This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/Il1ID2RxyZYdXeAA-tDaWu2vVsc.roa File: Il1ID2RxyZYdXeAA-tDaWu2vVsc.roa (raw, json) Hash identifier: 6+mijpfkNMy87275e7tZmlawfvYntrqLE1F17eyeHFs= Subject key identifier: 22:5D:48:0F:64:71:C9:96:1D:5D:E0:00:FA:D0:DA:5A:ED:AF:56:C7 Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Certificate serial: 019BD265B3D2A40F8DF1A7213D1EA616A104 Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/Il1ID2RxyZYdXeAA-tDaWu2vVsc.roa Signing time: Sun 18 Jan 2026 18:37:19 +0000 ROA not before: Sun 18 Jan 2026 18:37:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52129 IP address blocks: 185.169.148.0/22 maxlen: 24 185.169.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:65:b3:d2:a4:0f:8d:f1:a7:21:3d:1e:a6:16:a1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf Validity Not Before: Jan 18 18:37:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=225d480f6471c9961d5de000fad0da5aedaf56c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2a:84:c8:4b:fe:4a:24:0a:e9:d8:7f:0b:24: da:b0:8f:c6:28:07:c2:ab:dc:b7:e2:46:af:4f:10: e0:9b:eb:a8:7b:32:f6:0d:1e:81:e6:15:e3:72:67: cb:78:19:c1:99:2f:91:33:10:3c:cc:e4:af:ea:43: 7b:73:2c:d6:5a:58:d0:af:f1:ed:09:fa:5a:8e:25: dd:5d:bc:0a:d4:8a:62:10:b6:c9:91:27:a9:d6:c7: 8d:ca:7a:fe:9a:67:fa:31:10:33:93:9e:e9:7e:a2: 3a:0a:ff:bb:95:93:9d:41:4b:67:e8:63:c6:37:24: ac:2c:41:60:b1:f3:1e:1b:e9:0c:32:6e:25:72:fc: 62:ea:b2:1a:d2:ec:a4:4e:df:03:d9:b9:10:66:76: 56:a0:91:93:89:2b:6b:a4:45:0a:22:29:9a:16:7f: 42:6b:02:8b:b7:a6:e3:ca:77:e3:71:38:61:ea:06: 26:3b:1a:7c:6c:1d:04:49:90:96:f8:c2:25:42:0f: 91:ff:b6:6c:6b:5e:2d:f2:a9:0f:03:bd:b9:3e:2d: 5a:7a:a8:96:7f:12:c2:ce:db:85:9a:c9:40:f2:18: 57:9f:0e:9c:0d:09:67:90:cf:b0:92:8f:c9:db:e3: 7f:70:3d:e6:74:b0:e2:6e:ab:6b:55:90:84:4e:6b: 78:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5D:48:0F:64:71:C9:96:1D:5D:E0:00:FA:D0:DA:5A:ED:AF:56:C7 X509v3 Authority Key Identifier: keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/Il1ID2RxyZYdXeAA-tDaWu2vVsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.148.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:06:0a:bc:29:5f:46:39:c4:cb:19:8d:6f:39:9d:a0:e9:65: 6e:93:cf:85:03:09:b6:d6:24:89:24:61:85:72:36:ff:6d:96: 26:db:12:39:20:70:93:ce:0b:e2:c2:a7:b8:e3:62:52:c9:bd: ae:a5:b6:1e:b9:37:03:fa:09:9f:d9:ad:2f:a1:8a:4a:71:dd: 2a:57:2b:f0:dd:f7:ad:3f:7c:3e:56:f1:0e:2a:bc:d6:cb:0a: 4c:77:55:59:e2:d0:de:1a:bd:22:69:af:7c:01:34:1a:94:6c: 34:7b:28:33:47:bb:8e:a1:67:37:26:22:57:f6:fd:1a:4d:c0: 8d:ca:ed:cc:55:84:2d:c1:da:57:0a:c3:95:56:b5:f6:a2:65: 23:80:5a:f9:3f:ab:01:bd:68:4a:9a:1a:ac:92:95:c8:73:12: ec:3d:15:63:ce:ca:4b:b6:db:48:c3:e7:25:ef:b8:13:35:c5: 9a:1b:7b:ab:99:d8:27:0c:a0:65:65:c7:f6:5b:b9:b2:51:0e: 03:af:77:e1:b9:f6:69:7a:2e:a4:d7:2d:d5:ee:b4:e8:36:c6: 1c:15:5d:90:eb:19:6b:d3:2f:c3:b4:dd:08:51:dc:98:d3:a7: b4:bc:01:a7:eb:f0:c9:f5:0b:6f:2e:d0:61:3e:49:57:eb:ef: 4d:0a:99:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvSZbPSpA+N8achPR6mFqEEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYmZhZDMxYzE0YzkzZGFhNTM0NGJhMDRmNGI1MjM1NDY5 NmRmYWYwHhcNMjYwMTE4MTgzNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjVkNDgwZjY0NzFjOTk2MWQ1ZGUwMDBmYWQwZGE1YWVkYWY1NmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CqEyEv+SiQK6dh/CyTasI/GKAfC q9y34kavTxDgm+uoezL2DR6B5hXjcmfLeBnBmS+RMxA8zOSv6kN7cyzWWljQr/Ht CfpajiXdXbwK1IpiELbJkSep1seNynr+mmf6MRAzk57pfqI6Cv+7lZOdQUtn6GPG NySsLEFgsfMeG+kMMm4lcvxi6rIa0uykTt8D2bkQZnZWoJGTiStrpEUKIimaFn9C awKLt6bjynfjcThh6gYmOxp8bB0ESZCW+MIlQg+R/7Zsa14t8qkPA725Pi1aeqiW fxLCztuFmslA8hhXnw6cDQlnkM+wko/J2+N/cD3mdLDibqtrVZCETmt4vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCJdSA9kccmWHV3gAPrQ2lrtr1bHMB8GA1UdIwQY MBaAFPC/rTHBTJPapTRLoE9LUjVGlt+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTkt NzBkNTljYzRmN2NjLzEvSWwxSUQyUnh5WllkWGVBQS10RGFXdTJ2VnNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kYzM1ZWItNmVjZi00NDUyLTg1OTktNzBkNTljYzRmN2Nj LzEvOEwtdE1jRk1rOXFsTkV1Z1QwdFNOVWFXMzY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuamUMA0G CSqGSIb3DQEBCwUAA4IBAQAsBgq8KV9GOcTLGY1vOZ2g6WVuk8+FAwm21iSJJGGF cjb/bZYm2xI5IHCTzgviwqe442JSyb2upbYeuTcD+gmf2a0voYpKcd0qVyvw3fet P3w+VvEOKrzWywpMd1VZ4tDeGr0iaa98ATQalGw0eygzR7uOoWc3JiJX9v0aTcCN yu3MVYQtwdpXCsOVVrX2omUjgFr5P6sBvWhKmhqskpXIcxLsPRVjzspLtttIw+cl 77gTNcWaG3urmdgnDKBlZcf2W7myUQ4Dr3fhufZpei6k1y3V7rToNsYcFV2Q6xlr 0y/DtN0IUdyY06e0vAGn6/DJ9QtvLtBhPklX6+9NCplj -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:56 2026 by rpki-client