:a3:1d:c1:5a:88:a1:63:14:fd:bd:bc: e2:56:89:88:ba:62:4a:e6:f7:41:fc:bd:f4:31:ed:d1:46:c1: 7e:a4:21:41:04:c6:6c:58:ff:96:7b:dd:e2:4e:a2:10:f2:e2: 2a:04:9e:91:57:f1:c5:5e:af:ab:5d:47:31:ae:f9:24:47:28: 9d:ec:a6:92:b5:35:c7:fb:75:2b:84:e0:37:f8:c8:59:9b:43: 2b:f5:99:57:46:e2:0b:f4:a2:e0:6c:44:c0:2f:9f:4b:49:0a: 91:c0:c7:0b:a3:d4:ef:64:ca:2e:19:f0:c3:c3:f3:95:a4:d4: fb:ca:af:5c:3c:f9:0e:8c:e7:0c:08:db:84:6c:3a:73:3e:e5: ea:84:17:eb:e2:84:4e:97:71:36:1d:28:91:9a:49:4c:0b:c1: ce:c1:a4:22:59:8b:de:50:f6:93:85:ac:80:83:77:a2:51:be: 1c:0c:d8:4b:cb:10:34:4c:7f:fd:67:34:27:3f:ba:83:87:3e: 58:0d:4b:6c:37:00:8d:eb:7c:ab:86:86:8e:e6:00:43:41:00: 5a:6d:47:72:46:e8:7c:6b:55:ee:ca:07:1e:16:cc:06:94:db: 9d:7c:b2:d5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EQslk6tQKvAr+HoCfcCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZmQzNDM2ZDdhMTlhNzM0M2ZhODAwZDg3YTAxYWYxODNk YTMxOGIwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzYwZjZmMjk2ZDQ1MzJlZjlhM2Y2YjJhMmY3NjNmMGU5ZTU0OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7I4LSY8yBee5g//AH30SW58w5sL 2frcGTJ6OuoqSRv1HcRnp4oTAuZ3MXd+bXP8X2ZdjyJ4YI/hB0ZEpa5BL9eTk+qG GsrDyfFhIWGRR+v6cz7onAYcg+Oe6oV7AtI6eR8yR4Q2pFLghbFdAPBsXNQvEMeR da1FX6g7dVEQj6cbYRU0CTQO+qjnRV+9eQKFaIvIuZylWotATH7Edjch5giAUo58 FrxKYOh0Zqr12A4e24dTJl451YLGv61GXsnxPAVP7JaThJYsjrwbLcpetUqf+U89 Xnx1LlrJaGNg7ItNt7UQx7qQ2JqJnZmqx2WKY5HXKZkYR3FLOl9QArXr6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHdg9vKW1FMu+aP2sqL3Y/Dp5UkpMB8GA1UdIwQY MBaAFNH9NDbXoZpzQ/qADYegGvGD2jGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMt MzlhNjZjYmUxZTRkLzEvZDJEMjhwYlVVeTc1b19heW92ZGo4T25sU1NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iY2Q1ZTgtNWQxZi00NmIxLTk2YmMtMzlhNjZjYmUxZTRk LzEvMGYwME50ZWhtbk5ELW9BTmg2QWE4WVBhTVlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQ3QMA0E AgACMAcDBQAqA6VAMA0GCSqGSIb3DQEBCwUAA4IBAQCEA06r+K8Fvn7eXmvV6tnl gik2pyYTvlnJox3BWoihYxT9vbziVomIumJK5vdB/L30Me3RRsF+pCFBBMZsWP+W e93iTqIQ8uIqBJ6RV/HFXq+rXUcxrvkkRyid7KaStTXH+3UrhOA3+MhZm0Mr9ZlX RuIL9KLgbETAL59LSQqRwMcLo9TvZMouGfDDw/OVpNT7yq9cPPkOjOcMCNuEbDpz PuXqhBfr4oROl3E2HSiRmklMC8HOwaQiWYveUPaThayAg3eiUb4cDNhLyxA0TH/9 ZzQnP7qDhz5YDUtsNwCN63yrhoaO5gBDQQBabUdyRuh8a1XuygceFswGlNudfLLV -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:33 2026 by rpki-client