This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa File: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (raw, json) Hash identifier: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4= Subject key identifier: 35:ED:EF:5E:F1:59:7C:32:6D:1C:5C:51:8B:68:B2:30:C5:D9:5D:A9 Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0 Certificate serial: 019B7F835531966FC6BAB2EB6B8A64D0ED99 Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa Signing time: Fri 02 Jan 2026 16:21:12 +0000 ROA not before: Fri 02 Jan 2026 16:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39122 IP address blocks: 185.204.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:55:31:96:6f:c6:ba:b2:eb:6b:8a:64:d0:ed:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35edef5ef1597c326d1c5c518b68b230c5d95da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:ea:40:03:d9:90:fa:ba:35:a5:1b:fb:cc: a2:ad:3d:76:05:fb:d1:f3:00:8f:96:5b:00:0f:0e: ca:7c:aa:04:eb:22:46:35:cf:81:5e:8c:05:fb:ef: 86:e0:66:42:59:0e:fa:c3:4b:0d:42:ec:0e:aa:5e: 2f:95:84:06:66:a7:1c:ad:b1:ce:be:c7:ca:20:36: ec:e4:c5:d0:b9:df:c2:ed:24:9d:7d:14:c8:f4:21: c8:ec:ca:61:81:1d:1f:4c:05:c8:dc:4d:21:5e:b1: ae:17:38:1b:26:14:dc:73:2b:c8:ac:95:62:0d:59: 10:29:e9:f4:cd:c9:34:f8:07:e0:57:d7:52:f1:53: da:c6:c8:a8:0b:98:22:60:23:04:ce:1b:09:fc:b8: 59:b9:c1:03:34:8f:bc:90:ce:f4:d0:d7:d3:06:8b: c6:c9:ff:d7:9e:ff:1c:4f:f6:13:55:d8:94:97:b0: d4:36:c7:dc:2b:db:99:8f:3f:3b:de:72:79:3b:d6: 56:45:ef:c1:ab:f6:94:f5:3c:97:45:a0:40:0d:6e: 84:b3:1c:95:cd:38:42:b0:1e:91:46:d1:3d:0d:9e: 0b:d9:d0:60:5d:e0:65:7a:02:9b:48:cb:a7:ef:b3: c8:d2:ea:7b:3c:91:36:d0:8d:0c:bd:f2:80:47:ba: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:ED:EF:5E:F1:59:7C:32:6D:1C:5C:51:8B:68:B2:30:C5:D9:5D:A9 X509v3 Authority Key Identifier: keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.136.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:44:16:de:08:34:e8:12:3b:d8:56:76:c0:a6:ca:e3:68:7b: 57:bb:b5:c8:1d:c8:6f:c5:36:cb:23:90:b5:43:50:42:9a:b7: aa:55:ce:9f:39:ea:aa:72:79:41:00:1f:ea:7e:35:7b:65:0d: 00:ce:ec:49:1b:19:fb:5c:92:44:15:60:ac:3d:05:b4:32:a2: 76:79:d3:5c:2e:28:8e:9c:be:db:54:d1:88:51:76:1a:e7:f0: 17:76:22:fc:be:c5:99:c3:05:50:b9:71:f7:27:e0:b5:d9:1a: c4:c8:8e:c1:5f:66:34:47:c5:f6:d2:8a:d6:94:1f:14:c3:96: d2:38:67:0c:96:86:30:a0:ec:6c:01:fc:ab:08:68:ab:d4:7e: db:6b:4e:41:e9:42:a0:f1:81:c7:e9:d9:8b:ac:91:76:8b:0e: 3e:8a:48:53:6e:6c:71:f0:98:0f:56:3c:3e:64:14:f0:8a:ad: d7:08:c6:b3:dc:4f:3c:7b:53:f4:f1:8e:bb:48:e9:9c:84:dd: a6:cc:ee:93:69:89:c5:a6:71:7c:49:fb:6e:5d:c5:c2:1f:a6: 2a:8d:5b:a1:4c:d9:af:99:39:6f:04:b9:23:3a:03:12:07:f3: 1a:85:1c:a8:8c:f5:0b:81:0f:ed:ea:6d:36:87:5d:40:22:2c: a8:32:16:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g1Uxlm/GurLra4pk0O2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMjNlMmVkYjMyMWUxYThhNWNlOWVlM2UyZDk1YWE0MGYw ZGU4YTAwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWVkZWY1ZWYxNTk3YzMyNmQxYzVjNTE4YjY4YjIzMGM1ZDk1ZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PqQAPZkPq6NaUb+8yirT12BfvR 8wCPllsADw7KfKoE6yJGNc+BXowF+++G4GZCWQ76w0sNQuwOql4vlYQGZqccrbHO vsfKIDbs5MXQud/C7SSdfRTI9CHI7MphgR0fTAXI3E0hXrGuFzgbJhTccyvIrJVi DVkQKen0zck0+AfgV9dS8VPaxsioC5giYCMEzhsJ/LhZucEDNI+8kM700NfTBovG yf/Xnv8cT/YTVdiUl7DUNsfcK9uZjz873nJ5O9ZWRe/Bq/aU9TyXRaBADW6EsxyV zThCsB6RRtE9DZ4L2dBgXeBlegKbSMun77PI0up7PJE20I0MvfKAR7rOvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXt717xWXwybRxcUYtosjDF2V2pMB8GA1UdIwQY MBaAFE0j4u2zIeGopc6e4+LZWqQPDeigMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEt NTM4NTA5ZjNhNzg5LzEvTmUzdlh2RlpmREp0SEZ4UmkyaXlNTVhaWGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNGUwN2UtMTVmYy00OTQyLTg0MmEtNTM4NTA5ZjNhNzg5 LzEvVFNQaTdiTWg0YWlsenA3ajR0bGFwQThONktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucyIMA0G CSqGSIb3DQEBCwUAA4IBAQB6RBbeCDToEjvYVnbApsrjaHtXu7XIHchvxTbLI5C1 Q1BCmreqVc6fOeqqcnlBAB/qfjV7ZQ0AzuxJGxn7XJJEFWCsPQW0MqJ2edNcLiiO nL7bVNGIUXYa5/AXdiL8vsWZwwVQuXH3J+C12RrEyI7BX2Y0R8X20orWlB8Uw5bS OGcMloYwoOxsAfyrCGir1H7ba05B6UKg8YHH6dmLrJF2iw4+ikhTbmxx8JgPVjw+ ZBTwiq3XCMaz3E88e1P08Y67SOmchN2mzO6TaYnFpnF8SftuXcXCH6YqjVuhTNmv mTlvBLkjOgMSB/MahRyojPULgQ/t6m02h11AIiyoMhZZ -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:20 2026 by rpki-client