This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/zd8dlXTmCT-0m9TffsLEUAvTJYs.roa File: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (raw, json) Hash identifier: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E= Subject key identifier: CD:DF:1D:95:74:E6:09:3F:B4:9B:D4:DF:7E:C2:C4:50:0B:D3:25:8B Certificate issuer: /CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Certificate serial: 019B7AC7954216959346D75B9C16B4CCAC78 Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/zd8dlXTmCT-0m9TffsLEUAvTJYs.roa Signing time: Thu 01 Jan 2026 18:17:38 +0000 ROA not before: Thu 01 Jan 2026 18:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34177 IP address blocks: 84.246.224.0/21 maxlen: 24 89.44.110.0/23 maxlen: 24 92.39.240.0/20 maxlen: 24 94.247.24.0/21 maxlen: 24 185.111.228.0/22 maxlen: 24 185.158.44.0/22 maxlen: 24 188.208.198.0/23 maxlen: 24 2a02:23e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:95:42:16:95:93:46:d7:5b:9c:16:b4:cc:ac:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373 Validity Not Before: Jan 1 18:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cddf1d9574e6093fb49bd4df7ec2c4500bd3258b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:10:70:67:f7:0f:d3:6f:08:1e:16:0e:f4: 26:aa:22:66:b0:6e:2a:37:00:87:4d:d3:fa:9a:05: 63:45:23:b1:87:14:d8:f8:fd:e4:0f:49:96:43:49: a0:4f:79:76:96:72:07:36:63:a6:31:7d:53:ca:59: 3a:73:2c:f4:9b:85:ac:e3:5b:e6:87:5d:8e:fc:c3: b7:54:d0:5e:cd:73:c5:6a:c0:6c:bc:e7:bb:5e:0a: f4:fb:17:ed:4f:c8:72:b9:b7:9d:31:f7:cb:4f:5c: 0c:04:dd:ae:97:ca:8d:50:d9:db:6c:4c:45:ad:12: 84:c4:41:7b:d8:aa:7e:91:4a:67:f2:ce:93:6d:de: 19:d8:48:56:7c:21:d2:a5:ec:82:a5:81:c9:74:01: c6:56:ed:fa:e4:21:77:85:76:79:fe:03:d8:bf:c9: a2:17:97:b9:5f:d4:78:ef:91:6e:33:58:3a:db:14: 4a:0e:8e:01:43:d4:95:3f:f1:a0:6c:56:3d:2f:80: d2:64:1b:f8:fb:75:e7:8a:0a:0b:c8:61:aa:c3:8d: df:a7:83:b0:ce:86:e6:06:61:3b:4d:23:8e:f4:b6: e1:fb:4a:fc:e9:a1:f8:3a:b9:69:b9:38:95:b4:27: fc:f7:75:d0:1b:06:ed:49:2f:aa:25:af:33:54:f9: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DF:1D:95:74:E6:09:3F:B4:9B:D4:DF:7E:C2:C4:50:0B:D3:25:8B X509v3 Authority Key Identifier: keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/zd8dlXTmCT-0m9TffsLEUAvTJYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.224.0/21 89.44.110.0/23 92.39.240.0/20 94.247.24.0/21 185.111.228.0/22 185.158.44.0/22 188.208.198.0/23 IPv6: 2a02:23e0::/32 Signature Algorithm: sha256WithRSAEncryption 53:5c:16:c0:f9:a3:f9:da:4e:fe:68:09:50:09:8d:12:70:8d: c1:e7:40:35:e4:74:bc:87:39:5f:ac:fa:35:9a:13:2c:b6:cb: f2:e5:54:d2:7c:e5:5b:51:81:78:68:cf:a9:45:63:f8:dc:20: 2d:69:e6:0e:bb:8c:c4:b2:fb:9e:ef:8a:16:57:d8:97:26:5c: 0e:e8:a5:c8:56:2e:11:a3:f6:34:cf:f4:6c:9c:1e:03:33:d0: af:5a:b2:2b:b6:09:eb:1d:f1:86:62:84:e2:ef:7b:d1:ef:63: e9:df:77:1d:ec:e4:9b:be:f4:c0:80:81:02:6c:40:2e:7e:09: 61:82:af:65:61:86:38:e5:57:ab:51:85:9b:4f:d4:e3:f0:89: 21:3c:af:1f:25:cc:b9:66:25:92:b0:60:92:0a:98:f0:19:0e: 3d:50:9d:4d:78:c4:98:d8:8d:c5:bc:a1:e7:9e:43:b7:10:c4: 57:5a:c0:9d:f3:a4:49:9c:7c:de:ab:29:49:78:5a:0f:60:6c: 8e:0a:ed:8b:7b:1e:81:25:15:c5:56:f7:57:e8:53:6b:52:67: 79:d4:55:ae:b6:da:44:83:4b:e9:5d:51:2e:bc:fa:ee:89:21: 21:57:8d:c2:4e:a2:b6:d8:10:0f:8c:ed:3b:b7:cc:81:9e:43: 7f:50:9d:6c -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt6x5VCFpWTRtdbnBa0zKx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2 YzczNzMwHhcNMjYwMTAxMTgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZGRmMWQ5NTc0ZTYwOTNmYjQ5YmQ0ZGY3ZWMyYzQ1MDBiZDMyNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGkQcGf3D9NvCB4WDvQmqiJmsG4q NwCHTdP6mgVjRSOxhxTY+P3kD0mWQ0mgT3l2lnIHNmOmMX1Tylk6cyz0m4Ws41vm h12O/MO3VNBezXPFasBsvOe7Xgr0+xftT8hyubedMffLT1wMBN2ul8qNUNnbbExF rRKExEF72Kp+kUpn8s6Tbd4Z2EhWfCHSpeyCpYHJdAHGVu365CF3hXZ5/gPYv8mi F5e5X9R475FuM1g62xRKDo4BQ9SVP/GgbFY9L4DSZBv4+3XnigoLyGGqw43fp4Ow zobmBmE7TSOO9Lbh+0r86aH4OrlpuTiVtCf893XQGwbtSS+qJa8zVPlj0wIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFM3fHZV05gk/tJvU337CxFAL0yWLMB8GA1UdIwQY MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt MjRlNmMwZDRmYWQ3LzEvemQ4ZGxYVG1DVC0wbTlUZmZzTEVVQXZUSllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3 LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQDVPbgAwQB WSxuAwQEXCfwAwQDXvcYAwQCuW/kAwQCuZ4sAwQBvNDGMA0EAgACMAcDBQAqAiPg MA0GCSqGSIb3DQEBCwUAA4IBAQBTXBbA+aP52k7+aAlQCY0ScI3B50A15HS8hzlf rPo1mhMstsvy5VTSfOVbUYF4aM+pRWP43CAtaeYOu4zEsvue74oWV9iXJlwO6KXI Vi4Ro/Y0z/RsnB4DM9CvWrIrtgnrHfGGYoTi73vR72Pp33cd7OSbvvTAgIECbEAu fglhgq9lYYY45VerUYWbT9Tj8IkhPK8fJcy5ZiWSsGCSCpjwGQ49UJ1NeMSY2I3F vKHnnkO3EMRXWsCd86RJnHzeqylJeFoPYGyOCu2Lex6BJRXFVvdX6FNrUmd51FWu ttpEg0vpXVEuvPruiSEhV43CTqK22BAPjO07t8yBnkN/UJ1s -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:52 2026 by rpki-client