This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/Exg0UvgeAfe-AZQtA_LavkNZKKU.roa File: Exg0UvgeAfe-AZQtA_LavkNZKKU.roa (raw, json) Hash identifier: gKA++u4Fw/ljBBOhyevOEbxsqlYiJYqc2cMPG6ua8TU= Subject key identifier: 13:18:34:52:F8:1E:01:F7:BE:01:94:2D:03:F2:DA:BE:43:59:28:A5 Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33 Certificate serial: 019B7E377F50C327EC54AE3A11117C4E9C52 Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/Exg0UvgeAfe-AZQtA_LavkNZKKU.roa Signing time: Fri 02 Jan 2026 10:18:44 +0000 ROA not before: Fri 02 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42442 IP address blocks: 185.186.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:7f:50:c3:27:ec:54:ae:3a:11:11:7c:4e:9c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335ca521362226d03c1829003d81d498aa838f33 Validity Not Before: Jan 2 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13183452f81e01f7be01942d03f2dabe435928a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:15:71:9d:ff:fd:0c:ca:76:6a:9c:aa:66:f2: d2:29:78:ae:d9:0f:67:69:d6:c8:55:e3:08:ce:f0: 34:0c:01:14:db:ae:51:20:a4:df:ae:ad:e3:21:6e: 87:a0:22:68:7c:87:79:ec:c7:65:52:c9:a2:19:9a: fb:41:b2:35:6b:b9:e7:c6:12:d9:d8:ef:81:bf:d4: 46:48:10:10:8a:1f:74:e2:15:10:fc:e8:36:19:fe: f7:5d:d4:6c:1b:e1:19:d1:05:5c:38:af:a8:48:db: a8:e7:9f:c6:17:04:7a:e3:9f:59:e3:dc:63:f0:bd: 61:5d:b5:f1:1e:5b:85:2d:65:92:ea:f4:ab:c2:40: 1a:96:c1:42:59:d5:e6:62:01:81:1f:a7:08:aa:0d: 39:49:df:57:2d:68:00:85:af:7f:dc:d3:ae:7d:2c: ac:50:12:35:85:d8:cb:d3:97:e8:84:da:be:9b:95: 47:fb:7d:9d:65:d8:cd:c5:90:d4:b7:93:15:ef:af: 42:aa:eb:c2:d7:a2:ce:bb:60:3f:b9:e8:4f:65:26: d6:fb:3b:ea:5d:b5:02:93:89:ea:4b:ff:c6:18:4a: 36:11:3d:9c:54:c2:3c:27:e8:9d:31:8a:0e:82:8f: 36:02:f9:33:d7:60:60:76:74:76:b5:90:84:05:7d: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:18:34:52:F8:1E:01:F7:BE:01:94:2D:03:F2:DA:BE:43:59:28:A5 X509v3 Authority Key Identifier: keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/Exg0UvgeAfe-AZQtA_LavkNZKKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.220.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f7:7d:94:b4:01:b6:85:d0:81:28:f9:a5:24:93:15:f1:e2: a0:07:cc:d6:9a:d9:4d:38:dc:86:fa:d3:5e:8e:0f:ae:c3:2f: 57:d0:42:6e:c4:79:b3:c5:b0:6b:e1:72:97:e5:2b:dd:08:0f: 3b:22:53:8c:bc:2c:ae:96:3e:4a:aa:77:36:4c:b0:11:b2:5f: d6:32:94:7a:7a:2a:ec:df:90:99:7b:1f:35:f3:16:25:28:c5: 56:44:82:24:e7:c0:c5:64:c2:f8:ff:63:1e:a4:7c:8a:94:b6: b9:a3:4b:94:53:56:28:29:91:aa:d3:7f:78:f9:55:35:f8:63: a4:25:c3:22:df:0c:c3:66:d5:4e:1b:8b:78:1b:e3:9c:05:ca: 23:ed:2e:98:ec:de:d3:94:86:7e:89:05:bb:4e:1c:7f:bf:3e: 29:20:34:33:25:cf:96:64:c2:ed:41:51:6b:73:87:3d:a1:33: a1:d5:a7:a1:07:8c:3d:1f:c8:d1:06:98:03:11:f1:c1:ec:93: 37:09:3d:d5:80:18:dc:23:3f:06:aa:b4:77:52:64:59:aa:f5: c1:6c:65:ce:05:79:cb:91:37:38:ed:52:50:81:e3:e6:ad:2f: 4f:e2:11:32:7a:93:17:2d:b9:c5:3e:1b:29:65:4a:36:68:5c: b0:90:83:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N39QwyfsVK46ERF8TpxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4 MzhmMzMwHhcNMjYwMTAyMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzE4MzQ1MmY4MWUwMWY3YmUwMTk0MmQwM2YyZGFiZTQzNTkyOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BVxnf/9DMp2apyqZvLSKXiu2Q9n adbIVeMIzvA0DAEU265RIKTfrq3jIW6HoCJofId57MdlUsmiGZr7QbI1a7nnxhLZ 2O+Bv9RGSBAQih904hUQ/Og2Gf73XdRsG+EZ0QVcOK+oSNuo55/GFwR6459Z49xj 8L1hXbXxHluFLWWS6vSrwkAalsFCWdXmYgGBH6cIqg05Sd9XLWgAha9/3NOufSys UBI1hdjL05fohNq+m5VH+32dZdjNxZDUt5MV769CquvC16LOu2A/uehPZSbW+zvq XbUCk4nqS//GGEo2ET2cVMI8J+idMYoOgo82Avkz12BgdnR2tZCEBX3X/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMYNFL4HgH3vgGULQPy2r5DWSilMB8GA1UdIwQY MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt OTc0YzQ0YWI5Y2ZiLzEvRXhnMFV2Z2VBZmUtQVpRdEFfTGF2a05aS0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubrcMA0G CSqGSIb3DQEBCwUAA4IBAQBr932UtAG2hdCBKPmlJJMV8eKgB8zWmtlNONyG+tNe jg+uwy9X0EJuxHmzxbBr4XKX5SvdCA87IlOMvCyulj5Kqnc2TLARsl/WMpR6eirs 35CZex818xYlKMVWRIIk58DFZML4/2MepHyKlLa5o0uUU1YoKZGq0394+VU1+GOk JcMi3wzDZtVOG4t4G+OcBcoj7S6Y7N7TlIZ+iQW7Thx/vz4pIDQzJc+WZMLtQVFr c4c9oTOh1aehB4w9H8jRBpgDEfHB7JM3CT3VgBjcIz8GqrR3UmRZqvXBbGXOBXnL kTc47VJQgePmrS9P4hEyepMXLbnFPhspZUo2aFywkIN7 -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:05 2026 by rpki-client