This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/dAvQklqaFgS7nuGcHDCAEFSzz7s.roa File: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (raw, json) Hash identifier: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0= Subject key identifier: 74:0B:D0:92:5A:9A:16:04:BB:9E:E1:9C:1C:30:80:10:54:B3:CF:BB Certificate issuer: /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028 Certificate serial: 019B797EFF2AA6DA69241722E236EF03BC12 Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/dAvQklqaFgS7nuGcHDCAEFSzz7s.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5089 IP address blocks: 185.111.128.0/22 maxlen: 22 185.193.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ff:2a:a6:da:69:24:17:22:e2:36:ef:03:bc:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740bd0925a9a1604bb9ee19c1c30801054b3cfbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:63:e8:23:8e:a3:45:d8:aa:8e:cc:ef:e1:9d: 66:4f:18:25:65:ac:2a:09:cd:80:f3:5a:ce:56:dc: d7:59:90:92:93:d3:d1:97:7e:88:15:fa:f1:21:58: 3c:ce:53:68:eb:f4:65:81:25:76:43:c7:05:c8:d5: 7f:e1:0c:82:c9:58:08:35:6e:2c:98:e1:04:04:97: 40:fe:d8:29:fc:c0:3d:3d:b5:75:cd:10:ef:77:b6: 14:f4:78:d9:69:22:8c:71:5f:a9:6e:50:a1:51:a2: 62:48:b9:67:39:70:e3:08:61:ec:fe:50:02:fc:18: 40:b3:fb:d9:26:55:fd:7e:42:8d:b3:70:2f:e2:b0: 13:92:39:e4:e5:31:0a:96:9e:01:c1:11:22:e8:67: 33:c4:52:07:18:e8:86:32:8e:ea:72:01:03:7c:fd: 8f:a5:a7:00:f8:73:ca:cc:df:40:a8:fe:ec:82:24: c8:46:26:b6:12:18:31:57:f3:73:9b:0d:10:04:58: 95:50:68:86:39:3e:c3:88:53:ab:4b:08:dc:97:45: 4e:c5:40:24:89:8a:87:4a:a6:65:de:8c:b8:ec:73: 1e:96:9a:97:80:a3:ac:40:6b:fd:91:e4:db:60:73: 75:50:e2:cf:6e:d7:b3:b3:e0:64:b6:06:9f:c6:d0: 43:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:D0:92:5A:9A:16:04:BB:9E:E1:9C:1C:30:80:10:54:B3:CF:BB X509v3 Authority Key Identifier: keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/dAvQklqaFgS7nuGcHDCAEFSzz7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.128.0/22 185.193.232.0/22 Signature Algorithm: sha256WithRSAEncryption 50:0f:97:79:48:a2:43:68:ee:c6:9c:cb:ef:f4:86:24:ae:5c: 70:bb:c9:c3:08:2d:9f:c7:2c:6f:8b:f4:03:d7:c5:6e:5e:eb: 98:5b:40:bf:0b:f8:9c:cc:61:06:95:58:1a:95:aa:50:f1:88: e8:56:71:32:ba:69:50:2b:a3:b9:3e:57:c4:0e:b8:16:02:f5: 63:45:12:f5:5d:ce:23:2a:18:1a:2f:77:d5:47:28:ac:03:9e: 4e:d1:21:82:38:85:5b:cc:aa:1b:94:f8:10:87:82:3d:53:61: e8:72:70:1a:c9:da:51:94:6b:9a:99:bb:d3:73:bd:d6:2f:5e: 7e:e0:58:a6:21:fc:96:87:e6:9a:74:67:9f:ba:c1:8b:d7:31: 4e:c0:01:49:8b:e5:a2:62:95:39:28:b3:a1:3f:98:37:45:a6: b5:97:ca:5d:cd:3d:11:fd:2c:aa:cb:c2:25:a7:13:40:ad:5c: 44:53:5a:c6:4e:64:80:17:6c:23:f4:8e:61:56:69:71:9b:6d: 15:c3:c2:8c:78:03:cc:d6:97:4e:ba:ef:9d:00:74:da:32:e0: 2e:89:31:ef:dc:d3:c8:6b:ab:e2:76:8c:be:e8:bf:73:3d:01: cc:af:15:a3:b9:3d:bc:fe:17:a2:ae:20:1a:46:eb:09:94:77: a2:c4:26:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fv8qptppJBci4jbvA7wSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMzg5ZWY0Y2E4Y2U2ODFkNmI4M2UwYmU0Yzg4NmEzYTc0 NTYwMjgwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBiZDA5MjVhOWExNjA0YmI5ZWUxOWMxYzMwODAxMDU0YjNjZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGPoI46jRdiqjszv4Z1mTxglZawq Cc2A81rOVtzXWZCSk9PRl36IFfrxIVg8zlNo6/RlgSV2Q8cFyNV/4QyCyVgINW4s mOEEBJdA/tgp/MA9PbV1zRDvd7YU9HjZaSKMcV+pblChUaJiSLlnOXDjCGHs/lAC /BhAs/vZJlX9fkKNs3Av4rATkjnk5TEKlp4BwREi6GczxFIHGOiGMo7qcgEDfP2P pacA+HPKzN9AqP7sgiTIRia2EhgxV/Nzmw0QBFiVUGiGOT7DiFOrSwjcl0VOxUAk iYqHSqZl3oy47HMelpqXgKOsQGv9keTbYHN1UOLPbtezs+BktgafxtBD6wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHQL0JJamhYEu57hnBwwgBBUs8+7MB8GA1UdIwQY MBaAFDE4nvTKjOaB1rg+C+TIhqOnRWAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYt MzcxYjE2ZTUxNzkwLzEvZEF2UWtscWFGZ1M3bnVHY0hEQ0FFRlN6ejdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8yOWEzZDgtZmI0Ni00MGM1LThmMzYtMzcxYjE2ZTUxNzkw LzEvTVRpZTlNcU01b0hXdUQ0TDVNaUdvNmRGWUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuW+AAwQC ucHoMA0GCSqGSIb3DQEBCwUAA4IBAQBQD5d5SKJDaO7GnMvv9IYkrlxwu8nDCC2f xyxvi/QD18VuXuuYW0C/C/iczGEGlVgalapQ8YjoVnEyumlQK6O5PlfEDrgWAvVj RRL1Xc4jKhgaL3fVRyisA55O0SGCOIVbzKoblPgQh4I9U2HocnAaydpRlGuambvT c73WL15+4FimIfyWh+aadGefusGL1zFOwAFJi+WiYpU5KLOhP5g3Raa1l8pdzT0R /Syqy8IlpxNArVxEU1rGTmSAF2wj9I5hVmlxm20Vw8KMeAPM1pdOuu+dAHTaMuAu iTHv3NPIa6vidoy+6L9zPQHMrxWjuT28/heiriAaRusJlHeixCb8 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:40 2026 by rpki-client