This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/D6zgSHbiztj7O2I1DW60de0ptBk.roa File: D6zgSHbiztj7O2I1DW60de0ptBk.roa (raw, json) Hash identifier: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo= Subject key identifier: 0F:AC:E0:48:76:E2:CE:D8:FB:3B:62:35:0D:6E:B4:75:ED:29:B4:19 Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425 Certificate serial: 019B7BA4B222195970A2D92C1EEB602BE478 Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/D6zgSHbiztj7O2I1DW60de0ptBk.roa Signing time: Thu 01 Jan 2026 22:19:09 +0000 ROA not before: Thu 01 Jan 2026 22:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198843 IP address blocks: 185.158.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b2:22:19:59:70:a2:d9:2c:1e:eb:60:2b:e4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425 Validity Not Before: Jan 1 22:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0face04876e2ced8fb3b62350d6eb475ed29b419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:3a:e3:cf:25:86:c6:b0:de:36:5f:39:7a: 6c:0f:0e:e4:75:6f:dc:1c:1b:6b:6f:e1:5c:4a:66: 33:a7:c0:2b:0d:3b:e7:dc:24:dd:b9:a6:8f:b1:2f: 95:96:c3:ac:4c:5e:de:18:05:39:e2:24:4f:cd:d8: 96:59:67:99:8e:80:cd:d3:80:91:08:25:42:9f:34: 16:5a:7b:49:02:62:67:71:1c:14:38:82:b4:cc:8b: 19:36:c2:22:f1:2d:7d:c5:c3:f5:22:9b:99:50:16: af:ba:d7:74:f9:a5:71:19:89:d4:4f:00:c8:9c:74: c9:00:f4:bb:b8:8d:82:3e:be:3d:84:41:f2:34:89: d5:bf:9e:e8:f4:f7:3d:3c:65:54:aa:19:e1:71:3b: fe:8d:25:70:a6:ae:ce:3b:19:60:2d:26:d4:7c:d0: ff:fc:fc:06:c3:03:88:de:31:93:2f:ed:b9:37:40: 58:bc:4d:d9:3f:c9:2d:c5:0b:09:be:17:e4:eb:da: 3c:5f:d4:e8:6f:f2:d1:04:2a:97:ab:54:80:2f:d7: 8e:96:c3:93:77:07:bd:f1:1d:ca:9b:fa:dc:f3:76: 38:a1:24:e3:54:a6:39:c3:ed:cc:93:12:fa:1c:c7: 73:16:8f:9a:98:0f:79:ab:72:88:5e:85:85:62:64: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AC:E0:48:76:E2:CE:D8:FB:3B:62:35:0D:6E:B4:75:ED:29:B4:19 X509v3 Authority Key Identifier: keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/D6zgSHbiztj7O2I1DW60de0ptBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.36.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:d3:d3:ce:0f:3a:1c:64:ad:c9:6c:13:84:cb:8e:b6:ec:6c: dd:82:64:5a:44:06:6e:92:16:33:f8:81:8b:d5:ce:51:ca:dc: 80:9d:ac:bf:f5:35:0f:90:6d:95:6f:5b:21:22:52:58:f3:ec: 45:8b:57:72:71:9a:a7:d6:3d:d0:8d:cf:8d:fd:4f:a1:28:ce: 00:61:db:f2:94:38:b3:3b:85:11:a1:ce:c0:a9:eb:97:63:2c: d5:a0:0c:02:ae:17:61:7b:d2:6f:8e:f5:8f:c0:6b:97:53:89: e3:d3:bf:e8:f8:47:05:5a:3d:0e:67:f3:43:c5:46:98:89:90: 5b:2b:10:82:00:c9:0d:a9:90:73:61:62:a5:81:4d:62:e8:6e: d1:68:df:98:1f:7f:ea:3e:18:be:48:a2:fe:47:23:9c:3f:7a: 55:c2:ef:ed:57:98:0e:30:94:7f:42:fc:30:27:38:0f:9e:77: 27:05:85:fb:15:33:4f:ec:17:43:cc:fa:f4:f3:97:7c:5d:07: 00:b1:73:76:a7:c1:d5:ae:1b:25:b1:fc:00:28:8b:72:b3:80: b4:aa:66:b9:fb:79:da:a3:05:1f:60:89:8d:99:14:bd:86:e7: 76:3a:87:e0:33:56:34:11:58:18:02:9b:ed:4d:45:17:f2:a5: 24:0f:fd:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLIiGVlwotksHutgK+R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGVmN2ZmNWI1NGY1M2ZjZjIzMTJhYmUyZWMzZjU5NThi YTE0MjUwHhcNMjYwMTAxMjIxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmFjZTA0ODc2ZTJjZWQ4ZmIzYjYyMzUwZDZlYjQ3NWVkMjliNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g06488lhsaw3jZfOXpsDw7kdW/c HBtrb+FcSmYzp8ArDTvn3CTduaaPsS+VlsOsTF7eGAU54iRPzdiWWWeZjoDN04CR CCVCnzQWWntJAmJncRwUOIK0zIsZNsIi8S19xcP1IpuZUBavutd0+aVxGYnUTwDI nHTJAPS7uI2CPr49hEHyNInVv57o9Pc9PGVUqhnhcTv+jSVwpq7OOxlgLSbUfND/ /PwGwwOI3jGTL+25N0BYvE3ZP8ktxQsJvhfk69o8X9Tob/LRBCqXq1SAL9eOlsOT dwe98R3Km/rc83Y4oSTjVKY5w+3MkxL6HMdzFo+amA95q3KIXoWFYmSAjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+s4Eh24s7Y+ztiNQ1utHXtKbQZMB8GA1UdIwQY MBaAFDgO9/9bVPU/zyMSq+LsP1lYuhQlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEt ZjA0Y2MxYzIzMGNmLzEvRDZ6Z1NIYml6dGo3TzJJMURXNjBkZTBwdEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kOTEyNTUtMzI0My00YTQ3LTk0NmEtZjA0Y2MxYzIzMGNm LzEvT0E3M18xdFU5VF9QSXhLcjR1d19XVmk2RkNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ4kMA0G CSqGSIb3DQEBCwUAA4IBAQBO09PODzocZK3JbBOEy4627GzdgmRaRAZukhYz+IGL 1c5RytyAnay/9TUPkG2Vb1shIlJY8+xFi1dycZqn1j3Qjc+N/U+hKM4AYdvylDiz O4URoc7AqeuXYyzVoAwCrhdhe9JvjvWPwGuXU4nj07/o+EcFWj0OZ/NDxUaYiZBb KxCCAMkNqZBzYWKlgU1i6G7RaN+YH3/qPhi+SKL+RyOcP3pVwu/tV5gOMJR/Qvww JzgPnncnBYX7FTNP7BdDzPr085d8XQcAsXN2p8HVrhslsfwAKItys4C0qma5+3na owUfYImNmRS9hud2OofgM1Y0EVgYApvtTUUX8qUkD/3H -----END CERTIFICATE-----Generated at Mon Jan 26 11:31:04 2026 by rpki-client