This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/p0LQmmHi2QvQtDWz-XJ05OkVyok.roa File: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (raw, json) Hash identifier: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ= Subject key identifier: A7:42:D0:9A:61:E2:D9:0B:D0:B4:35:B3:F9:72:74:E4:E9:15:CA:89 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019B7E3906C9E0B0534C6E9EE2D1F721A966 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/p0LQmmHi2QvQtDWz-XJ05OkVyok.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47681 IP address blocks: 185.191.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:06:c9:e0:b0:53:4c:6e:9e:e2:d1:f7:21:a9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a742d09a61e2d90bd0b435b3f97274e4e915ca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:11:f4:3c:93:ac:4b:95:cd:70:21:d9:c7: 6b:d3:8c:9e:ec:2e:a7:9c:db:0a:f3:87:e5:b2:67: 80:9c:35:e8:97:ee:f2:dd:af:21:8a:82:b9:3d:17: 01:20:16:62:49:03:14:dc:89:1f:68:c1:67:22:d7: 3a:21:72:2b:ca:36:7b:57:cc:48:8b:ca:47:bf:47: 14:41:43:87:dd:c6:0b:da:39:f6:a7:3d:96:ba:f1: b1:ee:f1:d2:7b:60:4c:45:5c:c7:3e:0f:88:a4:c5: bc:64:ab:0b:fc:cf:43:5b:bf:b1:29:da:48:b9:db: a5:c8:8d:9d:3a:32:c7:87:9d:bb:fb:d2:1b:0d:2c: 5e:5a:83:ba:43:cb:43:ce:77:2d:4e:75:68:23:cf: eb:d9:67:cd:8c:bf:8a:83:28:83:00:0e:43:55:af: 71:98:43:5d:3d:92:99:72:81:15:fe:cf:78:5d:a6: 0b:b9:f5:3d:e4:4f:73:d8:21:b7:98:f4:0a:06:b7: 34:8b:bd:78:db:d7:74:75:69:a5:a6:36:eb:10:2b: 43:e5:6d:88:e7:54:2f:07:fb:53:8e:cc:f1:f0:f2: 2f:f7:eb:9a:db:a8:0f:57:a1:57:cd:58:83:8f:57: 66:9f:35:d5:39:a9:c9:95:be:cb:94:f0:86:bd:40: c9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:42:D0:9A:61:E2:D9:0B:D0:B4:35:B3:F9:72:74:E4:E9:15:CA:89 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/p0LQmmHi2QvQtDWz-XJ05OkVyok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.184.0/22 Signature Algorithm: sha256WithRSAEncryption 03:27:77:e3:94:7d:39:2e:0a:4c:16:fc:b7:80:35:4f:4b:e0: 28:87:9f:fa:f8:95:23:dd:1f:65:fd:21:8b:fb:6c:35:73:51: a1:c6:a3:95:c6:00:09:f3:69:2d:72:11:a6:b8:23:ad:b6:99: d4:b0:95:54:d3:a6:cf:88:cc:c5:23:40:00:57:d2:d2:ac:b9: 43:dd:71:e4:c5:d4:0f:3f:61:23:7f:3b:8e:62:ae:57:db:f3: 1f:04:f9:de:c4:cb:35:e7:f8:14:e9:e2:b1:7a:84:d4:d6:d5: 81:13:c9:8b:e7:c1:2e:3c:4b:60:a7:d6:33:0d:01:17:7e:c8: c7:ed:9e:10:3e:a8:b3:cc:40:69:fe:9d:e2:54:8c:52:ec:19: 77:0e:54:ed:e3:df:13:5c:48:bf:cd:1c:a6:33:fc:78:bb:da: 82:e4:10:18:74:36:41:1c:17:ea:b2:dc:d3:ad:43:85:6d:e7: 39:a1:4f:fe:07:fa:58:50:47:ac:ad:c5:35:5e:25:38:0b:8a: 6b:31:64:a9:6e:1f:30:ed:02:b4:d7:d6:46:20:92:ff:65:c5: e2:f3:c2:12:f8:99:a6:73:68:fd:ff:f3:ea:fc:18:3b:10:a9: 63:b3:c5:bd:58:43:29:07:82:e2:ab:60:42:f4:30:2a:e1:2a: bf:b7:2a:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OQbJ4LBTTG6e4tH3IalmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQyZDA5YTYxZTJkOTBiZDBiNDM1YjNmOTcyNzRlNGU5MTVjYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVER9DyTrEuVzXAh2cdr04ye7C6n nNsK84flsmeAnDXol+7y3a8hioK5PRcBIBZiSQMU3IkfaMFnItc6IXIryjZ7V8xI i8pHv0cUQUOH3cYL2jn2pz2WuvGx7vHSe2BMRVzHPg+IpMW8ZKsL/M9DW7+xKdpI udulyI2dOjLHh527+9IbDSxeWoO6Q8tDznctTnVoI8/r2WfNjL+KgyiDAA5DVa9x mENdPZKZcoEV/s94XaYLufU95E9z2CG3mPQKBrc0i71429d0dWmlpjbrECtD5W2I 51QvB/tTjszx8PIv9+ua26gPV6FXzViDj1dmnzXVOanJlb7LlPCGvUDJyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdC0Jph4tkL0LQ1s/lydOTpFcqJMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvcDBMUW1tSGkyUXZRdERXei1YSjA1T2tWeW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCub+4MA0G CSqGSIb3DQEBCwUAA4IBAQADJ3fjlH05LgpMFvy3gDVPS+Aoh5/6+JUj3R9l/SGL +2w1c1GhxqOVxgAJ82ktchGmuCOttpnUsJVU06bPiMzFI0AAV9LSrLlD3XHkxdQP P2EjfzuOYq5X2/MfBPnexMs15/gU6eKxeoTU1tWBE8mL58EuPEtgp9YzDQEXfsjH 7Z4QPqizzEBp/p3iVIxS7Bl3DlTt498TXEi/zRymM/x4u9qC5BAYdDZBHBfqstzT rUOFbec5oU/+B/pYUEesrcU1XiU4C4prMWSpbh8w7QK019ZGIJL/ZcXi88IS+Jmm c2j9//Pq/Bg7EKljs8W9WEMpB4Liq2BC9DAq4Sq/tyqp -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:45 2026 by rpki-client