This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/CK3zVq2E2JWnSie8IPkPmkTQAJw.roa File: CK3zVq2E2JWnSie8IPkPmkTQAJw.roa (raw, json) Hash identifier: 5fi0O3p9ePi7rf1DhBwT/4afhsP0X6JGcQ74b0c4lTQ= Subject key identifier: 08:AD:F3:56:AD:84:D8:95:A7:4A:27:BC:20:F9:0F:9A:44:D0:00:9C Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c Certificate serial: 019B77C76FABD9B2119240051AA7DF17E237 Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/CK3zVq2E2JWnSie8IPkPmkTQAJw.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60526 IP address blocks: 185.152.212.0/24 maxlen: 24 185.152.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:ab:d9:b2:11:92:40:05:1a:a7:df:17:e2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d43689a7638ff737591ff3b251918862349695c Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08adf356ad84d895a74a27bc20f90f9a44d0009c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:da:62:4a:d7:7b:e1:f4:86:60:1c:63:36: b0:6a:64:17:5f:61:9c:91:5b:63:ac:81:04:a1:32: 42:70:e3:60:19:0d:40:a2:af:2f:d1:bf:fe:45:09: 63:b1:1d:53:e5:77:1a:74:54:64:49:1f:52:b5:c5: b2:f5:b8:35:fa:6b:22:4e:88:fb:bb:8c:02:d6:eb: 9b:45:37:50:f8:8c:a0:90:2e:88:a8:a2:49:2c:21: 66:72:1a:07:e2:80:ef:45:4a:fa:15:b8:c3:d0:ec: d4:31:11:89:9b:47:6a:4a:c9:35:fa:9f:7f:84:36: f9:97:23:d0:00:49:d9:aa:0a:0a:61:cd:0b:c0:6d: 74:e4:b4:60:a8:cf:80:81:23:1e:70:d7:11:3d:6a: 6f:81:d1:09:86:e2:26:53:92:86:70:86:80:91:86: eb:55:4d:b4:43:a5:f4:4d:c4:a9:9b:74:9f:4e:4c: 79:f4:07:62:64:91:da:32:44:b3:a2:9e:08:26:8c: 16:9d:18:e0:f2:6c:8f:c7:df:17:9e:bd:7d:34:5a: 31:21:db:29:3e:c8:10:cf:8e:2f:b4:09:d2:e4:83: f3:1b:97:f0:61:08:1d:5c:f7:0f:36:43:ae:d1:fe: 93:b6:6e:10:2a:28:25:56:c1:9c:70:70:40:9b:57: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AD:F3:56:AD:84:D8:95:A7:4A:27:BC:20:F9:0F:9A:44:D0:00:9C X509v3 Authority Key Identifier: keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/CK3zVq2E2JWnSie8IPkPmkTQAJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.212.0/24 185.152.214.0/24 Signature Algorithm: sha256WithRSAEncryption 79:09:f4:5e:15:e1:c0:4f:01:1f:31:98:15:f5:83:e4:03:1b: db:7c:34:a8:b7:67:3a:65:52:a0:59:54:bb:01:55:90:5a:d0: 36:74:cd:e3:39:2c:51:43:3b:b0:de:c0:78:71:4d:f4:37:67: 40:d5:ee:19:6c:27:de:13:68:e3:ad:fb:01:4e:85:77:a3:91: 45:27:52:8b:87:b2:f2:00:76:b2:49:fb:6a:72:e5:94:91:b8: b5:0d:97:e5:0a:eb:f7:16:73:3b:14:fd:da:22:f7:8a:80:a0: 80:24:75:73:03:f4:5d:b7:a5:ab:18:c5:d4:53:de:46:39:31: 31:69:7a:63:9b:38:9d:e7:b0:48:b6:dd:fd:d5:42:c0:bb:24: 43:84:30:cd:b0:2c:16:ea:52:b4:7b:0b:53:21:a1:89:2c:74: 45:09:42:d5:ac:34:2d:9f:ce:ad:14:7c:76:35:b0:0a:aa:b6: 9a:c7:04:a6:d0:5c:4e:f6:f4:a6:bf:e6:a2:6b:48:50:0f:d9: 0d:06:39:1d:0d:fd:dc:56:d1:1d:05:b2:9e:f1:9b:15:67:7b: c3:79:11:46:90:cf:f9:d6:78:80:02:36:74:68:eb:70:94:2d: 4d:dd:27:7a:1a:0c:11:de:1a:63:62:7d:cf:15:c8:fe:9c:d7: 89:ff:01:09 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2+r2bIRkkAFGqffF+I3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0 OTY5NWMwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGFkZjM1NmFkODRkODk1YTc0YTI3YmMyMGY5MGY5YTQ0ZDAwMDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1LaYkrXe+H0hmAcYzawamQXX2Gc kVtjrIEEoTJCcONgGQ1Aoq8v0b/+RQljsR1T5XcadFRkSR9StcWy9bg1+msiToj7 u4wC1uubRTdQ+IygkC6IqKJJLCFmchoH4oDvRUr6FbjD0OzUMRGJm0dqSsk1+p9/ hDb5lyPQAEnZqgoKYc0LwG105LRgqM+AgSMecNcRPWpvgdEJhuImU5KGcIaAkYbr VU20Q6X0TcSpm3SfTkx59AdiZJHaMkSzop4IJowWnRjg8myPx98Xnr19NFoxIdsp PsgQz44vtAnS5IPzG5fwYQgdXPcPNkOu0f6Ttm4QKiglVsGccHBAm1cKBwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAit81athNiVp0onvCD5D5pE0ACcMB8GA1UdIwQY MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt M2EzMDM0YTM5ZWE1LzEvQ0szelZxMkUySlduU2llOElQa1Bta1RRQUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1 LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZjUAwQA uZjWMA0GCSqGSIb3DQEBCwUAA4IBAQB5CfReFeHATwEfMZgV9YPkAxvbfDSot2c6 ZVKgWVS7AVWQWtA2dM3jOSxRQzuw3sB4cU30N2dA1e4ZbCfeE2jjrfsBToV3o5FF J1KLh7LyAHaySftqcuWUkbi1DZflCuv3FnM7FP3aIveKgKCAJHVzA/Rdt6WrGMXU U95GOTExaXpjmzid57BItt391ULAuyRDhDDNsCwW6lK0ewtTIaGJLHRFCULVrDQt n86tFHx2NbAKqraaxwSm0FxO9vSmv+aia0hQD9kNBjkdDf3cVtEdBbKe8ZsVZ3vD eRFGkM/51niAAjZ0aOtwlC1N3Sd6GgwR3hpjYn3PFcj+nNeJ/wEJ -----END CERTIFICATE-----Generated at Mon Jan 12 03:01:05 2026 by rpki-client