This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/dQ2JSeRkXtpAwYOMmqrJulKnPek.roa File: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (raw, json) Hash identifier: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q= Subject key identifier: 75:0D:89:49:E4:64:5E:DA:40:C1:83:8C:9A:AA:C9:BA:52:A7:3D:E9 Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Certificate serial: 019B7FF1F5AA5F311D8E7956927B49E8C77B Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/dQ2JSeRkXtpAwYOMmqrJulKnPek.roa Signing time: Fri 02 Jan 2026 18:22:02 +0000 ROA not before: Fri 02 Jan 2026 18:22:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206862 IP address blocks: 185.173.168.0/22 maxlen: 22 185.173.168.0/24 maxlen: 24 185.173.169.0/24 maxlen: 24 185.173.170.0/24 maxlen: 24 185.173.171.0/24 maxlen: 24 194.53.118.0/23 maxlen: 23 194.53.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:f5:aa:5f:31:1d:8e:79:56:92:7b:49:e8:c7:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6 Validity Not Before: Jan 2 18:22:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=750d8949e4645eda40c1838c9aaac9ba52a73de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:4b:30:0f:55:75:26:ed:44:1b:77:a3:8b: 25:07:e0:b9:37:ec:9c:18:12:1c:47:c9:19:40:07: b7:e8:04:c7:fb:50:28:58:7d:97:ad:1f:b2:e8:f4: 7d:74:3b:b4:93:f1:47:a9:38:63:ed:91:ea:51:09: 01:10:c7:ba:d6:24:c7:4c:56:45:3b:76:0c:44:f4: e5:c1:06:04:a7:c6:54:4b:01:c4:ef:86:df:6c:8d: c0:5f:49:65:eb:41:e8:4d:e6:74:ab:e1:ff:97:e0: 41:95:ba:7d:22:34:99:61:ed:6f:4b:04:dc:2a:a6: 6e:09:a5:e1:e6:3d:e9:a2:98:b5:42:f5:54:a7:d2: f1:4f:38:c3:08:86:87:08:14:31:c9:84:36:9c:4d: cd:6c:36:6a:52:a2:23:6e:43:6e:61:68:f0:b2:ef: 5d:8a:7c:d7:00:47:cb:53:9f:df:e6:03:30:10:14: ea:f3:fd:c6:2b:cd:d4:2a:68:e5:90:d5:ca:3c:94: 3a:b3:ea:6c:9a:d9:6c:2d:f0:fe:e6:97:5f:5b:5f: 61:cb:e9:f5:a3:c7:79:31:40:bf:0c:26:68:61:81: 64:05:98:46:72:d3:16:45:d3:dc:4f:b5:6d:64:8f: 50:1a:29:37:92:9c:8d:8a:9b:9d:a9:fd:d9:0d:a6: d9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0D:89:49:E4:64:5E:DA:40:C1:83:8C:9A:AA:C9:BA:52:A7:3D:E9 X509v3 Authority Key Identifier: keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/dQ2JSeRkXtpAwYOMmqrJulKnPek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.168.0/22 194.53.118.0/23 194.53.122.0/23 Signature Algorithm: sha256WithRSAEncryption 55:6e:f2:26:d3:2a:72:34:f4:80:b7:67:50:8d:92:b3:83:44: 23:00:07:9e:ab:62:fd:fb:c8:1c:ca:f7:1c:0b:35:84:ea:3a: cd:4c:df:38:19:94:5f:3e:b5:16:15:9d:8d:05:70:61:7f:dd: 9b:22:6e:2a:ff:84:52:67:47:f8:41:47:ba:53:c3:8e:b8:ff: ad:e3:d8:fb:91:42:b6:8e:ce:07:2b:8b:45:76:46:2b:9e:87: 04:74:2f:c7:39:c6:c9:29:19:66:f6:01:e3:fe:69:c5:7a:7e: 5e:c9:95:7d:99:80:8c:92:cc:ea:a2:45:0a:28:51:fb:d3:49: c6:52:95:96:e4:e5:ed:46:6f:b1:07:89:5a:4d:72:b3:91:d0: c8:e8:51:a1:fb:71:bc:72:26:3d:d0:c9:4c:29:e1:54:ef:d3: 23:86:40:48:09:1c:28:22:b3:b5:79:66:bb:93:d5:1b:13:16: d5:54:a1:bb:40:ee:ce:73:9e:1d:7f:63:d5:02:e7:67:cc:74: 06:8f:ce:ed:f4:cc:5d:08:d5:89:29:ed:e9:d4:6b:32:a2:d3: e9:c8:fe:fc:24:66:f4:fd:49:48:9d:84:67:a2:6d:ca:94:90: d4:19:5e:44:31:c6:40:44:fb:f1:a8:2e:bd:8d:cb:47:22:d7: 47:8b:09:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8fWqXzEdjnlWkntJ6Md7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy MjEwZTYwHhcNMjYwMTAyMTgyMjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTBkODk0OWU0NjQ1ZWRhNDBjMTgzOGM5YWFhYzliYTUyYTczZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpZLMA9VdSbtRBt3o4slB+C5N+yc GBIcR8kZQAe36ATH+1AoWH2XrR+y6PR9dDu0k/FHqThj7ZHqUQkBEMe61iTHTFZF O3YMRPTlwQYEp8ZUSwHE74bfbI3AX0ll60HoTeZ0q+H/l+BBlbp9IjSZYe1vSwTc KqZuCaXh5j3popi1QvVUp9LxTzjDCIaHCBQxyYQ2nE3NbDZqUqIjbkNuYWjwsu9d inzXAEfLU5/f5gMwEBTq8/3GK83UKmjlkNXKPJQ6s+psmtlsLfD+5pdfW19hy+n1 o8d5MUC/DCZoYYFkBZhGctMWRdPcT7VtZI9QGik3kpyNipudqf3ZDabZOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHUNiUnkZF7aQMGDjJqqybpSpz3pMB8GA1UdIwQY MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt ZmMxYzBjY2JjMGI3LzEvZFEySlNlUmtYdHBBd1lPTW1xckp1bEtuUGVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3 LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCua2oAwQB wjV2AwQBwjV6MA0GCSqGSIb3DQEBCwUAA4IBAQBVbvIm0ypyNPSAt2dQjZKzg0Qj AAeeq2L9+8gcyvccCzWE6jrNTN84GZRfPrUWFZ2NBXBhf92bIm4q/4RSZ0f4QUe6 U8OOuP+t49j7kUK2js4HK4tFdkYrnocEdC/HOcbJKRlm9gHj/mnFen5eyZV9mYCM kszqokUKKFH700nGUpWW5OXtRm+xB4laTXKzkdDI6FGh+3G8ciY90MlMKeFU79Mj hkBICRwoIrO1eWa7k9UbExbVVKG7QO7Oc54df2PVAudnzHQGj87t9MxdCNWJKe3p 1GsyotPpyP78JGb0/UlInYRnom3KlJDUGV5EMcZARPvxqC69jctHItdHiwlW -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:58 2026 by rpki-client