This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/tDq0OuNEcyHyXrNZJvYPajWGOJ8.roa File: tDq0OuNEcyHyXrNZJvYPajWGOJ8.roa (raw, json) Hash identifier: jTB45cj34yVE8wIWj57B+/0GzTBSMq8W3N2dZK8KTqo= Subject key identifier: B4:3A:B4:3A:E3:44:73:21:F2:5E:B3:59:26:F6:0F:6A:35:86:38:9F Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Certificate serial: 019B77C757B1F4B40AEB786A28124141D510 Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/tDq0OuNEcyHyXrNZJvYPajWGOJ8.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212469 IP address blocks: 185.229.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:b1:f4:b4:0a:eb:78:6a:28:12:41:41:d5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b43ab43ae3447321f25eb35926f60f6a3586389f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:fc:b7:7a:15:54:d7:28:d5:cf:38:4b:de: 5e:ed:dc:63:ed:98:09:8b:c1:a8:a3:a9:a9:b6:4b: 27:dc:1a:49:fa:66:b7:95:d7:f8:91:02:57:99:b5: 96:08:92:1b:a8:67:44:67:ff:3f:9f:30:5b:2a:93: e9:e9:b7:30:4f:2e:f8:97:a8:a7:d6:39:bc:c5:eb: ce:45:57:86:fe:a9:53:b9:84:86:bd:70:03:84:fd: 48:c0:42:d3:10:5e:82:e4:b0:1a:94:57:ec:dc:41: ad:f1:7b:8d:1c:40:e6:4d:ba:08:01:17:66:f4:63: f6:60:cc:fd:bc:ee:d1:d2:37:c2:9b:b6:b1:ec:22: 1b:f0:72:5a:db:ed:34:8c:73:9c:ae:1f:9b:63:b9: c6:00:ad:5e:19:6b:8f:be:2a:f0:79:7b:74:71:40: 20:7e:77:0d:dc:95:31:65:ec:2d:21:95:71:24:41: f9:71:44:cf:24:07:07:0e:43:64:4f:39:87:d0:31: 3a:fd:01:00:c8:43:1c:09:92:74:8a:d1:09:c5:87: 87:2e:ff:56:7e:5e:74:4e:93:4d:a6:c9:51:3a:f9: 7b:66:da:fe:c2:5a:68:76:ce:1d:41:88:e8:7d:7a: 24:2a:59:09:8d:d5:85:c9:e5:df:a1:cb:c8:13:99: 36:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3A:B4:3A:E3:44:73:21:F2:5E:B3:59:26:F6:0F:6A:35:86:38:9F X509v3 Authority Key Identifier: keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/tDq0OuNEcyHyXrNZJvYPajWGOJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.42.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:67:62:93:81:9a:f6:d9:18:b9:c4:df:87:f3:66:36:90:f9: e3:5b:a3:9d:8e:2d:58:4f:4c:16:2f:00:eb:c5:81:79:4d:6e: b3:ed:d5:31:70:5b:75:d6:63:81:36:54:b7:52:c3:25:0e:b5: 40:b0:a5:70:d7:5c:4d:46:9a:76:1c:ba:8c:3c:57:da:0b:d3: 57:36:5f:0a:77:ff:5a:a6:85:54:98:c8:91:82:c5:b8:2b:1b: d9:fb:f3:1e:c3:05:8c:4a:c3:a7:5d:e4:24:93:c1:8a:b4:d6: d5:16:93:ac:c6:d8:1f:9a:e8:92:97:be:b1:9d:6d:30:cf:b9: f1:a5:a1:b5:ab:70:9a:10:42:83:c3:5d:0e:9e:3e:60:b0:5f: f7:00:c0:d6:bc:9f:72:0e:6e:78:fd:c5:04:24:1f:4b:b0:64: 45:e2:94:fb:fa:29:ca:6f:96:65:0f:4d:76:a0:38:a7:53:00: 5f:bb:51:8c:fc:df:1c:b4:61:8f:93:69:4b:c6:ca:e3:60:3b: b1:81:8a:21:36:b9:bb:08:96:4e:e8:24:68:5c:86:15:f2:59: 54:c5:8d:da:a1:58:ac:1c:6f:1c:40:37:f2:94:26:ff:ba:a5: 3d:28:1d:1b:79:06:08:56:0a:88:6b:a6:51:78:41:53:c5:0d: ac:3d:48:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1ex9LQK63hqKBJBQdUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy MjdkOTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDNhYjQzYWUzNDQ3MzIxZjI1ZWIzNTkyNmY2MGY2YTM1ODYzODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLb8t3oVVNco1c84S95e7dxj7ZgJ i8Goo6mptksn3BpJ+ma3ldf4kQJXmbWWCJIbqGdEZ/8/nzBbKpPp6bcwTy74l6in 1jm8xevORVeG/qlTuYSGvXADhP1IwELTEF6C5LAalFfs3EGt8XuNHEDmTboIARdm 9GP2YMz9vO7R0jfCm7ax7CIb8HJa2+00jHOcrh+bY7nGAK1eGWuPvirweXt0cUAg fncN3JUxZewtIZVxJEH5cUTPJAcHDkNkTzmH0DE6/QEAyEMcCZJ0itEJxYeHLv9W fl50TpNNpslROvl7Ztr+wlpods4dQYjofXokKlkJjdWFyeXfocvIE5k2ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLQ6tDrjRHMh8l6zWSb2D2o1hjifMB8GA1UdIwQY MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It NzExNjk1NjdlMzljLzEvdERxME91TkVjeUh5WHJOWkp2WVBhaldHT0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueUqMA0G CSqGSIb3DQEBCwUAA4IBAQB8Z2KTgZr22Ri5xN+H82Y2kPnjW6Odji1YT0wWLwDr xYF5TW6z7dUxcFt11mOBNlS3UsMlDrVAsKVw11xNRpp2HLqMPFfaC9NXNl8Kd/9a poVUmMiRgsW4KxvZ+/MewwWMSsOnXeQkk8GKtNbVFpOsxtgfmuiSl76xnW0wz7nx paG1q3CaEEKDw10Onj5gsF/3AMDWvJ9yDm54/cUEJB9LsGRF4pT7+inKb5ZlD012 oDinUwBfu1GM/N8ctGGPk2lLxsrjYDuxgYohNrm7CJZO6CRoXIYV8llUxY3aoVis HG8cQDfylCb/uqU9KB0beQYIVgqIa6ZReEFTxQ2sPUj+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:41 2026 by rpki-client