This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/wE4YMlMZVfgjMCwB5o2PtDVxsGI.roa File: wE4YMlMZVfgjMCwB5o2PtDVxsGI.roa (raw, json) Hash identifier: MuoJXkzRzdWJZg/ch4KkXpD2pgMmCcKq2XBOGx8d8S8= Subject key identifier: C0:4E:18:32:53:19:55:F8:23:30:2C:01:E6:8D:8F:B4:35:71:B0:62 Certificate issuer: /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Certificate serial: 019B7758CACCE45FA1425BEA97521D16FF92 Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/wE4YMlMZVfgjMCwB5o2PtDVxsGI.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42106 IP address blocks: 185.231.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ca:cc:e4:5f:a1:42:5b:ea:97:52:1d:16:ff:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c04e1832531955f823302c01e68d8fb43571b062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:72:e3:55:1a:e4:b4:30:6a:77:52:4e:e7: 94:6d:1a:fb:ac:86:59:7c:55:8d:8a:bd:72:ff:9c: 1d:6b:36:44:f0:a8:82:94:e0:cd:93:1a:22:2b:83: e9:44:15:b5:e6:26:7c:c1:bd:85:a0:fa:82:68:cb: 62:9e:ea:06:d7:67:a7:56:4c:63:e2:25:08:2b:b9: 2b:ae:68:d9:0a:16:e3:0f:85:df:4c:a7:b6:01:3d: 34:ce:88:8e:4c:45:9c:ee:5f:27:ea:d0:c7:66:92: be:ff:6a:15:e9:52:f5:3e:49:91:94:a1:ff:8a:44: 5f:58:78:bf:c1:53:db:55:fa:38:5e:93:84:0b:90: 74:e0:14:3b:fd:9e:94:b8:8f:33:13:a3:3e:65:c4: 77:42:b3:fd:96:b0:45:1c:1f:f0:8a:c3:84:26:74: c6:9a:c2:df:a0:93:06:4e:4d:96:41:b8:78:eb:75: 4d:02:6d:21:07:4e:19:3e:73:46:23:1e:ee:b9:d7: bd:18:ff:3b:89:09:17:b5:ca:df:f2:e4:ac:d3:a0: 80:47:ed:38:01:fd:42:94:b5:e5:8c:e3:05:f6:d0: 4d:b4:f2:bf:6b:29:0a:ec:44:c3:86:cc:b4:7c:c3: b9:df:37:d8:41:37:7d:e7:2d:a0:c8:f1:85:73:7b: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:18:32:53:19:55:F8:23:30:2C:01:E6:8D:8F:B4:35:71:B0:62 X509v3 Authority Key Identifier: keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/wE4YMlMZVfgjMCwB5o2PtDVxsGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.223.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:30:80:e5:ae:d5:7d:0d:e9:eb:b0:d9:d3:0c:3a:54:ef:f7: 89:fc:ca:c5:a7:a9:d7:1b:c8:e0:96:73:54:ca:43:3d:b2:b0: 81:75:4e:a0:85:54:72:f2:ec:11:46:99:dd:2d:46:46:68:30: a0:97:91:73:5c:60:0e:82:b7:8a:bb:ee:66:3c:2e:4b:56:62: 0d:07:7c:dc:97:5c:8f:ad:1a:09:46:7f:e0:e4:64:3c:27:c2: a1:4f:ad:ae:1e:f9:23:5e:64:b4:20:e9:26:0d:e7:e1:9d:d6: 11:69:58:b6:81:ab:54:32:f9:b7:f3:56:99:2c:c0:64:70:53: f4:53:a0:27:2e:36:d5:7e:15:35:5c:5f:39:8d:f3:ab:ce:2b: 0a:40:20:37:63:94:81:18:c2:2d:76:a3:4e:4b:88:47:0d:e0: 61:73:51:31:61:25:9d:cc:3d:a6:d1:0d:46:2d:1b:03:5e:92: 54:36:09:b6:75:51:b2:53:bf:59:a4:ad:2a:44:3c:17:6f:6b: bb:b2:ee:c4:7f:0a:1a:ab:43:30:93:6b:06:89:88:65:66:28: 20:f3:5a:ac:d4:2f:03:79:6e:7e:73:33:02:6c:92:d7:2f:2a: 88:be:d9:2e:46:e7:30:43:a5:f4:90:1b:0b:e1:69:7c:cb:d3: 6d:82:02:57 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WMrM5F+hQlvql1IdFv+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMmU3MmFiZjdiMTcyOGZkYTZhYTBiMDQxM2Q4ODU0ODEy ZWEzNjEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDRlMTgzMjUzMTk1NWY4MjMzMDJjMDFlNjhkOGZiNDM1NzFiMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNJy41Ua5LQwandSTueUbRr7rIZZ fFWNir1y/5wdazZE8KiClODNkxoiK4PpRBW15iZ8wb2FoPqCaMtinuoG12enVkxj 4iUIK7krrmjZChbjD4XfTKe2AT00zoiOTEWc7l8n6tDHZpK+/2oV6VL1PkmRlKH/ ikRfWHi/wVPbVfo4XpOEC5B04BQ7/Z6UuI8zE6M+ZcR3QrP9lrBFHB/wisOEJnTG msLfoJMGTk2WQbh463VNAm0hB04ZPnNGIx7uude9GP87iQkXtcrf8uSs06CAR+04 Af1ClLXljOMF9tBNtPK/aykK7ETDhsy0fMO53zfYQTd95y2gyPGFc3vXnQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFMBOGDJTGVX4IzAsAeaNj7Q1cbBiMB8GA1UdIwQY MBaAFPoucqv3sXKP2mqgsEE9iFSBLqNhMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pNXlxX2V4Y29fYWFxQ3dRVDJJVklFdW8yRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlm LWEzNjZkYTI1MWE4My8xL3dFNFlNbE1aVmZnak1Dd0I1bzJQdERWeHNHSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWMvZjYxNTkxLTdjYTgtNGE5YS04OTlmLWEzNjZkYTI1MWE4 My8xLzEtaTV5cV9leGNvX2FhcUN3UVQySVZJRXVvMkUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5598w DQYJKoZIhvcNAQELBQADggEBAIwwgOWu1X0N6euw2dMMOlTv94n8ysWnqdcbyOCW c1TKQz2ysIF1TqCFVHLy7BFGmd0tRkZoMKCXkXNcYA6Ct4q77mY8LktWYg0HfNyX XI+tGglGf+DkZDwnwqFPra4e+SNeZLQg6SYN5+Gd1hFpWLaBq1Qy+bfzVpkswGRw U/RToCcuNtV+FTVcXzmN86vOKwpAIDdjlIEYwi12o05LiEcN4GFzUTFhJZ3MPabR DUYtGwNeklQ2CbZ1UbJTv1mkrSpEPBdva7uy7sR/ChqrQzCTawaJiGVmKCDzWqzU LwN5bn5zMwJsktcvKoi+2S5G5zBDpfSQGwvhaXzL022CAlc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:49 2026 by rpki-client