This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/tW75xisNBw44jYns_Y3WtNvzf4M.roa File: tW75xisNBw44jYns_Y3WtNvzf4M.roa (raw, json) Hash identifier: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw= Subject key identifier: B5:6E:F9:C6:2B:0D:07:0E:38:8D:89:EC:FD:8D:D6:B4:DB:F3:7F:83 Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e Certificate serial: 019B78349FB2EE92FCF76104506681345E4A Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/tW75xisNBw44jYns_Y3WtNvzf4M.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215747 IP address blocks: 185.189.182.0/24 maxlen: 24 185.189.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9f:b2:ee:92:fc:f7:61:04:50:66:81:34:5e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56ef9c62b0d070e388d89ecfd8dd6b4dbf37f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:be:36:6d:17:d3:93:44:6b:28:51:45:b5: 4a:cb:5f:99:37:70:92:16:dc:f1:79:fd:4b:29:27: 0d:af:f5:1d:05:fc:3e:3f:e6:0a:3c:03:9a:be:87: f2:0a:c5:cd:1b:fa:b4:62:c8:f2:26:a7:98:29:83: f2:de:dc:bd:8f:6e:18:2b:be:0f:be:d3:1c:67:a0: ae:e5:87:fd:f1:64:d7:a3:ce:6d:8a:be:bf:5f:f3: 36:a3:31:06:fe:9f:95:1c:7c:c7:83:64:a2:e2:28: 83:e7:72:79:fc:4f:cc:97:4e:c6:ba:1f:e0:c5:82: 5b:af:a4:5f:71:c0:b1:13:6a:93:85:0a:5b:49:c5: b9:6b:ac:28:23:18:56:a5:f4:db:39:0a:98:2b:70: 5e:c0:4b:10:de:2c:2b:cf:4b:b1:47:40:6a:50:82: ec:bb:2c:61:81:ea:fd:6f:7f:a5:8c:f6:b7:88:8a: bd:fa:d8:b0:dd:ef:56:34:c3:5a:c1:7e:b4:d6:e3: cc:54:39:31:73:d1:b5:53:b3:6d:56:95:17:b3:a9: 43:de:9d:dc:5b:3e:97:6e:8d:41:ca:f0:fc:43:7b: d4:bc:c3:55:4b:c8:e3:12:26:4e:98:2d:26:e8:8c: ba:eb:69:d5:21:3d:5a:c9:a9:bc:c5:4d:e6:dd:c1: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6E:F9:C6:2B:0D:07:0E:38:8D:89:EC:FD:8D:D6:B4:DB:F3:7F:83 X509v3 Authority Key Identifier: keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/tW75xisNBw44jYns_Y3WtNvzf4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.182.0/23 Signature Algorithm: sha256WithRSAEncryption 16:6e:77:86:82:17:c6:8c:ed:63:4c:e1:26:9a:23:95:db:59: 28:38:17:6e:98:fd:61:72:98:87:ff:e7:8e:e8:1d:ff:86:69: 33:65:ba:8c:6a:3c:01:78:28:0a:12:68:cf:28:bd:b3:3f:a3: 7e:66:71:d0:dd:96:90:d2:4e:f0:86:66:5d:b2:a3:9a:e5:74: fa:8b:09:dc:c3:fa:d6:15:00:31:6f:0f:68:fa:31:0e:53:63: 8c:71:95:6e:71:d2:d0:46:20:33:0a:ae:2e:2c:a3:40:12:6e: 5b:d2:34:e1:48:b8:63:12:d1:8e:c2:26:a0:3d:7b:57:cd:0c: ec:83:dd:32:8d:20:c3:c5:82:41:cd:91:b7:59:f0:62:a6:9e: ea:31:28:f3:00:1b:f3:1c:57:ee:95:4c:ab:5d:5f:e5:aa:6d: eb:98:a5:d2:29:ac:47:a2:f5:37:51:33:e3:86:30:a2:e7:ad: 01:14:84:2d:d3:9c:e8:62:d5:87:7a:a2:54:5c:73:7e:a2:b7: 19:38:e1:36:b5:37:af:ab:e4:a0:21:ae:45:54:cc:ec:3e:5c: 21:30:af:02:f4:6b:c4:90:1b:d3:52:63:c8:11:cb:97:61:88: b6:dd:59:a2:23:52:36:9e:80:15:f4:d5:46:76:d0:80:78:6b: 5f:58:1a:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJ+y7pL892EEUGaBNF5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZmNkODdlNjFmOTE3NjVjMmMxMDAyMDQxNDFiNTk0ZDMy YzdiMmUwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZlZjljNjJiMGQwNzBlMzg4ZDg5ZWNmZDhkZDZiNGRiZjM3ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJi+Nm0X05NEayhRRbVKy1+ZN3CS Ftzxef1LKScNr/UdBfw+P+YKPAOavofyCsXNG/q0YsjyJqeYKYPy3ty9j24YK74P vtMcZ6Cu5Yf98WTXo85tir6/X/M2ozEG/p+VHHzHg2Si4iiD53J5/E/Ml07Guh/g xYJbr6RfccCxE2qThQpbScW5a6woIxhWpfTbOQqYK3BewEsQ3iwrz0uxR0BqUILs uyxhger9b3+ljPa3iIq9+tiw3e9WNMNawX601uPMVDkxc9G1U7NtVpUXs6lD3p3c Wz6Xbo1ByvD8Q3vUvMNVS8jjEiZOmC0m6Iy662nVIT1ayam8xU3m3cEt+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLVu+cYrDQcOOI2J7P2N1rTb83+DMB8GA1UdIwQY MBaAFBr82H5h+RdlwsEAIEFBtZTTLHsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEt NGNmOGNmNGZmNmNkLzEvdFc3NXhpc05CdzQ0alluc19ZM1d0TnZ6ZjRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS81NDI3NGItNjFjYi00Njg2LWFiOGEtNGNmOGNmNGZmNmNk LzEvR3Z6WWZtSDVGMlhDd1FBZ1FVRzFsTk1zZXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub22MA0G CSqGSIb3DQEBCwUAA4IBAQAWbneGghfGjO1jTOEmmiOV21koOBdumP1hcpiH/+eO 6B3/hmkzZbqMajwBeCgKEmjPKL2zP6N+ZnHQ3ZaQ0k7whmZdsqOa5XT6iwncw/rW FQAxbw9o+jEOU2OMcZVucdLQRiAzCq4uLKNAEm5b0jThSLhjEtGOwiagPXtXzQzs g90yjSDDxYJBzZG3WfBipp7qMSjzABvzHFfulUyrXV/lqm3rmKXSKaxHovU3UTPj hjCi560BFIQt05zoYtWHeqJUXHN+orcZOOE2tTevq+SgIa5FVMzsPlwhMK8C9GvE kBvTUmPIEcuXYYi23VmiI1I2noAV9NVGdtCAeGtfWBqI -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:25 2026 by rpki-client