This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/RrW3iZFpgHFuK1USxDsMnM1LusA.roa File: RrW3iZFpgHFuK1USxDsMnM1LusA.roa (raw, json) Hash identifier: /DqnuC18dHwT7Z+hUMZE9xD1UgRrxpE5xwXXr5v68Yo= Subject key identifier: 46:B5:B7:89:91:69:80:71:6E:2B:55:12:C4:3B:0C:9C:CD:4B:BA:C0 Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Certificate serial: 019B7EA75669FEFE58D5BA7C171518225885 Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/RrW3iZFpgHFuK1USxDsMnM1LusA.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211987 IP address blocks: 185.234.102.0/24 maxlen: 24 2a10:da80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:56:69:fe:fe:58:d5:ba:7c:17:15:18:22:58:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46b5b789916980716e2b5512c43b0c9ccd4bbac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:bb:30:9e:38:52:c6:90:e9:ae:57:83:46: d2:5a:80:cd:9e:03:66:02:ad:ec:a7:5a:2a:ab:30: 2b:7f:5c:f7:7e:9d:d3:f0:fc:ee:e9:07:0a:6c:37: d1:5b:f6:10:af:3c:79:04:ea:1e:11:11:7f:4f:a4: 3f:fe:9d:a3:95:81:1a:55:82:50:f2:0e:ae:83:00: ac:7e:5f:de:db:d0:10:a0:73:19:e8:c3:57:41:28: 8a:71:ff:d5:36:4d:8b:f6:6b:20:c9:a3:10:4b:fb: 74:cd:75:1a:59:61:ca:f7:a8:ca:7b:7e:ee:4d:7b: 31:31:64:bc:58:fb:65:02:53:bb:ab:c1:62:c3:b6: b7:15:2b:81:db:43:e6:de:e5:79:cf:ba:0c:ea:66: 29:9d:86:6b:00:ee:71:ab:a3:ea:18:5a:36:4e:65: d1:75:b7:a1:b0:a7:c6:7b:ec:63:5e:0d:01:b8:75: 39:54:4f:48:e7:f9:c4:79:17:3d:e6:63:2d:a6:0e: e2:77:a6:b3:b4:c2:8b:ad:65:72:77:3e:73:8d:09: 3d:59:07:e3:4d:10:f2:c6:fa:3f:30:2c:71:be:9f: aa:c0:1b:bc:f0:f1:8a:6b:3f:4f:b6:ae:cf:fa:8f: c2:98:3c:49:36:9f:db:a5:17:75:ef:a0:65:1c:fe: b3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B5:B7:89:91:69:80:71:6E:2B:55:12:C4:3B:0C:9C:CD:4B:BA:C0 X509v3 Authority Key Identifier: keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/RrW3iZFpgHFuK1USxDsMnM1LusA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.102.0/24 IPv6: 2a10:da80::/29 Signature Algorithm: sha256WithRSAEncryption 8b:b6:0e:67:e2:2c:1b:6e:a1:da:b5:6a:9c:ec:71:ed:9c:a3: e6:66:05:d4:09:37:e2:30:f9:99:e8:0b:76:2e:12:53:ed:c8: 6c:e0:a2:ad:58:30:70:77:cf:89:23:e7:82:93:35:1e:72:ae: 01:13:88:c3:16:b1:e4:09:4b:b3:b1:cb:8d:07:80:2a:31:f2: 9d:65:a9:8b:91:8d:c5:68:52:5c:01:34:65:ba:70:84:67:4a: 7a:36:6c:6f:5a:7d:35:56:df:29:2b:05:d5:58:c7:db:6e:be: 43:c6:49:63:77:ee:59:37:77:12:d8:ce:bb:6d:83:5e:73:40: b0:1b:d9:b6:c8:70:b9:7d:63:53:f9:92:35:7e:58:14:33:1f: 51:e7:59:43:88:c4:23:2c:a5:d6:72:40:91:3c:3a:c4:53:e3: a7:9a:b1:2c:66:a4:b4:3a:dc:c3:dd:72:aa:e5:3f:9b:b6:04: 79:14:c1:46:9b:c2:74:e0:5c:c5:fb:4f:e9:dc:eb:6b:05:50: de:3a:12:75:cc:47:b1:70:8c:c5:b4:35:cf:3f:78:c1:c4:8f: e7:b4:6b:68:89:6a:24:9b:f5:96:b0:27:97:86:1f:a3:48:ed: a7:ed:89:cc:75:42:0f:a6:78:7c:6f:24:b5:1a:09:48:14:b9: 2f:26:2d:75 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+p1Zp/v5Y1bp8FxUYIliFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MmM0ZTJiZjVmMjEzODQ2MmVmNGE1ZDllMGY2ZTdhNzYz NTMwZmUwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmI1Yjc4OTkxNjk4MDcxNmUyYjU1MTJjNDNiMGM5Y2NkNGJiYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCO7MJ44UsaQ6a5Xg0bSWoDNngNm Aq3sp1oqqzArf1z3fp3T8Pzu6QcKbDfRW/YQrzx5BOoeERF/T6Q//p2jlYEaVYJQ 8g6ugwCsfl/e29AQoHMZ6MNXQSiKcf/VNk2L9msgyaMQS/t0zXUaWWHK96jKe37u TXsxMWS8WPtlAlO7q8Fiw7a3FSuB20Pm3uV5z7oM6mYpnYZrAO5xq6PqGFo2TmXR dbehsKfGe+xjXg0BuHU5VE9I5/nEeRc95mMtpg7id6aztMKLrWVydz5zjQk9WQfj TRDyxvo/MCxxvp+qwBu88PGKaz9Ptq7P+o/CmDxJNp/bpRd176BlHP6zdQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEa1t4mRaYBxbitVEsQ7DJzNS7rAMB8GA1UdIwQY MBaAFCUsTiv18hOEYu9KXZ4Pbnp2NTD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTIt NmRmN2JmNTllMzI2LzEvUnJXM2laRnBnSEZ1SzFVU3hEc01uTTFMdXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iYmJhODgtMTM0NC00ZDg5LThmNTItNmRmN2JmNTllMzI2 LzEvSlN4T0tfWHlFNFJpNzBwZG5nOXVlblkxTVA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuepmMA0E AgACMAcDBQMqENqAMA0GCSqGSIb3DQEBCwUAA4IBAQCLtg5n4iwbbqHatWqc7HHt nKPmZgXUCTfiMPmZ6At2LhJT7chs4KKtWDBwd8+JI+eCkzUecq4BE4jDFrHkCUuz scuNB4AqMfKdZamLkY3FaFJcATRlunCEZ0p6NmxvWn01Vt8pKwXVWMfbbr5Dxklj d+5ZN3cS2M67bYNec0CwG9m2yHC5fWNT+ZI1flgUMx9R51lDiMQjLKXWckCRPDrE U+OnmrEsZqS0OtzD3XKq5T+btgR5FMFGm8J04FzF+0/p3OtrBVDeOhJ1zEexcIzF tDXPP3jBxI/ntGtoiWokm/WWsCeXhh+jSO2n7YnMdUIPpnh8byS1GglIFLkvJi11 -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:59 2026 by rpki-client