This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/RSezJsuJZgdORKHcBM299fPXKwc.roa File: RSezJsuJZgdORKHcBM299fPXKwc.roa (raw, json) Hash identifier: GYwZ66RMn5oKRBEDAv6wIgybLrVMZhTJjGQgo04rKAo= Subject key identifier: 45:27:B3:26:CB:89:66:07:4E:44:A1:DC:04:CD:BD:F5:F3:D7:2B:07 Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Certificate serial: 019B7B36C2BE47802024B11D922FD2802936 Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/RSezJsuJZgdORKHcBM299fPXKwc.roa Signing time: Thu 01 Jan 2026 20:19:04 +0000 ROA not before: Thu 01 Jan 2026 20:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 185.199.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c2:be:47:80:20:24:b1:1d:92:2f:d2:80:29:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3 Validity Not Before: Jan 1 20:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4527b326cb8966074e44a1dc04cdbdf5f3d72b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:43:3b:33:6e:7d:30:f7:7b:5d:67:f8:5f: d7:9d:9f:e4:2e:83:60:f3:d8:6a:c8:ef:36:b0:67: b1:21:b7:d7:a1:fc:47:38:fe:9b:8f:d4:1f:dd:94: c3:3c:d0:39:d9:cb:be:c7:13:fb:0e:69:4c:b8:2a: 69:61:a8:8f:e7:2b:52:41:d7:e1:db:ae:17:f8:3b: 63:b1:08:51:01:43:00:3a:87:e1:ba:c2:28:43:cc: 2c:85:ed:b2:4b:d4:79:af:20:bd:ba:0f:e0:f7:87: 52:d6:09:e5:b7:c7:ac:7a:84:e8:2f:cf:39:fa:44: 3a:94:cf:c3:2d:ee:df:dd:cc:42:6b:71:ce:d8:da: 55:f8:99:67:54:b8:0f:3e:8c:be:42:e7:1b:73:47: de:84:53:72:2f:77:b8:66:3c:4d:68:b2:63:9b:7a: 68:07:33:a9:06:a4:be:02:c6:79:7f:52:b6:05:3b: 1b:6e:09:d2:32:cd:f9:d8:8c:65:56:a9:93:37:ec: 24:d5:7b:9f:3c:68:57:51:2f:60:7f:74:4a:c7:4c: 6f:9e:ca:c3:5b:1c:0b:76:9a:69:c2:67:22:b9:a7: 96:fa:46:18:26:cc:83:91:fc:85:14:ce:ba:7c:c7: a0:9c:8f:fb:ec:9b:23:26:ca:59:83:cf:a4:fd:2b: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:27:B3:26:CB:89:66:07:4E:44:A1:DC:04:CD:BD:F5:F3:D7:2B:07 X509v3 Authority Key Identifier: keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/RSezJsuJZgdORKHcBM299fPXKwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.150.0/24 Signature Algorithm: sha256WithRSAEncryption 74:1f:68:13:71:6c:cb:19:ed:72:47:ad:98:98:ec:c8:84:be: 9c:46:55:ae:ea:95:3a:8f:30:cd:05:92:c0:d0:1f:c8:39:0d: 75:d1:08:e5:dd:c8:01:bb:c6:3a:66:41:90:53:ae:48:1d:a8: 9d:2c:56:22:2f:d2:c7:8a:f6:84:19:15:3d:20:d3:ad:84:12: 6e:05:10:dc:0e:bd:be:90:74:77:50:47:6f:22:c9:ca:e7:05: aa:d3:7e:0e:d6:4b:46:aa:67:73:7e:8c:80:58:61:2b:d3:94: 24:6a:05:80:2d:ba:c8:b1:3e:14:08:7b:00:74:0b:7c:32:a3: 87:e2:3e:2f:92:74:55:59:3a:91:c4:d7:85:80:d9:06:44:bd: 82:0d:34:84:dd:d5:53:6b:12:47:57:bd:9c:cc:f8:ce:99:1c: d3:c0:96:a0:ff:3c:bd:58:b0:79:61:73:18:fe:27:7f:4b:91: 43:e2:48:52:01:b8:bf:f4:84:e7:08:b6:e0:2d:80:db:f2:23: 19:e4:24:02:18:5c:5c:d8:31:86:db:c9:b1:fa:55:1e:36:1b: df:fe:b5:e9:f0:7f:1b:cc:13:7f:72:d3:11:84:43:2b:2b:da: 4f:7b:21:07:47:a3:dc:1d:9c:7e:cf:94:a1:a3:0b:2b:fb:c4: 85:35:ea:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NsK+R4AgJLEdki/SgCk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz YWE5YjMwHhcNMjYwMTAxMjAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTI3YjMyNmNiODk2NjA3NGU0NGExZGMwNGNkYmRmNWYzZDcyYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wJDOzNufTD3e11n+F/XnZ/kLoNg 89hqyO82sGexIbfXofxHOP6bj9Qf3ZTDPNA52cu+xxP7DmlMuCppYaiP5ytSQdfh 264X+DtjsQhRAUMAOofhusIoQ8wshe2yS9R5ryC9ug/g94dS1gnlt8eseoToL885 +kQ6lM/DLe7f3cxCa3HO2NpV+JlnVLgPPoy+Qucbc0fehFNyL3e4ZjxNaLJjm3po BzOpBqS+AsZ5f1K2BTsbbgnSMs352IxlVqmTN+wk1XufPGhXUS9gf3RKx0xvnsrD WxwLdpppwmciuaeW+kYYJsyDkfyFFM66fMegnI/77JsjJspZg8+k/Sul4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUnsybLiWYHTkSh3ATNvfXz1ysHMB8GA1UdIwQY MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt MGFlMmU5MjJhMjkyLzEvUlNlekpzdUpaZ2RPUktIY0JNMjk5ZlBYS3djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuceWMA0G CSqGSIb3DQEBCwUAA4IBAQB0H2gTcWzLGe1yR62YmOzIhL6cRlWu6pU6jzDNBZLA 0B/IOQ110Qjl3cgBu8Y6ZkGQU65IHaidLFYiL9LHivaEGRU9INOthBJuBRDcDr2+ kHR3UEdvIsnK5wWq034O1ktGqmdzfoyAWGEr05QkagWALbrIsT4UCHsAdAt8MqOH 4j4vknRVWTqRxNeFgNkGRL2CDTSE3dVTaxJHV72czPjOmRzTwJag/zy9WLB5YXMY /id/S5FD4khSAbi/9ITnCLbgLYDb8iMZ5CQCGFxc2DGG28mx+lUeNhvf/rXp8H8b zBN/ctMRhEMrK9pPeyEHR6PcHZx+z5Showsr+8SFNerB -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:50 2026 by rpki-client