This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_rQLo7b5AAZ8-dmcHMRq-rCCrLk.roa File: _rQLo7b5AAZ8-dmcHMRq-rCCrLk.roa (raw, json) Hash identifier: 1hYcv3/dhwJMOaf9nRoX8LQ3n5Kqv3nXvcIGzslqapk= Subject key identifier: FE:B4:0B:A3:B6:F9:00:06:7C:F9:D9:9C:1C:C4:6A:FA:B0:82:AC:B9 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB48CFE8991942BA341D924C1D4580 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_rQLo7b5AAZ8-dmcHMRq-rCCrLk.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206435 IP address blocks: 185.126.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:48:cf:e8:99:19:42:ba:34:1d:92:4c:1d:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb40ba3b6f900067cf9d99c1cc46afab082acb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:ba:e3:22:f8:f0:14:eb:fe:bf:f4:ee:92: 2a:fc:19:1b:1c:ed:a3:f4:d9:79:aa:6c:36:5d:12: 60:14:4f:e0:f4:30:79:e4:0e:54:8e:a0:11:93:9a: 20:17:90:b2:82:f2:9c:51:06:89:ba:f1:7f:7b:09: b5:68:9c:7e:65:09:8d:c9:91:3e:b6:28:14:8a:4d: 43:81:05:a5:be:5d:6b:fc:84:f6:8f:32:f9:63:01: c2:68:4d:5d:2f:0b:8a:1e:3d:1b:e6:11:a4:2e:6d: 12:86:dc:5c:84:7f:ef:8e:83:b9:a9:61:72:f0:05: fa:f5:51:76:31:65:de:cf:8e:c2:8c:f1:7b:4b:29: 92:06:09:fe:14:be:94:b1:e2:ed:c3:20:f5:3a:85: 0e:da:fe:58:18:b1:a3:91:b2:b0:01:80:e8:d3:7f: 42:f6:2d:e4:4e:a9:8f:d7:c1:6f:d3:24:41:89:0e: 5e:0c:f6:f2:e9:f5:a7:d9:69:2e:e3:eb:10:9e:2a: 8a:22:78:94:d0:41:e2:7e:db:f2:9e:3a:86:a1:eb: 26:10:9e:3a:ad:fb:eb:19:8e:5a:e2:a2:fc:1b:73: b3:4d:35:9a:21:d5:a2:c7:a8:d8:45:f9:ac:09:0c: 73:86:48:67:7d:ce:94:83:91:37:ef:b7:0d:66:80: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:0B:A3:B6:F9:00:06:7C:F9:D9:9C:1C:C4:6A:FA:B0:82:AC:B9 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/_rQLo7b5AAZ8-dmcHMRq-rCCrLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.180.0/24 Signature Algorithm: sha256WithRSAEncryption 33:9c:d4:48:0e:6e:d1:af:90:d4:b2:4a:c7:d0:d2:a4:92:2a: b8:4a:b3:b7:17:b7:14:45:fa:12:38:5b:a1:bc:3e:6e:f6:a0: 44:65:81:99:57:58:ff:35:50:05:18:37:bd:41:c0:79:0b:99: 23:98:75:db:a0:dc:37:4f:e5:20:05:13:2a:4c:6c:d8:ab:54: 18:c1:6f:13:76:75:f5:41:ec:60:a5:82:ac:a7:d8:c5:56:f6: cd:b0:bd:dd:0e:d5:96:08:b5:71:c7:46:48:f6:da:0b:5a:47: 50:95:23:7e:07:94:22:00:e4:5c:9f:be:ae:6d:40:8d:11:4f: 55:d0:20:ac:0e:0c:a8:8d:7e:1c:8c:81:ac:79:f2:6f:58:71: 6a:e2:08:b3:26:d6:28:fd:39:67:6b:3c:a7:7f:af:37:fc:7b: c0:ba:ef:ee:fa:e0:3f:e6:c1:49:6b:54:d8:a9:c3:ab:1c:35: ab:7d:48:30:bb:4b:8c:98:33:73:95:bd:15:c0:30:b4:4a:56: 41:18:1b:91:fd:17:e6:8e:91:f9:80:7b:c0:a5:32:72:db:7d: 2f:da:20:2d:f0:9f:b0:dd:49:35:eb:7b:86:72:27:d1:d1:22: 6d:ff:8b:71:b5:39:75:9e:e0:51:9a:16:5b:a6:e6:b7:ca:d2: 7f:43:61:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0jP6JkZQro0HZJMHUWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI0MGJhM2I2ZjkwMDA2N2NmOWQ5OWMxY2M0NmFmYWIwODJhY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS664yL48BTr/r/07pIq/BkbHO2j 9Nl5qmw2XRJgFE/g9DB55A5UjqARk5ogF5CygvKcUQaJuvF/ewm1aJx+ZQmNyZE+ tigUik1DgQWlvl1r/IT2jzL5YwHCaE1dLwuKHj0b5hGkLm0ShtxchH/vjoO5qWFy 8AX69VF2MWXez47CjPF7SymSBgn+FL6UseLtwyD1OoUO2v5YGLGjkbKwAYDo039C 9i3kTqmP18Fv0yRBiQ5eDPby6fWn2Wku4+sQniqKIniU0EHiftvynjqGoesmEJ46 rfvrGY5a4qL8G3OzTTWaIdWix6jYRfmsCQxzhkhnfc6Ug5E377cNZoBkYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP60C6O2+QAGfPnZnBzEavqwgqy5MB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvX3JRTG83YjVBQVo4LWRtY0hNUnEtckNDckxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuX60MA0G CSqGSIb3DQEBCwUAA4IBAQAznNRIDm7Rr5DUskrH0NKkkiq4SrO3F7cURfoSOFuh vD5u9qBEZYGZV1j/NVAFGDe9QcB5C5kjmHXboNw3T+UgBRMqTGzYq1QYwW8TdnX1 QexgpYKsp9jFVvbNsL3dDtWWCLVxx0ZI9toLWkdQlSN+B5QiAORcn76ubUCNEU9V 0CCsDgyojX4cjIGsefJvWHFq4gizJtYo/Tlnazynf683/HvAuu/u+uA/5sFJa1TY qcOrHDWrfUgwu0uMmDNzlb0VwDC0SlZBGBuR/RfmjpH5gHvApTJy230v2iAt8J+w 3Uk163uGcifR0SJt/4txtTl1nuBRmhZbpua3ytJ/Q2FE -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:21 2026 by rpki-client