This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/24FTYWICcL1IJMQzkDfWg_xAqy0.roa File: 24FTYWICcL1IJMQzkDfWg_xAqy0.roa (raw, json) Hash identifier: wR9QeEuSdjQ+0/1YXf2bsDaKWqR9jJk06EOJ2Q73fWE= Subject key identifier: DB:81:53:61:62:02:70:BD:48:24:C4:33:90:37:D6:83:FC:40:AB:2D Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Certificate serial: 019B7910A9B6FED32912747854C6A9642C88 Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/24FTYWICcL1IJMQzkDfWg_xAqy0.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211623 IP address blocks: 185.253.58.0/24 maxlen: 24 2a10:b9c0::/32 maxlen: 48 2a10:b9c1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a9:b6:fe:d3:29:12:74:78:54:c6:a9:64:2c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db815361620270bd4824c4339037d683fc40ab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:96:c1:92:2b:51:44:77:95:de:e1:b2:f6:19: 7b:8d:01:64:55:55:c9:4b:e4:1b:a5:92:ba:fa:08: 3f:7d:91:6d:49:a7:6f:f7:f8:c3:d5:bf:38:9f:cb: 8b:53:ec:1c:cc:5e:da:1c:36:76:37:19:d3:b8:91: ad:1e:9e:98:3d:7d:e4:66:f2:ff:7c:81:a0:c4:60: 58:ec:36:9d:cd:de:d8:d6:bd:c0:01:8e:99:ff:c7: e0:d9:17:90:f5:81:9c:c3:e1:6e:a6:8d:6f:ab:b6: dc:ad:7a:7c:62:88:0e:89:ef:b5:fc:e7:ad:e7:47: 4e:f5:d1:fa:f4:b6:1a:73:51:8b:0f:ce:b5:f2:7e: 47:02:58:ea:be:5d:00:28:1c:4b:b4:0b:49:05:e5: bc:c2:1d:30:f8:50:00:39:b6:ee:68:cf:47:4d:a3: af:94:df:3c:f7:c8:28:5e:18:2a:fe:50:5b:97:69: 85:a1:cd:ad:c6:66:cb:90:e0:a2:fe:fd:66:8e:4b: 6a:fd:e8:74:06:75:66:40:d3:ba:f3:87:4e:0b:c2: 46:be:bf:3e:78:50:f2:6c:a0:fe:e3:e7:42:da:4c: e2:19:01:b8:b9:ff:1a:cc:d3:d5:f1:6e:a9:fe:85: d1:5d:da:f0:4e:65:35:62:29:c7:07:7b:dd:55:5d: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:81:53:61:62:02:70:BD:48:24:C4:33:90:37:D6:83:FC:40:AB:2D X509v3 Authority Key Identifier: keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/24FTYWICcL1IJMQzkDfWg_xAqy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.58.0/24 IPv6: 2a10:b9c0::/31 Signature Algorithm: sha256WithRSAEncryption f4:37:4f:66:62:a6:65:37:c8:e6:fe:cc:18:46:cd:8c:ac:ce: 90:9e:bc:73:2a:6e:ca:ed:5a:8d:d4:e9:36:81:d1:7c:59:b1: a4:eb:fe:76:af:3a:e5:d7:49:1b:5d:47:50:1d:99:85:a4:0c: 9f:fd:2f:f4:d1:66:e6:11:07:c2:35:d9:e6:03:cc:5b:dd:2a: cf:1b:aa:a0:cf:b8:3d:20:63:a4:71:17:31:fd:3d:a9:64:9f: 0c:fe:78:7d:e4:5a:79:d2:c3:69:1a:eb:e0:a1:e7:b1:4a:93: 44:3b:88:59:29:2d:ac:da:3f:8d:84:b8:f8:f9:cd:b3:c5:64: c7:13:30:da:0e:ad:a5:02:e8:54:3a:20:16:48:b7:db:57:13: 94:d9:83:fa:0e:05:aa:1e:01:c7:68:e2:68:6d:0c:ae:a7:45: ab:6e:03:60:7e:98:e1:9f:19:b5:c3:f3:b6:c4:47:aa:f8:1f: 94:f6:ca:58:df:2d:a7:e9:f8:bf:6d:7d:fc:6e:95:8a:b3:d7: 74:fb:89:5b:7e:c7:6e:94:52:95:32:c2:8d:10:63:75:98:a6: 5b:e9:ed:2c:4b:a9:4c:52:76:fb:93:f5:c5:ba:82:0c:28:be: 6c:84:28:07:0c:4d:50:39:14:2c:f2:0b:11:7e:34:ae:9a:56: 86:9e:75:62 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EKm2/tMpEnR4VMapZCyIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2 OWQxMGUwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjgxNTM2MTYyMDI3MGJkNDgyNGM0MzM5MDM3ZDY4M2ZjNDBhYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZbBkitRRHeV3uGy9hl7jQFkVVXJ S+QbpZK6+gg/fZFtSadv9/jD1b84n8uLU+wczF7aHDZ2NxnTuJGtHp6YPX3kZvL/ fIGgxGBY7Dadzd7Y1r3AAY6Z/8fg2ReQ9YGcw+Fupo1vq7bcrXp8YogOie+1/Oet 50dO9dH69LYac1GLD8618n5HAljqvl0AKBxLtAtJBeW8wh0w+FAAObbuaM9HTaOv lN8898goXhgq/lBbl2mFoc2txmbLkOCi/v1mjktq/eh0BnVmQNO684dOC8JGvr8+ eFDybKD+4+dC2kziGQG4uf8azNPV8W6p/oXRXdrwTmU1YinHB3vdVV2G2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNuBU2FiAnC9SCTEM5A31oP8QKstMB8GA1UdIwQY MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt OWVjN2FkZDBlYjY4LzEvMjRGVFlXSUNjTDFJSk1RemtEZldnX3hBcXkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4 LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuf06MA0E AgACMAcDBQEqELnAMA0GCSqGSIb3DQEBCwUAA4IBAQD0N09mYqZlN8jm/swYRs2M rM6QnrxzKm7K7VqN1Ok2gdF8WbGk6/52rzrl10kbXUdQHZmFpAyf/S/00WbmEQfC NdnmA8xb3SrPG6qgz7g9IGOkcRcx/T2pZJ8M/nh95Fp50sNpGuvgoeexSpNEO4hZ KS2s2j+NhLj4+c2zxWTHEzDaDq2lAuhUOiAWSLfbVxOU2YP6DgWqHgHHaOJobQyu p0WrbgNgfpjhnxm1w/O2xEeq+B+U9spY3y2n6fi/bX38bpWKs9d0+4lbfsdulFKV MsKNEGN1mKZb6e0sS6lMUnb7k/XFuoIMKL5shCgHDE1QORQs8gsRfjSumlaGnnVi -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:12 2026 by rpki-client