This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/RxQknk-i6X3uYtHklAq4xTvLElU.roa File: RxQknk-i6X3uYtHklAq4xTvLElU.roa (raw, json) Hash identifier: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k= Subject key identifier: 47:14:24:9E:4F:A2:E9:7D:EE:62:D1:E4:94:0A:B8:C5:3B:CB:12:55 Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841 Certificate serial: 019B79ECCE6C3D1D746B0DE2BD98C04557C0 Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/RxQknk-i6X3uYtHklAq4xTvLElU.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60390 IP address blocks: 185.31.180.0/22 maxlen: 23 2a00:bf60::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ce:6c:3d:1d:74:6b:0d:e2:bd:98:c0:45:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841 Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4714249e4fa2e97dee62d1e4940ab8c53bcb1255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:5e:ad:f6:f6:85:72:71:28:0c:19:7f:3c: 0b:0c:b2:1a:09:c4:74:4d:9c:d9:06:08:62:01:31: 14:f4:a4:41:e9:5e:ce:4e:f9:23:0d:b4:52:df:e2: 36:21:16:03:82:fd:a7:45:21:de:ea:8a:13:39:cf: e8:86:f6:a6:bf:8c:fb:72:8c:b3:67:a6:cd:5f:dc: d1:5e:b5:00:76:2c:e9:5a:2c:8e:a7:80:53:1e:71: 68:14:da:12:cd:a9:78:00:1c:d4:db:29:b1:b3:f6: f1:c5:fa:49:dd:a9:dd:7d:09:5b:bc:ed:a4:27:6f: ca:54:a7:04:fd:b8:b3:69:e4:5c:63:e2:2f:1c:e1: de:f6:4f:6f:c3:fc:21:b5:64:07:90:59:be:66:d3: 0d:3d:ec:98:bd:d3:15:1f:aa:08:3d:72:20:ad:9d: 35:ad:1d:1d:75:91:f4:c1:da:8e:d3:39:a5:2d:28: f1:a2:ce:a8:cc:c1:8e:54:0e:30:c3:f0:4f:e9:75: bd:46:ce:de:7d:21:7d:ce:44:8d:e2:85:3f:69:a4: 0a:12:d9:2a:c8:00:5f:9b:7a:8f:63:c2:fc:2b:37: 7f:87:6e:97:44:f0:16:6a:f9:08:c8:36:c8:e6:be: be:9e:cf:a3:a8:16:cc:58:56:e6:40:4e:d0:03:d9: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:14:24:9E:4F:A2:E9:7D:EE:62:D1:E4:94:0A:B8:C5:3B:CB:12:55 X509v3 Authority Key Identifier: keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/RxQknk-i6X3uYtHklAq4xTvLElU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.31.180.0/22 IPv6: 2a00:bf60::/32 Signature Algorithm: sha256WithRSAEncryption 73:e2:dd:89:fc:50:c4:9d:f4:a4:d4:1c:a3:5c:0b:9a:ea:dd: 6d:8b:d7:f3:0f:3f:1b:5d:60:6e:82:ba:37:8e:28:eb:34:2d: 65:2f:27:e5:fc:53:fa:eb:9b:d6:c7:7b:f9:5c:7d:85:48:96: 88:f9:3a:4b:d2:e9:9f:47:a9:1b:bd:aa:13:4d:60:1d:af:06: 91:c1:3b:fe:a5:2c:9d:41:99:86:32:a3:09:65:c4:3b:63:11: 25:d9:ed:c4:27:79:48:ce:b1:71:8d:f9:3b:84:a0:d9:2b:22: 62:5f:51:9c:b7:7d:7a:6c:58:2b:96:e2:6d:c6:d3:95:d7:f4: f5:2c:ae:f1:dd:ad:f8:08:9f:dc:89:11:d8:54:27:17:65:27: 26:e6:4b:db:94:23:7b:e1:99:20:2e:ed:c0:e3:03:94:3e:e5: e9:15:eb:54:0e:12:1a:e1:0a:fa:43:08:cd:f5:94:11:d1:0e: 2d:0a:39:c6:4a:19:7e:2f:88:27:2f:b5:71:12:4f:1a:75:7a: fc:f7:75:cd:26:cd:a9:2b:30:58:b4:0c:1f:74:71:43:70:eb: 74:8b:e0:3b:56:51:02:e9:f4:05:0d:ce:c7:37:9b:8b:97:48: 2d:61:47:3f:fb:41:d5:08:8a:32:04:f6:6e:4b:ff:2c:a0:c7: 44:3d:78:e9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57M5sPR10aw3ivZjARVfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNWEyZGFjZjVkZDRlOWJmYTJkMmQ5YjJkM2MzZjk2Nzg3 NDU4NDEwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzE0MjQ5ZTRmYTJlOTdkZWU2MmQxZTQ5NDBhYjhjNTNiY2IxMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bperfb2hXJxKAwZfzwLDLIaCcR0 TZzZBghiATEU9KRB6V7OTvkjDbRS3+I2IRYDgv2nRSHe6ooTOc/ohvamv4z7coyz Z6bNX9zRXrUAdizpWiyOp4BTHnFoFNoSzal4ABzU2ymxs/bxxfpJ3andfQlbvO2k J2/KVKcE/bizaeRcY+IvHOHe9k9vw/whtWQHkFm+ZtMNPeyYvdMVH6oIPXIgrZ01 rR0ddZH0wdqO0zmlLSjxos6ozMGOVA4ww/BP6XW9Rs7efSF9zkSN4oU/aaQKEtkq yABfm3qPY8L8Kzd/h26XRPAWavkIyDbI5r6+ns+jqBbMWFbmQE7QA9nFLwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEcUJJ5Poul97mLR5JQKuMU7yxJVMB8GA1UdIwQY MBaAFOBaLaz13U6b+i0tmy08P5Z4dFhBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEt YWYwN2E5ZTg3ZmMwLzEvUnhRa25rLWk2WDN1WXRIa2xBcTR4VHZMRWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8wMTAwMGItYWE5Ni00YmM2LThjYzEtYWYwN2E5ZTg3ZmMw LzEvNEZvdHJQWGRUcHY2TFMyYkxUd19sbmgwV0VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuR+0MA0E AgACMAcDBQAqAL9gMA0GCSqGSIb3DQEBCwUAA4IBAQBz4t2J/FDEnfSk1ByjXAua 6t1ti9fzDz8bXWBugro3jijrNC1lLyfl/FP665vWx3v5XH2FSJaI+TpL0umfR6kb vaoTTWAdrwaRwTv+pSydQZmGMqMJZcQ7YxEl2e3EJ3lIzrFxjfk7hKDZKyJiX1Gc t316bFgrluJtxtOV1/T1LK7x3a34CJ/ciRHYVCcXZScm5kvblCN74ZkgLu3A4wOU PuXpFetUDhIa4Qr6QwjN9ZQR0Q4tCjnGShl+L4gnL7VxEk8adXr893XNJs2pKzBY tAwfdHFDcOt0i+A7VlEC6fQFDc7HN5uLl0gtYUc/+0HVCIoyBPZuS/8soMdEPXjp -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:07 2026 by rpki-client