This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/123WXGbRTZdeisXrE-k_3g3EMvk.roa File: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (raw, json) Hash identifier: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw= Subject key identifier: D7:6D:D6:5C:66:D1:4D:97:5E:8A:C5:EB:13:E9:3F:DE:0D:C4:32:F9 Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Certificate serial: 019B7B36DB860C49770690F5ABE113C917D3 Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/123WXGbRTZdeisXrE-k_3g3EMvk.roa Signing time: Thu 01 Jan 2026 20:19:11 +0000 ROA not before: Thu 01 Jan 2026 20:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214893 IP address blocks: 185.155.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:db:86:0c:49:77:06:90:f5:ab:e1:13:c9:17:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Validity Not Before: Jan 1 20:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d76dd65c66d14d975e8ac5eb13e93fde0dc432f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8f:b6:f8:42:17:ad:68:0a:f6:98:b7:3d:62: b3:a4:90:6c:a2:b6:83:e1:75:e9:9a:82:1e:c5:1b: 73:09:43:94:c4:b1:24:4c:f7:b9:ee:5a:4f:22:0f: a3:e2:45:66:7c:ad:67:c9:cf:1e:42:d8:06:ab:45: 16:14:f7:fe:ea:b8:6e:ce:4e:f1:c3:3c:3c:fc:62: 8e:d6:02:9d:8c:e3:23:53:4a:d4:40:82:5c:e4:f0: 22:a9:2c:8c:1f:73:74:d9:4d:fa:f2:9a:7b:79:75: bc:15:42:b6:9e:6e:f6:d1:b0:37:85:a7:4c:08:a5: 19:51:a7:b9:93:1c:a5:8d:1b:65:43:5e:ad:bb:53: 9c:ab:b7:ab:87:a6:b9:d9:b8:ac:92:cb:7b:9e:42: 6a:18:1f:78:c5:04:3d:38:b1:0c:c0:3c:30:90:a5: 2e:96:df:1c:bc:43:d1:20:8f:22:78:68:7c:7a:e8: 90:30:63:8e:da:40:99:ed:d3:96:94:82:5f:f2:4c: 83:94:ce:ff:9d:6b:6c:d4:cc:eb:eb:bf:29:9b:d0: 05:d2:00:eb:d1:c2:46:1c:21:d6:9a:f6:b8:c0:30: 18:27:65:29:aa:58:f9:1e:1f:b1:08:88:a0:3f:68: b0:8d:28:d8:d9:01:1f:fd:55:29:85:42:ef:36:c0: 9f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:6D:D6:5C:66:D1:4D:97:5E:8A:C5:EB:13:E9:3F:DE:0D:C4:32:F9 X509v3 Authority Key Identifier: keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/123WXGbRTZdeisXrE-k_3g3EMvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.158.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:dc:d8:e0:d0:bd:81:17:6f:43:69:cd:57:e6:45:8d:e1:4a: b1:d9:c8:7f:f2:dd:17:4d:7f:48:68:df:91:3b:ea:b7:14:74: be:d0:05:33:f4:e4:b5:60:e5:b4:cc:eb:50:b8:6a:86:af:51: 36:29:d8:59:c8:d2:bb:e3:07:8e:0d:ce:74:27:dd:d6:90:eb: 34:6a:dd:99:f6:6d:c4:f4:ba:fc:c6:52:56:9a:a5:f5:7e:48: 67:10:0e:76:6d:59:ba:56:de:52:dc:df:90:1b:b1:40:e1:38: fb:cd:3a:d8:68:86:53:a7:d3:18:d0:43:e0:d0:b1:61:7d:b6: 2f:a0:a7:b0:06:0d:62:cd:d6:a6:ca:cc:ee:0f:79:08:f7:db: 0d:0b:0b:98:ec:b1:92:1e:f9:29:65:7b:82:ef:7d:5b:99:4c: 6b:bd:7a:a5:bf:9f:c1:f7:bc:3d:ba:15:8b:f5:16:cb:20:be: 21:0e:0a:8d:bf:83:13:c8:2c:06:20:cb:c1:ee:46:da:37:be: 0e:b9:e6:45:d1:32:10:c0:79:80:34:85:52:fd:13:ec:40:8d: be:3b:12:ca:fd:2a:82:5a:e8:1e:2f:06:47:32:99:60:75:a1: a9:25:ac:f5:dd:bf:7e:28:6f:49:8a:97:f1:59:94:56:1f:d6: cf:d1:7f:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtuGDEl3BpD1q+ETyRfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4 M2MzOWEwHhcNMjYwMTAxMjAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzZkZDY1YzY2ZDE0ZDk3NWU4YWM1ZWIxM2U5M2ZkZTBkYzQzMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4+2+EIXrWgK9pi3PWKzpJBsoraD 4XXpmoIexRtzCUOUxLEkTPe57lpPIg+j4kVmfK1nyc8eQtgGq0UWFPf+6rhuzk7x wzw8/GKO1gKdjOMjU0rUQIJc5PAiqSyMH3N02U368pp7eXW8FUK2nm720bA3hadM CKUZUae5kxyljRtlQ16tu1Ocq7erh6a52biskst7nkJqGB94xQQ9OLEMwDwwkKUu lt8cvEPRII8ieGh8euiQMGOO2kCZ7dOWlIJf8kyDlM7/nWts1Mzr678pm9AF0gDr 0cJGHCHWmva4wDAYJ2Upqlj5Hh+xCIigP2iwjSjY2QEf/VUphULvNsCfDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNdt1lxm0U2XXorF6xPpP94NxDL5MB8GA1UdIwQY MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt NDk3YmVkZDcxZWI5LzEvMTIzV1hHYlJUWmRlaXNYckUta18zZzNFTXZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5 LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZueMA0G CSqGSIb3DQEBCwUAA4IBAQAM3Njg0L2BF29Dac1X5kWN4Uqx2ch/8t0XTX9IaN+R O+q3FHS+0AUz9OS1YOW0zOtQuGqGr1E2KdhZyNK74weODc50J93WkOs0at2Z9m3E 9Lr8xlJWmqX1fkhnEA52bVm6Vt5S3N+QG7FA4Tj7zTrYaIZTp9MY0EPg0LFhfbYv oKewBg1izdamyszuD3kI99sNCwuY7LGSHvkpZXuC731bmUxrvXqlv5/B97w9uhWL 9RbLIL4hDgqNv4MTyCwGIMvB7kbaN74OueZF0TIQwHmANIVS/RPsQI2+OxLK/SqC WugeLwZHMplgdaGpJaz13b9+KG9JipfxWZRWH9bP0X/P -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:58 2026 by rpki-client