This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa File: aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa (raw, json) Hash identifier: VNCClnv/XVF60bxM7vBP7Gf+3o6ieH1yV7iuVnvTEkA= Subject key identifier: 6A:86:0F:86:C4:C8:14:5F:99:45:B8:FA:FF:18:8A:83:75:5B:61:47 Certificate issuer: /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Certificate serial: 019B7834DCE02FE1F20FFCFD05B463A615E8 Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 185.128.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:e0:2f:e1:f2:0f:fc:fd:05:b4:63:a6:15:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a860f86c4c8145f9945b8faff188a83755b6147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:d8:cc:8b:e5:fd:0a:da:96:3a:22:ef:1c: 5d:6b:8f:b9:f9:9e:35:62:b5:a2:b8:c4:99:c0:35: 57:cd:6b:79:a5:61:02:7a:d8:e4:16:95:e9:a9:eb: 28:6f:43:98:b7:2a:b2:29:de:84:1f:8a:4b:e0:0d: 6c:d3:d8:af:4d:bf:c2:f1:fb:42:58:8e:3e:29:5c: c8:18:66:65:ec:a3:58:6f:66:3f:90:55:38:7e:67: ad:6b:a5:be:9a:f1:b9:83:5d:b8:70:51:6f:32:ae: ef:a9:06:c0:9a:e0:ca:09:b9:33:16:dd:fb:92:0d: 11:35:6a:91:d5:61:b7:50:c1:18:49:94:90:ec:68: 17:96:8d:e8:da:a4:e9:12:71:75:1f:bd:88:f3:dc: cb:dc:47:2d:70:3b:fe:bf:ed:e6:04:6c:7b:b5:eb: 30:a4:58:06:76:18:21:96:b6:05:34:99:e0:9a:43: bc:54:78:81:3e:59:9a:c1:95:15:fb:e3:a8:a6:0f: ad:a2:01:76:30:9f:29:0a:4b:cb:12:c5:c5:96:d6: d2:05:cd:6d:eb:fd:bc:2e:8c:c7:d5:18:d6:71:6c: 33:02:99:1c:50:0e:b7:9f:2a:67:74:71:2b:8e:2a: 65:b6:1b:a3:13:db:d1:09:38:9b:64:7d:e6:91:ef: 21:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:86:0F:86:C4:C8:14:5F:99:45:B8:FA:FF:18:8A:83:75:5B:61:47 X509v3 Authority Key Identifier: keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/aoYPhsTIFF-ZRbj6_xiKg3VbYUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.164.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:ef:c0:f9:77:f8:3a:ef:9b:ae:5c:5e:f2:8f:fa:b1:96:c3: 9a:f7:8a:96:31:89:f0:6e:d2:fb:06:38:9c:fc:57:ad:a8:2e: c6:af:43:0f:e8:96:40:c2:ca:84:f3:66:ba:37:7e:e0:3b:87: 0a:57:ae:59:ab:97:17:79:12:7d:a6:cb:25:e0:61:0c:6c:c9: 05:27:41:4b:9c:46:95:ad:82:f5:59:69:c2:b1:1e:87:c7:61: cf:3a:fa:9a:4f:d4:58:ef:1c:3c:90:f8:c3:c3:50:c4:8d:9a: fd:f9:d4:8f:c3:81:bc:fb:6d:50:18:6d:b9:8d:8c:df:c2:96: f4:16:b9:40:29:2f:b9:9e:81:d4:cc:ce:da:7a:96:98:99:d5: 13:58:43:92:07:b8:fc:29:57:ad:4c:b1:36:ea:bd:13:49:ea: bc:3a:d8:49:b9:44:ac:df:03:47:d9:9c:a2:d3:6d:fa:09:4d: cf:50:ff:5a:20:aa:3f:ef:1d:ad:90:ac:35:30:cc:4e:ad:01: f4:af:95:af:bf:8f:0b:7c:1f:29:1d:60:cc:79:0b:80:56:63: 24:8f:9c:e4:ea:70:b9:ef:56:7e:9a:0b:13:c8:00:c5:3a:67: 00:66:5e:cd:72:8b:e3:0d:92:5e:4a:da:9d:12:a9:67:ff:ed: 21:e6:7b:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNzgL+HyD/z9BbRjphXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNGYxZTZiMDExZjRkNjMzMWExMjc5NTVhNTQ4ZmE1MDUy NTgwYTUwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTg2MGY4NmM0YzgxNDVmOTk0NWI4ZmFmZjE4OGE4Mzc1NWI2MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9/YzIvl/Qraljoi7xxda4+5+Z41 YrWiuMSZwDVXzWt5pWECetjkFpXpqesob0OYtyqyKd6EH4pL4A1s09ivTb/C8ftC WI4+KVzIGGZl7KNYb2Y/kFU4fmeta6W+mvG5g124cFFvMq7vqQbAmuDKCbkzFt37 kg0RNWqR1WG3UMEYSZSQ7GgXlo3o2qTpEnF1H72I89zL3EctcDv+v+3mBGx7tesw pFgGdhghlrYFNJngmkO8VHiBPlmawZUV++Oopg+togF2MJ8pCkvLEsXFltbSBc1t 6/28LozH1RjWcWwzApkcUA63nypndHErjiplthujE9vRCTibZH3mke8hcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqGD4bEyBRfmUW4+v8YioN1W2FHMB8GA1UdIwQY MBaAFLxPHmsBH01jMaEnlVpUj6UFJYClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGIt YzU1NDc2NzU5ZDBjLzEvYW9ZUGhzVElGRi1aUmJqNl94aUtnM1ZiWVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi82NmEyMzctOWJjNS00YWJkLTliOGItYzU1NDc2NzU5ZDBj LzEvdkU4ZWF3RWZUV014b1NlVldsU1BwUVVsZ0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYCkMA0G CSqGSIb3DQEBCwUAA4IBAQAN78D5d/g675uuXF7yj/qxlsOa94qWMYnwbtL7Bjic /FetqC7Gr0MP6JZAwsqE82a6N37gO4cKV65Zq5cXeRJ9pssl4GEMbMkFJ0FLnEaV rYL1WWnCsR6Hx2HPOvqaT9RY7xw8kPjDw1DEjZr9+dSPw4G8+21QGG25jYzfwpb0 FrlAKS+5noHUzM7aepaYmdUTWEOSB7j8KVetTLE26r0TSeq8OthJuUSs3wNH2Zyi 0236CU3PUP9aIKo/7x2tkKw1MMxOrQH0r5Wvv48LfB8pHWDMeQuAVmMkj5zk6nC5 71Z+mgsTyADFOmcAZl7NcovjDZJeStqdEqln/+0h5nsz -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:44 2026 by rpki-client