This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa File: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (raw, json) Hash identifier: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054= Subject key identifier: 46:5D:31:5F:62:F9:BB:D7:BE:59:4D:CB:C5:54:C7:7C:30:99:A0:44 Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238 Certificate serial: 019B7EA45E6CFF57D2DEEF2DDB3D707AD6DE Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa Signing time: Fri 02 Jan 2026 12:17:39 +0000 ROA not before: Fri 02 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45015 IP address blocks: 185.100.12.0/22 maxlen: 22 195.32.12.0/22 maxlen: 22 195.32.72.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:5e:6c:ff:57:d2:de:ef:2d:db:3d:70:7a:d6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238 Validity Not Before: Jan 2 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=465d315f62f9bbd7be594dcbc554c77c3099a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1f:d0:50:ca:f0:5b:33:8a:9f:74:85:cd:9a: 4c:b7:12:2f:1a:04:16:f2:ab:aa:50:e2:34:50:cd: 62:28:51:cf:56:8c:85:4b:3d:e4:a8:12:bd:00:d2: dd:3f:de:59:a8:ab:35:b7:68:38:3a:27:c3:df:45: 35:ae:59:78:ba:35:a8:51:f1:33:75:62:0d:aa:3d: 27:de:ab:ee:cc:21:f6:b5:9b:c4:98:fa:f1:d0:e7: 90:ba:72:d9:10:62:a6:da:88:c3:9d:2a:5c:83:5d: 14:74:2e:b7:95:a9:40:9c:9f:fe:44:7b:8b:14:4d: 71:35:30:a4:bd:e1:69:bc:ea:35:be:36:78:97:42: 7e:84:bf:45:1c:e0:78:07:8f:7f:9e:03:57:fe:67: 61:75:f3:5d:b3:5b:0b:91:4e:05:27:ca:42:e3:38: eb:a7:f5:64:5a:d3:3d:d3:bc:6a:b2:1b:dc:2d:39: 09:d5:0a:ad:28:a8:63:43:f8:c5:eb:7a:b2:7c:b0: 12:c3:fc:dd:b6:ff:bd:4e:0a:64:23:e5:a1:07:c3: 33:a2:3f:ba:6b:53:4f:ea:20:83:78:33:99:57:5a: 29:63:dd:46:58:ce:75:54:ee:7f:63:72:84:97:b3: 89:b9:30:d3:c9:dd:b9:9e:e6:75:18:12:15:79:b1: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5D:31:5F:62:F9:BB:D7:BE:59:4D:CB:C5:54:C7:7C:30:99:A0:44 X509v3 Authority Key Identifier: keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.12.0/22 195.32.12.0/22 195.32.72.0/21 Signature Algorithm: sha256WithRSAEncryption 67:bf:04:da:3b:ee:fb:86:fd:61:7e:e8:d6:1d:1a:d1:2a:2e: 13:62:76:ed:92:dc:84:98:93:f8:fc:63:67:f5:af:d9:e5:6a: ab:94:50:83:7b:85:01:00:27:c3:e3:85:15:82:e7:31:82:0b: 19:46:71:94:2d:e4:be:aa:ab:3f:04:34:2c:66:9e:07:03:13: b4:f8:af:d4:ac:98:ef:8a:3f:d0:ea:62:3b:3c:ce:c4:b9:ea: 88:2e:1e:c6:43:d0:60:dd:75:6f:d4:e0:ee:7d:ee:f9:43:2c: 32:60:a0:38:93:04:38:d0:bf:70:a2:b3:05:c9:f6:85:e5:06: 6a:3a:9c:5e:36:20:58:f7:95:e9:e8:d6:e6:7f:1f:d4:53:ca: 33:e7:6b:d9:d5:57:7c:eb:25:d3:c2:9f:f6:a7:cb:a0:85:0c: cd:b6:dd:a1:49:62:81:04:32:23:76:5f:e3:3e:63:4c:a5:1c: 9e:a4:aa:a5:f8:5d:53:e4:b2:c1:32:61:78:35:1d:49:77:b6: 4b:2b:0b:0e:f7:cb:29:f6:e7:5a:8a:45:17:3c:e7:a0:a3:7c: ce:5f:1a:f5:ad:5d:91:4a:a8:4e:bb:0c:a7:30:69:e2:b7:b8: d6:e6:4a:f8:01:be:78:4c:54:55:b1:93:41:20:b1:f1:dd:7e: de:34:ae:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pF5s/1fS3u8t2z1wetbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5OWE0N2NkYzg5ZjQ2MzQyZjkwYjBkYTNjMzBkOWVjNWZk NjMyMzgwHhcNMjYwMTAyMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjVkMzE1ZjYyZjliYmQ3YmU1OTRkY2JjNTU0Yzc3YzMwOTlhMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0B/QUMrwWzOKn3SFzZpMtxIvGgQW 8quqUOI0UM1iKFHPVoyFSz3kqBK9ANLdP95ZqKs1t2g4OifD30U1rll4ujWoUfEz dWINqj0n3qvuzCH2tZvEmPrx0OeQunLZEGKm2ojDnSpcg10UdC63lalAnJ/+RHuL FE1xNTCkveFpvOo1vjZ4l0J+hL9FHOB4B49/ngNX/mdhdfNds1sLkU4FJ8pC4zjr p/VkWtM907xqshvcLTkJ1QqtKKhjQ/jF63qyfLASw/zdtv+9TgpkI+WhB8Mzoj+6 a1NP6iCDeDOZV1opY91GWM51VO5/Y3KEl7OJuTDTyd25nuZ1GBIVebGgKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEZdMV9i+bvXvllNy8VUx3wwmaBEMB8GA1UdIwQY MBaAFNmaR83In0Y0L5Cw2jww2exf1jI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMt YTJhMGUyZGI0OWQwLzEvUmwweFgyTDV1OWUtV1UzTHhWVEhmRENab0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMtYTJhMGUyZGI0OWQw LzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuWQMAwQC wyAMAwQDwyBIMA0GCSqGSIb3DQEBCwUAA4IBAQBnvwTaO+77hv1hfujWHRrRKi4T YnbtktyEmJP4/GNn9a/Z5WqrlFCDe4UBACfD44UVgucxggsZRnGULeS+qqs/BDQs Zp4HAxO0+K/UrJjvij/Q6mI7PM7EueqILh7GQ9Bg3XVv1ODufe75QywyYKA4kwQ4 0L9worMFyfaF5QZqOpxeNiBY95Xp6Nbmfx/UU8oz52vZ1Vd86yXTwp/2p8ughQzN tt2hSWKBBDIjdl/jPmNMpRyepKql+F1T5LLBMmF4NR1Jd7ZLKwsO98sp9udaikUX POego3zOXxr1rV2RSqhOuwynMGnit7jW5kr4Ab54TFRVsZNBILHx3X7eNK5K -----END CERTIFICATE-----Generated at Mon Jan 26 08:37:45 2026 by rpki-client