This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa File: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (raw, json) Hash identifier: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q= Subject key identifier: B6:1A:8C:3B:B3:52:43:86:19:6C:E2:69:7F:B1:39:4F:88:78:43:1E Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Certificate serial: 019B77593A3B20E7BF294E23F7B887788873 Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13260 IP address blocks: 185.11.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3a:3b:20:e7:bf:29:4e:23:f7:b8:87:78:88:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10 Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b61a8c3bb3524386196ce2697fb1394f8878431e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:ab:c3:ad:fd:f7:47:ec:77:91:69:4b:6f: b1:fd:a2:cd:7e:be:c0:de:aa:56:7c:1f:24:d0:73: 09:73:82:6b:e8:19:c4:ed:18:17:f6:8d:f9:e0:e5: 07:ed:1d:3f:f6:e2:a8:01:a0:a7:67:6c:7e:c4:5f: e2:84:53:ac:41:41:a8:2e:32:95:c6:7a:82:8d:ce: b2:ab:3c:b4:8d:fa:f8:a5:e4:35:ef:6a:dd:db:9b: 98:d9:b9:03:9a:92:99:98:c1:8b:69:84:22:0d:ee: 03:bb:4a:9a:ef:44:90:f7:de:48:23:6a:2f:80:5f: 5a:c6:ec:c3:6e:14:76:82:e3:3e:cc:ca:f2:fa:94: 9c:da:a2:90:53:7b:c6:ac:4a:b9:d3:7f:32:ec:7f: 8d:da:93:55:60:80:b7:67:0d:1a:96:95:34:b1:43: 10:89:8b:d9:b6:75:91:18:6e:b6:8c:3e:f7:ed:9b: e8:42:b6:5f:e8:45:a1:07:f9:e0:dd:b3:c6:06:a8: db:f2:1e:10:9e:5c:aa:2e:b7:cc:1c:fe:d0:16:ec: 5a:a8:a4:25:a2:41:a0:24:0d:12:48:ee:9b:ce:ea: c3:a0:13:9b:96:f1:ac:23:8c:6b:76:48:92:42:c8: b1:6d:3b:32:2f:56:c1:10:c2:35:91:4c:10:96:b6: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1A:8C:3B:B3:52:43:86:19:6C:E2:69:7F:B1:39:4F:88:78:43:1E X509v3 Authority Key Identifier: keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.25.0/24 Signature Algorithm: sha256WithRSAEncryption 81:d8:62:1d:80:cc:35:bc:c6:28:31:07:f6:ce:ff:e1:01:b1: 67:31:64:c1:97:9f:65:e2:82:bd:52:50:37:dd:6c:a6:33:cb: 81:98:21:22:cc:a2:af:4e:0a:d9:05:f5:16:a6:b3:50:f3:5d: cf:cb:a8:c7:3d:0f:65:66:44:e6:92:43:87:e4:ca:a0:32:e0: 7f:e0:ef:4d:aa:e2:9a:84:cc:c9:b9:c9:26:91:9d:89:e8:02: 6f:ea:66:31:1a:8d:e6:e7:37:fd:59:11:56:b6:14:31:1c:e2: 75:b6:b0:85:2c:ae:54:e3:03:ec:65:81:a2:fd:1b:83:9a:25: 78:cd:51:8f:c1:10:51:1c:a7:14:f4:cb:22:11:74:b1:8c:dd: 93:14:81:96:a3:e1:3a:85:25:b4:e2:d9:26:e0:e1:99:a3:06: ee:a4:a6:df:ee:29:35:c2:a5:4a:2c:01:01:0d:61:25:3c:cd: f6:d3:39:9b:25:5d:a9:b6:9c:52:0c:36:0f:74:f8:3c:bd:43: 09:80:5c:b9:1c:83:ab:0f:61:d9:cb:08:02:56:17:f7:c4:3f: 94:ce:82:58:d3:b8:d9:af:a2:83:f2:26:cc:07:d2:88:e6:a7: 8c:f9:05:e7:7f:0e:79:c7:76:64:c2:ac:1b:4c:6a:1b:2f:aa: a6:ad:92:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTo7IOe/KU4j97iHeIhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz MGVhMTAwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjFhOGMzYmIzNTI0Mzg2MTk2Y2UyNjk3ZmIxMzk0Zjg4Nzg0MzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYOrw63990fsd5FpS2+x/aLNfr7A 3qpWfB8k0HMJc4Jr6BnE7RgX9o354OUH7R0/9uKoAaCnZ2x+xF/ihFOsQUGoLjKV xnqCjc6yqzy0jfr4peQ172rd25uY2bkDmpKZmMGLaYQiDe4Du0qa70SQ995II2ov gF9axuzDbhR2guM+zMry+pSc2qKQU3vGrEq5038y7H+N2pNVYIC3Zw0alpU0sUMQ iYvZtnWRGG62jD737ZvoQrZf6EWhB/ng3bPGBqjb8h4QnlyqLrfMHP7QFuxaqKQl okGgJA0SSO6bzurDoBOblvGsI4xrdkiSQsixbTsyL1bBEMI1kUwQlrbirwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLYajDuzUkOGGWziaX+xOU+IeEMeMB8GA1UdIwQY MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt YWRkZjBlMTg0OWViLzEvdGhxTU83TlNRNFlaYk9KcGY3RTVUNGg0UXg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQsZMA0G CSqGSIb3DQEBCwUAA4IBAQCB2GIdgMw1vMYoMQf2zv/hAbFnMWTBl59l4oK9UlA3 3WymM8uBmCEizKKvTgrZBfUWprNQ813Py6jHPQ9lZkTmkkOH5MqgMuB/4O9NquKa hMzJuckmkZ2J6AJv6mYxGo3m5zf9WRFWthQxHOJ1trCFLK5U4wPsZYGi/RuDmiV4 zVGPwRBRHKcU9MsiEXSxjN2TFIGWo+E6hSW04tkm4OGZowbupKbf7ik1wqVKLAEB DWElPM320zmbJV2ptpxSDDYPdPg8vUMJgFy5HIOrD2HZywgCVhf3xD+UzoJY07jZ r6KD8ibMB9KI5qeM+QXnfw55x3ZkwqwbTGobL6qmrZJY -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:04 2026 by rpki-client