This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/D2oqUhdf6v322Kq7aCwzoafCx3U.roa File: D2oqUhdf6v322Kq7aCwzoafCx3U.roa (raw, json) Hash identifier: CzJPEN/QpFx29CuMxUcoUKMypFWDJ3GADlvAaNhlIkc= Subject key identifier: 0F:6A:2A:52:17:5F:EA:FD:F6:D8:AA:BB:68:2C:33:A1:A7:C2:C7:75 Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08 Certificate serial: 019B7EA593D70D37BABF75A308977E979644 Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/D2oqUhdf6v322Kq7aCwzoafCx3U.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1724 IP address blocks: 161.3.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:93:d7:0d:37:ba:bf:75:a3:08:97:7e:97:96:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08 Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f6a2a52175feafdf6d8aabb682c33a1a7c2c775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:27:04:43:45:82:0d:d0:d2:e2:19:94:db: 3d:63:1d:00:a7:22:d4:84:26:02:29:f6:94:32:cd: b9:e9:5f:4d:ed:60:07:89:83:ba:a4:20:4d:3e:15: 8c:c5:5e:c4:d6:9b:63:8c:40:ce:6d:91:d7:1c:50: 10:92:c2:d3:07:3a:63:fe:46:f3:08:0a:63:a6:11: c4:b5:87:4e:92:ef:5f:4e:03:98:59:8b:4c:6a:8a: 68:4b:8e:5e:ca:0c:d6:d0:33:31:e1:b1:3e:ac:96: a1:ed:09:29:7f:6d:9b:01:d4:78:a6:25:27:a5:98: da:fd:01:b0:f4:b3:4b:98:e5:58:49:5f:2d:0c:96: 7c:38:04:8f:89:bc:79:4e:fc:64:a3:84:ee:9b:32: 69:c8:b6:d0:1c:20:17:bc:4d:f5:9a:c6:79:06:fd: 6e:97:00:45:6a:04:51:cc:b7:84:4f:0c:94:45:8a: 99:74:c7:50:45:0b:dd:95:0b:3f:08:81:ea:d9:a1: a5:e7:3e:11:dc:3a:0d:6a:47:47:7b:e6:c9:02:3a: 04:01:c1:b5:80:d2:90:85:5b:8d:e2:55:f3:1f:85: 65:17:4c:f4:c5:ed:c7:d5:23:f8:58:03:40:8f:ad: 15:fd:eb:f0:73:ca:d0:6a:06:e7:95:d0:90:45:0d: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:2A:52:17:5F:EA:FD:F6:D8:AA:BB:68:2C:33:A1:A7:C2:C7:75 X509v3 Authority Key Identifier: keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/D2oqUhdf6v322Kq7aCwzoafCx3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 37:9f:cc:88:34:2e:c5:71:f4:70:92:db:7c:01:b7:8b:f0:e7: 09:10:c6:c0:a2:05:a9:3d:61:14:af:9c:58:fc:65:d8:33:87: 69:43:a7:04:4d:a5:ac:e2:80:1d:c0:f3:25:7c:6f:35:6c:c9: ad:3e:b2:68:39:9e:2c:2b:88:9f:9a:db:46:73:96:dd:c6:69: 7f:02:f0:21:b8:12:2d:7f:40:c4:d8:8b:3d:52:a6:22:26:38: 57:dc:a5:12:b1:99:62:35:23:f4:41:9f:b0:85:b8:1c:83:63: 88:4b:f2:3c:39:b1:94:60:2d:3e:0d:6a:d9:fb:42:3e:c8:53: 74:fc:d9:88:d0:bf:21:52:03:9c:e3:61:ce:92:d4:be:09:3a: f2:ce:93:5a:3e:a7:29:0b:f3:73:59:fb:c1:28:c7:2f:0c:ef: 7e:ce:e5:2f:fd:c8:bb:f2:da:83:f1:0d:5b:28:0c:e8:14:63: 4c:fc:93:69:a0:2a:4d:cb:6f:83:5a:c9:e9:e9:36:43:f0:47: 69:74:78:ac:86:de:78:98:7b:b6:5e:70:98:f2:76:de:63:55: 22:f7:e5:29:a8:d6:b3:e7:0e:ee:18:14:7d:02:be:ec:89:74: e2:ce:95:47:ce:b8:21:ca:a2:04:82:24:b2:43:aa:e6:15:49: 3c:75:a3:44 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+pZPXDTe6v3WjCJd+l5ZEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNTYwNGJhODk1ZThmYjNiNDlhMmM3ODA4OGU5ZmYyZmY5 NzBhMDgwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjZhMmE1MjE3NWZlYWZkZjZkOGFhYmI2ODJjMzNhMWE3YzJjNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6UnBENFgg3Q0uIZlNs9Yx0ApyLU hCYCKfaUMs256V9N7WAHiYO6pCBNPhWMxV7E1ptjjEDObZHXHFAQksLTBzpj/kbz CApjphHEtYdOku9fTgOYWYtMaopoS45eygzW0DMx4bE+rJah7Qkpf22bAdR4piUn pZja/QGw9LNLmOVYSV8tDJZ8OASPibx5Tvxko4TumzJpyLbQHCAXvE31msZ5Bv1u lwBFagRRzLeETwyURYqZdMdQRQvdlQs/CIHq2aGl5z4R3DoNakdHe+bJAjoEAcG1 gNKQhVuN4lXzH4VlF0z0xe3H1SP4WANAj60V/evwc8rQagbnldCQRQ1NnQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFA9qKlIXX+r99tiqu2gsM6Gnwsd1MB8GA1UdIwQY MBaAFBFWBLqJXo+ztJoseAiOn/L/lwoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMt MTY5MmZjOGJiYTE1LzEvRDJvcVVoZGY2djMyMktxN2FDd3pvYWZDeDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMtMTY5MmZjOGJiYTE1 LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoQMwDQYJ KoZIhvcNAQELBQADggEBADefzIg0LsVx9HCS23wBt4vw5wkQxsCiBak9YRSvnFj8 Zdgzh2lDpwRNpazigB3A8yV8bzVsya0+smg5niwriJ+a20Zzlt3GaX8C8CG4Ei1/ QMTYiz1SpiImOFfcpRKxmWI1I/RBn7CFuByDY4hL8jw5sZRgLT4Natn7Qj7IU3T8 2YjQvyFSA5zjYc6S1L4JOvLOk1o+pykL83NZ+8Eoxy8M737O5S/9yLvy2oPxDVso DOgUY0z8k2mgKk3Lb4NayenpNkPwR2l0eKyG3niYe7ZecJjydt5jVSL35Smo1rPn Du4YFH0CvuyJdOLOlUfOuCHKogSCJLJDquYVSTx1o0Q= -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:44 2026 by rpki-client