This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/43jM40RYm5KfeGPiDNzubwAPnss.roa File: 43jM40RYm5KfeGPiDNzubwAPnss.roa (raw, json) Hash identifier: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8= Subject key identifier: E3:78:CC:E3:44:58:9B:92:9F:78:63:E2:0C:DC:EE:6F:00:0F:9E:CB Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 019B78A31A770C21F007DFA4890884711E56 Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/43jM40RYm5KfeGPiDNzubwAPnss.roa Signing time: Thu 01 Jan 2026 08:18:33 +0000 ROA not before: Thu 01 Jan 2026 08:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42216 IP address blocks: 185.129.18.0/24 maxlen: 24 185.129.19.0/24 maxlen: 24 185.165.76.0/24 maxlen: 24 194.99.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1a:77:0c:21:f0:07:df:a4:89:08:84:71:1e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Jan 1 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e378cce344589b929f7863e20cdcee6f000f9ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:1a:9e:98:33:1c:73:c3:71:8b:3f:fc:ca: 22:2b:e3:92:24:27:1a:49:94:f1:df:61:6c:d0:f1: 00:4e:36:ec:47:e4:f1:bd:47:bb:5e:3d:f8:3b:11: 91:dd:54:15:fa:70:29:bd:c9:9f:61:91:28:7b:39: b2:23:21:19:25:42:09:8d:31:5f:ce:7e:22:8f:d7: d9:a9:95:b4:f6:d7:6f:a2:8b:40:a0:30:e3:21:57: 57:74:f6:13:b5:9a:85:63:98:cf:81:ed:5a:3d:11: bb:c4:94:42:b0:ae:ab:05:ac:74:df:c1:7c:69:95: a2:9a:c2:f4:c6:ff:48:d5:bf:f8:70:e3:9a:c5:38: 8b:b8:ff:8d:d6:b4:b1:74:44:17:da:c4:de:5c:71: 45:b1:dc:59:30:5e:30:50:46:23:ae:7d:15:c7:69: fa:d1:7b:0b:1e:b6:f3:71:90:e8:a8:a6:90:1f:e1: 21:5c:34:5d:0b:af:04:e4:68:16:76:05:2c:0c:de: d2:21:42:49:3e:9d:d5:8d:2b:19:94:20:7e:50:5c: 53:b6:f7:98:61:9e:65:4d:57:4d:31:e8:ce:e4:dc: 1b:84:a8:06:c1:b6:3c:df:67:5e:db:60:5e:a6:33: 90:cd:78:83:d3:81:d2:dc:78:47:32:95:ee:e9:9f: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:CC:E3:44:58:9B:92:9F:78:63:E2:0C:DC:EE:6F:00:0F:9E:CB X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/43jM40RYm5KfeGPiDNzubwAPnss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.18.0/23 185.165.76.0/24 194.99.74.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:24:6c:e6:05:86:7b:5e:03:3d:11:9e:42:24:6c:3e:a3:1c: 95:44:c6:01:df:8a:b0:a8:87:de:7f:52:f8:71:2d:30:db:f8: 6a:20:47:c7:78:b8:21:42:19:ed:ac:2d:83:66:34:4f:97:fa: 68:0a:43:89:74:bd:a3:55:2a:b7:76:53:2f:f5:e5:a8:e2:fe: 85:1d:db:28:1e:23:b4:d9:72:bb:d8:51:10:24:ff:cd:fa:2a: fd:b9:74:58:1b:ea:bf:c5:05:cb:02:b9:36:d1:0a:52:ca:ea: 8b:d7:55:80:78:0f:5f:75:bc:2a:7e:af:6c:43:c6:bd:96:47: 96:01:e5:0a:6f:5e:3d:3d:df:d0:04:aa:c8:41:5a:db:ac:04: a5:d2:84:00:4d:d7:15:57:77:6d:c6:a6:8b:47:e6:f4:de:df: 96:5e:40:9f:0f:7b:93:e7:a7:10:b8:8b:5a:74:ef:3b:f2:7c: f6:f0:79:3f:03:28:7c:49:fe:2a:55:9e:95:b0:c9:09:77:c1: 9c:e6:94:97:60:81:41:98:f2:f8:2b:3b:d7:f1:f5:7d:e7:be: 74:75:72:f9:50:77:da:39:61:aa:70:a9:ea:4c:29:b7:97:ba: 4b:aa:9d:93:b3:55:22:a9:b4:91:12:46:56:8b:f4:04:44:37: fa:7e:bd:5f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oxp3DCHwB9+kiQiEcR5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjYwMTAxMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzc4Y2NlMzQ0NTg5YjkyOWY3ODYzZTIwY2RjZWU2ZjAwMGY5ZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0loanpgzHHPDcYs//MoiK+OSJCca SZTx32Fs0PEATjbsR+TxvUe7Xj34OxGR3VQV+nApvcmfYZEoezmyIyEZJUIJjTFf zn4ij9fZqZW09tdvootAoDDjIVdXdPYTtZqFY5jPge1aPRG7xJRCsK6rBax038F8 aZWimsL0xv9I1b/4cOOaxTiLuP+N1rSxdEQX2sTeXHFFsdxZMF4wUEYjrn0Vx2n6 0XsLHrbzcZDoqKaQH+EhXDRdC68E5GgWdgUsDN7SIUJJPp3VjSsZlCB+UFxTtveY YZ5lTVdNMejO5NwbhKgGwbY832de22BepjOQzXiD04HS3HhHMpXu6Z9jPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFON4zONEWJuSn3hj4gzc7m8AD57LMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvNDNqTTQwUlltNUtmZUdQaUROenVid0FQbnNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBuYESAwQA uaVMAwQAwmNKMA0GCSqGSIb3DQEBCwUAA4IBAQAMJGzmBYZ7XgM9EZ5CJGw+oxyV RMYB34qwqIfef1L4cS0w2/hqIEfHeLghQhntrC2DZjRPl/poCkOJdL2jVSq3dlMv 9eWo4v6FHdsoHiO02XK72FEQJP/N+ir9uXRYG+q/xQXLArk20QpSyuqL11WAeA9f dbwqfq9sQ8a9lkeWAeUKb149Pd/QBKrIQVrbrASl0oQATdcVV3dtxqaLR+b03t+W XkCfD3uT56cQuItadO878nz28Hk/Ayh8Sf4qVZ6VsMkJd8Gc5pSXYIFBmPL4KzvX 8fV95750dXL5UHfaOWGqcKnqTCm3l7pLqp2Ts1UiqbSREkZWi/QERDf6fr1f -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:21 2026 by rpki-client