This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/tKeJVPQprzbHDozpuHwQaIkze-Y.roa File: tKeJVPQprzbHDozpuHwQaIkze-Y.roa (raw, json) Hash identifier: MtFkxMtpBK9xKMV/TWfmwpZjiWuBHp0NnIWMjL58uD4= Subject key identifier: B4:A7:89:54:F4:29:AF:36:C7:0E:8C:E9:B8:7C:10:68:89:33:7B:E6 Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Certificate serial: 019B77596EFDD75D9F7111A4B9D55507B7F8 Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/tKeJVPQprzbHDozpuHwQaIkze-Y.roa Signing time: Thu 01 Jan 2026 02:18:28 +0000 ROA not before: Thu 01 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206602 IP address blocks: 185.181.236.0/22 maxlen: 22 185.181.236.0/24 maxlen: 24 185.181.237.0/24 maxlen: 24 185.181.238.0/24 maxlen: 24 185.181.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6e:fd:d7:5d:9f:71:11:a4:b9:d5:55:07:b7:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Validity Not Before: Jan 1 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4a78954f429af36c70e8ce9b87c106889337be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1f:c6:6f:45:63:82:fa:4e:4e:9a:d5:bb:cb: 14:60:55:7c:5d:d8:46:b4:10:56:cc:4a:3a:29:a2: 1e:44:3c:70:3e:40:c4:59:a2:65:9d:bd:b5:93:4e: 54:9d:fa:0d:d6:2d:e9:bc:29:f1:6e:2b:e8:4a:f2: a7:3c:6b:83:57:7e:f3:98:17:a1:54:be:c4:2c:13: 78:b7:15:05:3b:84:28:c4:e1:bc:84:7c:d5:a9:6c: b7:e6:20:d4:ad:c7:45:42:a3:17:e2:8f:2a:44:42: 4b:3a:29:2e:49:6c:6a:3b:0d:0c:77:23:a6:79:aa: 04:54:aa:5f:ca:bf:75:f4:16:57:b7:5d:6e:47:ce: 04:19:35:1f:79:38:ae:e5:58:5b:4e:2c:3e:36:5c: 40:ed:0b:29:b3:aa:7a:a9:fb:d0:5b:92:7c:66:a2: 46:80:55:fe:ae:00:4d:6e:19:fe:2c:0b:5e:12:e7: c6:a4:1d:ba:ed:e6:a8:a1:40:06:29:c5:a5:92:9d: 77:9a:14:9d:79:aa:ad:17:ae:97:eb:6d:91:cc:6e: 4f:18:53:7b:06:50:b1:3c:cd:ef:42:e3:af:26:54: e8:f6:d3:8c:89:73:e4:79:04:ce:b1:57:50:65:ed: 37:30:61:09:be:58:ec:36:b6:ed:ca:8c:13:2b:22: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A7:89:54:F4:29:AF:36:C7:0E:8C:E9:B8:7C:10:68:89:33:7B:E6 X509v3 Authority Key Identifier: keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/tKeJVPQprzbHDozpuHwQaIkze-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.236.0/22 Signature Algorithm: sha256WithRSAEncryption 33:54:bb:f4:4b:69:8b:3b:c5:bf:a6:9c:db:d2:d6:b5:9c:22: 28:84:ab:e4:f0:7d:5b:62:58:16:e4:19:39:eb:ad:b4:17:76: 2c:0e:7f:37:e0:a2:fb:f7:84:2f:a4:60:6b:18:55:cb:39:dd: a9:f2:27:61:ef:83:87:8d:da:88:d6:59:ee:af:34:d5:9f:df: cd:de:17:85:3d:b2:f7:d5:85:60:95:7a:5f:86:96:84:22:ee: 83:12:6e:33:89:f3:6b:ec:6a:11:db:27:9e:c2:25:18:95:db: 83:ef:21:e2:b5:9a:fb:45:0c:d0:eb:af:fd:0a:85:b9:82:af: 9c:a9:aa:c4:ff:2c:05:9f:cf:db:23:46:7e:9d:fc:20:b2:95: 13:5b:ba:b0:2a:bf:f3:13:ba:63:37:40:9b:ce:27:f1:02:37: 5d:a1:19:cc:a2:16:97:c5:fb:02:b4:ac:a0:2f:50:64:cd:eb: 56:c3:90:92:86:28:0c:28:ed:1d:4b:93:d6:76:59:ae:df:59: 29:0e:1b:71:93:3b:85:9a:d0:e7:d3:e1:c0:9a:a3:a5:d5:cb: 00:84:53:3f:6b:63:f3:bf:c7:cb:ca:3a:db:cd:7f:6b:37:74: f0:21:c8:50:1b:0d:dc:da:64:25:cd:af:82:d8:ca:36:c0:f7: 30:ec:7a:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WW79112fcRGkudVVB7f4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj MmY1MWYwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGE3ODk1NGY0MjlhZjM2YzcwZThjZTliODdjMTA2ODg5MzM3YmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB/Gb0VjgvpOTprVu8sUYFV8XdhG tBBWzEo6KaIeRDxwPkDEWaJlnb21k05UnfoN1i3pvCnxbivoSvKnPGuDV37zmBeh VL7ELBN4txUFO4QoxOG8hHzVqWy35iDUrcdFQqMX4o8qREJLOikuSWxqOw0MdyOm eaoEVKpfyr919BZXt11uR84EGTUfeTiu5VhbTiw+NlxA7Qsps6p6qfvQW5J8ZqJG gFX+rgBNbhn+LAteEufGpB267eaooUAGKcWlkp13mhSdeaqtF66X622RzG5PGFN7 BlCxPM3vQuOvJlTo9tOMiXPkeQTOsVdQZe03MGEJvljsNrbtyowTKyI6VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSniVT0Ka82xw6M6bh8EGiJM3vmMB8GA1UdIwQY MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt ODU3NTgwZmM2MTY3LzEvdEtlSlZQUXByemJIRG96cHVId1FhSWt6ZS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3 LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubXsMA0G CSqGSIb3DQEBCwUAA4IBAQAzVLv0S2mLO8W/ppzb0ta1nCIohKvk8H1bYlgW5Bk5 6620F3YsDn834KL794QvpGBrGFXLOd2p8idh74OHjdqI1lnurzTVn9/N3heFPbL3 1YVglXpfhpaEIu6DEm4zifNr7GoR2yeewiUYlduD7yHitZr7RQzQ66/9CoW5gq+c qarE/ywFn8/bI0Z+nfwgspUTW7qwKr/zE7pjN0CbzifxAjddoRnMohaXxfsCtKyg L1BkzetWw5CShigMKO0dS5PWdlmu31kpDhtxkzuFmtDn0+HAmqOl1csAhFM/a2Pz v8fLyjrbzX9rN3TwIchQGw3c2mQlza+C2Mo2wPcw7Hqo -----END CERTIFICATE-----Generated at Mon Jan 26 05:55:30 2026 by rpki-client