This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa File: jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa (raw, json) Hash identifier: FONWYkgA1dLto5X/Omv5HI8QNgMouzq0GwMPGBqkdRM= Subject key identifier: 8D:9F:87:00:51:E8:11:A0:EE:04:A7:A9:FB:BE:54:8B:C2:4D:9A:C5 Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019B7F858FDDDDEDB2579A96708922E6B78A Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209622 IP address blocks: 185.131.146.0/24 maxlen: 24 185.131.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:8f:dd:dd:ed:b2:57:9a:96:70:89:22:e6:b7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9f870051e811a0ee04a7a9fbbe548bc24d9ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:15:ec:8b:05:22:2e:74:84:4b:3c:5b:b3: 95:c2:e9:3f:c7:a9:d0:5f:ca:c6:1d:eb:44:74:46: fd:bd:94:9d:e2:00:2e:2d:78:d7:2d:37:68:1f:63: 8e:6e:1d:34:fa:c3:6e:f8:9a:f8:81:69:a9:be:22: ed:94:d1:eb:bb:eb:fa:7a:6d:83:e2:67:4d:61:d1: 7a:8d:d2:5b:7e:b6:84:ab:c9:44:dc:1a:2d:ba:33: e8:f5:0b:91:30:76:50:a2:24:13:10:82:22:72:77: 3d:7b:28:f0:e9:2e:11:ef:38:f7:c0:16:99:c5:29: 36:2d:63:22:f0:9c:97:68:92:98:c6:f7:bb:19:9c: ed:b0:88:db:dc:a9:36:a4:f4:e7:bd:8b:44:24:94: 97:50:a9:dc:e3:13:c5:af:ca:cc:71:76:e3:60:61: c2:58:3a:7b:4c:f7:d5:14:71:91:b9:96:9c:79:14: 6e:67:7b:84:9f:95:cd:ec:a1:d4:22:b2:9b:26:cb: df:1a:01:21:1f:37:ce:36:5d:fc:5a:a8:f8:c3:4c: 59:1f:dc:fa:e9:05:70:86:31:af:2a:c3:22:76:b7: f2:b6:1d:3d:04:6f:d7:3c:ec:91:36:51:e3:3a:6e: 12:de:de:14:0c:f4:02:80:e5:8a:a4:79:0e:5f:e8: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:87:00:51:E8:11:A0:EE:04:A7:A9:FB:BE:54:8B:C2:4D:9A:C5 X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/jZ-HAFHoEaDuBKep-75Ui8JNmsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.146.0/23 Signature Algorithm: sha256WithRSAEncryption 91:b6:30:ee:e3:75:df:54:5e:22:e7:dd:6d:a9:95:03:52:c8: 24:af:ba:fb:83:63:19:2c:3a:48:b4:b7:f5:a3:fa:96:57:99: 5c:cc:f2:47:ee:c4:61:54:d6:a3:81:07:b8:38:dd:98:97:00: 51:70:ad:be:2a:44:f5:88:6a:f9:6d:73:e8:ef:72:2e:07:e3: 5a:3f:d9:0c:4b:74:d7:8f:75:01:1e:81:f9:a5:c9:7a:c8:b5: 8e:15:cd:50:7f:aa:45:71:61:ee:86:90:c4:d7:80:af:ae:5f: 96:06:8c:38:43:dc:f2:e0:7c:91:31:39:ff:54:9a:03:36:fc: ca:d8:2c:e5:26:c7:7a:09:25:a5:f6:e0:a0:d8:34:c5:0a:94: 93:e3:95:80:78:97:05:00:3d:3b:d6:53:6e:99:d2:af:73:8a: 63:87:69:fb:82:3f:a0:c0:60:bb:ee:46:32:67:28:8d:7a:a5: 19:97:40:4f:71:0f:ec:23:3f:51:3b:e9:56:2d:38:a6:79:2c: 98:78:f2:eb:24:93:f4:51:67:e9:53:a2:11:ba:ce:1a:bc:42: 6b:b4:21:e7:8d:7e:45:0a:5e:34:b1:ab:d4:1c:ec:3f:8f:26: e6:11:a5:aa:50:5e:b0:15:a2:64:f2:f5:94:09:09:cf:1f:80: a5:92:9a:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hY/d3e2yV5qWcIki5reKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDlmODcwMDUxZTgxMWEwZWUwNGE3YTlmYmJlNTQ4YmMyNGQ5YWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs8V7IsFIi50hEs8W7OVwuk/x6nQ X8rGHetEdEb9vZSd4gAuLXjXLTdoH2OObh00+sNu+Jr4gWmpviLtlNHru+v6em2D 4mdNYdF6jdJbfraEq8lE3BotujPo9QuRMHZQoiQTEIIicnc9eyjw6S4R7zj3wBaZ xSk2LWMi8JyXaJKYxve7GZztsIjb3Kk2pPTnvYtEJJSXUKnc4xPFr8rMcXbjYGHC WDp7TPfVFHGRuZaceRRuZ3uEn5XN7KHUIrKbJsvfGgEhHzfONl38Wqj4w0xZH9z6 6QVwhjGvKsMidrfyth09BG/XPOyRNlHjOm4S3t4UDPQCgOWKpHkOX+g7/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2fhwBR6BGg7gSnqfu+VIvCTZrFMB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvalotSEFGSG9FYUR1QktlcC03NVVpOEpObXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYOSMA0G CSqGSIb3DQEBCwUAA4IBAQCRtjDu43XfVF4i591tqZUDUsgkr7r7g2MZLDpItLf1 o/qWV5lczPJH7sRhVNajgQe4ON2YlwBRcK2+KkT1iGr5bXPo73IuB+NaP9kMS3TX j3UBHoH5pcl6yLWOFc1Qf6pFcWHuhpDE14Cvrl+WBow4Q9zy4HyRMTn/VJoDNvzK 2CzlJsd6CSWl9uCg2DTFCpST45WAeJcFAD071lNumdKvc4pjh2n7gj+gwGC77kYy ZyiNeqUZl0BPcQ/sIz9RO+lWLTimeSyYePLrJJP0UWfpU6IRus4avEJrtCHnjX5F Cl40savUHOw/jybmEaWqUF6wFaJk8vWUCQnPH4ClkpoH -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:36 2026 by rpki-client