This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/36DzStGfXWJaTvy_DFt5js-qBkY.roa File: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (raw, json) Hash identifier: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4= Subject key identifier: DF:A0:F3:4A:D1:9F:5D:62:5A:4E:FC:BF:0C:5B:79:8E:CF:AA:06:46 Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296 Certificate serial: 019B7CEE10322F32D6EB67A282E26956AFD6 Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/36DzStGfXWJaTvy_DFt5js-qBkY.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 144.2.64.0/18 maxlen: 20 178.238.160.0/20 maxlen: 22 185.119.176.0/22 maxlen: 24 2a02:21b0::/29 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:10:32:2f:32:d6:eb:67:a2:82:e2:69:56:af:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfa0f34ad19f5d625a4efcbf0c5b798ecfaa0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c0:76:9c:10:6d:bf:3c:63:8d:15:36:74:e4: fe:62:35:fa:f4:0b:f7:e1:62:a0:1c:b8:46:9b:28: be:f8:56:40:b1:08:2f:56:ec:0c:2e:45:00:63:5b: 41:ed:f5:c5:ac:c6:e8:25:b4:8d:c3:e1:88:4a:f8: e6:e4:2c:d5:18:80:19:7f:60:8d:1f:f7:c1:da:6e: 5d:a9:6d:d7:36:95:79:24:26:90:6f:0e:5b:eb:95: 9c:e0:73:32:3d:1c:40:17:6f:82:1e:49:eb:35:f2: 41:fd:6d:17:68:6b:e2:dc:96:3e:87:87:16:a6:e1: 6c:da:6b:22:d8:da:79:1b:13:9e:2b:ef:76:10:c6: 5b:9a:0d:9e:8e:0e:7f:89:d7:2b:dc:5c:c6:59:a2: 55:50:00:e9:4b:cd:b9:fe:13:f6:b7:20:96:2c:18: ba:a7:f4:0c:d9:ca:a1:04:41:c7:a2:a3:67:89:ce: 9f:23:6e:64:d0:51:12:12:23:c3:6e:75:0f:b8:60: aa:2c:fa:98:92:b0:e8:5c:73:f0:48:0a:5a:80:19: 26:9a:67:08:d9:e1:2a:7c:32:25:4c:f9:79:85:a0: f7:23:bf:5c:cb:c8:48:3b:ac:5e:77:77:f0:13:7a: 79:49:bf:25:37:72:5f:81:bc:56:8a:1e:71:f3:73: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A0:F3:4A:D1:9F:5D:62:5A:4E:FC:BF:0C:5B:79:8E:CF:AA:06:46 X509v3 Authority Key Identifier: keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/36DzStGfXWJaTvy_DFt5js-qBkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.2.64.0/18 178.238.160.0/20 185.119.176.0/22 IPv6: 2a02:21b0::/29 Signature Algorithm: sha256WithRSAEncryption 14:ec:5e:54:de:e6:a4:3f:2c:00:45:8c:c4:ae:a5:09:4a:b3: 1a:31:22:49:9e:13:11:0e:0f:ae:28:69:da:14:01:1e:f4:9b: e3:60:7a:a3:6c:bb:a2:87:e6:21:96:9b:85:55:da:3c:33:54: 68:b3:0e:9d:30:c5:65:a5:cd:cc:5c:89:c7:4f:57:0d:fe:32: 94:52:9b:d9:e6:9d:5e:66:0d:ec:39:18:c8:f8:b0:d5:99:92: 62:72:c8:69:e7:66:08:75:d1:ab:64:76:98:ac:22:55:a1:1e: b1:eb:bf:09:04:a3:b4:e1:ed:5c:9f:09:7d:c8:e2:1c:66:a7: 6b:cc:59:b7:f3:30:27:70:27:c2:a5:42:81:a6:08:07:38:ad: 11:a6:b2:e1:2d:24:aa:18:41:c0:b6:38:89:ee:26:b9:f0:05: c4:72:96:64:d6:c6:e4:9c:d1:6e:f6:ab:be:b6:d7:06:9b:99: 4a:77:72:c7:30:e4:75:ca:db:99:3e:c0:cd:29:17:cb:d7:2a: d4:fa:0b:c2:53:92:12:12:dd:cb:fe:d7:36:0b:63:07:c4:e2: b7:44:65:b6:f0:8d:33:9a:7a:07:eb:1c:2f:ec:c6:80:70:b9: f1:f4:f1:56:8c:c1:db:3d:d3:76:94:23:96:f9:6c:80:7c:dd: 45:6a:dd:61 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87hAyLzLW62eiguJpVq/WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw YTUyOTYwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmEwZjM0YWQxOWY1ZDYyNWE0ZWZjYmYwYzViNzk4ZWNmYWEwNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MB2nBBtvzxjjRU2dOT+YjX69Av3 4WKgHLhGmyi++FZAsQgvVuwMLkUAY1tB7fXFrMboJbSNw+GISvjm5CzVGIAZf2CN H/fB2m5dqW3XNpV5JCaQbw5b65Wc4HMyPRxAF2+CHknrNfJB/W0XaGvi3JY+h4cW puFs2msi2Np5GxOeK+92EMZbmg2ejg5/idcr3FzGWaJVUADpS825/hP2tyCWLBi6 p/QM2cqhBEHHoqNnic6fI25k0FESEiPDbnUPuGCqLPqYkrDoXHPwSApagBkmmmcI 2eEqfDIlTPl5haD3I79cy8hIO6xed3fwE3p5Sb8lN3JfgbxWih5x83NGvwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFN+g80rRn11iWk78vwxbeY7PqgZGMB8GA1UdIwQY MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt N2Y1ZjRkNjA0NzMxLzEvMzZEelN0R2ZYV0phVHZ5X0RGdDVqcy1xQmtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGkAJAAwQE su6gAwQCuXewMA0EAgACMAcDBQMqAiGwMA0GCSqGSIb3DQEBCwUAA4IBAQAU7F5U 3uakPywARYzErqUJSrMaMSJJnhMRDg+uKGnaFAEe9JvjYHqjbLuih+YhlpuFVdo8 M1Rosw6dMMVlpc3MXInHT1cN/jKUUpvZ5p1eZg3sORjI+LDVmZJicshp52YIddGr ZHaYrCJVoR6x678JBKO04e1cnwl9yOIcZqdrzFm38zAncCfCpUKBpggHOK0RprLh LSSqGEHAtjiJ7ia58AXEcpZk1sbknNFu9qu+ttcGm5lKd3LHMOR1ytuZPsDNKRfL 1yrU+gvCU5ISEt3L/tc2C2MHxOK3RGW28I0zmnoH6xwv7MaAcLnx9PFWjMHbPdN2 lCOW+WyAfN1Fat1h -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:43 2026 by rpki-client