This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/1-rBgyQgcZXkEd224n-2FZQ79R90.roa File: 1-rBgyQgcZXkEd224n-2FZQ79R90.roa (raw, json) Hash identifier: lXuaNOk5Bgob5HontELFPkVtHeAXizyQRbe4xoEKAQ8= Subject key identifier: FA:B0:60:C9:08:1C:65:79:04:77:6D:B8:9F:ED:85:65:0E:FD:47:DD Certificate issuer: /CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Certificate serial: 019B77C7071325DD34ABE1F901CBE5B7D719 Authority key identifier: 40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/1-rBgyQgcZXkEd224n-2FZQ79R90.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212150 IP address blocks: 185.115.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.mft rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:07:13:25:dd:34:ab:e1:f9:01:cb:e5:b7:d7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4020f4d4c7528d8a827ec724918fe2df534bd905 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fab060c9081c657904776db89fed85650efd47dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:08:ab:16:7d:d8:71:e3:a9:64:1d:da:f0: 7e:e9:27:65:53:a1:9c:f6:51:02:f7:09:c5:e1:02: c5:f8:ac:31:79:4d:61:73:83:cf:ce:c3:a8:85:a7: f6:37:eb:e7:96:3d:0a:0c:5e:29:cf:75:df:aa:8b: f3:fe:cb:50:40:1c:56:67:9e:1b:19:0f:56:a3:77: b1:fb:8d:ef:02:ec:2a:58:b5:2b:ea:ab:21:d9:f2: 31:58:b8:c4:d4:6a:0e:16:0a:0a:4e:d5:c1:ab:30: 30:f2:62:3f:bf:4d:b6:e7:4b:1e:d8:ca:62:33:c3: 5a:ca:df:0e:24:32:91:50:dd:9b:4b:84:07:36:26: 9c:7c:01:a5:42:46:78:6e:10:eb:d9:22:88:35:c0: e1:fc:ff:ac:4f:3f:f9:37:84:d3:d6:5c:33:30:5c: 3e:4b:5c:1b:13:31:d6:b6:1e:8e:b6:a9:d7:db:b6: bd:58:26:15:5b:91:fd:31:55:17:a5:20:ab:c1:36: 06:b4:e3:2a:9f:ad:84:de:17:5d:07:dd:4b:2d:57: d6:95:1d:73:af:84:f0:bb:c5:47:41:c0:f7:28:7d: 51:91:4c:dc:5b:24:24:6f:c1:ce:b2:01:97:73:c7: 43:00:41:fc:ac:c6:5a:68:a2:c7:5f:90:e0:e8:90: d7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B0:60:C9:08:1C:65:79:04:77:6D:B8:9F:ED:85:65:0E:FD:47:DD X509v3 Authority Key Identifier: keyid:40:20:F4:D4:C7:52:8D:8A:82:7E:C7:24:91:8F:E2:DF:53:4B:D9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCD01MdSjYqCfsckkY_i31NL2QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/1-rBgyQgcZXkEd224n-2FZQ79R90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2f7a6e-e8c1-4f62-95f9-64bfb79900d6/1/QCD01MdSjYqCfsckkY_i31NL2QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.115.160.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:cc:8c:d8:c6:50:09:d1:cd:08:fc:67:4a:98:8a:40:f1:fe: 8f:c9:a1:45:84:b8:ca:5a:15:54:7e:19:d5:ab:3e:2f:3b:26: c7:4a:14:7a:8e:02:35:84:a0:f5:c4:f9:00:15:4a:68:db:08: 84:11:82:1f:83:d6:71:4a:b1:5c:18:01:31:86:97:99:f0:51: 1f:b1:5a:a2:be:ca:85:cb:49:67:23:99:a1:a6:1d:21:fc:5d: 5d:41:07:d3:68:a8:d1:d9:1d:db:02:47:61:55:18:71:1e:09: de:a8:54:cb:7f:4c:b3:51:46:fd:1e:32:86:bf:cf:c6:15:7d: 9f:6b:c0:91:6d:4d:19:fc:73:9f:9f:c5:bd:ff:99:e4:c8:1b: 48:99:fd:5a:0a:b7:4c:b8:64:5d:ae:20:6d:08:14:17:82:ea: 4e:a8:50:2f:cb:91:9c:78:c2:09:58:24:4e:99:86:c1:42:39: 47:d6:ec:50:75:7d:d1:c6:cf:ca:c5:62:8c:5e:4a:ab:76:83: 6b:ea:a5:8d:cc:b2:eb:bd:56:51:28:f2:c8:29:65:4f:c1:00: 2c:c7:43:07:9f:06:9e:e2:9c:cc:7d:74:9f:4c:0a:f4:5c:0f: 85:0f:4b:91:6d:e0:a8:d9:4b:19:6a:04:30:eb:a2:c1:08:d3: a9:1a:6c:a3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xwcTJd00q+H5Acvlt9cZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwMjBmNGQ0Yzc1MjhkOGE4MjdlYzcyNDkxOGZlMmRmNTM0 YmQ5MDUwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWIwNjBjOTA4MWM2NTc5MDQ3NzZkYjg5ZmVkODU2NTBlZmQ0N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwIIqxZ92HHjqWQd2vB+6SdlU6Gc 9lEC9wnF4QLF+KwxeU1hc4PPzsOohaf2N+vnlj0KDF4pz3Xfqovz/stQQBxWZ54b GQ9Wo3ex+43vAuwqWLUr6qsh2fIxWLjE1GoOFgoKTtXBqzAw8mI/v02250se2Mpi M8Nayt8OJDKRUN2bS4QHNiacfAGlQkZ4bhDr2SKINcDh/P+sTz/5N4TT1lwzMFw+ S1wbEzHWth6OtqnX27a9WCYVW5H9MVUXpSCrwTYGtOMqn62E3hddB91LLVfWlR1z r4Twu8VHQcD3KH1RkUzcWyQkb8HOsgGXc8dDAEH8rMZaaKLHX5Dg6JDXBwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqwYMkIHGV5BHdtuJ/thWUO/UfdMB8GA1UdIwQY MBaAFEAg9NTHUo2Kgn7HJJGP4t9TS9kFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUNEMDFNZFNqWXFDZnNja2tZX2kzMU5MMlFVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yZjdhNmUtZThjMS00ZjYyLTk1Zjkt NjRiZmI3OTkwMGQ2LzEvMS1yQmd5UWdjWlhrRWQyMjRuLTJGWlE3OVI5MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTMvMmY3YTZlLWU4YzEtNGY2Mi05NWY5LTY0YmZiNzk5MDBk Ni8xL1FDRDAxTWRTallxQ2ZzY2trWV9pMzFOTDJRVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlzoDAN BgkqhkiG9w0BAQsFAAOCAQEAfcyM2MZQCdHNCPxnSpiKQPH+j8mhRYS4yloVVH4Z 1as+Lzsmx0oUeo4CNYSg9cT5ABVKaNsIhBGCH4PWcUqxXBgBMYaXmfBRH7Faor7K hctJZyOZoaYdIfxdXUEH02io0dkd2wJHYVUYcR4J3qhUy39Ms1FG/R4yhr/PxhV9 n2vAkW1NGfxzn5/Fvf+Z5MgbSJn9Wgq3TLhkXa4gbQgUF4LqTqhQL8uRnHjCCVgk TpmGwUI5R9bsUHV90cbPysVijF5Kq3aDa+qljcyy671WUSjyyCllT8EALMdDB58G nuKczH10n0wK9FwPhQ9LkW3gqNlLGWoEMOuiwQjTqRpsow== -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:23 2026 by rpki-client