This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_RoC_RNXE3s_SWdnfBHgPoNrU2M.roa File: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (raw, json) Hash identifier: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0= Subject key identifier: FD:1A:02:FD:13:57:13:7B:3F:49:67:67:7C:11:E0:3E:83:6B:53:63 Certificate issuer: /CN=9b19758a087876816dc19361eaf1e9412de73f86 Certificate serial: 019B7DCB05F694FC5C2BA7A519A28FA3B67A Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_RoC_RNXE3s_SWdnfBHgPoNrU2M.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59462 IP address blocks: 185.22.231.0/24 maxlen: 24 185.150.16.0/24 maxlen: 24 2a0e:d487:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:05:f6:94:fc:5c:2b:a7:a5:19:a2:8f:a3:b6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd1a02fd1357137b3f4967677c11e03e836b5363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:d4:2b:98:ef:b2:3b:cb:60:71:73:31:f0: 50:d0:06:62:a0:23:11:c5:e9:c8:61:a5:dd:b0:d3: 74:62:6b:62:fd:c3:32:5c:4b:66:ac:cd:52:99:b5: 52:da:e6:1a:d9:05:7d:b5:92:db:ea:10:d3:73:65: a3:bb:e2:47:f1:3e:d8:08:79:f4:c4:0a:73:52:22: c5:ed:d6:c7:99:ee:df:79:05:d1:52:96:c9:62:07: cd:f5:d5:4a:3e:78:27:18:56:ad:6d:77:e5:a2:ff: d8:e8:70:a5:14:a5:0b:0a:bb:6c:35:e3:2b:40:55: f5:11:30:64:8c:03:59:60:11:9e:2c:0f:d3:30:06: eb:95:9b:3d:f9:55:78:94:e7:9d:bd:77:45:ef:ab: c5:70:c9:7f:0c:aa:7f:ec:cd:96:79:4a:f9:0c:7b: 01:e5:44:14:98:9d:89:35:0d:2f:b4:78:3f:43:bb: e4:9b:5e:ff:a8:96:78:6d:79:f6:b0:34:b8:10:44: 53:d7:0e:f9:b1:be:be:67:43:b1:0c:da:2f:21:be: f4:6c:9c:85:12:76:7d:b0:1f:49:84:ca:da:b3:eb: ef:2e:0d:13:b1:79:df:e2:2f:40:c5:2b:b9:6a:60: a0:e0:d5:20:37:7a:2e:4f:8a:0b:92:03:11:3f:c9: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:02:FD:13:57:13:7B:3F:49:67:67:7C:11:E0:3E:83:6B:53:63 X509v3 Authority Key Identifier: keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_RoC_RNXE3s_SWdnfBHgPoNrU2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.231.0/24 185.150.16.0/24 IPv6: 2a0e:d487:f000::/48 Signature Algorithm: sha256WithRSAEncryption 25:d7:ce:65:6e:bc:5a:a6:d6:0f:79:5d:5f:28:0d:85:8f:f0: ca:7d:c6:10:ed:0a:fc:c6:aa:ef:5f:d3:56:a3:6d:58:72:19: 59:f5:b7:1b:8a:dd:bf:3b:89:16:18:9e:68:73:16:bd:ca:03: 2c:2f:b3:84:5e:b2:c7:1e:c2:d7:4e:11:49:40:2b:1f:60:e3: ee:b1:3e:7f:a7:29:cd:5d:90:24:72:35:37:db:bd:4c:73:40: 7e:6b:c1:f7:7f:8a:30:62:5e:ff:ab:d0:b1:80:30:c2:ac:13: fb:ec:0e:03:fa:ea:a4:59:fa:19:42:c9:df:c0:4b:a3:14:d9: 4e:a6:e1:91:d8:fc:92:1c:38:dc:87:27:d8:fe:2e:ce:7a:a8: ac:22:31:02:76:cc:22:83:3d:ee:03:da:8b:f9:b3:ae:89:02: 1b:4a:07:9f:2b:23:f7:d2:65:1a:70:9f:dc:64:09:d8:62:a5: dd:87:b1:9b:7b:32:9f:cf:ed:f8:88:bf:cf:aa:76:6e:28:d7: 67:88:2c:0c:e6:4c:f1:e7:1b:2c:9a:4e:cc:db:e6:2d:17:02: 83:7f:6f:d5:0d:81:b6:7a:7c:cc:9f:a1:3f:1f:bf:84:4d:23: 6a:21:b6:38:3b:38:20:d1:c5:14:78:45:00:1f:93:70:87:8a: 87:59:a4:ca -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9ywX2lPxcK6elGaKPo7Z6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl NzNmODYwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDFhMDJmZDEzNTcxMzdiM2Y0OTY3Njc3YzExZTAzZTgzNmI1MzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo7UK5jvsjvLYHFzMfBQ0AZioCMR xenIYaXdsNN0Ymti/cMyXEtmrM1SmbVS2uYa2QV9tZLb6hDTc2Wju+JH8T7YCHn0 xApzUiLF7dbHme7feQXRUpbJYgfN9dVKPngnGFatbXflov/Y6HClFKULCrtsNeMr QFX1ETBkjANZYBGeLA/TMAbrlZs9+VV4lOedvXdF76vFcMl/DKp/7M2WeUr5DHsB 5UQUmJ2JNQ0vtHg/Q7vkm17/qJZ4bXn2sDS4EERT1w75sb6+Z0OxDNovIb70bJyF EnZ9sB9JhMras+vvLg0TsXnf4i9AxSu5amCg4NUgN3ouT4oLkgMRP8kszwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFP0aAv0TVxN7P0lnZ3wR4D6Da1NjMB8GA1UdIwQY MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt NDEzZGE2NjdhOGJlLzEvX1JvQ19STlhFM3NfU1dkbmZCSGdQb05yVTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAuRbnAwQA uZYQMA8EAgACMAkDBwAqDtSH8AAwDQYJKoZIhvcNAQELBQADggEBACXXzmVuvFqm 1g95XV8oDYWP8Mp9xhDtCvzGqu9f01ajbVhyGVn1txuK3b87iRYYnmhzFr3KAywv s4ResscewtdOEUlAKx9g4+6xPn+nKc1dkCRyNTfbvUxzQH5rwfd/ijBiXv+r0LGA MMKsE/vsDgP66qRZ+hlCyd/AS6MU2U6m4ZHY/JIcONyHJ9j+Ls56qKwiMQJ2zCKD Pe4D2ov5s66JAhtKB58rI/fSZRpwn9xkCdhipd2HsZt7Mp/P7fiIv8+qdm4o12eI LAzmTPHnGyyaTszb5i0XAoN/b9UNgbZ6fMyfoT8fv4RNI2ohtjg7OCDRxRR4RQAf k3CHiodZpMo= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:30 2026 by rpki-client