This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/k16xVxedrpFnfzVMhoEa5q6t738.roa File: k16xVxedrpFnfzVMhoEa5q6t738.roa (raw, json) Hash identifier: Ine+nXRHBIOmIl50vZO0SN161C/5aaDHXiPrFxdhq4I= Subject key identifier: 93:5E:B1:57:17:9D:AE:91:67:7F:35:4C:86:81:1A:E6:AE:AD:EF:7F Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Certificate serial: 019B7F8138A218E89E78BE3B50E815C857B5 Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/k16xVxedrpFnfzVMhoEa5q6t738.roa Signing time: Fri 02 Jan 2026 16:18:53 +0000 ROA not before: Fri 02 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49206 IP address blocks: 185.24.175.0/24 maxlen: 24 2a00:6fa0::/32 maxlen: 32 2a00:6fa0:3100::/40 maxlen: 40 2a00:6fa0:4200::/40 maxlen: 40 2a00:6fa0:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:38:a2:18:e8:9e:78:be:3b:50:e8:15:c8:57:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Validity Not Before: Jan 2 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=935eb157179dae91677f354c86811ae6aeadef7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:4e:3b:35:7d:55:f0:9a:72:45:ca:87:87: b9:f0:50:ad:3f:0e:66:04:57:89:ae:7d:5e:27:67: f6:9b:46:25:74:8e:1f:67:30:0c:90:ed:4d:9b:cd: 50:a0:6c:2c:f7:65:2f:3b:d6:ea:09:ab:1d:64:33: 79:1c:88:71:a9:01:75:1a:b7:04:5f:43:79:99:95: e9:53:d1:10:2b:7c:7e:11:91:d7:a7:9b:45:d0:de: 40:6c:67:d7:d6:35:19:dd:01:52:4d:6a:4e:cd:dc: f3:d9:58:61:03:3a:54:4d:26:f7:8d:75:2a:17:2b: 12:71:cb:e6:0e:ec:d8:52:42:25:9d:f0:1b:ee:33: 36:26:dc:11:80:1b:28:be:4e:c1:20:32:0a:49:ea: 32:4a:55:72:a3:54:b5:34:de:c1:ea:28:01:28:e7: 43:f2:75:3b:be:08:b7:0a:30:f9:22:df:53:25:81: f0:c0:ed:31:01:88:be:0c:91:57:cb:ab:95:05:16: ab:81:5e:b4:4e:5f:a0:40:5a:a0:1f:9d:35:aa:35: 3a:3d:e1:94:6c:68:59:44:36:6a:48:ff:19:bb:3d: 52:ba:f4:2e:51:62:31:b6:79:bf:0e:5c:6e:40:0d: ad:ef:17:8a:0f:97:c5:36:6d:54:2e:9c:ec:c5:50: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5E:B1:57:17:9D:AE:91:67:7F:35:4C:86:81:1A:E6:AE:AD:EF:7F X509v3 Authority Key Identifier: keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/k16xVxedrpFnfzVMhoEa5q6t738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.24.175.0/24 IPv6: 2a00:6fa0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:17:e2:12:9d:3a:83:8e:6d:14:ab:12:7d:60:1e:30:93:3d: 06:4d:ad:4e:b9:af:88:5b:e4:82:e8:90:7a:0a:c4:1d:95:82: 25:a9:47:b7:1e:84:b5:e6:d8:23:cb:ce:7a:e7:66:cf:37:1d: 3b:7f:26:f5:5c:7c:d1:94:5e:ed:ee:08:c5:e0:6c:2d:cd:ab: 84:9f:81:37:2c:15:d3:ff:08:69:f3:d6:91:07:09:21:d8:44: 0e:a9:a7:6c:9c:65:a3:63:a2:41:e4:44:bf:b0:d7:0c:03:77: 6f:37:02:27:36:84:26:94:7d:a4:2f:16:65:d0:54:54:9e:a5: a2:de:85:35:3c:8a:35:f5:72:d5:cc:99:b8:81:a2:ea:2e:d9: c4:97:15:f2:da:50:df:a9:74:78:8a:5b:34:f3:ca:62:3e:18: f8:cb:20:be:b9:6d:bd:2b:da:09:9e:93:ef:fd:f6:6a:c1:53: c0:56:ad:5e:d0:28:c8:08:cd:1e:ea:61:d0:c3:c2:54:2f:76: 6a:0b:7d:ef:f9:84:ec:97:e8:ce:07:cd:12:91:9d:3a:4b:2e: 4f:86:88:b9:88:2e:95:cc:21:a4:4c:76:17:98:fa:6f:73:13: fc:5d:cf:40:c8:6a:76:0e:99:17:48:7a:73:db:7f:80:60:41: 38:05:76:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gTiiGOieeL47UOgVyFe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk Y2NlZDgwHhcNMjYwMTAyMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzVlYjE1NzE3OWRhZTkxNjc3ZjM1NGM4NjgxMWFlNmFlYWRlZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5hOOzV9VfCackXKh4e58FCtPw5m BFeJrn1eJ2f2m0YldI4fZzAMkO1Nm81QoGws92UvO9bqCasdZDN5HIhxqQF1GrcE X0N5mZXpU9EQK3x+EZHXp5tF0N5AbGfX1jUZ3QFSTWpOzdzz2VhhAzpUTSb3jXUq FysSccvmDuzYUkIlnfAb7jM2JtwRgBsovk7BIDIKSeoySlVyo1S1NN7B6igBKOdD 8nU7vgi3CjD5It9TJYHwwO0xAYi+DJFXy6uVBRargV60Tl+gQFqgH501qjU6PeGU bGhZRDZqSP8Zuz1SuvQuUWIxtnm/DlxuQA2t7xeKD5fFNm1ULpzsxVBy7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJNesVcXna6RZ381TIaBGuaure9/MB8GA1UdIwQY MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt NmE5Y2Q5NDIwMmZmLzEvazE2eFZ4ZWRycEZuZnpWTWhvRWE1cTZ0NzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuRivMA0E AgACMAcDBQAqAG+gMA0GCSqGSIb3DQEBCwUAA4IBAQANF+ISnTqDjm0UqxJ9YB4w kz0GTa1Oua+IW+SC6JB6CsQdlYIlqUe3HoS15tgjy85652bPNx07fyb1XHzRlF7t 7gjF4GwtzauEn4E3LBXT/whp89aRBwkh2EQOqadsnGWjY6JB5ES/sNcMA3dvNwIn NoQmlH2kLxZl0FRUnqWi3oU1PIo19XLVzJm4gaLqLtnElxXy2lDfqXR4ils088pi Phj4yyC+uW29K9oJnpPv/fZqwVPAVq1e0CjICM0e6mHQw8JUL3ZqC33v+YTsl+jO B80SkZ06Sy5Phoi5iC6VzCGkTHYXmPpvcxP8Xc9AyGp2DpkXSHpz23+AYEE4BXZv -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:48 2026 by rpki-client