This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa File: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (raw, json) Hash identifier: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4= Subject key identifier: 3E:B0:F1:A8:14:91:C2:43:EA:9D:54:A4:B3:D8:CB:E4:4C:35:9F:1B Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Certificate serial: 019B7BA444B0A45150991599AF473BB24E6D Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa Signing time: Thu 01 Jan 2026 22:18:41 +0000 ROA not before: Thu 01 Jan 2026 22:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 185.12.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:44:b0:a4:51:50:99:15:99:af:47:3b:b2:4e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d Validity Not Before: Jan 1 22:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb0f1a81491c243ea9d54a4b3d8cbe44c359f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:e3:55:d5:79:65:7c:0f:76:e2:fe:bf:7c: 8e:91:74:6c:b1:b9:07:e8:5b:90:aa:3f:4c:bf:05: c4:9b:f3:f1:77:4f:30:e9:93:7f:fd:92:b4:f0:4c: e2:c4:e7:f3:7d:7e:6c:46:56:ee:dd:5c:df:22:85: fa:a8:e1:31:51:ee:8c:be:d1:23:0c:bb:37:bb:07: 06:6b:e9:20:c6:99:8a:65:07:74:4d:f1:f0:72:9c: 9f:86:da:2b:7d:10:33:a6:eb:34:e5:38:d8:89:a4: 9d:c2:08:51:27:3f:90:6c:4a:51:98:95:3e:51:7b: a8:19:14:82:7d:e1:be:ee:87:ae:d6:1b:82:33:2c: d3:db:a4:59:53:e9:b7:02:30:f6:4e:a7:82:83:11: b1:a8:78:4c:27:22:9a:4a:25:a1:f5:bc:a4:40:33: c0:85:da:e7:fd:7c:24:f3:8f:e0:56:72:59:64:49: 6c:bc:8e:49:e4:81:ec:7d:d5:b2:6c:8d:ce:75:6a: a0:b6:2d:1a:65:a1:c0:f2:ea:11:80:a4:ea:0f:2b: 5d:c7:b4:23:9f:a1:fc:2f:8a:76:c6:d8:03:ed:39: 29:86:6b:23:aa:e0:54:bb:35:e4:5d:38:60:29:f7: c0:74:9c:88:df:ec:36:f1:81:7c:32:6b:75:ac:5a: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B0:F1:A8:14:91:C2:43:EA:9D:54:A4:B3:D8:CB:E4:4C:35:9F:1B X509v3 Authority Key Identifier: keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.12.183.0/24 Signature Algorithm: sha256WithRSAEncryption 92:df:27:bc:f6:c0:5c:19:c7:42:12:ef:70:50:df:a1:48:61: b7:00:2d:d6:04:74:5c:74:8b:23:2f:66:53:3f:c8:90:51:41: 1d:d6:da:b2:42:e0:6e:3f:f7:14:c1:13:3f:6e:ad:3c:ea:d3: 25:9d:03:e6:39:0d:48:04:e2:90:d6:7e:88:5d:77:73:06:12: f0:c9:25:67:0e:d9:7f:e7:86:18:a2:25:19:ad:87:4c:49:a7: bc:f2:81:bb:a5:32:27:d6:d8:95:29:4f:d5:f5:98:fa:ae:b3: 9c:03:ba:d5:63:02:d4:35:f8:d6:89:97:89:80:da:0e:0c:66: 5e:21:82:13:da:88:2d:ed:64:a6:28:10:99:7a:ae:a4:2b:cd: d8:99:85:bf:75:72:c7:be:96:5a:65:c1:ad:8d:28:53:a8:b4: 83:78:0e:96:b4:c8:a3:58:7e:a3:4e:5b:fc:b7:56:25:45:4e: 02:86:e5:13:47:fc:6e:18:ae:0e:f1:cf:c9:70:6e:15:02:ad: 31:c3:54:5c:d1:f4:41:4e:b9:bd:db:81:9a:ce:1e:4d:bd:b1: 72:3c:bb:c7:01:25:83:20:f9:73:89:4f:96:64:4c:b9:42:dd: 07:34:29:6a:de:7c:4f:64:05:7f:c9:e8:c0:fc:69:c2:db:76: 22:c5:3f:3d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pESwpFFQmRWZr0c7sk5tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NWQwMDQ0NDYxODJkNTFmZDM4ZjdmNzVmZTJhNWM4NjA4 YmM4NmQwHhcNMjYwMTAxMjIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWIwZjFhODE0OTFjMjQzZWE5ZDU0YTRiM2Q4Y2JlNDRjMzU5ZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuzjVdV5ZXwPduL+v3yOkXRssbkH 6FuQqj9MvwXEm/Pxd08w6ZN//ZK08EzixOfzfX5sRlbu3VzfIoX6qOExUe6MvtEj DLs3uwcGa+kgxpmKZQd0TfHwcpyfhtorfRAzpus05TjYiaSdwghRJz+QbEpRmJU+ UXuoGRSCfeG+7oeu1huCMyzT26RZU+m3AjD2TqeCgxGxqHhMJyKaSiWh9bykQDPA hdrn/Xwk84/gVnJZZElsvI5J5IHsfdWybI3OdWqgti0aZaHA8uoRgKTqDytdx7Qj n6H8L4p2xtgD7TkphmsjquBUuzXkXThgKffAdJyI3+w28YF8Mmt1rFqiCQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD6w8agUkcJD6p1UpLPYy+RMNZ8bMB8GA1UdIwQY MBaAFPhdAERGGC1R/Tj391/ipchgi8htMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1GMEFSRVlZTFZIOU9QZjNYLUtseUdDTHlHMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1 LTA4MGVlMGE5N2Y2YS8xL1ByRHhxQlNSd2tQcW5WU2tzOWpMNUV3MW54cy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvYzlkYjUyLWFjOTEtNDA2YS05Zjk1LTA4MGVlMGE5N2Y2 YS8xLzEtRjBBUkVZWUxWSDlPUGYzWC1LbHlHQ0x5RzAuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5DLcw DQYJKoZIhvcNAQELBQADggEBAJLfJ7z2wFwZx0IS73BQ36FIYbcALdYEdFx0iyMv ZlM/yJBRQR3W2rJC4G4/9xTBEz9urTzq0yWdA+Y5DUgE4pDWfohdd3MGEvDJJWcO 2X/nhhiiJRmth0xJp7zygbulMifW2JUpT9X1mPqus5wDutVjAtQ1+NaJl4mA2g4M Zl4hghPaiC3tZKYoEJl6rqQrzdiZhb91cse+llplwa2NKFOotIN4Dpa0yKNYfqNO W/y3ViVFTgKG5RNH/G4Yrg7xz8lwbhUCrTHDVFzR9EFOub3bgZrOHk29sXI8u8cB JYMg+XOJT5ZkTLlC3Qc0KWrefE9kBX/J6MD8acLbdiLFPz0= -----END CERTIFICATE-----Generated at Sun Jan 25 16:15:16 2026 by rpki-client