This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ADSCFOnjMJLAi_8BKddA7FSJKFo.roa File: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (raw, json) Hash identifier: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04= Subject key identifier: 00:34:82:14:E9:E3:30:92:C0:8B:FF:01:29:D7:40:EC:54:89:28:5A Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B7EA6AD46CCF4EE73E793B30CA2311546 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ADSCFOnjMJLAi_8BKddA7FSJKFo.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213671 IP address blocks: 81.2.136.0/22 maxlen: 24 81.2.140.0/23 maxlen: 24 82.129.8.0/24 maxlen: 24 213.146.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ad:46:cc:f4:ee:73:e7:93:b3:0c:a2:31:15:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00348214e9e33092c08bff0129d740ec5489285a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:02:fe:1e:81:aa:f2:9a:62:e8:6d:7c:c8: 52:cd:91:a9:41:96:9b:58:e5:2e:35:e5:75:b4:ab: 9e:06:4b:47:7f:17:30:c3:bf:99:e8:be:4a:7f:a7: c6:70:c3:64:65:63:e9:b1:0e:c2:2a:19:e4:7f:89: 80:b4:3f:37:79:0d:e7:81:ba:40:ae:3d:ec:25:dc: c7:94:14:3e:6c:af:e9:6c:68:b5:f9:87:be:56:ef: fc:1e:17:15:93:a1:b5:89:14:74:e4:45:4d:ed:aa: ce:c3:1c:b0:0e:ad:14:f3:74:a5:3a:3d:eb:8f:3e: 39:d8:b4:63:6a:49:3e:19:ce:c5:ce:68:4f:df:0d: be:93:e5:44:0e:16:2e:79:86:39:a7:42:7e:6c:1e: 58:6c:2f:c6:7b:bf:f3:40:3e:2f:e4:bc:7b:5a:95: c8:a4:e0:9a:16:37:bb:27:70:6f:5d:45:1b:c7:99: 2c:1e:f2:ff:c8:41:00:5a:0f:45:96:1c:ee:b3:b2: ef:90:2f:22:5b:98:bf:8b:47:eb:25:51:41:6f:63: aa:b0:80:24:66:b7:aa:2a:84:4b:61:b8:a2:39:d4: 14:55:d7:b3:94:9e:76:db:ae:e9:9a:ae:1b:e7:11: 25:9b:53:36:ab:a9:cf:f3:16:75:8b:93:dd:10:dd: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:34:82:14:E9:E3:30:92:C0:8B:FF:01:29:D7:40:EC:54:89:28:5A X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/ADSCFOnjMJLAi_8BKddA7FSJKFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.2.136.0-81.2.141.255 82.129.8.0/24 213.146.161.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:20:b0:8d:ed:75:1d:bc:22:08:99:b0:16:fc:70:57:14:45: be:41:c2:4e:c0:d8:37:5d:b0:43:eb:35:68:34:2b:44:6b:7d: dc:e3:6c:e8:97:b6:36:70:bf:b6:86:c8:f6:09:41:b8:ef:7e: 49:77:a6:38:45:ee:93:6b:b6:ed:3c:db:f4:81:cc:7c:8b:d7: bd:9f:74:97:6b:04:9d:5c:34:32:48:8e:0e:58:be:4d:e2:09: c1:15:3b:51:44:81:32:1b:7a:81:52:8c:05:01:17:f2:37:71: ba:fe:02:6e:f0:cf:6a:94:09:3c:b9:ae:ec:f8:da:c4:85:d4: 37:a4:44:cb:2b:a5:f9:27:44:df:ad:c5:4b:f9:e2:d7:d5:4c: f1:a2:76:16:4f:5e:3e:99:33:11:2d:31:e2:95:d0:94:0d:08: 94:ea:0f:fe:8a:24:52:29:0c:46:57:7e:32:3c:fa:d0:28:00: a2:c3:48:85:21:e4:64:50:86:87:21:6f:3f:4b:d3:87:f4:d2: 8d:22:82:8a:83:a9:9b:b3:34:9f:0c:36:fc:f2:88:b1:f1:e2: 05:8c:4c:11:8a:40:14:2a:83:8b:a5:a8:c1:5a:f6:47:41:5e: 90:e6:64:8e:c5:ba:ec:27:0c:5e:93:17:52:06:48:a4:49:cc: 06:37:7f:57 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+pq1GzPTuc+eTswyiMRVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDM0ODIxNGU5ZTMzMDkyYzA4YmZmMDEyOWQ3NDBlYzU0ODkyODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUMC/h6BqvKaYuhtfMhSzZGpQZab WOUuNeV1tKueBktHfxcww7+Z6L5Kf6fGcMNkZWPpsQ7CKhnkf4mAtD83eQ3ngbpA rj3sJdzHlBQ+bK/pbGi1+Ye+Vu/8HhcVk6G1iRR05EVN7arOwxywDq0U83SlOj3r jz452LRjakk+Gc7FzmhP3w2+k+VEDhYueYY5p0J+bB5YbC/Ge7/zQD4v5Lx7WpXI pOCaFje7J3BvXUUbx5ksHvL/yEEAWg9Flhzus7LvkC8iW5i/i0frJVFBb2OqsIAk ZreqKoRLYbiiOdQUVdezlJ52267pmq4b5xElm1M2q6nP8xZ1i5PdEN1MZQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAA0ghTp4zCSwIv/ASnXQOxUiShaMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvQURTQ0ZPbmpNSkxBaV84QktkZEE3RlNKS0ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBANRAogD BAFRAowDBABSgQgDBADVkqEwDQYJKoZIhvcNAQELBQADggEBAJwgsI3tdR28IgiZ sBb8cFcURb5Bwk7A2DddsEPrNWg0K0RrfdzjbOiXtjZwv7aGyPYJQbjvfkl3pjhF 7pNrtu082/SBzHyL172fdJdrBJ1cNDJIjg5Yvk3iCcEVO1FEgTIbeoFSjAUBF/I3 cbr+Am7wz2qUCTy5ruz42sSF1DekRMsrpfknRN+txUv54tfVTPGidhZPXj6ZMxEt MeKV0JQNCJTqD/6KJFIpDEZXfjI8+tAoAKLDSIUh5GRQhochbz9L04f00o0igoqD qZuzNJ8MNvzyiLHx4gWMTBGKQBQqg4ulqMFa9kdBXpDmZI7FuuwnDF6TF1IGSKRJ zAY3f1c= -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:31 2026 by rpki-client