This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/01o9QMK5i2W56VtXZmgzP-ILrQ0.roa File: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (raw, json) Hash identifier: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU= Subject key identifier: D3:5A:3D:40:C2:B9:8B:65:B9:E9:5B:57:66:68:33:3F:E2:0B:AD:0D Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Certificate serial: 019B76EB9EBF09C1A06F23FBE928A689B572 Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/01o9QMK5i2W56VtXZmgzP-ILrQ0.roa Signing time: Thu 01 Jan 2026 00:18:31 +0000 ROA not before: Thu 01 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12874 IP address blocks: 185.146.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9e:bf:09:c1:a0:6f:23:fb:e9:28:a6:89:b5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d35a3d40c2b98b65b9e95b576668333fe20bad0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:00:e2:94:3d:fe:35:c8:3b:ce:21:2a:5f: 54:4c:50:d5:e9:f6:95:69:6c:63:95:20:c6:0a:c7: 86:00:0a:eb:1a:12:65:8e:85:b5:f7:bf:b4:39:c5: 28:63:fd:f4:7d:0b:35:48:5b:42:14:86:78:09:2e: c4:b0:ed:45:85:0f:9a:e8:95:ed:3d:e2:7f:6a:da: 79:31:de:03:57:16:e9:41:1e:5a:2d:d3:5b:9e:03: 45:1e:7c:45:61:60:a7:bf:44:af:4c:74:a8:5c:99: 15:f7:f3:97:68:47:29:30:ad:8e:9a:66:a5:38:ed: c4:91:01:87:f9:3d:09:53:29:55:35:6a:67:83:84: 08:1f:62:bd:25:af:ee:5f:24:3c:21:e1:ec:2b:82: 31:09:94:62:3a:80:72:68:65:02:24:2e:2e:c4:c7: 69:34:2f:04:25:19:f6:79:af:0f:9f:35:52:f3:74: a9:68:91:0b:90:87:5f:63:ee:87:8e:49:2a:be:e8: ae:1e:a8:b7:d0:de:1d:55:5c:36:e5:97:20:e8:b4: a8:4f:ec:2d:05:40:24:ea:8a:c8:9e:e4:e2:b7:77: f0:c7:22:5e:74:66:6f:5f:6c:e9:32:99:cb:83:2f: 4f:b2:82:00:2b:14:80:2e:dc:18:4a:50:53:be:96: 69:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5A:3D:40:C2:B9:8B:65:B9:E9:5B:57:66:68:33:3F:E2:0B:AD:0D X509v3 Authority Key Identifier: keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/01o9QMK5i2W56VtXZmgzP-ILrQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.134.0/24 Signature Algorithm: sha256WithRSAEncryption 92:85:f1:90:94:65:31:5d:18:58:d2:6d:51:5e:dc:38:a2:cf: a6:ee:9d:39:14:31:e7:2d:06:75:69:f7:b7:57:53:3d:e2:a6: d6:7c:80:3e:7a:3a:f4:21:83:f6:d8:c5:19:0c:cd:a3:a0:05: 4d:4d:58:37:20:23:31:11:6b:eb:da:52:ab:29:29:58:25:fd: 9b:24:b3:61:dd:e0:69:ea:b8:df:fc:57:df:92:0c:01:b5:2b: d9:d1:c9:7f:41:b8:83:5e:5d:58:e6:79:c6:08:a3:52:41:2a: b4:27:b8:16:b5:d7:25:93:d7:dd:3b:af:4a:61:b5:20:8d:61: b6:33:d2:92:06:64:0a:ca:9e:3c:41:a5:17:0a:f1:41:36:8e: 5c:b1:c5:fe:66:ff:e6:97:50:2f:b1:c1:dd:c7:ae:9d:1a:bb: 44:42:40:3e:3e:da:9e:f9:55:0e:32:bc:36:4f:4d:29:fd:fe: de:15:6b:ce:1d:86:c1:87:ca:1a:c1:23:f1:f1:25:3a:65:b4: 07:3d:c3:16:d8:7f:38:62:b0:26:ef:7c:c9:38:e9:13:fc:c3: e2:b3:51:15:25:22:fc:e9:cc:12:ad:a3:6b:db:32:39:10:89: c2:13:54:11:bd:d2:70:16:91:fa:46:07:12:bb:19:b2:2e:35: 40:ba:05:18 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt2656/CcGgbyP76SimibVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw NDRmNTcwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzVhM2Q0MGMyYjk4YjY1YjllOTViNTc2NjY4MzMzZmUyMGJhZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8A4pQ9/jXIO84hKl9UTFDV6faV aWxjlSDGCseGAArrGhJljoW197+0OcUoY/30fQs1SFtCFIZ4CS7EsO1FhQ+a6JXt PeJ/atp5Md4DVxbpQR5aLdNbngNFHnxFYWCnv0SvTHSoXJkV9/OXaEcpMK2Ommal OO3EkQGH+T0JUylVNWpng4QIH2K9Ja/uXyQ8IeHsK4IxCZRiOoByaGUCJC4uxMdp NC8EJRn2ea8PnzVS83SpaJELkIdfY+6HjkkqvuiuHqi30N4dVVw25Zcg6LSoT+wt BUAk6orInuTit3fwxyJedGZvX2zpMpnLgy9PsoIAKxSALtwYSlBTvpZpHQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFNNaPUDCuYtluelbV2ZoMz/iC60NMB8GA1UdIwQY MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw LTk0YTZlZjAxZDA0Ny8xLzAxbzlRTUs1aTJXNTZWdFhabWd6UC1JTHJRMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYwLTk0YTZlZjAxZDA0 Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5koYw DQYJKoZIhvcNAQELBQADggEBAJKF8ZCUZTFdGFjSbVFe3Diiz6bunTkUMectBnVp 97dXUz3iptZ8gD56OvQhg/bYxRkMzaOgBU1NWDcgIzERa+vaUqspKVgl/Zsks2Hd 4GnquN/8V9+SDAG1K9nRyX9BuINeXVjmecYIo1JBKrQnuBa11yWT1907r0phtSCN YbYz0pIGZArKnjxBpRcK8UE2jlyxxf5m/+aXUC+xwd3Hrp0au0RCQD4+2p75VQ4y vDZPTSn9/t4Va84dhsGHyhrBI/HxJTpltAc9wxbYfzhisCbvfMk46RP8w+KzURUl IvzpzBKto2vbMjkQicITVBG90nAWkfpGBxK7GbIuNUC6BRg= -----END CERTIFICATE-----Generated at Mon Jan 26 01:22:02 2026 by rpki-client