This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/t94EIWlSW9NG33DSL0GHqLJL-LQ.roa File: t94EIWlSW9NG33DSL0GHqLJL-LQ.roa (raw, json) Hash identifier: FMpxWzf+dsmMIA+7EsV6yVLkhEZ3HpxaZOBxRMrjb4A= Subject key identifier: B7:DE:04:21:69:52:5B:D3:46:DF:70:D2:2F:41:87:A8:B2:4B:F8:B4 Certificate issuer: /CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Certificate serial: 019B7DC993154000B25C06D84D91682E5EA2 Authority key identifier: 60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/t94EIWlSW9NG33DSL0GHqLJL-LQ.roa Signing time: Fri 02 Jan 2026 08:18:41 +0000 ROA not before: Fri 02 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 185.130.136.0/24 maxlen: 24 185.130.137.0/24 maxlen: 24 185.130.138.0/24 maxlen: 24 185.130.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.mft rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:93:15:40:00:b2:5c:06:d8:4d:91:68:2e:5e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60c8d57747f729700ef2f5614f6dfdec8d119f2d Validity Not Before: Jan 2 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7de042169525bd346df70d22f4187a8b24bf8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fb:50:e3:f4:fb:7f:f4:5c:72:43:e6:e9:61: 2b:f6:58:b0:d9:1d:46:b9:6b:fa:09:a2:00:6a:e7: 6d:a2:ab:1e:05:8b:8b:06:f7:cf:18:98:34:6d:37: 60:3a:d7:01:a3:cf:92:04:73:f5:03:ed:92:a1:df: f6:4d:bc:f2:dd:52:c8:b0:f0:5d:e1:49:37:59:84: eb:1d:49:45:47:05:2c:13:87:17:96:d8:0a:0a:59: b7:57:4d:e2:b3:50:02:19:c2:78:40:cb:ac:ff:58: dc:3d:25:3b:bd:85:3e:3d:ef:49:9e:f0:df:54:8b: 2e:e5:03:a5:45:b4:78:46:50:4f:a3:0d:f9:54:84: 2e:b9:06:65:26:72:74:1b:08:08:4b:c9:eb:48:9e: 3c:25:f9:df:ea:d4:fb:2c:31:ca:96:21:1f:af:3b: 66:c3:0c:0d:ce:b2:5c:ac:f2:34:38:e9:57:f0:59: 84:4b:f3:25:60:a3:c0:a7:2f:be:77:67:c0:0a:b0: e6:fa:09:f9:b3:3a:2e:f7:62:bf:e8:31:0c:e1:47: a7:3f:12:61:1e:96:c8:58:f9:37:82:a1:31:26:0d: 6f:fa:a5:60:5c:d9:3e:b9:41:dc:f2:f5:18:b9:8a: d1:45:ec:8d:59:82:69:1c:df:fc:b9:f3:47:6b:90: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DE:04:21:69:52:5B:D3:46:DF:70:D2:2F:41:87:A8:B2:4B:F8:B4 X509v3 Authority Key Identifier: keyid:60:C8:D5:77:47:F7:29:70:0E:F2:F5:61:4F:6D:FD:EC:8D:11:9F:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMjVd0f3KXAO8vVhT2397I0Rny0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/t94EIWlSW9NG33DSL0GHqLJL-LQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/39d734-6fb1-4dc0-a128-d75f595fa7c3/1/YMjVd0f3KXAO8vVhT2397I0Rny0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:19:c4:8f:85:69:b5:c5:16:e7:32:6a:b6:94:a6:36:c4:76: