This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/t1JuJqtlm5tkcuv11rLCrZPDDhA.roa File: t1JuJqtlm5tkcuv11rLCrZPDDhA.roa (raw, json) Hash identifier: W72v12TOiNZdKxjgiVDf5vxJzfgbF5c3IIwEwUVHgBQ= Subject key identifier: B7:52:6E:26:AB:65:9B:9B:64:72:EB:F5:D6:B2:C2:AD:93:C3:0E:10 Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Certificate serial: 019B7CEE2F88D566F471FDD31D61ECF1C10C Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/t1JuJqtlm5tkcuv11rLCrZPDDhA.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16371 IP address blocks: 185.25.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2f:88:d5:66:f4:71:fd:d3:1d:61:ec:f1:c1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7526e26ab659b9b6472ebf5d6b2c2ad93c30e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:fd:10:d9:e6:be:98:c8:c7:75:e7:aa:94: 56:06:e6:fc:c1:54:85:fc:04:c1:72:98:e8:a1:14: 8e:96:f4:6e:46:d3:14:f3:41:d3:05:3e:95:b2:2e: 27:2b:3a:30:16:19:99:16:db:3a:81:bd:27:c9:3f: a6:02:ef:a6:0e:48:02:a4:68:74:77:fa:cd:2f:56: 0f:a3:ca:ac:2a:6c:8e:82:6e:d7:a5:62:3f:f6:71: cb:4c:55:43:bc:32:a7:ed:e7:d6:5c:b0:44:fc:a8: bf:19:84:1e:6d:e7:f0:2f:47:78:82:42:2a:bc:11: 43:32:66:3c:28:d4:34:02:fb:a8:83:14:2f:a7:f5: c9:30:c7:83:b9:e7:d2:2e:82:a6:16:9a:0c:11:d5: e7:d9:ad:be:a1:0a:15:86:ef:5d:d4:c8:5a:7f:65: aa:3c:0b:e0:ca:4c:cc:5a:ef:45:0d:5d:10:f2:cd: 6b:62:64:56:57:91:bc:c1:f8:a3:75:0f:02:07:8b: f2:39:5c:cf:fb:2a:f7:56:7d:d8:20:f9:91:c3:25: be:09:6c:3c:cb:55:9f:01:27:5e:af:ee:8e:bf:65: 91:85:7c:32:61:02:a5:d8:30:a0:11:b5:75:d5:b0: 2d:be:af:aa:96:09:a5:65:c2:f9:7e:b6:1c:0d:c5: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:52:6E:26:AB:65:9B:9B:64:72:EB:F5:D6:B2:C2:AD:93:C3:0E:10 X509v3 Authority Key Identifier: keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/t1JuJqtlm5tkcuv11rLCrZPDDhA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.112.0/24 Signature Algorithm: sha256WithRSAEncryption a7:a5:0f:c5:8d:3f:cc:ea:61:77:06:22:d4:80:ef:95:36:5e: 19:37:3a:6a:78:da:4a:15:57:72:6f:9a:ca:93:53:d2:81:09: b1:9e:6e:fb:43:94:62:73:db:17:bd:71:00:a4:73:62:3e:f7: 49:25:d4:a0:80:d8:d3:6e:11:98:41:2c:34:f4:66:17:f4:b8: 7c:74:90:33:e9:10:1d:79:6f:74:5a:53:ca:80:86:aa:12:5e: 00:ec:9c:83:4a:be:3e:6e:17:50:76:96:f0:7c:2c:0c:4f:a3: b2:8d:2a:68:f3:e5:91:cc:0c:88:80:47:73:b0:f7:fa:86:2f: 43:0c:b5:fb:a2:b5:19:42:29:ec:b3:a9:a0:c7:0a:5a:67:3e: b7:4c:b0:bf:7d:77:b9:fd:92:be:df:c1:7f:2c:54:0c:94:37: 5d:ce:8b:c9:a1:8f:0e:e9:b5:f9:13:21:02:0d:4f:60:3c:f8: 58:39:86:74:bd:bb:11:a3:1a:99:ab:47:8c:19:6c:52:7b:ad: ee:44:b4:08:a3:fa:36:4e:ba:29:31:97:07:6a:fe:5b:64:26: 98:d6:b7:d8:9c:bb:74:e8:37:de:f7:73:9e:77:dd:4e:b5:dd: e4:77:17:d4:24:a7:5e:53:1c:32:fe:3a:ea:f4:62:d5:cb:1a: 54:ab:87:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87i+I1Wb0cf3THWHs8cEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzE2NzJkYmJiZjcxNjVhNmE4M2IzMjI3YTcxMTlmMGQz MWU4ZWUwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzUyNmUyNmFiNjU5YjliNjQ3MmViZjVkNmIyYzJhZDkzYzMwZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8n9ENnmvpjIx3XnqpRWBub8wVSF /ATBcpjooRSOlvRuRtMU80HTBT6Vsi4nKzowFhmZFts6gb0nyT+mAu+mDkgCpGh0 d/rNL1YPo8qsKmyOgm7XpWI/9nHLTFVDvDKn7efWXLBE/Ki/GYQebefwL0d4gkIq vBFDMmY8KNQ0AvuogxQvp/XJMMeDuefSLoKmFpoMEdXn2a2+oQoVhu9d1Mhaf2Wq PAvgykzMWu9FDV0Q8s1rYmRWV5G8wfijdQ8CB4vyOVzP+yr3Vn3YIPmRwyW+CWw8 y1WfASder+6Ov2WRhXwyYQKl2DCgEbV11bAtvq+qlgmlZcL5frYcDcXWgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdSbiarZZubZHLr9daywq2Tww4QMB8GA1UdIwQY MBaAFCHBZy27v3Flpqg7MienEZ8NMejuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQt MzQ3N2M3ZmNkNGQ5LzEvdDFKdUpxdGxtNXRrY3V2MTFyTENyWlBERGhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQtMzQ3N2M3ZmNkNGQ5 LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRlwMA0G CSqGSIb3DQEBCwUAA4IBAQCnpQ/FjT/M6mF3BiLUgO+VNl4ZNzpqeNpKFVdyb5rK k1PSgQmxnm77Q5Ric9sXvXEApHNiPvdJJdSggNjTbhGYQSw09GYX9Lh8dJAz6RAd eW90WlPKgIaqEl4A7JyDSr4+bhdQdpbwfCwMT6OyjSpo8+WRzAyIgEdzsPf6hi9D DLX7orUZQinss6mgxwpaZz63TLC/fXe5/ZK+38F/LFQMlDddzovJoY8O6bX5EyEC DU9gPPhYOYZ0vbsRoxqZq0eMGWxSe63uRLQIo/o2TropMZcHav5bZCaY1rfYnLt0 6Dfe93Oed91Otd3kdxfUJKdeUxwy/jrq9GLVyxpUq4fR -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:51 2026 by rpki-client