This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/TphEoqHx74oTxzeHIHgNhG40Etg.roa File: TphEoqHx74oTxzeHIHgNhG40Etg.roa (raw, json) Hash identifier: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U= Subject key identifier: 4E:98:44:A2:A1:F1:EF:8A:13:C7:37:87:20:78:0D:84:6E:34:12:D8 Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Certificate serial: 019B76EB8FF5C946A263B85B8EA2D28B2ACD Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/TphEoqHx74oTxzeHIHgNhG40Etg.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 185.118.24.0/24 maxlen: 24 185.118.25.0/24 maxlen: 24 185.118.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:f5:c9:46:a2:63:b8:5b:8e:a2:d2:8b:2a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e9844a2a1f1ef8a13c7378720780d846e3412d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:b5:77:38:fa:1f:7c:23:1e:27:de:a5:4b: 9e:0b:a0:e0:e6:2f:6f:03:ab:2d:65:d1:c5:cc:55: 98:07:cd:39:e9:6d:9d:75:59:b0:07:7d:11:10:16: da:e7:28:32:e1:f6:7d:8d:f2:9a:f1:7d:e4:c9:e6: 6c:80:80:ff:02:a0:37:c4:f2:f8:97:71:86:bf:d9: e4:8b:48:81:e6:d8:ab:3f:28:77:ed:93:38:4c:98: fb:13:33:2a:8d:73:c9:75:a1:67:af:bf:2a:02:be: d0:7c:32:66:e7:8b:63:7e:74:e0:d7:12:99:03:b1: 11:d8:1a:81:75:e3:f5:42:09:03:57:e4:be:b1:97: 33:02:b6:18:e6:22:a9:63:7d:82:31:3a:f7:b5:d2: 41:e6:11:65:02:eb:1d:bf:5a:0e:ea:7b:47:40:1b: e7:05:50:2d:80:9f:37:f1:0b:33:49:49:c6:44:09: 0a:ed:70:7d:07:6b:87:b0:10:fb:c6:d7:1c:9f:e0: 7f:35:0c:34:7f:e8:22:3c:55:ba:8e:a0:c8:32:98: 9f:de:e7:ec:dd:6f:77:95:77:4c:ba:80:b8:9d:86: ae:84:a4:7a:25:4b:e6:6c:fc:2e:a9:b4:9b:6b:de: 29:f0:a4:1c:7b:47:c7:ae:15:ee:42:76:3a:9e:50: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:98:44:A2:A1:F1:EF:8A:13:C7:37:87:20:78:0D:84:6E:34:12:D8 X509v3 Authority Key Identifier: keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/TphEoqHx74oTxzeHIHgNhG40Etg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.24.0/23 185.118.27.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:fb:5c:3c:17:a0:08:e0:0f:20:bf:b9:58:00:6a:c8:9b:bd: 9b:af:9f:44:ff:25:09:82:37:a3:a5:96:fc:7b:e7:61:19:c2: 03:79:66:5c:b3:27:17:29:09:8c:89:6d:39:5d:c3:c4:ed:0d: 49:1b:0d:b8:f5:30:ed:74:4a:a6:1b:a6:11:9b:82:94:a6:0f: d1:ff:2c:33:ff:dc:c5:24:20:06:5f:d0:60:f1:76:57:f6:cf: f2:76:27:c4:0c:eb:84:ef:63:23:a1:41:d2:e9:5d:f8:30:96: 15:3d:a2:89:bc:6b:ee:69:d8:8d:2f:03:c6:65:d9:cd:a0:75: 4f:6b:d1:f7:d5:ec:6c:72:b1:3f:f7:94:71:d3:8e:96:5a:26: 2c:c7:e2:27:43:f1:08:d2:19:55:63:dc:60:9f:bc:cb:fd:b9: 7d:a6:06:b4:df:db:d1:93:1d:c5:e4:25:8c:f1:c3:dd:93:59: a8:f3:e7:64:42:32:07:ad:cf:46:c9:75:7f:18:a8:cf:96:ca: 3f:06:6b:7f:cf:21:c7:79:83:a0:a7:92:fe:bb:03:64:20:79: 79:26:dd:cf:49:da:21:32:3c:1e:de:6b:41:bf:a0:52:97:c1: 56:43:c3:e6:14:48:6d:d3:ae:9d:85:58:a7:0d:4d:ea:a8:ca: 2d:22:66:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt264/1yUaiY7hbjqLSiyrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZjdmMTZiMDVhMTEyMzE1MWE2NzdhNDdhYzJkOGQ5MDYx ZGYzOTAwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTk4NDRhMmExZjFlZjhhMTNjNzM3ODcyMDc4MGQ4NDZlMzQxMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpe1dzj6H3wjHifepUueC6Dg5i9v A6stZdHFzFWYB8056W2ddVmwB30REBba5ygy4fZ9jfKa8X3kyeZsgID/AqA3xPL4 l3GGv9nki0iB5tirPyh37ZM4TJj7EzMqjXPJdaFnr78qAr7QfDJm54tjfnTg1xKZ A7ER2BqBdeP1QgkDV+S+sZczArYY5iKpY32CMTr3tdJB5hFlAusdv1oO6ntHQBvn BVAtgJ838QszSUnGRAkK7XB9B2uHsBD7xtccn+B/NQw0f+giPFW6jqDIMpif3ufs 3W93lXdMuoC4nYauhKR6JUvmbPwuqbSba94p8KQce0fHrhXuQnY6nlDNDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE6YRKKh8e+KE8c3hyB4DYRuNBLYMB8GA1UdIwQY MBaAFNf38WsFoRIxUaZ3pHrC2NkGHfOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYt NmNiZTk0OTUzMmU0LzEvVHBoRW9xSHg3NG9UeHplSElIZ05oRzQwRXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMjI3YjctNTRjYS00ZjU2LWJlMjYtNmNiZTk0OTUzMmU0 LzEvMV9meGF3V2hFakZScG5la2VzTFkyUVlkODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuXYYAwQA uXYbMA0GCSqGSIb3DQEBCwUAA4IBAQAt+1w8F6AI4A8gv7lYAGrIm72br59E/yUJ gjejpZb8e+dhGcIDeWZcsycXKQmMiW05XcPE7Q1JGw249TDtdEqmG6YRm4KUpg/R /ywz/9zFJCAGX9Bg8XZX9s/ydifEDOuE72MjoUHS6V34MJYVPaKJvGvuadiNLwPG ZdnNoHVPa9H31exscrE/95Rx046WWiYsx+InQ/EI0hlVY9xgn7zL/bl9pga039vR kx3F5CWM8cPdk1mo8+dkQjIHrc9GyXV/GKjPlso/Bmt/zyHHeYOgp5L+uwNkIHl5 Jt3PSdohMjwe3mtBv6BSl8FWQ8PmFEht066dhVinDU3qqMotImbQ -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:39 2026 by rpki-client