a5:9f:c7:a1:0f:8a:d2:97:5f:70:6e:d3:67:f1:55:db:a7:29: e4:d7:0f:db:05:8e:90:ed:42:0f:f2:7b:e9:03:cf:b8:3a:cc: 97:b6:df:1b:2a:14:dc:5c:0c:12:53:ac:83:55:bc:49:d8:cb: 4c:62:18:b0:76:6a:39:b2:31:18:d0:1d:2f:1b:e0:d2:e4:dd: fa:2b:73:60:00:fb:b4:f6:00:97:7d:b4:e0:ae:51:7c:19:28: 51:cb:d8:55:01:46:48:f4:87:15:02:e5:77:5e:20:57:32:73: 82:fd:6c:15:d9:2c:6a:84:60:61:02:13:e8:f5:33:56:4e:4c: b0:8a:70:28:3e:fc:90:a5:ec:42:ad:d2:f1:4a:c1:34:3e:88: a0:47:da:a8:8a:d8:3f:ea:1c:02:1b:44:1f:dc:da:ac:bd:71: 3e:81:2d:98:c0:a5:75:fa:52:8a:92:e1:aa:22:5f:bf:c0:05: 0f:20:56:76:97:41:5b:a0:16:2e:fe:63:81:4d:9e:0e:9d:17: 78:23:de:e5:16:2d:f1:f7:6a:05:b3:be:38:63:8e:10:24:7c: 4c:ac:67:08:c6:77:dd:18:cb:4b:80:34:fd:cd:28:34:76:86: be:0d:bc:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yZMVQACyXAbYTZFoLl6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYzhkNTc3NDdmNzI5NzAwZWYyZjU2MTRmNmRmZGVjOGQx MTlmMmQwHhcNMjYwMTAyMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2RlMDQyMTY5NTI1YmQzNDZkZjcwZDIyZjQxODdhOGIyNGJmOGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxftQ4/T7f/RcckPm6WEr9liw2R1G uWv6CaIAaudtoqseBYuLBvfPGJg0bTdgOtcBo8+SBHP1A+2Sod/2Tbzy3VLIsPBd 4Uk3WYTrHUlFRwUsE4cXltgKClm3V03is1ACGcJ4QMus/1jcPSU7vYU+Pe9JnvDf VIsu5QOlRbR4RlBPow35VIQuuQZlJnJ0GwgIS8nrSJ48Jfnf6tT7LDHKliEfrztm wwwNzrJcrPI0OOlX8FmES/MlYKPApy++d2fACrDm+gn5szou92K/6DEM4UenPxJh HpbIWPk3gqExJg1v+qVgXNk+uUHc8vUYuYrRReyNWYJpHN/8ufNHa5DAMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfeBCFpUlvTRt9w0i9Bh6iyS/i0MB8GA1UdIwQY MBaAFGDI1XdH9ylwDvL1YU9t/eyNEZ8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgt ZDc1ZjU5NWZhN2MzLzEvdDk0RUlXbFNXOU5HMzNEU0wwR0hxTEpMLUxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8zOWQ3MzQtNmZiMS00ZGMwLWExMjgtZDc1ZjU5NWZhN2Mz LzEvWU1qVmQwZjNLWEFPOHZWaFQyMzk3STBSbnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYKIMA0G CSqGSIb3DQEBCwUAA4IBAQA9GcSPhWm1xRbnMmq2lKY2xHaln8ehD4rSl19wbtNn 8VXbpynk1w/bBY6Q7UIP8nvpA8+4OsyXtt8bKhTcXAwSU6yDVbxJ2MtMYhiwdmo5 sjEY0B0vG+DS5N36K3NgAPu09gCXfbTgrlF8GShRy9hVAUZI9IcVAuV3XiBXMnOC /WwV2SxqhGBhAhPo9TNWTkywinAoPvyQpexCrdLxSsE0PoigR9qoitg/6hwCG0Qf 3NqsvXE+gS2YwKV1+lKKkuGqIl+/wAUPIFZ2l0FboBYu/mOBTZ4OnRd4I97lFi3x 92oFs744Y44QJHxMrGcIxnfdGMtLgDT9zSg0doa+Dbyk -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:05 2026 by rpki-client