This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/tIWBDaq4vNzJLG3YFrMngR6UjEI.roa File: tIWBDaq4vNzJLG3YFrMngR6UjEI.roa (raw, json) Hash identifier: 4zzhkvUoZZB4cgAYHJR/34Gu96Vut755O0lj9l2/tWQ= Subject key identifier: B4:85:81:0D:AA:B8:BC:DC:C9:2C:6D:D8:16:B3:27:81:1E:94:8C:42 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 019B76EB6604E160109636D0082532E17140 Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/tIWBDaq4vNzJLG3YFrMngR6UjEI.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12287 IP address blocks: 185.62.166.0/24 maxlen: 24 2a01:8840:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:66:04:e1:60:10:96:36:d0:08:25:32:e1:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b485810daab8bcdcc92c6dd816b327811e948c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:94:ea:d9:8d:05:92:e2:e7:36:49:1d:99: 52:44:ef:95:53:d0:b1:e2:56:df:e1:ba:fe:c2:e7: 46:f2:4d:59:27:e0:d4:dc:d9:4a:de:af:ef:ca:37: 27:e9:f2:de:f9:b3:eb:60:0b:69:ca:2a:fc:bf:6c: 37:ae:f9:ad:ca:b3:04:5d:eb:5a:60:bc:4e:1a:5c: d2:30:6d:91:90:e0:58:14:3d:9b:ef:9e:ae:e6:cd: 56:2e:98:00:03:8e:fe:0c:5e:70:e0:87:1a:1b:f1: f7:07:cd:9c:da:82:ed:dc:19:3d:97:b4:80:46:42: 58:ea:65:ed:90:44:ca:96:f7:d9:75:08:79:e1:92: 75:ca:01:0c:c2:6c:b9:92:87:5a:8d:15:6c:3d:c9: 0d:64:4d:76:d9:36:40:04:7d:ec:4d:e9:12:3f:ec: 94:e2:fa:ba:16:39:ec:23:76:1d:e3:a3:27:ad:db: 2f:33:fc:64:e9:c4:4a:86:d5:91:5c:db:b1:92:71: a7:3e:c6:43:72:57:b2:17:5d:ed:61:5b:af:dd:30: f5:39:7a:82:18:13:aa:bb:1d:f0:81:9c:33:96:57: 9f:54:11:95:b0:76:ee:73:83:a1:29:82:cd:3b:07: 1c:6a:fd:80:61:2c:e6:dc:68:9a:3c:ea:c4:2f:54: f4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:81:0D:AA:B8:BC:DC:C9:2C:6D:D8:16:B3:27:81:1E:94:8C:42 X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/tIWBDaq4vNzJLG3YFrMngR6UjEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.166.0/24 IPv6: 2a01:8840:e::/48 Signature Algorithm: sha256WithRSAEncryption 24:17:aa:2a:97:d2:eb:6f:10:7d:6f:4e:d0:13:0c:06:a5:fe: fb:42:5f:77:61:d4:66:d0:cc:cd:9f:77:da:2e:65:1a:d7:2d: de:d2:6b:40:bf:d0:49:7a:39:ca:9e:e8:a8:da:50:4f:78:f5: d2:d2:95:17:87:d3:ad:b0:74:1a:3d:14:28:2d:ee:dd:05:eb: 09:11:e7:9e:ec:39:8a:bc:ef:dc:e1:a9:e9:14:9a:60:72:17: f9:57:85:8f:70:05:a5:1e:35:9f:46:2e:d3:cc:ad:a2:75:11: 3f:44:b0:35:fe:43:f2:36:f1:26:2e:e2:9c:2d:cd:fa:7d:de: 06:55:af:82:0f:24:f2:63:2e:2c:35:bf:f8:5d:af:96:db:50: 19:2c:4e:8b:e3:52:46:9c:f5:10:37:58:29:2c:3a:ad:3f:51: 6d:6e:48:54:70:3e:10:4f:e0:53:ec:32:35:91:d3:f1:de:3d: c6:b2:25:82:d1:d3:63:67:47:75:c3:a5:c9:53:1c:f4:85:c3: f1:65:da:77:a5:a1:85:47:4d:01:29:c7:78:c2:27:cf:6e:32: 64:fe:41:0d:14:73:44:33:15:39:5b:86:42:0d:52:62:97:03: 68:33:d2:0b:bb:35:00:0b:ee:fd:eb:ba:98:42:7a:6c:d0:9c: 4b:c0:1c:c5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt262YE4WAQljbQCCUy4XFAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDg1ODEwZGFhYjhiY2RjYzkyYzZkZDgxNmIzMjc4MTFlOTQ4YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBuU6tmNBZLi5zZJHZlSRO+VU9Cx 4lbf4br+wudG8k1ZJ+DU3NlK3q/vyjcn6fLe+bPrYAtpyir8v2w3rvmtyrMEXeta YLxOGlzSMG2RkOBYFD2b756u5s1WLpgAA47+DF5w4IcaG/H3B82c2oLt3Bk9l7SA RkJY6mXtkETKlvfZdQh54ZJ1ygEMwmy5kodajRVsPckNZE122TZABH3sTekSP+yU 4vq6FjnsI3Yd46MnrdsvM/xk6cRKhtWRXNuxknGnPsZDcleyF13tYVuv3TD1OXqC GBOqux3wgZwzllefVBGVsHbuc4OhKYLNOwccav2AYSzm3GiaPOrEL1T0HwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLSFgQ2quLzcySxt2BazJ4EelIxCMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvdElXQkRhcTR2TnpKTEczWUZyTW5nUjZVakVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuT6mMA8E AgACMAkDBwAqAYhAAA4wDQYJKoZIhvcNAQELBQADggEBACQXqiqX0utvEH1vTtAT DAal/vtCX3dh1GbQzM2fd9ouZRrXLd7Sa0C/0El6Ocqe6KjaUE949dLSlReH062w dBo9FCgt7t0F6wkR557sOYq879zhqekUmmByF/lXhY9wBaUeNZ9GLtPMraJ1ET9E sDX+Q/I28SYu4pwtzfp93gZVr4IPJPJjLiw1v/hdr5bbUBksTovjUkac9RA3WCks Oq0/UW1uSFRwPhBP4FPsMjWR0/HePcayJYLR02NnR3XDpclTHPSFw/Fl2neloYVH TQEpx3jCJ89uMmT+QQ0Uc0QzFTlbhkINUmKXA2gz0gu7NQAL7v3ruphCemzQnEvA HMU= -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:21 2026 by rpki-client