This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/i36Jf0otjIUM44IckCvrtFhsBoQ.roa File: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (raw, json) Hash identifier: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0= Subject key identifier: 8B:7E:89:7F:4A:2D:8C:85:0C:E3:82:1C:90:2B:EB:B4:58:6C:06:84 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C1337B8380478E97AE9B37EE0E7FDD1 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/i36Jf0otjIUM44IckCvrtFhsBoQ.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 195.64.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:37:b8:38:04:78:e9:7a:e9:b3:7e:e0:e7:fd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7e897f4a2d8c850ce3821c902bebb4586c0684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:39:97:77:b2:49:73:6c:ae:68:91:2a:23: 9a:fb:84:32:75:4e:ec:31:91:46:22:44:8e:8d:92: 88:8d:8a:bf:4f:81:5f:c8:ea:10:e9:36:be:00:ae: 8f:e3:ca:91:3f:d1:ca:3b:9e:4e:c7:32:88:89:f6: b0:9e:57:f8:a0:54:42:53:2f:ee:37:19:81:2e:d1: 41:3e:03:1f:5e:f4:64:17:e5:55:f9:92:38:f4:b3: 56:ac:ad:ae:4a:90:ca:44:e2:c4:67:32:aa:b5:8b: a5:8a:3a:01:98:d7:6a:7f:1b:98:b3:60:48:de:a1: 1b:33:57:73:55:c9:4d:65:de:82:50:73:d7:92:8d: 04:0f:f9:00:48:5e:fa:9f:43:69:81:05:f0:c5:60: 6a:7d:34:fc:aa:f8:0d:9a:98:ef:aa:d6:e3:8e:ac: 05:89:b7:c9:e3:7e:bb:ac:6e:fc:6e:72:84:52:f2: 7f:f6:45:34:a9:2b:6c:1f:5a:f1:83:04:4e:9b:42: f0:86:09:00:03:28:db:81:e5:40:c7:9f:17:39:fd: 8d:a4:e9:34:81:36:27:20:e9:ca:cf:7b:01:1d:bb: 46:6c:98:a9:44:c5:a4:f4:c3:08:1d:6d:82:45:47: a0:bf:df:b5:ad:e5:56:5a:91:26:41:17:bb:57:36: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7E:89:7F:4A:2D:8C:85:0C:E3:82:1C:90:2B:EB:B4:58:6C:06:84 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/i36Jf0otjIUM44IckCvrtFhsBoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:b8:37:a4:4a:11:13:3b:ee:0c:c7:9d:ee:cb:91:78:b0:4e: 92:31:da:8c:62:a6:2d:67:d2:aa:e1:43:69:1e:c6:bb:92:ec: 7b:de:10:ba:65:0d:96:74:f0:a2:57:85:d7:3d:d0:dc:fa:9c: fb:e7:78:42:e7:b3:6e:3e:21:81:60:0a:43:93:ad:93:eb:25: 99:23:58:00:9a:1f:b7:ca:c0:9e:6d:c6:b7:0d:23:6d:df:cc: 3f:f8:ef:77:42:33:16:5c:88:13:1a:47:33:a5:fb:a2:b9:6f: e3:89:96:20:be:ff:29:f4:fb:34:df:f9:67:bf:cd:7b:52:07: 1d:cf:06:8a:f0:0a:d0:57:ed:b2:82:34:ac:c0:29:aa:64:29: fb:c1:ea:d3:22:6b:04:9e:21:5c:ae:01:06:a3:81:c9:d7:f5: d6:66:d7:63:c2:20:ff:71:09:97:a5:c8:59:a1:7e:40:26:3f: 7d:62:e5:ac:63:64:ce:9d:56:22:c3:0d:76:d4:a4:fc:7d:62: 32:06:cc:5b:d7:24:6d:37:bf:fc:bd:46:a3:80:22:d0:54:77: dd:29:85:1b:69:a8:0b:47:92:46:bb:8d:b0:0f:88:4e:04:ad: 2f:09:6b:05:9e:b7:b5:ec:38:ab:fd:0d:35:08:64:07:b7:fb: 88:84:a7:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eze4OAR46Xrps37g5/3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdlODk3ZjRhMmQ4Yzg1MGNlMzgyMWM5MDJiZWJiNDU4NmMwNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFg5l3eySXNsrmiRKiOa+4QydU7s MZFGIkSOjZKIjYq/T4FfyOoQ6Ta+AK6P48qRP9HKO55OxzKIifawnlf4oFRCUy/u NxmBLtFBPgMfXvRkF+VV+ZI49LNWrK2uSpDKROLEZzKqtYulijoBmNdqfxuYs2BI 3qEbM1dzVclNZd6CUHPXko0ED/kASF76n0NpgQXwxWBqfTT8qvgNmpjvqtbjjqwF ibfJ4367rG78bnKEUvJ/9kU0qStsH1rxgwROm0LwhgkAAyjbgeVAx58XOf2NpOk0 gTYnIOnKz3sBHbtGbJipRMWk9MMIHW2CRUegv9+1reVWWpEmQRe7VzafBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIt+iX9KLYyFDOOCHJAr67RYbAaEMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvaTM2SmYwb3RqSVVNNDRJY2tDdnJ0RmhzQm9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0BsMA0G CSqGSIb3DQEBCwUAA4IBAQAKuDekShETO+4Mx53uy5F4sE6SMdqMYqYtZ9Kq4UNp Hsa7kux73hC6ZQ2WdPCiV4XXPdDc+pz753hC57NuPiGBYApDk62T6yWZI1gAmh+3 ysCebca3DSNt38w/+O93QjMWXIgTGkczpfuiuW/jiZYgvv8p9Ps03/lnv817Ugcd zwaK8ArQV+2ygjSswCmqZCn7werTImsEniFcrgEGo4HJ1/XWZtdjwiD/cQmXpchZ oX5AJj99YuWsY2TOnVYiww121KT8fWIyBsxb1yRtN7/8vUajgCLQVHfdKYUbaagL R5JGu42wD4hOBK0vCWsFnre17Dir/Q01CGQHt/uIhKeM -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:10 2026 by rpki-client