This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa File: pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa (raw, json) Hash identifier: FICr2xp4vd+7n3rWeWvKoKoWXhNvU50pS0gZxwPllVU= Subject key identifier: A7:14:C3:0E:5F:07:0F:A8:59:A3:9A:89:28:89:1E:29:44:F7:3C:76 Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Certificate serial: 019B7F8593F3932721CB008945122689B5C2 Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa Signing time: Fri 02 Jan 2026 16:23:39 +0000 ROA not before: Fri 02 Jan 2026 16:23:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31708 IP address blocks: 185.199.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.mft rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:93:f3:93:27:21:cb:00:89:45:12:26:89:b5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000 Validity Not Before: Jan 2 16:23:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a714c30e5f070fa859a39a8928891e2944f73c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:21:19:90:cd:09:56:11:6a:f9:bd:92:2d: 28:f5:d8:53:41:12:75:0f:73:79:e2:b4:d1:2b:d8: 3c:47:70:6d:eb:9f:6c:97:f3:a6:a9:e0:24:10:14: 62:b5:08:88:7a:ce:62:0f:c4:07:26:e2:70:36:c3: 3c:f1:e0:32:39:cb:10:a2:a1:f0:cc:50:60:e2:12: f9:31:66:f1:cd:75:e6:81:38:d0:25:ff:e2:96:79: e6:b3:52:e9:a7:b2:02:05:99:68:0d:0c:57:30:24: a1:7a:a8:7e:53:e7:f5:84:9b:67:e8:9c:17:12:55: ff:dd:b9:48:8c:67:63:e0:58:6e:d4:85:23:69:ec: f0:35:18:b2:6e:59:85:9c:51:53:fc:9e:60:71:b3: 39:6c:b6:2b:87:20:12:42:f2:ae:6a:17:78:c5:49: 6e:58:86:56:37:b2:83:f2:65:51:c6:2c:73:9d:cb: 11:93:a5:5b:6b:c8:19:57:b0:e1:f8:c6:4e:3a:a4: 2a:60:24:6f:78:62:35:ce:3d:af:1c:44:47:bb:24: 92:ee:e6:e2:21:ee:3f:9e:72:f5:15:ad:18:7f:09: 51:29:ce:80:ea:23:e9:3f:b6:f7:93:67:db:bb:32: 5a:98:b9:71:2a:67:e3:7a:a5:03:54:30:86:40:7f: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:C3:0E:5F:07:0F:A8:59:A3:9A:89:28:89:1E:29:44:F7:3C:76 X509v3 Authority Key Identifier: keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/pxTDDl8HD6hZo5qJKIkeKUT3PHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.36.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:17:c2:8e:71:6f:f6:03:75:04:81:0e:f7:21:e7:ca:8c:79: 1d:08:c8:86:82:16:79:11:61:1a:c7:ce:06:5c:2b:33:71:0a: 02:44:70:39:7f:f9:5e:c7:ab:d0:9d:01:a2:e5:09:22:7f:87: 66:4a:dc:9a:a1:b0:8e:51:91:f1:74:44:0d:89:9c:9b:07:ca: 87:bd:ac:7e:f9:78:3e:bc:59:21:6d:28:40:d5:89:64:15:c2: 50:8b:d9:1c:ce:29:58:3b:a3:5a:f1:27:d3:d2:e4:a7:93:bd: 34:ff:e1:99:77:cc:cb:3b:ee:2d:79:3d:c8:18:a1:b5:ad:0f: f7:e5:67:e8:f6:cc:2f:ad:27:0b:58:93:96:b7:53:82:9e:c8: fb:96:b1:e0:dc:a8:89:17:81:b0:d8:6a:87:bb:fe:d1:8f:cb: c6:a3:05:88:98:3d:87:7e:39:44:2c:f7:97:93:f0:02:b9:3c: 0e:50:19:10:d3:1d:77:f3:e2:2d:bc:1b:69:c5:c6:13:49:fa: 30:4c:69:70:40:7f:cb:79:50:9e:c2:9e:52:fc:02:13:74:d6: 00:fe:cb:e8:05:9c:95:93:9c:4f:eb:6f:92:3e:da:1e:28:eb: a0:7a:09:ab:2b:f0:04:ec:6a:c6:51:cf:0c:be:58:66:c6:57: a3:d5:c7:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hZPzkychywCJRRImibXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGExMGEyNTY3MjhmMTFhNGJiYWFkYzMyMDRiN2YwYTM1 YTUwMDAwHhcNMjYwMTAyMTYyMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzE0YzMwZTVmMDcwZmE4NTlhMzlhODkyODg5MWUyOTQ0ZjczYzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJohGZDNCVYRavm9ki0o9dhTQRJ1 D3N54rTRK9g8R3Bt659sl/OmqeAkEBRitQiIes5iD8QHJuJwNsM88eAyOcsQoqHw zFBg4hL5MWbxzXXmgTjQJf/ilnnms1Lpp7ICBZloDQxXMCSheqh+U+f1hJtn6JwX ElX/3blIjGdj4Fhu1IUjaezwNRiyblmFnFFT/J5gcbM5bLYrhyASQvKuahd4xUlu WIZWN7KD8mVRxixzncsRk6Vba8gZV7Dh+MZOOqQqYCRveGI1zj2vHERHuySS7ubi Ie4/nnL1Fa0YfwlRKc6A6iPpP7b3k2fbuzJamLlxKmfjeqUDVDCGQH/SdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcUww5fBw+oWaOaiSiJHilE9zx2MB8GA1UdIwQY MBaAFJQKEKJWco8RpLuq3DIEt/CjWlAAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYt ZGNlNmQ2OTA5MjQ3LzEvcHhURERsOEhENmhabzVxSktJa2VLVVQzUEhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hMWFlNzUtMmQ2Yi00Y2M2LWFjZWYtZGNlNmQ2OTA5MjQ3 LzEvbEFvUW9sWnlqeEdrdTZyY01nUzM4S05hVUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucckMA0G CSqGSIb3DQEBCwUAA4IBAQBtF8KOcW/2A3UEgQ73IefKjHkdCMiGghZ5EWEax84G XCszcQoCRHA5f/lex6vQnQGi5Qkif4dmStyaobCOUZHxdEQNiZybB8qHvax++Xg+ vFkhbShA1YlkFcJQi9kczilYO6Na8SfT0uSnk700/+GZd8zLO+4teT3IGKG1rQ/3 5Wfo9swvrScLWJOWt1OCnsj7lrHg3KiJF4Gw2GqHu/7Rj8vGowWImD2HfjlELPeX k/ACuTwOUBkQ0x138+ItvBtpxcYTSfowTGlwQH/LeVCewp5S/AITdNYA/svoBZyV k5xP62+SPtoeKOugegmrK/AE7GrGUc8Mvlhmxlej1cfQ -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:48 2026 by rpki-client