This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa File: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (raw, json) Hash identifier: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY= Subject key identifier: EB:C8:A3:5F:AA:BE:DA:7A:BC:5E:18:3A:BA:A3:86:64:3B:8F:B1:17 Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53 Certificate serial: 019B775941F93888A4B8C6B92884F504B0BC Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45014 IP address blocks: 185.100.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:41:f9:38:88:a4:b8:c6:b9:28:84:f5:04:b0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebc8a35faabeda7abc5e183abaa386643b8fb117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:d6:f4:ef:b4:55:d1:66:20:39:f4:4e:e8: 1e:71:7e:37:9a:ba:e5:0d:96:7d:67:77:19:14:a2: 7e:8e:c0:8d:50:1a:0a:60:c5:bc:e0:5b:67:20:f8: d4:7e:56:8d:32:19:8e:72:fc:c7:a6:6d:25:e0:c9: 94:0b:f9:7f:9a:d2:8f:85:2e:0b:6b:e8:9b:c3:99: 8c:66:2c:8d:42:18:09:5c:d7:e5:64:da:35:be:17: cb:38:9a:f1:89:7a:c4:98:2a:46:6d:bb:95:d1:5c: c0:76:f7:76:a2:5b:2b:b4:34:d2:df:6d:0c:76:74: 74:59:96:3b:e8:f6:19:9d:a3:95:49:24:31:b1:6c: 3d:e0:47:2d:3a:42:c2:10:91:55:83:53:0d:c8:39: 96:da:e3:33:47:a0:43:87:51:7c:ec:6e:06:e0:b1: f1:d2:f4:ba:05:49:e1:9a:74:39:28:21:b4:ba:5f: 2d:ef:df:bd:ef:b2:b2:a3:c4:97:dc:de:15:43:58: 50:67:36:4f:6c:70:28:30:d7:a3:a2:c0:83:6f:65: 40:b9:90:30:f9:6f:e8:ca:f2:f0:86:9f:f1:74:44: f2:78:a8:bb:1f:81:29:e7:85:ad:5b:df:09:db:fb: 2f:7b:64:bf:6a:14:65:59:3a:a0:e1:2b:a3:70:79: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C8:A3:5F:AA:BE:DA:7A:BC:5E:18:3A:BA:A3:86:64:3B:8F:B1:17 X509v3 Authority Key Identifier: keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.251.0/24 Signature Algorithm: sha256WithRSAEncryption 96:44:d9:f5:ee:f5:a0:be:b0:a0:58:75:89:32:ee:46:f2:70: b0:c3:d8:e3:96:7e:0d:ad:6a:54:44:29:34:45:0f:cf:3c:94: c7:d0:4c:dc:20:4d:d6:7f:3f:30:e1:07:fb:2a:fc:77:f4:ee: 35:b6:35:c2:b4:3c:c8:22:57:37:15:fe:b1:7a:e9:03:63:8c: 24:78:98:7a:73:2c:62:2b:17:3c:5d:49:4a:1a:f6:50:95:ba: 4a:25:88:ee:ec:c7:8f:c9:30:47:cf:45:4c:66:09:69:33:7d: dd:5a:40:07:c4:9e:af:d2:7a:c9:a9:96:30:4a:e3:89:49:64: 25:38:17:be:cf:db:2e:fb:21:ff:bd:28:15:71:64:38:44:6b: 72:c5:61:29:2e:8c:47:a1:4b:42:18:41:91:54:8d:a5:10:f9: 8e:f7:ff:4a:36:1e:4c:cc:c3:fe:81:96:a9:11:f0:5c:91:4f: 71:67:ea:df:5d:f4:8a:d0:86:f6:b6:6f:75:d6:00:81:58:c5: ab:6f:d4:37:6f:8c:29:ba:4d:ba:1e:0b:ad:e7:94:8c:04:b0: 3a:e7:f0:e3:ea:e1:d3:6f:45:38:69:5e:7f:8b:d4:6e:88:82: 21:6e:21:ac:2d:e6:75:0f:95:7d:7a:ad:28:40:1e:9f:35:67: c4:b4:5e:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUH5OIikuMa5KIT1BLC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYjQ1NzQ0YTU0MTI4NWVlYTBlNGUwNGU1ZGU3NjZhOWM4 MjNiNTMwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmM4YTM1ZmFhYmVkYTdhYmM1ZTE4M2FiYWEzODY2NDNiOGZiMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8TW9O+0VdFmIDn0TugecX43mrrl DZZ9Z3cZFKJ+jsCNUBoKYMW84FtnIPjUflaNMhmOcvzHpm0l4MmUC/l/mtKPhS4L a+ibw5mMZiyNQhgJXNflZNo1vhfLOJrxiXrEmCpGbbuV0VzAdvd2olsrtDTS320M dnR0WZY76PYZnaOVSSQxsWw94EctOkLCEJFVg1MNyDmW2uMzR6BDh1F87G4G4LHx 0vS6BUnhmnQ5KCG0ul8t79+977Kyo8SX3N4VQ1hQZzZPbHAoMNejosCDb2VAuZAw +W/oyvLwhp/xdETyeKi7H4Ep54WtW98J2/sve2S/ahRlWTqg4SujcHkSlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOvIo1+qvtp6vF4YOrqjhmQ7j7EXMB8GA1UdIwQY MBaAFBu0V0SlQShe6g5OBOXedmqcgjtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDIt ODc5OTc5ZDI5ZTFlLzEvNjhpalg2cS0ybnE4WGhnNnVxT0daRHVQc1JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDItODc5OTc5ZDI5ZTFl LzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWT7MA0G CSqGSIb3DQEBCwUAA4IBAQCWRNn17vWgvrCgWHWJMu5G8nCww9jjln4NrWpURCk0 RQ/PPJTH0EzcIE3Wfz8w4Qf7Kvx39O41tjXCtDzIIlc3Ff6xeukDY4wkeJh6cyxi Kxc8XUlKGvZQlbpKJYju7MePyTBHz0VMZglpM33dWkAHxJ6v0nrJqZYwSuOJSWQl OBe+z9su+yH/vSgVcWQ4RGtyxWEpLoxHoUtCGEGRVI2lEPmO9/9KNh5MzMP+gZap EfBckU9xZ+rfXfSK0Ib2tm911gCBWMWrb9Q3b4wpuk26Hgut55SMBLA65/Dj6uHT b0U4aV5/i9RuiIIhbiGsLeZ1D5V9eq0oQB6fNWfEtF7E -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:10 2026 by rpki-client