This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/coMNRuLas3Tzh1MyZbDj5D6HNyE.roa File: coMNRuLas3Tzh1MyZbDj5D6HNyE.roa (raw, json) Hash identifier: LTyoIj935pE4PL0ewRd56WshIlHqNXgIDUvsbXIblXE= Subject key identifier: 72:83:0D:46:E2:DA:B3:74:F3:87:53:32:65:B0:E3:E4:3E:87:37:21 Certificate issuer: /CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Certificate serial: 019B79EC9C141A36F4B9429ADED534167F54 Authority key identifier: 63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/coMNRuLas3Tzh1MyZbDj5D6HNyE.roa Signing time: Thu 01 Jan 2026 14:18:28 +0000 ROA not before: Thu 01 Jan 2026 14:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200653 IP address blocks: 185.100.28.0/22 maxlen: 22 185.100.28.0/23 maxlen: 23 185.100.28.0/24 maxlen: 24 185.100.29.0/24 maxlen: 24 185.100.30.0/23 maxlen: 23 185.100.30.0/24 maxlen: 24 185.100.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.mft rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9c:14:1a:36:f4:b9:42:9a:de:d5:34:16:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6315dd0ba11fdaf74d53b956fc1c846a7e2f61fe Validity Not Before: Jan 1 14:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72830d46e2dab374f387533265b0e3e43e873721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:1b:d0:2c:85:69:49:de:8e:85:74:be:19: 2c:76:ec:0d:69:98:ba:1a:5d:47:85:5b:19:96:c7: fe:d4:be:04:80:a7:f7:6d:55:e6:41:d3:a7:16:4b: b6:fe:9f:74:03:7f:5f:ff:00:01:5e:97:78:00:cf: 7e:77:f9:1c:24:6e:04:23:a0:b9:dd:63:39:34:48: 94:5e:ec:7b:bc:35:ec:b5:27:3c:84:e6:12:7e:38: 26:b7:65:05:c3:9f:07:5c:dd:a5:4f:94:5a:9a:b4: 4d:d2:de:59:88:85:15:74:f9:6c:9b:70:f8:e6:49: ca:31:9f:41:8d:0c:9d:64:d9:47:8c:85:89:e6:78: 75:39:9a:84:be:e9:97:e9:69:ba:b6:27:ed:ff:7d: 64:9e:e2:cc:b0:f6:1b:90:61:97:39:01:8f:db:96: 6c:9a:7d:d8:24:dc:a5:ba:12:ee:18:01:91:57:12: 3f:da:30:4e:0e:33:d6:71:e2:3a:fb:74:20:75:3b: 3e:ef:b2:c8:5a:f8:b2:d0:6d:40:7b:d0:cd:bb:40: ee:28:34:44:20:36:a0:88:5f:c6:8e:1f:f1:57:54: 8f:97:b3:c1:a4:8a:2c:ae:e7:21:cf:78:6e:84:7f: 65:da:92:b3:d5:99:4c:16:55:c7:35:28:04:1f:54: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:0D:46:E2:DA:B3:74:F3:87:53:32:65:B0:E3:E4:3E:87:37:21 X509v3 Authority Key Identifier: keyid:63:15:DD:0B:A1:1F:DA:F7:4D:53:B9:56:FC:1C:84:6A:7E:2F:61:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxXdC6Ef2vdNU7lW_ByEan4vYf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/coMNRuLas3Tzh1MyZbDj5D6HNyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/dacb92-ff70-49fe-b4b8-8989b4caa206/1/YxXdC6Ef2vdNU7lW_ByEan4vYf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.28.0/22 