This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/RoFMZsaWWJE4dVkuK5RtIIYwVT8.roa File: RoFMZsaWWJE4dVkuK5RtIIYwVT8.roa (raw, json) Hash identifier: A1zGXQy1SN6LsbGm0yfGm3teVZPTXDknHUHEyiJcII4= Subject key identifier: 46:81:4C:66:C6:96:58:91:38:75:59:2E:2B:94:6D:20:86:30:55:3F Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B790FFE94DB975A10EAAD88D82EA263FD Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/RoFMZsaWWJE4dVkuK5RtIIYwVT8.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198627 IP address blocks: 185.184.254.0/24 maxlen: 24 188.95.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fe:94:db:97:5a:10:ea:ad:88:d8:2e:a2:63:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46814c66c69658913875592e2b946d208630553f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d3:33:7c:03:99:ef:21:36:0f:f3:7a:39:3d: fa:ef:3a:7a:94:97:b2:0e:b4:6c:7c:89:d7:dc:25: e5:ef:b4:93:d2:44:0b:60:dc:9e:8f:e4:2e:e1:a6: 78:a0:73:7d:e3:77:9f:d8:36:63:c6:13:c5:57:01: 98:e2:3f:62:8a:37:29:c6:45:a3:cb:22:41:7a:31: fd:5a:0c:1d:5a:a9:3a:0f:3a:f0:ce:3d:a7:c8:45: d8:44:cb:3d:5c:0d:b5:ae:36:d5:3e:03:ab:d4:cb: e9:eb:c6:a7:a2:56:30:7d:11:9d:42:8d:90:c0:17: 9b:f6:e4:8d:33:55:fb:df:22:f8:8b:03:b9:26:a2: b1:b7:0f:5e:d9:a7:4e:99:36:e1:de:35:a7:6e:3a: d0:c7:52:e5:cd:8b:16:59:31:c3:af:86:1f:4a:48: a2:0f:b1:8c:59:84:92:90:4e:c5:ea:22:31:99:40: 01:e0:31:d6:66:b4:13:1e:00:5d:cb:72:69:0d:c9: 16:d7:b7:e7:5c:85:62:fc:a6:d1:59:b5:41:3e:38: 49:8f:f8:6d:75:bb:34:e2:f8:7c:88:8c:91:f5:19: 19:f0:4f:27:50:7e:87:4f:aa:96:0e:03:a5:df:12: 9a:2d:67:1e:04:2a:37:34:d2:36:07:39:fd:7e:9a: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:81:4C:66:C6:96:58:91:38:75:59:2E:2B:94:6D:20:86:30:55:3F X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/RoFMZsaWWJE4dVkuK5RtIIYwVT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.254.0/24 188.95.94.0/24 Signature Algorithm: sha256WithRSAEncryption 82:3f:69:37:49:44:d8:df:6c:eb:c3:3c:a2:f6:8d:3e:e9:2c: 3c:ca:d6:93:69:4a:7f:24:ff:a6:01:69:d3:02:15:97:7a:d7: b0:96:15:ce:1f:b5:1c:4a:9b:2a:4c:fe:73:e8:6e:54:e5:3b: b4:ae:ec:e8:af:ba:53:b0:7e:27:49:5f:0c:1b:12:1a:d5:f6: 26:2f:89:d1:ac:45:35:2e:d0:7f:58:21:72:88:d8:d2:02:7a: 19:09:97:8e:d4:f9:f5:6b:cc:e8:6d:98:e6:d9:47:dc:d8:5b: 86:10:19:ee:66:d7:2e:9a:15:15:c4:06:3c:d5:b1:16:dc:04: 04:8d:da:f3:88:b5:8f:60:fa:14:21:d6:01:31:08:40:86:27: 4d:28:17:78:a6:a5:0c:52:4a:68:9a:82:0c:ac:52:b2:b2:e4: df:57:85:b2:8d:07:7f:05:e8:78:de:d4:57:fa:19:d6:24:6c: 0a:97:87:83:0d:a3:63:28:5b:25:0d:7d:e4:e0:50:4f:e7:91: 31:25:d5:15:25:f7:45:52:14:76:4b:fc:2e:ea:dd:3d:5d:cf: 18:25:a6:55:5a:31:82:09:f9:bb:bc:cc:58:7f:2a:60:f5:cf: f1:ee:62:1e:89:fe:a9:cd:6f:04:14:a2:55:ef:8a:57:87:74: f1:ce:4f:6b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5D/6U25daEOqtiNguomP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjgxNGM2NmM2OTY1ODkxMzg3NTU5MmUyYjk0NmQyMDg2MzA1NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNMzfAOZ7yE2D/N6OT367zp6lJey DrRsfInX3CXl77ST0kQLYNyej+Qu4aZ4oHN943ef2DZjxhPFVwGY4j9iijcpxkWj yyJBejH9WgwdWqk6Dzrwzj2nyEXYRMs9XA21rjbVPgOr1Mvp68anolYwfRGdQo2Q wBeb9uSNM1X73yL4iwO5JqKxtw9e2adOmTbh3jWnbjrQx1LlzYsWWTHDr4YfSkii D7GMWYSSkE7F6iIxmUAB4DHWZrQTHgBdy3JpDckW17fnXIVi/KbRWbVBPjhJj/ht dbs04vh8iIyR9RkZ8E8nUH6HT6qWDgOl3xKaLWceBCo3NNI2Bzn9fpodUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEaBTGbGlliROHVZLiuUbSCGMFU/MB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvUm9GTVpzYVdXSkU0ZFZrdUs1UnRJSVl3VlQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubj+AwQA vF9eMA0GCSqGSIb3DQEBCwUAA4IBAQCCP2k3SUTY32zrwzyi9o0+6Sw8ytaTaUp/ JP+mAWnTAhWXetewlhXOH7UcSpsqTP5z6G5U5Tu0ruzor7pTsH4nSV8MGxIa1fYm L4nRrEU1LtB/WCFyiNjSAnoZCZeO1Pn1a8zobZjm2Ufc2FuGEBnuZtcumhUVxAY8 1bEW3AQEjdrziLWPYPoUIdYBMQhAhidNKBd4pqUMUkpomoIMrFKysuTfV4WyjQd/ Beh43tRX+hnWJGwKl4eDDaNjKFslDX3k4FBP55ExJdUVJfdFUhR2S/wu6t09Xc8Y JaZVWjGCCfm7vMxYfypg9c/x7mIeif6pzW8EFKJV74pXh3Txzk9r -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:55 2026 by rpki-client