This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0_H--D3ld_V5A2GDwFkKX4GOiA0.roa File: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (raw, json) Hash identifier: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8= Subject key identifier: D3:F1:FE:F8:3D:E5:77:F5:79:03:61:83:C0:59:0A:5F:81:8E:88:0D Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B79113567D9F77E35CAAF832B3D5E4240 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0_H--D3ld_V5A2GDwFkKX4GOiA0.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198960 IP address blocks: 109.236.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:35:67:d9:f7:7e:35:ca:af:83:2b:3d:5e:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3f1fef83de577f579036183c0590a5f818e880d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3e:95:65:5d:25:29:ed:5b:84:2e:1f:31:4f: 65:a4:d4:56:8a:ec:a3:1d:e6:cc:79:8d:b2:ee:f9: 07:f6:41:9c:35:c9:7b:26:0d:70:c6:76:3a:3c:9c: 23:b6:81:33:6f:41:d0:f8:cd:ff:c1:2b:43:27:1f: eb:93:ca:b3:1c:07:a0:b0:fe:ac:f5:a3:88:6e:9f: 08:4b:f0:2c:3a:3e:bd:3b:70:95:ba:59:f2:0a:15: 37:09:7e:9f:aa:78:1e:aa:16:96:85:67:06:69:f1: be:b6:12:08:74:f3:19:3c:3f:aa:19:60:58:9b:86: c9:56:0c:30:9a:5b:e0:ac:53:dd:2c:b2:5a:d7:71: 01:3d:89:5f:a6:9d:dd:a3:fd:2c:78:0c:0b:36:29: fc:ee:32:c4:92:55:e4:7b:81:01:8f:9e:fa:ad:dd: 52:73:20:71:84:67:50:cd:1b:97:35:14:69:c5:42: fc:3a:53:33:f1:f2:bd:8e:5a:ad:a3:87:cc:9f:71: fd:dd:89:80:11:ff:e3:a7:5f:39:2c:eb:f0:7e:8f: d3:44:38:f2:aa:2d:d2:3c:b6:8d:cf:fe:49:54:b1: ff:73:8c:41:23:4b:33:2f:dd:10:2d:6e:41:89:ca: 62:5c:22:34:01:e7:10:24:7f:eb:78:51:95:25:b7: 30:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F1:FE:F8:3D:E5:77:F5:79:03:61:83:C0:59:0A:5F:81:8E:88:0D X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/0_H--D3ld_V5A2GDwFkKX4GOiA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.246.0/24 Signature Algorithm: sha256WithRSAEncryption 81:bb:91:c7:e0:53:86:61:77:93:5a:cf:a0:85:2c:05:08:7e: a2:a3:47:d2:61:98:e8:da:0d:21:41:79:48:a8:64:4c:dc:19: 4a:5f:d3:74:2d:97:2c:a5:c2:db:82:59:3d:d9:df:8c:b7:9f: d1:f5:d1:c2:e2:f9:89:a6:13:80:cd:80:5a:77:93:72:1b:ec: a8:e2:ed:50:68:96:fd:69:e5:80:a9:65:2b:7e:10:56:04:23: 08:bf:f2:12:72:37:18:da:10:95:4f:18:ef:76:9d:09:39:4e: 1b:2a:0e:79:23:91:ec:5f:56:61:97:2b:01:9c:61:0a:6a:b5: 6e:a5:51:2d:78:a0:84:94:05:33:a4:94:78:e0:dc:2c:89:2b: ae:c2:00:a9:a9:f2:55:0e:ee:46:14:b1:58:a5:33:77:ca:0c: e9:3e:3e:94:39:4b:7f:28:17:ff:97:d9:04:e3:83:0f:b8:a2: 5c:77:2d:84:86:36:38:d2:a8:b7:d8:99:fa:b1:0c:8d:e2:28: 94:fe:96:ff:df:96:d3:3d:e2:38:4f:bb:84:10:62:6e:f4:cd: 6a:4f:63:f7:ce:f2:a1:83:da:1a:68:6e:b6:51:5e:14:65:ea: d5:88:35:1b:5b:86:5d:6c:bc:a9:92:a8:0f:32:f5:ba:ba:40: ae:4d:04:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETVn2fd+Ncqvgys9XkJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2YxZmVmODNkZTU3N2Y1NzkwMzYxODNjMDU5MGE1ZjgxOGU4ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz6VZV0lKe1bhC4fMU9lpNRWiuyj HebMeY2y7vkH9kGcNcl7Jg1wxnY6PJwjtoEzb0HQ+M3/wStDJx/rk8qzHAegsP6s 9aOIbp8IS/AsOj69O3CVulnyChU3CX6fqngeqhaWhWcGafG+thIIdPMZPD+qGWBY m4bJVgwwmlvgrFPdLLJa13EBPYlfpp3do/0seAwLNin87jLEklXke4EBj576rd1S cyBxhGdQzRuXNRRpxUL8OlMz8fK9jlqto4fMn3H93YmAEf/jp185LOvwfo/TRDjy qi3SPLaNz/5JVLH/c4xBI0szL90QLW5BicpiXCI0AecQJH/reFGVJbcwhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPx/vg95Xf1eQNhg8BZCl+BjogNMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvMF9ILS1EM2xkX1Y1QTJHRHdGa0tYNEdPaUEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbez2MA0G CSqGSIb3DQEBCwUAA4IBAQCBu5HH4FOGYXeTWs+ghSwFCH6io0fSYZjo2g0hQXlI qGRM3BlKX9N0LZcspcLbglk92d+Mt5/R9dHC4vmJphOAzYBad5NyG+yo4u1QaJb9 aeWAqWUrfhBWBCMIv/IScjcY2hCVTxjvdp0JOU4bKg55I5HsX1ZhlysBnGEKarVu pVEteKCElAUzpJR44NwsiSuuwgCpqfJVDu5GFLFYpTN3ygzpPj6UOUt/KBf/l9kE 44MPuKJcdy2EhjY40qi32Jn6sQyN4iiU/pb/35bTPeI4T7uEEGJu9M1qT2P3zvKh g9oaaG62UV4UZerViDUbW4ZdbLypkqgPMvW6ukCuTQTI -----END CERTIFICATE-----Generated at Mon Jan 26 07:40:23 2026 by rpki-client