This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/_4KNDUF7g83lv5SJMUefTksauhs.roa File: _4KNDUF7g83lv5SJMUefTksauhs.roa (raw, json) Hash identifier: 8MqS36z0z/4kn3leqGP6/RJdC8IFP3/yzmKFmZtggO8= Subject key identifier: FF:82:8D:0D:41:7B:83:CD:E5:BF:94:89:31:47:9F:4E:4B:1A:BA:1B Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd Certificate serial: 019B7D5BCECC511E8DCE1865BF45AF523D3B Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/_4KNDUF7g83lv5SJMUefTksauhs.roa Signing time: Fri 02 Jan 2026 06:18:47 +0000 ROA not before: Fri 02 Jan 2026 06:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198636 IP address blocks: 185.235.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ce:cc:51:1e:8d:ce:18:65:bf:45:af:52:3d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd Validity Not Before: Jan 2 06:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff828d0d417b83cde5bf948931479f4e4b1aba1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:b8:b6:63:38:29:87:d2:29:2a:24:80:ac: 60:2d:3a:4c:64:eb:50:87:01:5e:00:bf:5e:ce:04: db:0a:cc:42:ee:23:e7:84:b9:27:dc:ee:89:5d:3e: df:d1:57:d7:a4:96:19:2d:4f:5f:d7:61:da:72:06: e5:11:25:4d:73:ec:06:70:56:f7:eb:de:b3:33:c4: 71:f9:9f:3b:24:d0:e9:28:a7:37:4b:d3:bf:f9:90: 20:ef:f3:54:a9:d3:54:2e:29:0e:89:35:d9:4b:d1: d4:04:07:6e:5e:42:f8:0d:44:96:52:4e:86:b0:b6: c7:8c:c5:41:85:89:27:e1:02:8a:ff:41:27:67:84: ed:73:98:74:d3:a9:e3:b3:f8:10:c7:35:a4:21:a4: ad:73:9e:e0:d3:aa:9f:ea:f0:57:b8:21:dd:ff:63: 6c:89:e3:a6:2d:6e:4f:94:52:c4:0b:82:39:22:c0: 85:50:6b:e4:a5:fa:59:20:9d:d7:ee:24:8e:64:ee: a8:ce:b5:9b:9d:7e:d1:79:9d:0f:6b:be:13:83:9d: a0:eb:f7:b9:14:e3:e7:59:f0:ba:f3:1b:fa:e2:42: 67:60:91:bb:c2:46:53:df:9e:78:3b:3e:8a:7f:29: 98:2c:d2:40:0e:d6:b7:b4:94:50:28:60:d4:ad:c1: 70:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:8D:0D:41:7B:83:CD:E5:BF:94:89:31:47:9F:4E:4B:1A:BA:1B X509v3 Authority Key Identifier: keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/_4KNDUF7g83lv5SJMUefTksauhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.186.0/24 Signature Algorithm: sha256WithRSAEncryption 88:38:f4:3c:5d:6f:ce:f0:49:b0:f0:ef:4b:69:7f:84:a3:c5: 60:62:d7:e3:ac:e5:8a:f9:e3:07:89:76:a0:39:d7:d2:6c:ef: de:aa:f0:af:fb:f6:66:8f:30:1e:a3:73:08:14:a3:67:41:12: 86:76:cc:a3:f3:30:ed:0c:db:7c:9b:6c:32:49:22:3b:2a:a6: 15:03:da:3c:8a:2a:51:b8:80:12:d3:3b:bc:f6:28:5d:3e:b7: ff:9f:11:90:cb:be:fd:7d:2f:67:a3:64:09:4e:4b:2d:68:0d: ef:16:23:32:d4:21:14:ab:41:68:cd:19:87:1c:04:90:2d:19: 34:6b:d9:78:61:78:6e:7e:a9:30:dd:bd:4d:e1:1e:e0:dd:29: bd:61:b1:ff:fd:7e:ad:9b:6c:55:f6:25:78:1a:53:72:bd:06: 15:19:6b:35:94:e9:8e:7e:82:34:70:9d:01:e4:e7:a1:e8:4c: 20:58:5f:e2:09:2e:de:d6:b5:64:95:2e:89:de:3d:98:9e:d3: c4:ad:f6:94:a9:22:7c:1c:d1:08:7c:5d:00:e4:e4:53:24:52: 1e:bd:c6:98:2d:b4:5b:2b:97:7c:2c:10:33:e3:c9:17:0e:93: 0d:80:f4:35:3b:78:c1:cd:58:2f:67:19:5b:46:5d:55:90:79: 52:3f:12:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W87MUR6Nzhhlv0WvUj07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkY2MyZDI3OTEzMGQxYTFiYjNlZTVhM2I1ZjMzMjMwNTdi M2M0ZmQwHhcNMjYwMTAyMDYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjgyOGQwZDQxN2I4M2NkZTViZjk0ODkzMTQ3OWY0ZTRiMWFiYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7G4tmM4KYfSKSokgKxgLTpMZOtQ hwFeAL9ezgTbCsxC7iPnhLkn3O6JXT7f0VfXpJYZLU9f12HacgblESVNc+wGcFb3 696zM8Rx+Z87JNDpKKc3S9O/+ZAg7/NUqdNULikOiTXZS9HUBAduXkL4DUSWUk6G sLbHjMVBhYkn4QKK/0EnZ4Ttc5h006njs/gQxzWkIaStc57g06qf6vBXuCHd/2Ns ieOmLW5PlFLEC4I5IsCFUGvkpfpZIJ3X7iSOZO6ozrWbnX7ReZ0Pa74Tg52g6/e5 FOPnWfC68xv64kJnYJG7wkZT3554Oz6KfymYLNJADta3tJRQKGDUrcFwGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP+CjQ1Be4PN5b+UiTFHn05LGrobMB8GA1UdIwQY MBaAFO3MLSeRMNGhuz7lo7XzMjBXs8T9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEt MDU2NWYzMzdkY2JlLzEvXzRLTkRVRjdnODNsdjVTSk1VZWZUa3NhdWhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83MjQzYjgtYThmOS00NTIwLTgwYzEtMDU2NWYzMzdkY2Jl LzEvN2N3dEo1RXcwYUc3UHVXanRmTXlNRmV6eFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueu6MA0G CSqGSIb3DQEBCwUAA4IBAQCIOPQ8XW/O8Emw8O9LaX+Eo8VgYtfjrOWK+eMHiXag OdfSbO/eqvCv+/ZmjzAeo3MIFKNnQRKGdsyj8zDtDNt8m2wySSI7KqYVA9o8iipR uIAS0zu89ihdPrf/nxGQy779fS9no2QJTkstaA3vFiMy1CEUq0FozRmHHASQLRk0 a9l4YXhufqkw3b1N4R7g3Sm9YbH//X6tm2xV9iV4GlNyvQYVGWs1lOmOfoI0cJ0B 5Oeh6EwgWF/iCS7e1rVklS6J3j2YntPErfaUqSJ8HNEIfF0A5ORTJFIevcaYLbRb K5d8LBAz48kXDpMNgPQ1O3jBzVgvZxlbRl1VkHlSPxI4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:28 2026 by rpki-client