This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/07lXNimrQBF3__ddGT3TZzLhskg.roa File: 07lXNimrQBF3__ddGT3TZzLhskg.roa (raw, json) Hash identifier: eoEGjhgMY6OcoxgLUe7rr3k+ew/IBEiDnKUPvz0TNYw= Subject key identifier: D3:B9:57:36:29:AB:40:11:77:FF:F7:5D:19:3D:D3:67:32:E1:B2:48 Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457 Certificate serial: 019B77C6EC8B069C114A80B15F0D21AF4095 Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/07lXNimrQBF3__ddGT3TZzLhskg.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60144 IP address blocks: 185.111.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:8b:06:9c:11:4a:80:b1:5f:0d:21:af:40:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3b9573629ab401177fff75d193dd36732e1b248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:25:7f:4f:e9:8d:d0:4c:e1:8f:09:f9:36: a9:70:26:66:99:74:56:eb:a8:22:58:b5:a1:4b:60: 56:44:a9:aa:11:b5:b6:4c:b9:d6:db:2c:c9:1b:8a: e2:94:25:b8:fb:d2:ec:56:f8:6b:68:b3:c3:14:fb: cb:6c:30:f5:83:9a:ff:18:45:32:19:c0:fd:ff:ed: 7e:4c:92:32:07:07:b3:cb:6a:c5:b8:09:07:16:21: f1:e1:f3:93:b4:eb:1c:aa:c3:58:b3:ca:b2:a1:dd: 50:c9:33:43:44:b8:be:87:ef:6b:fc:cc:e0:35:37: 14:4d:c8:58:1e:eb:61:7b:ea:da:dc:70:9b:bf:3b: 41:f9:41:a3:39:81:62:ab:b6:f5:f0:19:75:4a:8f: 25:b9:96:f8:7b:3b:c8:3e:d1:0a:76:2d:06:ec:2d: 7b:0b:16:b0:64:cf:ef:ae:9b:32:3f:3c:d5:63:c2: 44:28:dc:06:1a:98:3e:a3:9b:cc:96:8a:1e:51:82: 33:30:64:16:cf:73:5e:c2:00:a2:52:11:e6:9c:d5: 71:0a:31:d1:15:c8:f3:7c:8d:88:e8:b8:f1:70:1c: 16:bf:31:43:13:50:04:f6:b4:b2:75:a0:e0:a8:44: 42:9f:eb:91:ce:41:ee:b1:26:6c:ad:54:40:f2:72: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B9:57:36:29:AB:40:11:77:FF:F7:5D:19:3D:D3:67:32:E1:B2:48 X509v3 Authority Key Identifier: keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/07lXNimrQBF3__ddGT3TZzLhskg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.235.0/24 Signature Algorithm: sha256WithRSAEncryption 88:bd:4c:cd:e4:ee:a2:15:a6:39:f7:84:a3:a8:16:25:6d:67: 47:f7:4d:e4:65:1e:d1:2d:61:ae:63:56:42:cd:c1:ee:cd:49: 99:65:01:f0:5e:1a:64:fe:15:7b:31:95:e6:af:d2:51:b0:00: b6:bf:6f:52:ea:7c:95:9b:4c:46:70:a1:ee:df:65:97:03:b9: 93:d1:2d:03:de:c1:c1:c9:8b:78:82:57:56:26:59:a5:74:91: 1f:1f:b7:6f:83:a1:c5:cb:4c:72:d4:89:ba:cd:f1:59:3b:6a: 7b:a9:c1:19:00:f6:59:ce:0b:0e:f0:a3:50:3b:eb:db:55:ef: fc:64:43:a2:10:24:55:1b:8d:c7:eb:21:f7:07:ba:3c:fb:e3: 8a:fb:76:0d:3e:3a:1f:fb:35:25:c6:0c:28:20:47:70:59:87: 7e:68:90:ef:99:78:b0:31:bc:14:fc:ea:e4:39:24:69:4c:8e: c9:92:28:4d:b2:f8:1d:ec:26:c7:56:81:6d:3f:dd:dd:4c:1d: 8f:6f:be:ba:df:96:0b:0a:c8:c8:0d:fd:db:ff:0d:f2:29:dd: df:41:ec:be:c7:cd:43:0e:37:34:c7:63:68:69:58:33:bb:96: 5d:04:c3:58:a0:88:be:37:68:17:bc:9f:d9:67:cf:2c:f1:a4: b6:e4:b4:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuyLBpwRSoCxXw0hr0CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy MDg0NTcwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2I5NTczNjI5YWI0MDExNzdmZmY3NWQxOTNkZDM2NzMyZTFiMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWMlf0/pjdBM4Y8J+TapcCZmmXRW 66giWLWhS2BWRKmqEbW2TLnW2yzJG4rilCW4+9LsVvhraLPDFPvLbDD1g5r/GEUy GcD9/+1+TJIyBwezy2rFuAkHFiHx4fOTtOscqsNYs8qyod1QyTNDRLi+h+9r/Mzg NTcUTchYHuthe+ra3HCbvztB+UGjOYFiq7b18Bl1So8luZb4ezvIPtEKdi0G7C17 CxawZM/vrpsyPzzVY8JEKNwGGpg+o5vMlooeUYIzMGQWz3NewgCiUhHmnNVxCjHR FcjzfI2I6LjxcBwWvzFDE1AE9rSydaDgqERCn+uRzkHusSZsrVRA8nIUEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNO5VzYpq0ARd//3XRk902cy4bJIMB8GA1UdIwQY MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt OWY2ODkwZjkyZTYwLzEvMDdsWE5pbXJRQkYzX19kZEdUM1Raekxoc2tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuW/rMA0G CSqGSIb3DQEBCwUAA4IBAQCIvUzN5O6iFaY594SjqBYlbWdH903kZR7RLWGuY1ZC zcHuzUmZZQHwXhpk/hV7MZXmr9JRsAC2v29S6nyVm0xGcKHu32WXA7mT0S0D3sHB yYt4gldWJlmldJEfH7dvg6HFy0xy1Im6zfFZO2p7qcEZAPZZzgsO8KNQO+vbVe/8 ZEOiECRVG43H6yH3B7o8++OK+3YNPjof+zUlxgwoIEdwWYd+aJDvmXiwMbwU/Ork OSRpTI7JkihNsvgd7CbHVoFtP93dTB2Pb76635YLCsjIDf3b/w3yKd3fQey+x81D Djc0x2NoaVgzu5ZdBMNYoIi+N2gXvJ/ZZ88s8aS25LRU -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:17 2026 by rpki-client