This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/_x6aIQIYgxoNnvNtpDTT6-qH5fs.roa File: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (raw, json) Hash identifier: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo= Subject key identifier: FF:1E:9A:21:02:18:83:1A:0D:9E:F3:6D:A4:34:D3:EB:EA:87:E5:FB Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA418DC2F57823A52A42833CC85278 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/_x6aIQIYgxoNnvNtpDTT6-qH5fs.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41954 IP address blocks: 185.142.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:41:8d:c2:f5:78:23:a5:2a:42:83:3c:c8:52:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1e9a210218831a0d9ef36da434d3ebea87e5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:70:f5:93:37:88:04:e1:f8:93:ed:03:57: 97:0f:73:7d:c5:11:c7:24:cc:3a:a9:b1:55:d5:d6: aa:b4:74:ef:36:c7:2c:ae:93:12:6a:74:b6:0d:8b: 73:6e:bc:4b:6f:08:1a:67:62:f3:fe:04:65:a4:a6: b2:03:44:ef:57:d4:e4:33:4b:54:9f:76:e6:2b:b0: d9:2a:11:03:c5:e5:44:6c:5c:34:a5:a5:37:18:3b: 22:65:91:36:00:52:6a:69:70:42:40:0e:56:f3:c9: 6d:b6:7b:32:5a:d0:ac:c4:6b:6c:30:32:8f:97:9c: ab:cb:27:65:63:8c:32:8d:fd:0e:fc:c1:25:57:61: 2c:8d:1b:98:7a:99:6d:7d:d6:37:fa:ce:01:23:f2: 5e:86:45:9d:09:ea:c8:01:b1:e1:7d:d1:f2:4f:f0: de:f7:06:db:11:bd:50:55:2f:56:81:6c:1e:ee:15: 0a:cd:47:9e:b1:5a:92:51:2e:71:64:fb:55:97:9c: ef:7a:fc:cc:08:3e:85:4f:26:06:06:33:1f:24:94: 73:ae:2b:4d:be:41:fb:f8:42:e7:48:55:ce:b6:f3: 02:82:ca:1b:af:b6:f8:8e:df:be:09:bb:ce:d7:e9: 20:0c:a7:a8:79:f1:ba:59:1d:e0:40:44:46:7e:75: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1E:9A:21:02:18:83:1A:0D:9E:F3:6D:A4:34:D3:EB:EA:87:E5:FB X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/_x6aIQIYgxoNnvNtpDTT6-qH5fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.218.0/24 Signature Algorithm: sha256WithRSAEncryption 29:bd:09:f0:98:b3:e2:83:69:e2:bd:e5:2a:3f:ca:dd:bc:0a: 49:96:69:51:c0:b0:75:89:00:13:a6:25:a8:a8:bb:8f:4f:52: d8:00:3b:5f:bb:8c:cb:6a:3f:cf:9d:ef:1d:ac:ae:34:8c:8e: 4f:9a:5f:1f:4a:6b:4a:f4:fe:ee:94:66:96:dd:50:7f:40:16: 7b:d6:15:5e:92:31:51:b4:c5:92:2f:aa:a2:8b:53:40:14:15: 6d:c0:e5:08:bc:46:6b:b6:4d:c1:bc:29:7f:56:6b:9b:72:1a: 65:7a:c5:48:29:17:ad:30:6b:2e:81:ec:66:69:ee:cd:b2:5c: ee:1a:54:49:64:6a:ae:aa:5c:e3:40:8c:9f:92:b8:72:01:55: 24:0b:84:f0:0a:20:04:e9:f5:a9:0a:72:56:6c:31:f3:ce:b7: 21:ac:02:47:0b:56:2e:36:f9:f5:2c:da:1e:4d:50:9e:25:bb: e2:ca:32:a7:0a:0c:cd:66:88:fd:f4:ae:7f:33:02:1a:ad:c4: 9d:3f:7f:7d:96:e5:3d:76:31:6b:af:81:2a:21:2c:b2:25:8e: df:10:12:b6:74:93:22:65:4e:ad:fb:91:89:08:a2:b8:75:6f: bb:4e:f5:76:13:ae:1e:cb:89:98:4d:e3:29:8e:ae:c7:08:4f: be:35:c5:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykGNwvV4I6UqQoM8yFJ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFlOWEyMTAyMTg4MzFhMGQ5ZWYzNmRhNDM0ZDNlYmVhODdlNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOtw9ZM3iATh+JPtA1eXD3N9xRHH JMw6qbFV1daqtHTvNscsrpMSanS2DYtzbrxLbwgaZ2Lz/gRlpKayA0TvV9TkM0tU n3bmK7DZKhEDxeVEbFw0paU3GDsiZZE2AFJqaXBCQA5W88lttnsyWtCsxGtsMDKP l5yryydlY4wyjf0O/MElV2EsjRuYepltfdY3+s4BI/JehkWdCerIAbHhfdHyT/De 9wbbEb1QVS9WgWwe7hUKzUeesVqSUS5xZPtVl5zvevzMCD6FTyYGBjMfJJRzritN vkH7+ELnSFXOtvMCgsobr7b4jt++CbvO1+kgDKeoefG6WR3gQERGfnUd8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8emiECGIMaDZ7zbaQ00+vqh+X7MB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvX3g2YUlRSVlneG9ObnZOdHBEVFQ2LXFINWZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY7aMA0G CSqGSIb3DQEBCwUAA4IBAQApvQnwmLPig2niveUqP8rdvApJlmlRwLB1iQATpiWo qLuPT1LYADtfu4zLaj/Pne8drK40jI5Pml8fSmtK9P7ulGaW3VB/QBZ71hVekjFR tMWSL6qii1NAFBVtwOUIvEZrtk3BvCl/VmubchplesVIKRetMGsugexmae7Nslzu GlRJZGquqlzjQIyfkrhyAVUkC4TwCiAE6fWpCnJWbDHzzrchrAJHC1YuNvn1LNoe TVCeJbviyjKnCgzNZoj99K5/MwIarcSdP399luU9djFrr4EqISyyJY7fEBK2dJMi ZU6t+5GJCKK4dW+7TvV2E64ey4mYTeMpjq7HCE++NcWM -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:40 2026 by rpki-client