This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/1RriZf_G6a5fiIgqSsiVHC2xloA.roa File: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (raw, json) Hash identifier: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA= Subject key identifier: D5:1A:E2:65:FF:C6:E9:AE:5F:88:88:2A:4A:C8:95:1C:2D:B1:96:80 Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Certificate serial: 019B7C7FDE12A294064179460A6F771EF417 Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/1RriZf_G6a5fiIgqSsiVHC2xloA.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203427 IP address blocks: 185.135.52.0/24 maxlen: 24 185.135.53.0/24 maxlen: 24 185.135.54.0/24 maxlen: 24 2a02:faa0::/48 maxlen: 48 2a02:faa0:1::/48 maxlen: 48 2a02:faa0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:de:12:a2:94:06:41:79:46:0a:6f:77:1e:f4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d51ae265ffc6e9ae5f88882a4ac8951c2db19680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:83:be:a1:35:d7:c3:d8:99:b3:a9:d7:60:cc: 11:fb:7c:fe:e1:4f:c8:de:a6:e3:78:c3:37:6f:5e: 96:33:96:4f:06:08:ad:5d:05:c6:d9:d4:50:76:40: c4:15:a1:30:b9:b6:f0:a7:69:da:70:46:69:24:1e: 6a:e1:ca:4b:2c:dd:2b:84:fb:19:3b:65:33:2e:9a: a9:d5:19:f8:01:89:61:12:31:aa:17:db:6b:03:fb: 67:bf:a6:be:23:6a:b9:93:00:33:c5:18:31:e1:0c: cb:82:10:f5:39:c3:2c:a1:07:d4:e6:1e:66:1d:0f: 24:c1:a4:12:7e:38:4c:2e:48:3d:08:85:f2:e1:ae: 68:85:41:90:d7:19:bd:b4:d5:75:38:bb:41:72:1c: 0b:30:e9:60:e4:a1:e6:7d:cf:ce:97:1f:71:b1:b7: 51:39:bc:d6:e8:f4:6d:27:e5:3e:21:67:7e:5c:40: 70:9c:1f:17:99:66:44:a8:d2:ec:b9:2a:2c:3c:b1: 46:6a:9d:21:cf:40:0d:72:ff:a0:50:40:32:d7:ca: 6c:c2:3c:ac:1e:8a:20:14:19:fc:aa:07:eb:fa:06: ab:bb:4f:07:2d:22:b8:8d:6a:42:f3:1f:89:dc:c2: d7:44:7c:95:af:2b:db:9c:ad:3a:e3:4c:ee:e4:08: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1A:E2:65:FF:C6:E9:AE:5F:88:88:2A:4A:C8:95:1C:2D:B1:96:80 X509v3 Authority Key Identifier: keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/1RriZf_G6a5fiIgqSsiVHC2xloA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.52.0-185.135.54.255 IPv6: 2a02:faa0::-2a02:faa0:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 20:96:7e:24:68:bb:32:d9:53:30:d7:e5:f7:a0:ec:13:6d:35: b9:4f:8f:08:4a:fc:e5:f6:40:e0:6b:13:9c:ec:1a:c7:33:69: e9:79:87:e0:60:c5:aa:68:13:17:8c:b0:ec:11:e7:50:9d:fe: df:6d:e0:e7:f4:9c:c2:56:92:7a:dd:1f:06:fc:a9:28:04:17: 26:7d:9d:41:0f:b3:16:95:f6:b0:e0:f4:7f:fe:28:1d:b4:db: c6:78:9a:0e:e3:13:20:2a:96:4f:67:75:d8:ce:22:18:cf:1b: a3:aa:a7:57:9b:db:04:a0:5e:f5:28:2e:a6:a1:91:e0:00:aa: 51:3f:c3:80:89:09:d6:ba:06:3d:39:f7:0f:80:4a:52:5d:04: b4:2c:f0:de:e4:a4:9b:27:e4:d8:e7:b0:92:cf:6e:87:00:9f: a4:6d:8c:41:50:86:17:6b:c3:a5:0d:cd:4c:c2:5a:d7:97:7d: 35:45:ec:16:6a:71:17:19:ab:83:f0:5e:95:9d:ef:df:1c:10: b2:6c:10:6e:64:f2:cc:3d:47:3e:ac:2e:42:46:c1:60:91:67: 3e:fb:59:8d:b2:1b:7b:29:c6:76:4e:c0:a2:e7:e9:a8:e5:c1: 88:bf:32:0d:15:f3:61:2b:9f:db:35:3d:bd:64:f3:3a:12:2b: 82:85:7d:2b -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt8f94SopQGQXlGCm93HvQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5 NjcyZDEwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTFhZTI2NWZmYzZlOWFlNWY4ODg4MmE0YWM4OTUxYzJkYjE5NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YO+oTXXw9iZs6nXYMwR+3z+4U/I 3qbjeMM3b16WM5ZPBgitXQXG2dRQdkDEFaEwubbwp2nacEZpJB5q4cpLLN0rhPsZ O2UzLpqp1Rn4AYlhEjGqF9trA/tnv6a+I2q5kwAzxRgx4QzLghD1OcMsoQfU5h5m HQ8kwaQSfjhMLkg9CIXy4a5ohUGQ1xm9tNV1OLtBchwLMOlg5KHmfc/Olx9xsbdR ObzW6PRtJ+U+IWd+XEBwnB8XmWZEqNLsuSosPLFGap0hz0ANcv+gUEAy18pswjys HoogFBn8qgfr+garu08HLSK4jWpC8x+J3MLXRHyVryvbnK0640zu5AhZ9QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFNUa4mX/xumuX4iIKkrIlRwtsZaAMB8GA1UdIwQY MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt NGVmNDg4ZGM2ZGM0LzEvMVJyaVpmX0c2YTVmaUlncVNzaVZIQzJ4bG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0 LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBAK5hzQD BAC5hzYwGAQCAAIwEjAQAwUFKgL6oAMHACoC+qAAAjANBgkqhkiG9w0BAQsFAAOC AQEAIJZ+JGi7MtlTMNfl96DsE201uU+PCEr85fZA4GsTnOwaxzNp6XmH4GDFqmgT F4yw7BHnUJ3+323g5/ScwlaSet0fBvypKAQXJn2dQQ+zFpX2sOD0f/4oHbTbxnia DuMTICqWT2d12M4iGM8bo6qnV5vbBKBe9SgupqGR4ACqUT/DgIkJ1roGPTn3D4BK Ul0EtCzw3uSkmyfk2Oewks9uhwCfpG2MQVCGF2vDpQ3NTMJa15d9NUXsFmpxFxmr g/BelZ3v3xwQsmwQbmTyzD1HPqwuQkbBYJFnPvtZjbIbeynGdk7AoufpqOXBiL8y DRXzYSuf2zU9vWTzOhIrgoV9Kw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:27 2026 by rpki-client