This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/14WxdiCVm4rnXK9-tDL_PXH0l8E.roa File: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (raw, json) Hash identifier: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I= Subject key identifier: D7:85:B1:76:20:95:9B:8A:E7:5C:AF:7E:B4:32:FF:3D:71:F4:97:C1 Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Certificate serial: 019B77C71730C8A771ACDAD532EB2F3B71B1 Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/14WxdiCVm4rnXK9-tDL_PXH0l8E.roa Signing time: Thu 01 Jan 2026 04:18:14 +0000 ROA not before: Thu 01 Jan 2026 04:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216024 IP address blocks: 185.142.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:17:30:c8:a7:71:ac:da:d5:32:eb:2f:3b:71:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a Validity Not Before: Jan 1 04:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d785b17620959b8ae75caf7eb432ff3d71f497c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:1c:86:06:7a:fd:59:cc:0a:46:b3:1d:52: 73:77:bf:36:05:0c:4b:86:00:54:60:ef:d3:00:19: e4:98:39:be:56:5d:16:48:dd:c9:8f:4b:f7:8a:f3: b2:90:fe:90:2b:25:16:f2:d5:15:44:db:99:fe:2d: 88:12:4a:4f:80:27:d6:48:70:2d:45:0e:9f:17:cf: 1e:96:cb:d8:57:d3:8e:a1:e7:b5:41:2f:f7:52:03: 4a:5d:69:85:01:ca:39:c9:cb:0a:dd:42:76:a0:e4: d6:8b:f7:15:32:61:df:1c:9a:2f:89:76:82:b5:d3: cf:13:2c:d1:41:c2:e1:2d:c6:79:ad:51:8b:52:bd: 2f:2f:c4:33:d7:a2:81:3a:c3:77:52:f2:18:3a:70: c0:59:da:77:ba:4a:18:68:7a:70:e6:26:6a:42:d4: ec:40:9d:44:3a:ca:d7:17:fc:4d:71:8d:29:5a:b3: 75:89:9a:9c:3d:22:17:7c:e9:08:4b:77:f0:fb:10: eb:44:58:28:20:dc:4d:c1:9b:52:19:05:8b:1e:68: db:76:31:ce:23:65:f0:62:a1:76:d8:7b:f7:bc:2a: 93:7e:e3:14:da:74:a1:20:94:ad:6f:ba:3b:34:a7: 79:fb:9b:be:73:0c:2a:ef:00:7f:c8:c9:b8:4a:c0: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:B1:76:20:95:9B:8A:E7:5C:AF:7E:B4:32:FF:3D:71:F4:97:C1 X509v3 Authority Key Identifier: keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/14WxdiCVm4rnXK9-tDL_PXH0l8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.33.0/24 Signature Algorithm: sha256WithRSAEncryption b9:92:7d:27:4d:9c:e2:7f:e4:e2:64:04:30:ff:02:82:ab:5d: 09:33:36:98:50:8d:ed:2e:f6:eb:2a:86:c8:5d:f8:84:20:f5: 34:a4:96:f1:18:4d:f8:0a:39:d1:61:01:07:6d:89:79:b9:0f: 6e:9e:fa:72:4e:c1:91:55:80:cc:04:36:ff:f1:a1:27:49:21: 2f:14:3e:ca:d8:29:0f:a4:02:41:7c:28:f7:7a:12:8a:5f:be: 4f:72:77:ce:12:9f:a0:b1:d4:40:8b:91:ec:74:ae:f8:ba:3c: bc:0f:45:ae:28:0c:67:97:74:ef:83:bc:40:17:a1:ad:8a:2c: 6b:16:1d:50:38:f2:b9:f3:18:e6:9a:89:eb:00:9e:60:f0:ba: 8d:c0:6a:98:3e:bb:18:99:1a:1c:0c:56:f6:83:0a:74:3c:f5: a7:9f:a6:c5:ad:12:f8:6c:03:df:ef:f5:20:31:09:a5:bc:2b: 8b:45:8c:42:85:29:5e:05:25:f5:9f:59:fb:12:d7:3e:0d:de: 79:22:37:58:d6:eb:f5:ab:a5:33:78:31:80:2b:75:fb:e4:9f: ca:ff:10:45:ab:87:2b:9b:7c:de:72:eb:ec:68:c4:8a:da:85: b1:14:f9:06:2e:db:14:bc:2e:a1:af:19:75:11:77:dd:b1:24: 87:f0:62:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxcwyKdxrNrVMusvO3GxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk MGVlNGEwHhcNMjYwMTAxMDQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzg1YjE3NjIwOTU5YjhhZTc1Y2FmN2ViNDMyZmYzZDcxZjQ5N2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKwchgZ6/VnMCkazHVJzd782BQxL hgBUYO/TABnkmDm+Vl0WSN3Jj0v3ivOykP6QKyUW8tUVRNuZ/i2IEkpPgCfWSHAt RQ6fF88elsvYV9OOoee1QS/3UgNKXWmFAco5ycsK3UJ2oOTWi/cVMmHfHJoviXaC tdPPEyzRQcLhLcZ5rVGLUr0vL8Qz16KBOsN3UvIYOnDAWdp3ukoYaHpw5iZqQtTs QJ1EOsrXF/xNcY0pWrN1iZqcPSIXfOkIS3fw+xDrRFgoINxNwZtSGQWLHmjbdjHO I2XwYqF22Hv3vCqTfuMU2nShIJStb7o7NKd5+5u+cwwq7wB/yMm4SsDEywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNeFsXYglZuK51yvfrQy/z1x9JfBMB8GA1UdIwQY MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt Y2RjMzFkNWZiOGE0LzEvMTRXeGRpQ1ZtNHJuWEs5LXRETF9QWEgwbDhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0 LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY4hMA0G CSqGSIb3DQEBCwUAA4IBAQC5kn0nTZzif+TiZAQw/wKCq10JMzaYUI3tLvbrKobI XfiEIPU0pJbxGE34CjnRYQEHbYl5uQ9unvpyTsGRVYDMBDb/8aEnSSEvFD7K2CkP pAJBfCj3ehKKX75PcnfOEp+gsdRAi5HsdK74ujy8D0WuKAxnl3Tvg7xAF6Gtiixr Fh1QOPK58xjmmonrAJ5g8LqNwGqYPrsYmRocDFb2gwp0PPWnn6bFrRL4bAPf7/Ug MQmlvCuLRYxChSleBSX1n1n7Etc+Dd55IjdY1uv1q6UzeDGAK3X75J/K/xBFq4cr m3zecuvsaMSK2oWxFPkGLtsUvC6hrxl1EXfdsSSH8GKh -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:13 2026 by rpki-client