This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/92Ks2sFC0w0p0AIFF49f1gWqGCY.roa File: 92Ks2sFC0w0p0AIFF49f1gWqGCY.roa (raw, json) Hash identifier: D1mBgUfkWtkbrrO6F1qZG97Uv8V0Ofc3+kHoQHbc2Zc= Subject key identifier: F7:62:AC:DA:C1:42:D3:0D:29:D0:02:05:17:8F:5F:D6:05:AA:18:26 Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f Certificate serial: 019B7FF1D8E37A1A14C582A93775DFB859C9 Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/92Ks2sFC0w0p0AIFF49f1gWqGCY.roa Signing time: Fri 02 Jan 2026 18:21:54 +0000 ROA not before: Fri 02 Jan 2026 18:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197477 IP address blocks: 185.97.215.0/24 maxlen: 24 2a13:e3c0::/32 maxlen: 48 2a13:e3c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d8:e3:7a:1a:14:c5:82:a9:37:75:df:b8:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f Validity Not Before: Jan 2 18:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f762acdac142d30d29d00205178f5fd605aa1826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:8b:9f:e0:82:dc:83:44:03:a8:c3:e5:d7: 30:89:de:d6:6c:0b:a5:66:5b:e6:4d:bb:2b:34:be: 79:ad:34:0b:4f:f1:cd:01:e5:b4:9a:79:74:7e:37: 6f:27:10:69:e4:cf:0a:69:78:45:e4:57:1c:36:a1: 0b:ca:0c:1d:e0:d0:fd:d1:5d:ea:f7:44:d9:ab:78: a4:84:fc:94:4b:09:62:c5:de:bc:c3:16:54:05:13: 07:18:b6:3b:a0:59:c9:c1:d5:fe:10:88:51:c5:14: 74:88:87:6b:e6:1d:78:2f:cc:4e:97:77:c4:ce:6e: 06:08:be:7f:b7:9f:d8:64:49:87:8c:a9:de:ee:d2: da:b3:c5:00:83:10:ba:a3:52:52:59:9c:0a:76:59: 1f:6e:2a:79:17:7d:6b:ec:be:57:b7:56:8c:d7:9a: 05:f7:fa:1d:51:9e:b3:80:87:43:89:5e:31:8f:64: f4:cb:25:e8:8a:ac:24:3d:4d:c0:e1:14:70:8c:4a: b5:65:b5:55:b0:ce:7c:3b:da:9d:48:2b:eb:bf:d9: c3:8e:f9:30:90:6d:3c:94:c4:98:06:86:71:4c:24: 0e:16:27:95:bf:4a:d5:92:3c:63:1e:e2:79:1e:bb: 3a:fb:e5:b8:75:47:63:e8:8d:0d:6f:0c:8d:bc:a1: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:62:AC:DA:C1:42:D3:0D:29:D0:02:05:17:8F:5F:D6:05:AA:18:26 X509v3 Authority Key Identifier: keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/92Ks2sFC0w0p0AIFF49f1gWqGCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.215.0/24 IPv6: 2a13:e3c0::/31 Signature Algorithm: sha256WithRSAEncryption 65:13:b2:9b:aa:94:3e:6e:45:63:91:83:95:6e:bd:14:68:43: 79:96:bf:87:b6:bc:b1:06:4e:6e:e9:e9:10:e0:63:2d:7e:97: 62:eb:57:b9:05:a7:3e:b3:be:83:7a:a9:07:dd:2f:84:98:f0: 62:a3:bb:35:00:e2:7b:b7:4e:95:6d:d9:ae:52:36:21:ed:9e: 2f:cb:ef:d5:c6:07:8d:75:ec:40:10:bc:1b:b4:11:74:17:4e: b3:af:00:7f:83:23:25:98:75:7a:92:2a:e6:85:dc:a9:cc:48: 22:61:ef:87:c7:4d:d3:3a:26:a6:5a:29:09:91:76:b0:54:b0: 97:17:17:b3:05:4e:9a:54:22:fd:d0:b7:7d:4c:d9:b0:d4:ad: a0:a8:db:d4:8e:14:ac:6e:77:d3:88:d8:23:1a:01:66:88:d2: 95:93:a4:f1:34:1d:de:bf:a1:bb:2b:a8:39:b9:bc:84:8d:77: 61:f6:be:89:33:12:1b:c4:ac:b0:51:91:94:45:2f:06:23:d0: 9d:83:34:d0:2d:e7:c2:b5:a0:39:8a:ca:12:9a:93:8d:55:96: d5:dd:4a:f3:96:b7:e7:a4:68:04:d1:ef:47:b5:23:57:f1:27: 5f:21:83:03:62:cd:59:73:62:83:42:e4:33:3d:a8:8c:90:29: 73:67:21:45 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8djjehoUxYKpN3XfuFnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTRkYTU2ZTFhOTM0NjQ5ZGEwMjk2NGFjMTJlYmEzNGM1 Y2I4NGYwHhcNMjYwMTAyMTgyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzYyYWNkYWMxNDJkMzBkMjlkMDAyMDUxNzhmNWZkNjA1YWExODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuruLn+CC3INEA6jD5dcwid7WbAul ZlvmTbsrNL55rTQLT/HNAeW0mnl0fjdvJxBp5M8KaXhF5FccNqELygwd4ND90V3q 90TZq3ikhPyUSwlixd68wxZUBRMHGLY7oFnJwdX+EIhRxRR0iIdr5h14L8xOl3fE zm4GCL5/t5/YZEmHjKne7tLas8UAgxC6o1JSWZwKdlkfbip5F31r7L5Xt1aM15oF 9/odUZ6zgIdDiV4xj2T0yyXoiqwkPU3A4RRwjEq1ZbVVsM58O9qdSCvrv9nDjvkw kG08lMSYBoZxTCQOFieVv0rVkjxjHuJ5Hrs6++W4dUdj6I0NbwyNvKGI6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPdirNrBQtMNKdACBRePX9YFqhgmMB8GA1UdIwQY MBaAFNkU2lbhqTRknaApZKwS66NMXLhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2It ZjZiY2NmMWU1MzFmLzEvOTJLczJzRkMwdzBwMEFJRkY0OWYxZ1dxR0NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2ItZjZiY2NmMWU1MzFm LzEvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWHXMA0E AgACMAcDBQEqE+PAMA0GCSqGSIb3DQEBCwUAA4IBAQBlE7KbqpQ+bkVjkYOVbr0U aEN5lr+HtryxBk5u6ekQ4GMtfpdi61e5Bac+s76DeqkH3S+EmPBio7s1AOJ7t06V bdmuUjYh7Z4vy+/VxgeNdexAELwbtBF0F06zrwB/gyMlmHV6kirmhdypzEgiYe+H x03TOiamWikJkXawVLCXFxezBU6aVCL90Ld9TNmw1K2gqNvUjhSsbnfTiNgjGgFm iNKVk6TxNB3ev6G7K6g5ubyEjXdh9r6JMxIbxKywUZGURS8GI9CdgzTQLefCtaA5 isoSmpONVZbV3UrzlrfnpGgE0e9HtSNX8SdfIYMDYs1Zc2KDQuQzPaiMkClzZyFF -----END CERTIFICATE-----Generated at Sun Jan 25 19:11:38 2026 by rpki-client