This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/SUwxZ5v9b_j8m1u1pD7O8P1Pe7k.roa File: SUwxZ5v9b_j8m1u1pD7O8P1Pe7k.roa (raw, json) Hash identifier: IpPr2gWojEstVTNBkraXYCz+z1YTkig1sDhmFGJ2qPE= Subject key identifier: 49:4C:31:67:9B:FD:6F:F8:FC:9B:5B:B5:A4:3E:CE:F0:FD:4F:7B:B9 Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Certificate serial: 019B7E38E8B60D77DABCDDAA4EC4A3CA3272 Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/SUwxZ5v9b_j8m1u1pD7O8P1Pe7k.roa Signing time: Fri 02 Jan 2026 10:20:17 +0000 ROA not before: Fri 02 Jan 2026 10:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59889 IP address blocks: 185.186.148.0/22 maxlen: 22 2a0b:7d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e8:b6:0d:77:da:bc:dd:aa:4e:c4:a3:ca:32:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Validity Not Before: Jan 2 10:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494c31679bfd6ff8fc9b5bb5a43ecef0fd4f7bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:d7:c3:83:00:98:74:35:66:7a:5a:87:06: dc:3b:be:d4:9a:7b:ff:b6:4a:89:ef:c9:92:eb:66: 2d:b7:58:3f:fc:f9:aa:6f:02:92:93:a1:a2:cb:59: b0:34:4c:c0:7f:b8:50:29:f7:31:d2:85:0d:8f:1a: e7:e6:a3:79:fc:0d:ca:1e:34:d9:9e:02:5a:8e:31: 5a:c1:a8:81:e2:2a:72:49:de:dc:dc:17:97:8e:ea: fe:d1:66:28:54:07:2b:6e:56:ae:04:9b:56:f2:88: 74:1b:05:4f:04:9d:d4:b7:4a:7d:e6:db:79:78:83: c8:40:33:22:bf:07:79:83:e3:f0:80:29:e3:ae:16: 86:9b:7c:06:cc:9f:49:8b:da:eb:dc:1e:57:0b:7c: ef:d4:46:36:e7:01:14:cc:6c:f1:90:f1:91:40:b6: f7:f6:ea:a1:9e:04:90:c4:ed:a2:cf:df:7f:86:39: 55:91:d2:e9:9d:e5:6a:97:d3:85:b5:5b:bc:03:d8: 10:df:c8:fe:e6:e0:29:09:07:03:62:c7:67:96:d6: 1e:e3:33:61:2d:e5:70:d9:8a:5c:e5:d1:f8:eb:55: b6:95:48:2a:94:5b:fb:d4:9a:35:dd:b9:ca:27:88: e9:6b:34:d9:a4:90:bf:c6:a4:89:31:c2:51:21:ce: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:31:67:9B:FD:6F:F8:FC:9B:5B:B5:A4:3E:CE:F0:FD:4F:7B:B9 X509v3 Authority Key Identifier: keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/SUwxZ5v9b_j8m1u1pD7O8P1Pe7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.148.0/22 IPv6: 2a0b:7d80::/29 Signature Algorithm: sha256WithRSAEncryption f0:a6:14:b0:70:3a:b8:b2:09:e6:51:6a:cb:3b:34:05:5f:65: 67:b2:51:a9:b2:61:03:88:0d:d5:ee:40:a9:b0:28:17:ce:9f: 48:80:3c:a1:9c:b9:62:7a:62:90:6e:db:b2:ef:75:2f:f5:ac: bb:56:fb:12:d4:b7:b8:e7:9b:52:30:af:92:dd:b4:e2:ae:5e: 6a:1e:0e:bf:5e:c9:0b:3f:47:92:a1:61:dc:eb:d7:89:46:e0: f3:66:c5:8f:46:b0:d0:89:4e:20:b2:3b:0a:93:5e:49:44:21: b1:9d:e9:a3:a7:07:b9:0f:2b:a8:79:7d:33:9a:f8:05:98:aa: 0e:bf:90:eb:2d:db:b0:65:5b:08:ea:9c:52:f5:99:67:95:73: 9c:c9:1d:fc:55:ef:28:32:a0:b8:ff:8a:f4:39:75:d3:00:26: 3b:1a:dd:ed:d1:c6:2d:84:c9:d7:ac:c0:24:d9:fe:4e:47:a4: 9b:67:bc:2d:59:74:a2:14:51:fc:f2:09:d7:73:aa:6f:31:e0: 16:52:aa:53:95:12:21:eb:82:42:94:fc:35:ef:af:e5:87:2d: c8:52:ee:26:9a:91:65:c6:a1:df:f5:c1:3f:65:4d:f1:2e:ac: 54:f1:9b:07:f1:f4:16:bd:52:2d:86:c9:7d:7e:64:83:2b:0c: 8b:17:7b:33 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OOi2DXfavN2qTsSjyjJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3 Y2EyOGUwHhcNMjYwMTAyMTAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRjMzE2NzliZmQ2ZmY4ZmM5YjViYjVhNDNlY2VmMGZkNGY3YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MPXw4MAmHQ1ZnpahwbcO77Umnv/ tkqJ78mS62Ytt1g//PmqbwKSk6Giy1mwNEzAf7hQKfcx0oUNjxrn5qN5/A3KHjTZ ngJajjFawaiB4ipySd7c3BeXjur+0WYoVAcrblauBJtW8oh0GwVPBJ3Ut0p95tt5 eIPIQDMivwd5g+PwgCnjrhaGm3wGzJ9Ji9rr3B5XC3zv1EY25wEUzGzxkPGRQLb3 9uqhngSQxO2iz99/hjlVkdLpneVql9OFtVu8A9gQ38j+5uApCQcDYsdnltYe4zNh LeVw2Ypc5dH461W2lUgqlFv71Jo13bnKJ4jpazTZpJC/xqSJMcJRIc5kqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFElMMWeb/W/4/JtbtaQ+zvD9T3u5MB8GA1UdIwQY MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm LTJiNGEzNTM4YzVlMy8xL1NVd3haNXY5Yl9qOG0xdTFwRDdPOFAxUGU3ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNmLTJiNGEzNTM4YzVl My8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5upQw DQQCAAIwBwMFAyoLfYAwDQYJKoZIhvcNAQELBQADggEBAPCmFLBwOriyCeZRass7 NAVfZWeyUamyYQOIDdXuQKmwKBfOn0iAPKGcuWJ6YpBu27LvdS/1rLtW+xLUt7jn m1Iwr5LdtOKuXmoeDr9eyQs/R5KhYdzr14lG4PNmxY9GsNCJTiCyOwqTXklEIbGd 6aOnB7kPK6h5fTOa+AWYqg6/kOst27BlWwjqnFL1mWeVc5zJHfxV7ygyoLj/ivQ5 ddMAJjsa3e3Rxi2EydeswCTZ/k5HpJtnvC1ZdKIUUfzyCddzqm8x4BZSqlOVEiHr gkKU/DXvr+WHLchS7iaakWXGod/1wT9lTfEurFTxmwfx9Ba9Ui2GyX1+ZIMrDIsX ezM= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:01 2026 by rpki-client