This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa File: nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa (raw, json) Hash identifier: WwxgQJEoxT9RlD+HkKWEjQjejeBr0IIFvMv1CfM5j4U= Subject key identifier: 9C:3B:BC:84:DF:A3:F9:5A:7F:56:DB:FD:A1:43:F3:C6:69:8B:0C:89 Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Certificate serial: 019B7C7F219143F2ED7BD7478F41F1DC1375 Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa Signing time: Fri 02 Jan 2026 02:17:44 +0000 ROA not before: Fri 02 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32934 IP address blocks: 185.89.218.0/23 maxlen: 24 185.89.218.0/24 maxlen: 24 185.89.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:21:91:43:f2:ed:7b:d7:47:8f:41:f1:dc:13:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e Validity Not Before: Jan 2 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c3bbc84dfa3f95a7f56dbfda143f3c6698b0c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:29:c3:6e:8f:2f:df:45:36:6f:d6:03:db: f4:2d:7f:55:1e:3f:9d:7c:5c:95:6a:7e:37:c4:5e: c4:b7:7f:04:f4:c5:64:d9:fb:60:6e:aa:41:92:50: 6f:8c:80:1b:fd:dd:fd:93:0e:ca:73:47:32:bc:d5: 25:ff:b5:d8:9c:f8:36:7e:3e:56:0b:2f:ef:81:f4: 88:62:08:ad:8d:5a:03:c7:ab:48:5d:5b:78:fc:76: f2:fa:4a:90:4a:4e:36:4d:61:90:b2:f3:d7:c1:2f: ee:42:f5:9c:d6:f2:22:fe:f6:b4:06:1e:9f:72:a4: 5e:9c:29:4b:18:7f:81:45:7a:6b:04:d2:c6:37:db: bd:57:86:60:3b:4e:4b:bf:c2:93:7d:df:0c:d4:55: ee:70:a7:50:87:87:9c:01:ef:b5:6c:9e:9b:9c:a4: a3:73:5b:dd:32:a6:ac:13:bf:f8:55:a5:12:1c:a0: 07:d8:5c:57:fa:f1:75:1c:f7:88:12:6d:88:10:f7: 1d:b5:d0:4b:77:88:7b:f6:0c:10:02:0c:8a:73:53: 57:13:d9:fd:c5:09:b2:4e:08:38:82:77:04:bd:b5: 0d:ec:84:25:1c:9e:18:6c:b0:37:7d:30:b5:ef:1f: ad:16:53:e1:5e:90:79:12:5b:af:80:e6:b4:ce:4e: 83:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:BC:84:DF:A3:F9:5A:7F:56:DB:FD:A1:43:F3:C6:69:8B:0C:89 X509v3 Authority Key Identifier: keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/nDu8hN-j-Vp_Vtv9oUPzxmmLDIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.218.0/23 Signature Algorithm: sha256WithRSAEncryption 65:c5:dc:f0:4f:80:53:e5:0a:2f:ff:65:81:bd:20:26:65:a2: 88:13:91:fa:b9:c3:28:ce:46:7b:34:19:2a:4f:fa:a0:a2:b3: 56:7e:96:5f:2e:d7:9a:bf:e4:d7:77:fa:59:84:1d:71:fd:07: ac:73:76:82:30:38:42:1f:d7:fd:69:55:f0:c7:da:d9:c9:37: 03:15:ae:de:4b:62:94:56:c2:33:8a:25:82:3c:bc:c7:a2:49: 1b:71:98:cb:83:16:d4:c1:39:d1:1a:23:09:fa:d1:de:e2:6b: ee:af:bb:63:e9:96:8f:04:54:fa:a9:d8:fc:4f:f7:5f:3f:52: 61:4b:7f:2e:a0:3a:bc:be:d3:b0:3b:50:eb:a3:3c:f9:18:22: 11:34:b5:3b:77:a8:98:82:eb:62:65:bc:47:c7:ff:93:2c:96: cb:8d:7a:f1:be:22:72:be:4b:d7:f6:d5:22:0f:da:0c:fb:b6: 81:79:37:d6:3a:c9:bd:85:a1:c0:f6:f4:b1:33:33:c1:84:a7: 01:69:0a:05:1b:9f:f4:9c:f8:ec:88:ef:84:07:9e:87:ff:0f: de:df:73:1a:ba:75:b3:cc:74:f3:66:1b:f7:54:41:e8:1a:a8: a3:bb:75:86:61:59:98:c7:e6:c9:18:1f:ca:99:d9:fc:0d:ba: b1:d4:28:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fyGRQ/Lte9dHj0Hx3BN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhM2NmOTkxOWEyYzgxNDZjOTZmNWExNGIxNTc0NTliNzk0 YjZhMmUwHhcNMjYwMTAyMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzNiYmM4NGRmYTNmOTVhN2Y1NmRiZmRhMTQzZjNjNjY5OGIwYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhopw26PL99FNm/WA9v0LX9VHj+d fFyVan43xF7Et38E9MVk2ftgbqpBklBvjIAb/d39kw7Kc0cyvNUl/7XYnPg2fj5W Cy/vgfSIYgitjVoDx6tIXVt4/Hby+kqQSk42TWGQsvPXwS/uQvWc1vIi/va0Bh6f cqRenClLGH+BRXprBNLGN9u9V4ZgO05Lv8KTfd8M1FXucKdQh4ecAe+1bJ6bnKSj c1vdMqasE7/4VaUSHKAH2FxX+vF1HPeIEm2IEPcdtdBLd4h79gwQAgyKc1NXE9n9 xQmyTgg4gncEvbUN7IQlHJ4YbLA3fTC17x+tFlPhXpB5EluvgOa0zk6DJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJw7vITfo/laf1bb/aFD88ZpiwyJMB8GA1UdIwQY MBaAFDo8+ZGaLIFGyW9aFLFXRZt5S2ouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMt NzBjYmY1MTQ5YTVhLzEvbkR1OGhOLWotVnBfVnR2OW9VUHp4bW1MRElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS85ZWE0OWEtY2Y2Ny00NjZhLWFiNWMtNzBjYmY1MTQ5YTVh LzEvT2p6NWtab3NnVWJKYjFvVXNWZEZtM2xMYWk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuVnaMA0G CSqGSIb3DQEBCwUAA4IBAQBlxdzwT4BT5Qov/2WBvSAmZaKIE5H6ucMozkZ7NBkq T/qgorNWfpZfLteav+TXd/pZhB1x/Qesc3aCMDhCH9f9aVXwx9rZyTcDFa7eS2KU VsIziiWCPLzHokkbcZjLgxbUwTnRGiMJ+tHe4mvur7tj6ZaPBFT6qdj8T/dfP1Jh S38uoDq8vtOwO1Drozz5GCIRNLU7d6iYgutiZbxHx/+TLJbLjXrxviJyvkvX9tUi D9oM+7aBeTfWOsm9haHA9vSxMzPBhKcBaQoFG5/0nPjsiO+EB56H/w/e33MaunWz zHTzZhv3VEHoGqiju3WGYVmYx+bJGB/Kmdn8Dbqx1Ch5 -----END CERTIFICATE-----Generated at Mon Jan 26 00:15:57 2026 by rpki-client