This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/InPFMpdJAXXO_yXbxGZuHeN8kBs.roa File: InPFMpdJAXXO_yXbxGZuHeN8kBs.roa (raw, json) Hash identifier: vCdlR4+URzLW/X9eKQ1ExsBHfsRxyqUAmI7ldq8lqGc= Subject key identifier: 22:73:C5:32:97:49:01:75:CE:FF:25:DB:C4:66:6E:1D:E3:7C:90:1B Certificate issuer: /CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12 Certificate serial: 019B797F015E87107B372046F910274A0C09 Authority key identifier: 35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/InPFMpdJAXXO_yXbxGZuHeN8kBs.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203175 IP address blocks: 185.137.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.mft rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:01:5e:87:10:7b:37:20:46:f9:10:27:4a:0c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3547913ce3a11588b59c3c9f9da9ff77f248ac12 Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2273c53297490175ceff25dbc4666e1de37c901b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:27:08:ac:5c:29:89:bd:28:39:4b:e0:87: e1:ca:83:ed:3d:de:47:21:50:1a:ac:e0:95:b2:71: 6d:60:e8:62:af:7c:c3:72:e6:59:95:f9:12:c5:9a: 5f:8d:9b:1a:cb:54:43:d4:7d:e4:be:6d:ba:19:de: f0:23:43:67:59:89:b4:2f:6c:47:b0:f3:db:2d:a4: e5:9f:e4:23:96:4c:83:ed:42:03:5d:2b:5a:aa:44: fe:aa:bd:e6:1f:6c:8a:f2:15:1f:ee:a3:b9:2a:b6: 9b:9c:a7:7d:3f:5e:a7:bd:88:67:c0:a3:04:b0:76: e4:4f:62:47:1d:62:c5:eb:a9:8b:b5:d9:fa:9d:49: a6:af:22:1e:7d:e4:5c:4b:ef:c9:6e:47:70:5c:8d: eb:69:26:08:51:68:17:2d:d6:54:91:fc:b6:d0:f3: 75:f0:d5:d3:3c:f7:28:6b:ab:e4:6d:24:73:70:e9: b2:ed:8c:bd:d9:55:f0:ce:b0:5d:e6:ae:0e:4d:57: 50:59:bb:f4:4a:f4:bc:35:a9:01:67:38:ed:5b:05: e7:4d:e0:7d:90:4c:d7:ee:6c:16:69:16:54:d2:f3: 3e:15:60:12:e4:1e:90:6f:fd:57:a4:6b:44:fe:6f: d2:7c:61:4d:4e:ed:ff:eb:ab:ae:1a:b7:b5:38:ec: 1b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:C5:32:97:49:01:75:CE:FF:25:DB:C4:66:6E:1D:E3:7C:90:1B X509v3 Authority Key Identifier: keyid:35:47:91:3C:E3:A1:15:88:B5:9C:3C:9F:9D:A9:FF:77:F2:48:AC:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUeRPOOhFYi1nDyfnan_d_JIrBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/InPFMpdJAXXO_yXbxGZuHeN8kBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0cda74-c9bb-4d92-9e6f-38997821ffce/1/NUeRPOOhFYi1nDyfnan_d_JIrBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.29.0/24 Signature Algorithm: sha256WithRSAEncryption aa:0d:65:36:fc:3b:90:f6:2d:2d:ad:06:25:6e:df:88:ef:f6: 17:3e:20:26:a8:40:7a:d6:91:7d:f6:a7:70:6a:47:72:40:75: 52:75:f9:17:ed:d1:97:d5:d5:07:1b:b6:6d:95:e8:e4:42:70: 46:e2:a1:78:df:84:8b:07:32:43:f3:62:08:9a:f6:ad:1f:0f: 44:4b:d0:04:f7:c6:8f:cc:84:3d:de:8c:90:0e:44:89:61:17: e8:2e:9e:d4:aa:99:eb:45:b1:83:c4:2d:c6:33:4f:1a:65:33: 20:e2:da:84:c6:de:f5:19:7d:85:f9:22:e4:c8:fc:b3:6d:21: c4:0f:f2:92:3d:cb:63:70:b6:86:6e:93:3e:26:5e:4e:f7:69: 3f:d5:7e:72:5d:de:9b:71:78:9b:03:c4:10:6e:9e:d8:24:7f: 2d:d6:fa:2b:09:16:62:b1:8d:b8:32:ad:61:62:15:5b:02:ff: 00:e7:5d:1a:f4:55:79:c2:47:48:82:cc:09:01:0f:68:01:45: d4:e7:4e:46:60:1c:32:21:50:58:b8:a6:fb:e6:88:7d:48:32: 41:28:a7:44:72:57:7e:b5:ff:22:a3:a9:06:fa:ef:f9:05:37: 26:81:2c:15:39:07:70:ca:4b:85:11:44:a5:f6:0b:c4:94:4e: d2:f4:9d:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fwFehxB7NyBG+RAnSgwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NDc5MTNjZTNhMTE1ODhiNTljM2M5ZjlkYTlmZjc3ZjI0 OGFjMTIwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjczYzUzMjk3NDkwMTc1Y2VmZjI1ZGJjNDY2NmUxZGUzN2M5MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol0nCKxcKYm9KDlL4IfhyoPtPd5H IVAarOCVsnFtYOhir3zDcuZZlfkSxZpfjZsay1RD1H3kvm26Gd7wI0NnWYm0L2xH sPPbLaTln+QjlkyD7UIDXStaqkT+qr3mH2yK8hUf7qO5KrabnKd9P16nvYhnwKME sHbkT2JHHWLF66mLtdn6nUmmryIefeRcS+/JbkdwXI3raSYIUWgXLdZUkfy20PN1 8NXTPPcoa6vkbSRzcOmy7Yy92VXwzrBd5q4OTVdQWbv0SvS8NakBZzjtWwXnTeB9 kEzX7mwWaRZU0vM+FWAS5B6Qb/1XpGtE/m/SfGFNTu3/66uuGre1OOwbkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCJzxTKXSQF1zv8l28Rmbh3jfJAbMB8GA1UdIwQY MBaAFDVHkTzjoRWItZw8n52p/3fySKwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYt Mzg5OTc4MjFmZmNlLzEvSW5QRk1wZEpBWFhPX3lYYnhHWnVIZU44a0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wY2RhNzQtYzliYi00ZDkyLTllNmYtMzg5OTc4MjFmZmNl LzEvTlVlUlBPT2hGWWkxbkR5Zm5hbl9kX0pJckJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYkdMA0G CSqGSIb3DQEBCwUAA4IBAQCqDWU2/DuQ9i0trQYlbt+I7/YXPiAmqEB61pF99qdw akdyQHVSdfkX7dGX1dUHG7ZtlejkQnBG4qF434SLBzJD82IImvatHw9ES9AE98aP zIQ93oyQDkSJYRfoLp7UqpnrRbGDxC3GM08aZTMg4tqExt71GX2F+SLkyPyzbSHE D/KSPctjcLaGbpM+Jl5O92k/1X5yXd6bcXibA8QQbp7YJH8t1vorCRZisY24Mq1h YhVbAv8A510a9FV5wkdIgswJAQ9oAUXU505GYBwyIVBYuKb75oh9SDJBKKdEcld+ tf8io6kG+u/5BTcmgSwVOQdwykuFEUSl9gvElE7S9J1B -----END CERTIFICATE-----Generated at Thu Jan 1 15:34:12 2026 by rpki-client