This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/RRtfB43pqBCM6OCwQmvlGxGMPl0.roa File: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (raw, json) Hash identifier: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4= Subject key identifier: 45:1B:5F:07:8D:E9:A8:10:8C:E8:E0:B0:42:6B:E5:1B:11:8C:3E:5D Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75 Certificate serial: 019B7DCA675C019300E85169EAE222147132 Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/RRtfB43pqBCM6OCwQmvlGxGMPl0.roa Signing time: Fri 02 Jan 2026 08:19:35 +0000 ROA not before: Fri 02 Jan 2026 08:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30900 IP address blocks: 185.108.128.0/22 maxlen: 22 2a01:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:67:5c:01:93:00:e8:51:69:ea:e2:22:14:71:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75 Validity Not Before: Jan 2 08:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=451b5f078de9a8108ce8e0b0426be51b118c3e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:2e:0e:fe:50:31:e3:bc:2a:c8:6f:6d:79: 5f:0b:c9:a0:d2:13:5c:07:31:f2:68:96:a6:d6:bd: 9e:d8:3c:cf:71:1b:e4:45:ed:9a:8f:09:83:37:fb: cf:8d:78:d8:79:aa:9c:05:d2:29:74:ab:c2:09:63: 19:28:48:68:1e:12:ee:23:7a:08:68:5f:c3:6f:87: d3:c8:aa:d5:ec:d4:ec:97:06:b5:ea:24:03:73:25: ab:60:32:34:f2:b2:16:88:38:2c:e3:3f:92:8a:b2: 0f:30:2b:d1:4c:1f:b0:ba:8e:3e:42:79:2e:43:73: 6c:2f:b1:30:0e:cf:c6:0a:86:55:ed:bf:86:68:1c: 19:a5:7e:cb:ab:75:09:b2:b0:fb:c0:39:bd:3d:c2: 95:0e:f8:46:54:77:8c:62:61:87:0a:49:5b:8c:a4: ec:0a:6b:81:a3:46:41:6d:07:f4:fa:d7:8c:52:81: f4:28:a5:15:3b:89:fb:3c:a1:fe:95:b3:88:54:50: 04:3e:43:9e:8c:5f:25:eb:2b:ce:c6:65:d9:54:1d: f1:0b:2c:00:96:90:0c:39:c3:51:6f:fc:b8:a8:a8: b5:75:41:66:93:8e:7d:5f:10:78:cd:5f:d3:7e:7d: 5a:a6:28:70:dd:f8:84:9d:01:28:48:1e:fe:a4:46: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1B:5F:07:8D:E9:A8:10:8C:E8:E0:B0:42:6B:E5:1B:11:8C:3E:5D X509v3 Authority Key Identifier: keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/RRtfB43pqBCM6OCwQmvlGxGMPl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.128.0/22 IPv6: 2a01:6280::/32 Signature Algorithm: sha256WithRSAEncryption 0c:6d:75:69:c9:21:26:39:1f:0f:40:56:97:9f:3f:98:e6:c7: d3:2b:a7:23:b0:5c:7b:45:b3:76:57:f5:9f:92:08:b0:f7:7d: 5c:05:a2:01:0d:ce:3f:46:8f:37:a4:ae:aa:db:fc:05:96:47: 59:41:ba:e0:70:21:42:83:87:5f:ce:fc:d4:e7:be:d5:3e:3b: 21:9d:6b:4d:33:c6:27:22:cb:c4:ed:cb:62:4a:61:ea:47:cc: 01:fd:a6:63:39:5d:f9:f5:65:66:b4:95:22:e4:81:00:06:ef: 78:c5:2e:a3:36:b4:b0:e8:e6:02:6d:77:3c:a4:aa:bf:fa:5d: 00:01:6f:bb:68:d2:fc:dc:8e:7a:d6:47:9d:46:be:18:a6:33: b6:bc:ef:12:b0:4f:e6:e3:85:11:4e:bb:6f:99:a3:4f:ca:6e: 88:60:93:b6:1c:27:b5:f0:bd:d6:9f:6d:17:69:9e:ce:ca:4c: 35:4d:bd:c1:e8:9f:b8:78:3d:1b:26:44:e0:f4:d2:b7:94:7d: 18:0b:38:c2:3a:44:82:31:fb:a9:ba:2c:14:e3:b7:f7:ab:e9: 57:80:bb:dc:bf:c8:6e:ce:b6:f8:68:a5:93:e7:c7:44:c9:a2: 14:e8:ec:f4:a2:b4:43:fc:1d:7d:49:24:b5:93:24:52:ec:d8: 87:48:11:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ymdcAZMA6FFp6uIiFHEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx YzdmNzUwHhcNMjYwMTAyMDgxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTFiNWYwNzhkZTlhODEwOGNlOGUwYjA0MjZiZTUxYjExOGMzZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5suDv5QMeO8KshvbXlfC8mg0hNc BzHyaJam1r2e2DzPcRvkRe2ajwmDN/vPjXjYeaqcBdIpdKvCCWMZKEhoHhLuI3oI aF/Db4fTyKrV7NTslwa16iQDcyWrYDI08rIWiDgs4z+SirIPMCvRTB+wuo4+Qnku Q3NsL7EwDs/GCoZV7b+GaBwZpX7Lq3UJsrD7wDm9PcKVDvhGVHeMYmGHCklbjKTs CmuBo0ZBbQf0+teMUoH0KKUVO4n7PKH+lbOIVFAEPkOejF8l6yvOxmXZVB3xCywA lpAMOcNRb/y4qKi1dUFmk459XxB4zV/Tfn1apihw3fiEnQEoSB7+pEYWhwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEUbXweN6agQjOjgsEJr5RsRjD5dMB8GA1UdIwQY MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt YTM4ZTFlY2E0ZmQ0LzEvUlJ0ZkI0M3BxQkNNNk9Dd1FtdmxHeEdNUGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0 LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWyAMA0E AgACMAcDBQAqAWKAMA0GCSqGSIb3DQEBCwUAA4IBAQAMbXVpySEmOR8PQFaXnz+Y 5sfTK6cjsFx7RbN2V/Wfkgiw931cBaIBDc4/Ro83pK6q2/wFlkdZQbrgcCFCg4df zvzU577VPjshnWtNM8YnIsvE7ctiSmHqR8wB/aZjOV359WVmtJUi5IEABu94xS6j NrSw6OYCbXc8pKq/+l0AAW+7aNL83I561kedRr4YpjO2vO8SsE/m44URTrtvmaNP ym6IYJO2HCe18L3Wn20XaZ7Oykw1Tb3B6J+4eD0bJkTg9NK3lH0YCzjCOkSCMfup uiwU47f3q+lXgLvcv8huzrb4aKWT58dEyaIU6Oz0orRD/B19SSS1kyRS7NiHSBH3 -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:07 2026 by rpki-client