This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/uXzbb7T22o7J6EkVQREXQcswsLw.roa File: uXzbb7T22o7J6EkVQREXQcswsLw.roa (raw, json) Hash identifier: ydW5n2G12ZkBLCFYY+WI/eQDK/fBHPVgfipaLbRLN/s= Subject key identifier: B9:7C:DB:6F:B4:F6:DA:8E:C9:E8:49:15:41:11:17:41:CB:30:B0:BC Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Certificate serial: 019B7CEE307EF3EF18EDBDDF0648ADCCFE3E Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/uXzbb7T22o7J6EkVQREXQcswsLw.roa Signing time: Fri 02 Jan 2026 04:19:03 +0000 ROA not before: Fri 02 Jan 2026 04:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.25.113.0/24 maxlen: 24 185.25.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:30:7e:f3:ef:18:ed:bd:df:06:48:ad:cc:fe:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee Validity Not Before: Jan 2 04:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b97cdb6fb4f6da8ec9e8491541111741cb30b0bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:f1:24:58:89:7d:5e:49:73:71:a2:71:a9: 7d:52:d6:c0:bf:49:39:50:b0:4e:5e:ce:a4:af:7a: 88:9e:14:4d:98:67:c1:15:59:64:a2:5a:65:2c:a9: 76:4e:15:c2:12:fb:7f:0e:9d:d6:46:81:82:74:4c: 11:47:67:d3:99:46:b1:ea:68:66:94:90:22:e9:b2: 0d:55:ae:4a:8a:11:d9:66:68:08:76:0e:28:ff:3a: 12:91:31:ab:10:37:3e:99:73:4e:51:cd:65:d3:84: 52:6f:0a:22:08:c0:97:35:20:52:82:d1:65:25:f4: ff:1e:fb:73:ac:51:b7:fe:5d:82:85:60:1c:c6:f5: 5f:83:ac:fc:69:a2:1e:19:11:a0:2c:01:c4:8b:86: 51:d1:ad:bb:b0:98:54:8b:aa:05:c4:0d:f6:02:5f: ad:b0:fb:00:76:8e:20:4c:72:56:67:cb:f4:60:6e: 44:7a:d9:de:a3:37:77:c9:1a:ed:bf:4a:b3:e7:33: 0f:ee:37:c9:26:d2:47:c5:78:61:40:51:33:88:8b: f4:36:76:5b:a1:49:52:14:25:4b:90:8b:c4:8f:1a: 04:4b:b3:8e:58:20:6a:5d:cf:93:28:e2:ca:da:15: d4:9b:9d:2d:09:bb:4c:c6:53:89:58:d5:8d:be:03: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7C:DB:6F:B4:F6:DA:8E:C9:E8:49:15:41:11:17:41:CB:30:B0:BC X509v3 Authority Key Identifier: keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/uXzbb7T22o7J6EkVQREXQcswsLw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.113.0-185.25.114.255 Signature Algorithm: sha256WithRSAEncryption 32:7b:50:5b:b9:08:28:57:fa:0e:64:f4:b0:96:e2:c1:fd:e7: 8b:c2:53:31:07:8e:13:65:47:5b:27:3f:10:1f:8e:46:54:88: d6:48:e5:74:4a:26:9b:c7:f4:34:ee:74:e9:1e:a0:1a:d1:1c: ec:4c:f0:1b:a5:3f:d0:d2:f5:e5:d1:cd:56:63:32:db:9d:2a: c6:4b:ae:ee:35:9f:e4:6c:86:f8:7c:be:fa:91:f4:e0:8d:bc: 4a:f4:a8:e7:c8:55:eb:1e:f8:94:89:f6:55:7c:16:78:36:db: e2:66:ad:c5:c8:e3:d2:ec:5f:83:0a:70:a8:70:3c:55:82:42: 05:f5:3f:3e:09:5f:b0:cb:bb:79:53:33:73:1e:0a:b7:e5:18: 2d:3d:52:28:d1:49:a2:36:30:c2:77:62:9f:1a:5f:4e:9b:31: 27:71:6c:43:cd:d5:4b:cb:10:db:76:00:94:2c:fc:48:f1:36: ee:f2:3f:77:1d:cf:c4:cd:ac:4b:f0:1d:d6:e1:d5:9b:cc:8a: c3:74:38:04:8f:c9:16:74:f7:b9:50:d9:c5:a5:c2:7c:67:3b: 41:6b:c9:c4:44:1e:54:58:bc:5f:bc:8e:69:1b:d7:5b:98:4e: 07:e0:0f:7e:0c:ff:3a:9f:9d:73:c9:fe:07:e7:67:94:59:0e: e8:6c:cc:25 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87jB+8+8Y7b3fBkitzP4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYzE2NzJkYmJiZjcxNjVhNmE4M2IzMjI3YTcxMTlmMGQz MWU4ZWUwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTdjZGI2ZmI0ZjZkYThlYzllODQ5MTU0MTExMTc0MWNiMzBiMGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmLxJFiJfV5Jc3Gical9UtbAv0k5 ULBOXs6kr3qInhRNmGfBFVlkolplLKl2ThXCEvt/Dp3WRoGCdEwRR2fTmUax6mhm lJAi6bINVa5KihHZZmgIdg4o/zoSkTGrEDc+mXNOUc1l04RSbwoiCMCXNSBSgtFl JfT/HvtzrFG3/l2ChWAcxvVfg6z8aaIeGRGgLAHEi4ZR0a27sJhUi6oFxA32Al+t sPsAdo4gTHJWZ8v0YG5Eetneozd3yRrtv0qz5zMP7jfJJtJHxXhhQFEziIv0NnZb oUlSFCVLkIvEjxoES7OOWCBqXc+TKOLK2hXUm50tCbtMxlOJWNWNvgMQyQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLl822+09tqOyehJFUERF0HLMLC8MB8GA1UdIwQY MBaAFCHBZy27v3Flpqg7MienEZ8NMejuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQt MzQ3N2M3ZmNkNGQ5LzEvdVh6YmI3VDIybzdKNkVrVlFSRVhRY3N3c0x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jMDVkNGMtOTZkMy00YjU3LWFlMzQtMzQ3N2M3ZmNkNGQ5 LzEvSWNGbkxidV9jV1dtcURzeUo2Y1JudzB4Nk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5GXED BAC5GXIwDQYJKoZIhvcNAQELBQADggEBADJ7UFu5CChX+g5k9LCW4sH954vCUzEH jhNlR1snPxAfjkZUiNZI5XRKJpvH9DTudOkeoBrRHOxM8BulP9DS9eXRzVZjMtud KsZLru41n+Rshvh8vvqR9OCNvEr0qOfIVese+JSJ9lV8Fng22+JmrcXI49LsX4MK cKhwPFWCQgX1Pz4JX7DLu3lTM3MeCrflGC09UijRSaI2MMJ3Yp8aX06bMSdxbEPN 1UvLENt2AJQs/EjxNu7yP3cdz8TNrEvwHdbh1ZvMisN0OASPyRZ097lQ2cWlwnxn O0FrycREHlRYvF+8jmkb11uYTgfgD34M/zqfnXPJ/gfnZ5RZDuhszCU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:37 2026 by rpki-client