Signature Algorithm: sha256WithRSAEncryption 20:2b:a0:0e:04:21:08:7a:4b:e0:22:0c:aa:38:e6:49:15:d3: 45:0b:9b:a2:84:e4:78:68:3b:b4:bb:cb:0c:65:f1:2c:85:cc: e0:33:a2:b0:e9:20:45:c2:41:63:df:fb:7c:7e:af:c8:11:3a: 7c:cd:38:ad:d3:18:59:e5:0a:2c:91:f7:37:99:99:74:8f:83: a2:5a:a3:c3:a9:2a:6e:ba:43:76:da:d3:ae:fc:a0:77:3e:3a: c3:16:8f:81:70:ee:21:c5:25:fa:ff:23:ef:a1:3f:5a:5f:5b: 32:aa:c3:a9:05:17:e4:e2:80:f3:3d:fd:b3:6b:95:84:a9:10: 8c:44:f3:27:0f:cc:cb:f7:0f:3d:d2:2e:73:78:d0:96:89:4d: ee:e9:fa:30:66:a6:3f:2a:e4:cd:52:d2:e2:6e:fe:1f:bd:6c: 18:29:64:2d:dc:1e:0a:fb:0c:6d:33:bd:28:69:4d:52:66:d1: 99:94:8c:5e:af:30:7f:86:e0:b3:10:cc:42:20:c4:80:6e:fd: a0:cf:2a:84:d5:21:5d:5f:c7:f3:ea:ba:8a:00:36:dd:d3:da: ef:ec:8a:9d:d2:c8:3d:87:8f:c7:31:63:ac:3e:fe:48:32:35: 0c:43:23:76:6e:d8:ad:da:60:d2:9a:59:70:b2:9e:1d:ca:e6: a9:0a:1c:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57JwUGjb0uUKa3tU0Fn9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMTVkZDBiYTExZmRhZjc0ZDUzYjk1NmZjMWM4NDZhN2Uy ZjYxZmUwHhcNMjYwMTAxMTQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjgzMGQ0NmUyZGFiMzc0ZjM4NzUzMzI2NWIwZTNlNDNlODczNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr4b0CyFaUnejoV0vhksduwNaZi6 Gl1HhVsZlsf+1L4EgKf3bVXmQdOnFku2/p90A39f/wABXpd4AM9+d/kcJG4EI6C5 3WM5NEiUXux7vDXstSc8hOYSfjgmt2UFw58HXN2lT5RamrRN0t5ZiIUVdPlsm3D4 5knKMZ9BjQydZNlHjIWJ5nh1OZqEvumX6Wm6tift/31knuLMsPYbkGGXOQGP25Zs mn3YJNyluhLuGAGRVxI/2jBODjPWceI6+3QgdTs+77LIWviy0G1Ae9DNu0DuKDRE IDagiF/Gjh/xV1SPl7PBpIosruchz3huhH9l2pKz1ZlMFlXHNSgEH1RygQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKDDUbi2rN084dTMmWw4+Q+hzchMB8GA1UdIwQY MBaAFGMV3QuhH9r3TVO5VvwchGp+L2H+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0Yjgt ODk4OWI0Y2FhMjA2LzEvY29NTlJ1TGFzM1R6aDFNeVpiRGo1RDZITnlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kYWNiOTItZmY3MC00OWZlLWI0YjgtODk4OWI0Y2FhMjA2 LzEvWXhYZEM2RWYydmROVTdsV19CeUVhbjR2WWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWQcMA0G CSqGSIb3DQEBCwUAA4IBAQAgK6AOBCEIekvgIgyqOOZJFdNFC5uihOR4aDu0u8sM ZfEshczgM6Kw6SBFwkFj3/t8fq/IETp8zTit0xhZ5Qoskfc3mZl0j4OiWqPDqSpu ukN22tOu/KB3PjrDFo+BcO4hxSX6/yPvoT9aX1syqsOpBRfk4oDzPf2za5WEqRCM RPMnD8zL9w890i5zeNCWiU3u6fowZqY/KuTNUtLibv4fvWwYKWQt3B4K+wxtM70o aU1SZtGZlIxerzB/huCzEMxCIMSAbv2gzyqE1SFdX8fz6rqKADbd09rv7Iqd0sg9 h4/HMWOsPv5IMjUMQyN2btit2mDSmllwsp4dyuapChyz -----END CERTIFICATE-----Generated at Mon Jan 12 02:31:27 2026 by rpki-client