This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/aPrjwirQfjp2ASokssf7k_O--fQ.roa File: aPrjwirQfjp2ASokssf7k_O--fQ.roa (raw, json) Hash identifier: KQgnCiQXpKRoobrn80mbP5Rs8dHibT88YV5+D84Zc98= Subject key identifier: 68:FA:E3:C2:2A:D0:7E:3A:76:01:2A:24:B2:C7:FB:93:F3:BE:F9:F4 Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Certificate serial: 019B7D5AE49795F30DB28A0A90D1F9FF9AB6 Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/aPrjwirQfjp2ASokssf7k_O--fQ.roa Signing time: Fri 02 Jan 2026 06:17:47 +0000 ROA not before: Fri 02 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210064 IP address blocks: 185.187.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e4:97:95:f3:0d:b2:8a:0a:90:d1:f9:ff:9a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68fae3c22ad07e3a76012a24b2c7fb93f3bef9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:2d:47:72:c3:bf:7d:c5:70:78:69:04:9e: 7a:0c:8a:e9:54:7a:9e:2d:6e:2c:f8:72:01:c7:8c: 13:ba:2d:00:85:6c:2f:13:7f:f3:14:19:3d:dc:c4: 8d:69:03:55:44:a9:ee:d5:ba:fa:cf:71:6b:61:60: 62:79:3c:63:88:c2:80:14:d9:f4:f0:a0:e1:41:9b: cd:e8:1d:e8:e3:2c:3f:a0:65:80:c7:13:06:11:45: 2e:7c:c4:d4:30:ef:d4:75:47:a9:1b:85:cf:3d:f7: 7c:bb:db:68:09:2c:19:98:75:b5:9e:bf:67:c8:1c: 7c:5e:cd:54:9b:8d:3e:08:28:41:b6:dc:47:3a:a8: 90:7e:76:b6:73:b8:55:3a:1c:9c:9c:69:65:44:e2: a6:45:2b:ac:a2:9b:1d:62:37:85:f4:b4:a8:65:1d: 41:47:28:37:ad:c7:af:8f:cc:2f:d3:6e:31:f6:e8: 39:bc:55:5d:7d:12:8e:08:3f:30:46:83:09:6d:e1: 27:5e:a6:0e:c8:79:45:8f:d0:cd:59:e6:ab:70:29: 27:d1:4e:07:00:d8:b4:2f:28:82:1d:6c:9c:e1:4c: 70:c2:75:45:bf:68:09:50:f0:ab:df:97:00:e2:8e: da:51:89:65:f4:ab:c1:59:a7:c0:2e:c8:95:87:f1: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FA:E3:C2:2A:D0:7E:3A:76:01:2A:24:B2:C7:FB:93:F3:BE:F9:F4 X509v3 Authority Key Identifier: keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/aPrjwirQfjp2ASokssf7k_O--fQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.51.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:1a:cc:d8:e8:4d:f6:2c:50:14:54:50:9d:53:50:f5:f3:3f: ad:7c:ad:90:02:7d:d4:e5:b7:91:69:e2:9c:02:13:a3:7a:47: 2c:a3:37:99:59:eb:01:46:33:55:65:8a:bc:b7:6d:e6:88:71: ae:79:da:a5:7c:f8:f5:08:45:22:91:b4:65:cb:91:5b:dd:87: 83:b6:97:bd:74:90:d3:37:6b:89:bd:89:56:e5:fa:96:cd:00: b1:2f:70:e3:e0:a6:02:ec:10:b7:4a:7f:0d:7f:12:29:77:f6: ac:63:45:1e:01:4e:ad:9d:ef:d2:36:05:4b:ef:e6:31:cf:e2: c3:41:e7:87:84:3f:92:46:5b:f1:20:96:35:c9:fe:94:7f:84: 81:d5:3c:37:52:d7:dc:41:59:4c:fa:b6:88:54:d0:fb:ee:f7: 40:3e:49:33:5b:db:77:13:4a:1f:7d:f6:ee:c2:1d:d1:4f:c6: 2c:95:d2:46:fa:1f:f0:c4:82:13:0d:c0:9c:87:64:f0:a9:8b: 8a:a3:f7:c4:de:97:64:58:8c:09:be:68:c6:c2:3d:81:ce:44: 86:a0:53:fd:94:88:eb:3a:98:fa:55:82:cf:ac:fe:5e:10:37: 03:07:7f:6e:e1:ec:d3:08:2e:61:56:0f:93:e8:89:f5:33:3b: d1:3b:a9:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WuSXlfMNsooKkNH5/5q2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4 MWJhYmUwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGZhZTNjMjJhZDA3ZTNhNzYwMTJhMjRiMmM3ZmI5M2YzYmVmOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPUtR3LDv33FcHhpBJ56DIrpVHqe LW4s+HIBx4wTui0AhWwvE3/zFBk93MSNaQNVRKnu1br6z3FrYWBieTxjiMKAFNn0 8KDhQZvN6B3o4yw/oGWAxxMGEUUufMTUMO/UdUepG4XPPfd8u9toCSwZmHW1nr9n yBx8Xs1Um40+CChBttxHOqiQfna2c7hVOhycnGllROKmRSusopsdYjeF9LSoZR1B Ryg3rcevj8wv024x9ug5vFVdfRKOCD8wRoMJbeEnXqYOyHlFj9DNWearcCkn0U4H ANi0LyiCHWyc4UxwwnVFv2gJUPCr35cA4o7aUYll9KvBWafALsiVh/HcFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGj648Iq0H46dgEqJLLH+5Pzvvn0MB8GA1UdIwQY MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt YTQ4OGJkNDIwMjRmLzEvYVByandpclFmanAyQVNva3NzZjdrX08tLWZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubszMA0G CSqGSIb3DQEBCwUAA4IBAQAcGszY6E32LFAUVFCdU1D18z+tfK2QAn3U5beRaeKc AhOjekcsozeZWesBRjNVZYq8t23miHGuedqlfPj1CEUikbRly5Fb3YeDtpe9dJDT N2uJvYlW5fqWzQCxL3Dj4KYC7BC3Sn8NfxIpd/asY0UeAU6tne/SNgVL7+Yxz+LD QeeHhD+SRlvxIJY1yf6Uf4SB1Tw3UtfcQVlM+raIVND77vdAPkkzW9t3E0offfbu wh3RT8YsldJG+h/wxIITDcCch2TwqYuKo/fE3pdkWIwJvmjGwj2BzkSGoFP9lIjr Opj6VYLPrP5eEDcDB39u4ezTCC5hVg+T6In1MzvRO6m3 -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:44 2026 by rpki-client