This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/T66u3sAZ1h5lcd7CohPfojjoGXM.roa File: T66u3sAZ1h5lcd7CohPfojjoGXM.roa (raw, json) Hash identifier: b1dlk+UCa27l6BBCa3opEOMqOQC7JiJWknd1DaHG0Vo= Subject key identifier: 4F:AE:AE:DE:C0:19:D6:1E:65:71:DE:C2:A2:13:DF:A2:38:E8:19:73 Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1 Certificate serial: 019B7834A9AB56E091C7474357AB49F3BB2D Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/T66u3sAZ1h5lcd7CohPfojjoGXM.roa Signing time: Thu 01 Jan 2026 06:17:55 +0000 ROA not before: Thu 01 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204300 IP address blocks: 185.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a9:ab:56:e0:91:c7:47:43:57:ab:49:f3:bb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1 Validity Not Before: Jan 1 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4faeaedec019d61e6571dec2a213dfa238e81973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:d0:5e:56:74:bd:99:a8:a1:e7:9e:c6:99: 0c:26:00:87:66:f3:04:3e:f6:e8:9f:61:05:69:1d: 35:fb:3c:f9:0a:8e:11:6c:d0:85:d3:fe:34:20:f1: 7f:b0:3e:4b:5b:db:1a:dd:d3:11:45:64:90:fc:d3: 3f:2c:9f:46:b0:1c:0e:f0:a4:f3:99:80:bd:99:06: 94:2b:99:25:c4:7f:90:92:c9:f8:0a:58:ae:e6:ed: d5:54:3e:6f:e1:7e:65:14:ff:e0:ff:35:34:4c:59: b0:da:c2:44:68:ed:1c:f8:02:9f:87:02:64:cc:e6: e2:00:07:04:59:22:7d:b6:8b:06:9d:2a:5b:30:60: 52:69:1a:0e:8d:4a:c5:c9:08:61:75:14:e1:c2:50: 60:ca:f4:71:a9:6f:f7:47:6b:fc:a6:bb:48:e1:83: 4a:c6:d3:1d:7a:9b:25:f7:d3:06:fd:71:b9:40:b6: 2e:8c:28:47:da:c2:5b:f2:1d:df:64:8e:8d:33:a0: db:e5:fd:5b:1a:3f:30:cd:34:99:9d:16:32:6b:f1: eb:1a:b0:b5:fc:c2:27:83:80:56:ca:89:b0:e5:fe: a4:92:86:03:b0:ab:fa:f4:5f:10:e2:0f:d7:30:4e: 64:d9:aa:0b:10:4e:89:7f:8a:1f:19:69:20:e3:1c: ff:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:AE:DE:C0:19:D6:1E:65:71:DE:C2:A2:13:DF:A2:38:E8:19:73 X509v3 Authority Key Identifier: keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/T66u3sAZ1h5lcd7CohPfojjoGXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.128.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ec:de:d7:d8:d2:3d:1f:aa:cc:7f:f6:0a:60:36:af:66:56: 62:ec:1b:2e:62:66:29:bd:79:07:be:f6:a9:58:d1:2a:68:d6: 93:56:c6:c4:cc:17:7b:01:d7:7f:7e:be:01:52:43:0d:34:78: f2:50:4d:70:0a:4e:ee:20:7e:d5:97:ca:ea:20:b2:55:fe:98: b2:1f:04:8e:63:6f:29:7c:1c:b1:f1:e0:30:68:3a:02:38:07: 7b:a1:ea:58:01:f1:32:90:6f:f6:a8:af:da:1c:2a:63:65:12: bd:d1:40:da:2d:f2:cc:d3:97:ba:7f:39:7d:1d:5a:6d:eb:85: 6b:af:fb:c1:30:f6:c3:a0:71:12:08:79:fb:1f:f8:b6:7f:10: f8:ae:cf:0e:39:45:0f:f2:53:14:0a:eb:ce:ac:cd:d7:76:a7: 98:74:c7:2b:fe:57:b9:b3:85:02:d3:82:d4:d7:72:08:91:75: 92:f2:6a:3f:da:a3:f6:4f:eb:25:32:32:c8:42:2d:65:cc:bd: 64:be:30:5c:fb:60:cd:26:e8:f0:4b:4c:0f:08:5a:0e:1a:82: e4:47:0b:ed:fe:73:b3:4c:d5:5e:fe:04:08:05:95:e0:fc:29: 15:89:2f:59:9c:b6:48:56:3d:db:8b:92:b8:67:51:73:c1:fa: 93:49:d0:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NKmrVuCRx0dDV6tJ87stMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2QxZjFlODc3YzEyNzk4Mjc0ZTAxMzM0NTU0Zjg5OWYz OGVhYzEwHhcNMjYwMTAxMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmFlYWVkZWMwMTlkNjFlNjU3MWRlYzJhMjEzZGZhMjM4ZTgxOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgHQXlZ0vZmooeeexpkMJgCHZvME Pvbon2EFaR01+zz5Co4RbNCF0/40IPF/sD5LW9sa3dMRRWSQ/NM/LJ9GsBwO8KTz mYC9mQaUK5klxH+Qksn4Cliu5u3VVD5v4X5lFP/g/zU0TFmw2sJEaO0c+AKfhwJk zObiAAcEWSJ9tosGnSpbMGBSaRoOjUrFyQhhdRThwlBgyvRxqW/3R2v8prtI4YNK xtMdepsl99MG/XG5QLYujChH2sJb8h3fZI6NM6Db5f1bGj8wzTSZnRYya/HrGrC1 /MIng4BWyomw5f6kkoYDsKv69F8Q4g/XME5k2aoLEE6Jf4ofGWkg4xz/6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE+urt7AGdYeZXHewqIT36I46BlzMB8GA1UdIwQY MBaAFGt9Hx6HfBJ5gnTgEzRVT4mfOOrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUt MmZhZDlhMmZjM2VmLzEvVDY2dTNzQVoxaDVsY2Q3Q29oUGZvampvR1hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hMTNjNDAtZGM2Ny00MjNjLTk3OWUtMmZhZDlhMmZjM2Vm LzEvYTMwZkhvZDhFbm1DZE9BVE5GVlBpWjg0NnNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRWAMA0G CSqGSIb3DQEBCwUAA4IBAQB+7N7X2NI9H6rMf/YKYDavZlZi7BsuYmYpvXkHvvap WNEqaNaTVsbEzBd7Add/fr4BUkMNNHjyUE1wCk7uIH7Vl8rqILJV/piyHwSOY28p fByx8eAwaDoCOAd7oepYAfEykG/2qK/aHCpjZRK90UDaLfLM05e6fzl9HVpt64Vr r/vBMPbDoHESCHn7H/i2fxD4rs8OOUUP8lMUCuvOrM3XdqeYdMcr/le5s4UC04LU 13IIkXWS8mo/2qP2T+slMjLIQi1lzL1kvjBc+2DNJujwS0wPCFoOGoLkRwvt/nOz TNVe/gQIBZXg/CkViS9ZnLZIVj3bi5K4Z1FzwfqTSdC4 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:14 2026 by rpki-client