This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/J41thO8T8h3ECLAtFbEa63FQ07k.roa File: J41thO8T8h3ECLAtFbEa63FQ07k.roa (raw, json) Hash identifier: 7SAVb1xYsKsQiyuIDRpxE3uEw5S/EAv/z+BlKDTZqQY= Subject key identifier: 27:8D:6D:84:EF:13:F2:1D:C4:08:B0:2D:15:B1:1A:EB:71:50:D3:B9 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019B7EA73D41850021375A686CCAD23EA073 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/J41thO8T8h3ECLAtFbEa63FQ07k.roa Signing time: Fri 02 Jan 2026 12:20:48 +0000 ROA not before: Fri 02 Jan 2026 12:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206596 IP address blocks: 185.240.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3d:41:85:00:21:37:5a:68:6c:ca:d2:3e:a0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Jan 2 12:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=278d6d84ef13f21dc408b02d15b11aeb7150d3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:51:e1:1d:85:bf:34:34:56:ba:21:f6:b3: 0d:55:e5:71:0a:24:79:f6:e8:7a:83:ca:26:bc:68: 44:db:d3:8e:9e:26:85:f7:4a:14:7c:2f:0c:2f:d2: d9:15:6e:8c:d9:d6:34:3b:1a:e1:c0:68:c7:17:b3: 8b:c8:8a:d6:1a:1c:01:2c:96:72:c8:e3:57:41:f3: ee:b3:a8:75:49:32:9c:c9:0e:18:01:3c:5f:04:fa: d3:14:93:73:30:de:6f:0b:b1:df:d6:4a:8d:fe:52: 72:84:17:a9:a4:75:81:5b:ff:23:e1:85:9b:9e:54: 31:37:14:9d:62:1c:ca:2a:b4:08:5d:57:f5:d8:92: b5:cd:dc:63:30:1f:c7:9f:29:72:f4:36:91:cc:03: 23:c8:90:56:03:e6:d7:8f:5e:3c:17:46:22:29:0d: f1:e6:8f:dd:ea:62:7e:04:85:be:08:4f:c4:24:7a: 56:13:8c:30:bb:83:89:a3:3e:3e:43:ac:f2:4b:86: 45:4d:8e:87:34:42:f1:fc:54:e9:e9:99:6a:bc:5a: 6f:13:91:eb:1f:c9:59:ca:ee:3a:2e:86:2c:00:f7: 63:d3:56:ae:e6:ca:53:01:74:fc:d3:69:69:90:0d: 31:1c:aa:bd:53:c1:7d:9d:34:5e:98:28:dd:71:3d: 1e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:6D:84:EF:13:F2:1D:C4:08:B0:2D:15:B1:1A:EB:71:50:D3:B9 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/J41thO8T8h3ECLAtFbEa63FQ07k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.149.0/24 Signature Algorithm: sha256WithRSAEncryption 64:80:82:85:58:dd:60:2c:ec:17:0c:81:79:a8:0f:e4:7c:32: 6b:28:3c:3e:fb:78:5a:98:3d:b7:db:e8:24:45:5c:56:69:46: f3:ca:c4:54:fe:d0:9d:e4:f9:ec:a3:7d:63:28:27:f5:23:1f: 87:09:7b:ae:bb:20:36:54:3d:91:d2:d1:6e:8f:b7:f5:fa:0f: 99:53:81:46:d7:4a:bf:20:2e:d5:33:9a:de:c4:66:38:6c:b8: a2:86:ec:08:2a:b5:90:a3:2e:1d:e3:51:cf:1d:55:ba:5a:94: 00:d8:67:9f:3a:26:16:eb:31:7b:c9:7b:d8:12:1d:b9:57:08: b3:6e:95:4c:36:f3:48:54:aa:c3:93:8e:74:1c:5c:89:27:48: 15:2e:4c:29:e0:fc:7a:f8:62:cb:6e:75:da:be:4c:b9:21:11: 0a:ab:4b:e4:9f:92:26:40:08:1e:7e:08:33:0e:e4:51:d2:da: 49:2c:13:8d:8b:b7:85:61:6f:94:65:3e:56:bb:06:33:11:ea: 13:4b:98:82:7e:97:a8:04:2b:63:7e:51:cd:4e:d6:46:d4:46: 9f:08:f9:36:30:c7:d2:ca:0f:81:cc:fe:74:d2:cd:d3:08:22: e9:52:0c:60:8d:f5:7d:40:cf:65:9f:75:dc:fb:24:28:50:a0: 7d:57:4c:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pz1BhQAhN1pobMrSPqBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMTAyMTIyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzhkNmQ4NGVmMTNmMjFkYzQwOGIwMmQxNWIxMWFlYjcxNTBkM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUdR4R2FvzQ0Vroh9rMNVeVxCiR5 9uh6g8omvGhE29OOniaF90oUfC8ML9LZFW6M2dY0OxrhwGjHF7OLyIrWGhwBLJZy yONXQfPus6h1STKcyQ4YATxfBPrTFJNzMN5vC7Hf1kqN/lJyhBeppHWBW/8j4YWb nlQxNxSdYhzKKrQIXVf12JK1zdxjMB/Hnyly9DaRzAMjyJBWA+bXj148F0YiKQ3x 5o/d6mJ+BIW+CE/EJHpWE4wwu4OJoz4+Q6zyS4ZFTY6HNELx/FTp6ZlqvFpvE5Hr H8lZyu46LoYsAPdj01au5spTAXT802lpkA0xHKq9U8F9nTRemCjdcT0eHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCeNbYTvE/IdxAiwLRWxGutxUNO5MB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvSjQxdGhPOFQ4aDNFQ0xBdEZiRWE2M0ZRMDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufCVMA0G CSqGSIb3DQEBCwUAA4IBAQBkgIKFWN1gLOwXDIF5qA/kfDJrKDw++3hamD232+gk RVxWaUbzysRU/tCd5Pnso31jKCf1Ix+HCXuuuyA2VD2R0tFuj7f1+g+ZU4FG10q/ IC7VM5rexGY4bLiihuwIKrWQoy4d41HPHVW6WpQA2GefOiYW6zF7yXvYEh25Vwiz bpVMNvNIVKrDk450HFyJJ0gVLkwp4Px6+GLLbnXavky5IREKq0vkn5ImQAgefggz DuRR0tpJLBONi7eFYW+UZT5WuwYzEeoTS5iCfpeoBCtjflHNTtZG1EafCPk2MMfS yg+BzP500s3TCCLpUgxgjfV9QM9ln3Xc+yQoUKB9V0zG -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:00 2026 by rpki-client