This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa File: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (raw, json) Hash identifier: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q= Subject key identifier: 6B:20:E6:B0:8F:6A:3C:C9:31:27:D3:42:2A:39:EF:0F:87:B0:94:7D Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019B7E391DCA24E220453DAE5BF31BCF4CDF Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa Signing time: Fri 02 Jan 2026 10:20:30 +0000 ROA not before: Fri 02 Jan 2026 10:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205957 IP address blocks: 185.190.148.0/23 maxlen: 23 185.190.150.0/24 maxlen: 24 194.28.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1d:ca:24:e2:20:45:3d:ae:5b:f3:1b:cf:4c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b20e6b08f6a3cc93127d3422a39ef0f87b0947d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:7b:4f:b7:7d:48:f2:d5:34:26:7a:6f:a7: e7:47:b0:69:2c:56:f9:71:92:0a:72:d6:33:f1:1e: ab:b9:2f:d0:bf:c7:2a:7b:76:35:07:9c:22:48:02: e1:d1:58:e8:4c:b6:b6:bf:32:d5:c7:fb:7c:52:a2: a0:d4:d5:c3:16:be:23:99:25:ee:13:6b:c9:14:1d: 30:b5:dc:6e:d0:28:2f:d2:a6:8e:5f:54:9a:f9:52: 58:6a:65:be:52:01:a1:e8:10:75:2e:07:cd:b4:cb: 50:f3:87:fb:01:10:5c:db:9d:f7:d5:a6:40:56:33: f7:28:f8:df:4c:eb:d3:c5:ad:86:3b:80:00:ba:f5: d6:cb:96:fa:99:cb:06:d8:06:ea:a9:a2:9f:2f:ab: 53:91:f2:ee:c2:a1:33:3c:4d:b8:bb:09:15:9a:c5: e3:33:65:24:ca:d6:a0:89:e8:7e:8c:2e:71:be:f2: df:a2:09:f9:27:0e:45:94:f9:53:b0:4b:15:77:30: 83:1d:a7:91:4e:42:ea:a4:55:d1:e0:48:df:b3:d6: 93:83:13:16:89:94:38:53:20:68:30:f0:4a:8c:11: 90:02:ff:ec:96:71:a5:c6:6c:59:92:56:d5:88:2b: e6:ea:cb:45:07:21:f5:7c:c2:94:11:c9:3c:00:a9: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:20:E6:B0:8F:6A:3C:C9:31:27:D3:42:2A:39:EF:0F:87:B0:94:7D X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.148.0-185.190.150.255 194.28.102.0/24 Signature Algorithm: sha256WithRSAEncryption 17:77:a7:2b:31:3d:c9:7d:d1:95:a3:46:f7:b4:89:94:1f:fd: 2a:d0:dc:53:73:38:9f:cd:d5:e6:e9:dc:15:10:ec:17:45:f5: ca:4a:9d:dd:d3:01:f6:d3:78:8b:f8:d5:53:85:83:ca:09:15: 52:15:56:04:24:85:4c:8b:52:86:3f:b7:0f:24:d1:74:af:46: 66:26:38:5e:3d:71:db:4c:a3:76:c3:b3:55:b1:bd:57:84:e3: c0:9f:f8:cb:82:35:19:76:ab:b7:8b:24:2f:21:ae:9d:8f:50: c5:89:c9:18:16:ce:c1:9b:75:7a:e1:be:d8:25:61:24:8c:98: 18:b4:06:07:ec:63:34:d8:5b:cb:11:17:a1:7c:81:6a:37:e8: d4:82:2f:35:6e:49:1b:6c:06:08:18:ce:42:55:8f:5d:c4:a9: ef:19:2b:10:d2:f2:63:67:d7:d0:89:e8:b6:2f:b7:e6:65:07: 35:cd:66:13:4c:e8:6b:c4:80:31:64:db:0d:1a:ca:09:28:c3: 8f:d4:5e:9f:6c:b4:5f:4d:c8:c7:4e:d0:81:21:7f:50:1a:ff: 5e:30:2e:22:66:27:fa:b3:4a:e0:de:18:d2:07:f8:81:12:57: be:eb:eb:41:26:51:2a:30:ed:d8:e4:ee:68:f9:4d:b3:11:83: 6d:e2:3e:c9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OR3KJOIgRT2uW/Mbz0zfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIwZTZiMDhmNmEzY2M5MzEyN2QzNDIyYTM5ZWYwZjg3YjA5NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0x7T7d9SPLVNCZ6b6fnR7BpLFb5 cZIKctYz8R6ruS/Qv8cqe3Y1B5wiSALh0VjoTLa2vzLVx/t8UqKg1NXDFr4jmSXu E2vJFB0wtdxu0Cgv0qaOX1Sa+VJYamW+UgGh6BB1LgfNtMtQ84f7ARBc25331aZA VjP3KPjfTOvTxa2GO4AAuvXWy5b6mcsG2AbqqaKfL6tTkfLuwqEzPE24uwkVmsXj M2Ukytagieh+jC5xvvLfogn5Jw5FlPlTsEsVdzCDHaeRTkLqpFXR4Ejfs9aTgxMW iZQ4UyBoMPBKjBGQAv/slnGlxmxZklbViCvm6stFByH1fMKUEck8AKn1kwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFGsg5rCPajzJMSfTQio57w+HsJR9MB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYXlEbXNJOXFQTWt4SjlOQ0tqbnZENGV3bEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAK5vpQD BAC5vpYDBADCHGYwDQYJKoZIhvcNAQELBQADggEBABd3pysxPcl90ZWjRve0iZQf /SrQ3FNzOJ/N1ebp3BUQ7BdF9cpKnd3TAfbTeIv41VOFg8oJFVIVVgQkhUyLUoY/ tw8k0XSvRmYmOF49cdtMo3bDs1WxvVeE48Cf+MuCNRl2q7eLJC8hrp2PUMWJyRgW zsGbdXrhvtglYSSMmBi0BgfsYzTYW8sRF6F8gWo36NSCLzVuSRtsBggYzkJVj13E qe8ZKxDS8mNn19CJ6LYvt+ZlBzXNZhNM6GvEgDFk2w0aygkow4/UXp9stF9NyMdO 0IEhf1Aa/14wLiJmJ/qzSuDeGNIH+IESV77r60EmUSow7djk7mj5TbMRg23iPsk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:35 2026 by rpki-client