This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pdZA2Upbo20SiB6twFM6g6dgdjs.roa File: pdZA2Upbo20SiB6twFM6g6dgdjs.roa (raw, json) Hash identifier: 4X8F+Ie2CbjgYhGjsVZ9426UZ/EHnHL6NX3krPUDwCs= Subject key identifier: A5:D6:40:D9:4A:5B:A3:6D:12:88:1E:AD:C0:53:3A:83:A7:60:76:3B Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB1957720733B1E8A0E89BCBE2D075 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pdZA2Upbo20SiB6twFM6g6dgdjs.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206208 IP address blocks: 95.178.39.0/24 maxlen: 24 185.158.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:57:72:07:33:b1:e8:a0:e8:9b:cb:e2:d0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5d640d94a5ba36d12881eadc0533a83a760763b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:54:31:20:19:8a:e5:77:85:86:9b:b5:d4: b8:8c:be:f9:1b:78:2e:62:f6:f6:68:3a:26:ab:65: 7e:42:e7:91:ad:d6:6f:28:6f:34:c5:37:3f:d5:fa: 48:32:df:0d:09:0c:1a:25:45:87:f9:e7:ab:72:c7: 82:74:26:09:68:1c:65:f2:aa:3e:d6:aa:d6:2c:bc: 4e:11:6e:da:2a:a9:52:0d:4d:da:28:d0:79:bc:0e: 1b:f6:09:ee:f7:14:5c:a0:49:e7:20:fa:03:c0:0c: b8:5d:c2:cd:cd:c6:e0:05:58:79:63:e8:2f:a9:f8: 35:e1:86:7c:53:0f:06:ea:17:45:d1:14:ae:90:01: 05:95:d4:dc:16:97:69:37:40:b8:1f:0f:43:be:82: 79:dc:36:8b:c5:46:4f:4b:96:da:cb:7b:a2:88:c8: 34:64:e5:7d:a1:5c:fb:57:73:b3:e2:28:d5:25:0f: e3:c4:0e:33:39:9e:c3:76:af:20:51:f7:c9:5a:0e: 8e:8e:da:da:41:ad:ff:1c:63:b1:da:7d:24:f0:3d: 32:b3:97:10:8f:e3:3c:1f:be:85:86:73:93:28:9b: fa:7e:ae:f9:5a:79:b5:49:2a:85:c8:40:26:96:96: d7:6b:1c:9a:d4:fb:dd:7e:8e:bd:1a:e7:11:46:80: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D6:40:D9:4A:5B:A3:6D:12:88:1E:AD:C0:53:3A:83:A7:60:76:3B X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/pdZA2Upbo20SiB6twFM6g6dgdjs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.178.39.0/24 185.158.52.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:3e:4b:d9:35:4c:03:94:b5:34:a3:22:bc:c0:bf:f2:fd:b8: 60:af:b4:38:ef:1b:50:a1:7f:ed:57:10:0e:35:c7:6e:f5:ec: 86:c4:51:23:0c:9d:c4:a5:1c:82:50:c7:84:a7:2d:dd:ee:47: c8:26:5f:a1:f4:2e:a0:50:d0:5b:d1:42:68:6f:3a:74:fa:76: ee:dc:6b:10:8e:37:89:61:50:ef:9c:8f:a0:1d:10:a1:f5:18: a8:b4:88:74:3b:9b:39:ab:61:9e:8f:72:43:4f:c1:45:d5:73: 45:35:ac:eb:3e:5a:f0:08:e1:e1:5d:9b:ed:e2:af:a2:60:1d: 1d:08:ae:f4:e5:65:5e:21:60:0d:e5:ee:25:06:86:a5:0f:c8: 35:80:09:52:51:1e:c6:3c:4c:dc:46:cc:9f:35:2b:5e:d5:eb: 82:d9:fe:b1:bc:39:91:fb:a6:40:c1:6c:f0:b2:b4:22:2f:d5: df:1d:b5:26:3c:1b:04:9d:a8:b3:ac:70:10:1a:ee:36:ba:b0: d9:d7:e6:ae:1f:a8:cd:fd:d8:14:30:ed:2d:85:0a:e5:9e:e6: 0b:07:b1:19:be:ae:29:a7:03:1f:5d:44:fe:81:a1:a2:88:42: 1c:a7:73:6f:c2:57:82:ab:e5:1c:ca:8f:e2:27:c6:9c:a7:05: 3d:40:08:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26xlXcgczseig6JvL4tB1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQ2NDBkOTRhNWJhMzZkMTI4ODFlYWRjMDUzM2E4M2E3NjA3NjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogJUMSAZiuV3hYabtdS4jL75G3gu Yvb2aDomq2V+QueRrdZvKG80xTc/1fpIMt8NCQwaJUWH+eercseCdCYJaBxl8qo+ 1qrWLLxOEW7aKqlSDU3aKNB5vA4b9gnu9xRcoEnnIPoDwAy4XcLNzcbgBVh5Y+gv qfg14YZ8Uw8G6hdF0RSukAEFldTcFpdpN0C4Hw9DvoJ53DaLxUZPS5bay3uiiMg0 ZOV9oVz7V3Oz4ijVJQ/jxA4zOZ7Ddq8gUffJWg6OjtraQa3/HGOx2n0k8D0ys5cQ j+M8H76FhnOTKJv6fq75Wnm1SSqFyEAmlpbXaxya1Pvdfo69GucRRoDnUwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKXWQNlKW6NtEogercBTOoOnYHY7MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvcGRaQTJVcGJvMjBTaUI2dHdGTTZnNmRnZGpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX7InAwQC uZ40MA0GCSqGSIb3DQEBCwUAA4IBAQB9PkvZNUwDlLU0oyK8wL/y/bhgr7Q47xtQ oX/tVxAONcdu9eyGxFEjDJ3EpRyCUMeEpy3d7kfIJl+h9C6gUNBb0UJobzp0+nbu 3GsQjjeJYVDvnI+gHRCh9RiotIh0O5s5q2Gej3JDT8FF1XNFNazrPlrwCOHhXZvt 4q+iYB0dCK705WVeIWAN5e4lBoalD8g1gAlSUR7GPEzcRsyfNSte1euC2f6xvDmR +6ZAwWzwsrQiL9XfHbUmPBsEnaizrHAQGu42urDZ1+auH6jN/dgUMO0thQrlnuYL B7EZvq4ppwMfXUT+gaGiiEIcp3NvwleCq+Ucyo/iJ8acpwU9QAhM -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:05 2026 by rpki-client