This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/f-sruYLmLAQF45fvBkTZ4sUoHrs.roa File: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (raw, json) Hash identifier: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ= Subject key identifier: 7F:EB:2B:B9:82:E6:2C:04:05:E3:97:EF:06:44:D9:E2:C5:28:1E:BB Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Certificate serial: 019B7F14E60D0B0283A88B48D2CC192BF3AB Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/f-sruYLmLAQF45fvBkTZ4sUoHrs.roa Signing time: Fri 02 Jan 2026 14:20:34 +0000 ROA not before: Fri 02 Jan 2026 14:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51491 IP address blocks: 185.33.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:e6:0d:0b:02:83:a8:8b:48:d2:cc:19:2b:f3:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05 Validity Not Before: Jan 2 14:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7feb2bb982e62c0405e397ef0644d9e2c5281ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:2d:40:e5:69:72:ea:57:78:94:d7:e5:b4: e0:7b:2f:4a:54:d9:9d:1c:25:1a:43:18:02:23:a6: 10:1c:a8:4a:74:74:79:b7:e9:ad:fb:90:b2:c4:98: 71:1b:b5:30:23:b0:19:2b:d0:b7:2a:2b:ca:4f:fc: 25:a6:6c:d0:77:4e:76:22:9c:23:d2:a8:1d:bd:68: e8:08:63:b2:f6:83:2a:60:2a:dd:e8:80:d2:d2:d9: 2a:fd:7d:65:c6:b0:3e:78:41:9d:c8:a3:f4:d5:4c: 01:e7:16:52:ca:0b:75:3d:69:ab:93:24:36:7d:70: c8:72:eb:82:a1:ec:3f:10:e7:22:ea:7f:5f:94:18: 86:9d:a7:93:94:f6:23:45:26:ea:60:68:09:7d:ee: 67:48:c1:70:3e:eb:a8:3c:ca:5f:b4:08:c7:0b:e3: a3:75:35:b2:2e:a1:24:d2:9f:b6:a5:5c:de:8b:ab: b0:74:cd:52:ed:d8:e8:b5:02:a5:ca:48:c4:74:57: 4c:2c:71:18:af:df:cf:6f:05:e0:16:77:9e:3c:f0: 81:c4:6f:3a:1f:56:84:9c:ed:ed:df:de:20:54:03: 19:b9:b7:51:5f:e3:a3:57:e1:3d:08:d3:50:0c:b9: ab:e4:51:c1:03:8b:db:72:a5:36:43:63:a1:e1:90: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EB:2B:B9:82:E6:2C:04:05:E3:97:EF:06:44:D9:E2:C5:28:1E:BB X509v3 Authority Key Identifier: keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/f-sruYLmLAQF45fvBkTZ4sUoHrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.184.0/22 Signature Algorithm: sha256WithRSAEncryption 18:6d:9c:f2:5a:c5:a8:74:75:0a:3c:ac:4e:d5:6a:a3:a8:a8: 7e:20:95:72:d3:c5:15:e4:05:65:5e:ff:4a:02:4b:7b:c5:f9: 70:81:51:b5:61:b7:4c:b8:36:bd:17:9b:23:e7:30:30:07:cf: fa:af:29:2f:c5:c5:04:8a:9e:93:0c:11:04:45:28:6e:c1:6c: 94:4a:f3:23:02:87:98:a8:bb:33:0f:ca:f5:1b:92:b5:e8:2a: a2:da:f0:6f:65:f5:a6:cb:c9:77:63:0a:88:c1:f0:ae:fb:36: 6c:66:42:14:ba:fd:65:9b:2f:84:8e:ff:5b:ec:1f:a5:1f:2c: 29:87:9b:0f:40:68:77:6c:15:40:07:de:54:69:23:ed:6c:ea: 75:94:c4:6a:70:9b:ff:b4:e3:c7:fa:a6:01:e6:4d:91:4a:1d: d6:07:a7:d6:52:c4:8f:16:9a:55:23:53:db:bf:68:0c:be:f6: 79:57:0d:a6:87:94:c7:34:66:59:13:c5:5c:92:00:b1:13:8f: a5:13:8f:09:bb:19:60:c0:b5:80:6b:e4:e0:d6:91:16:38:bb: 78:69:a5:96:d8:5c:60:e6:c3:80:4f:61:45:20:dd:09:48:c6: 0e:a2:89:f8:96:10:75:f1:56:36:0c:74:10:4c:ef:4b:fa:78: 45:68:06:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FOYNCwKDqItI0swZK/OrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh YzZmMDUwHhcNMjYwMTAyMTQyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmViMmJiOTgyZTYyYzA0MDVlMzk3ZWYwNjQ0ZDllMmM1MjgxZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXctQOVpcupXeJTX5bTgey9KVNmd HCUaQxgCI6YQHKhKdHR5t+mt+5CyxJhxG7UwI7AZK9C3KivKT/wlpmzQd052Ipwj 0qgdvWjoCGOy9oMqYCrd6IDS0tkq/X1lxrA+eEGdyKP01UwB5xZSygt1PWmrkyQ2 fXDIcuuCoew/EOci6n9flBiGnaeTlPYjRSbqYGgJfe5nSMFwPuuoPMpftAjHC+Oj dTWyLqEk0p+2pVzei6uwdM1S7djotQKlykjEdFdMLHEYr9/PbwXgFneePPCBxG86 H1aEnO3t394gVAMZubdRX+OjV+E9CNNQDLmr5FHBA4vbcqU2Q2Oh4ZBxbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/rK7mC5iwEBeOX7wZE2eLFKB67MB8GA1UdIwQY MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt YzI1Nzc5MmRhZGM0LzEvZi1zcnVZTG1MQVFGNDVmdkJrVFo0c1VvSHJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0 LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSG4MA0G CSqGSIb3DQEBCwUAA4IBAQAYbZzyWsWodHUKPKxO1WqjqKh+IJVy08UV5AVlXv9K Akt7xflwgVG1YbdMuDa9F5sj5zAwB8/6rykvxcUEip6TDBEERShuwWyUSvMjAoeY qLszD8r1G5K16Cqi2vBvZfWmy8l3YwqIwfCu+zZsZkIUuv1lmy+Ejv9b7B+lHywp h5sPQGh3bBVAB95UaSPtbOp1lMRqcJv/tOPH+qYB5k2RSh3WB6fWUsSPFppVI1Pb v2gMvvZ5Vw2mh5THNGZZE8VckgCxE4+lE48JuxlgwLWAa+Tg1pEWOLt4aaWW2Fxg 5sOAT2FFIN0JSMYOoon4lhB18VY2DHQQTO9L+nhFaAZy -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:29 2026 by rpki-client