This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/P1pfIuguwdyriYi_GQFSe-izAhE.roa File: P1pfIuguwdyriYi_GQFSe-izAhE.roa (raw, json) Hash identifier: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso= Subject key identifier: 3F:5A:5F:22:E8:2E:C1:DC:AB:89:88:BF:19:01:52:7B:E8:B3:02:11 Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B7D5D01901695139977B26C91933FD776 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/P1pfIuguwdyriYi_GQFSe-izAhE.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 185.148.104.0/24 maxlen: 24 185.148.105.0/24 maxlen: 24 185.148.106.0/24 maxlen: 24 185.148.107.0/24 maxlen: 24 185.176.24.0/24 maxlen: 24 185.176.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:90:16:95:13:99:77:b2:6c:91:93:3f:d7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5a5f22e82ec1dcab8988bf1901527be8b30211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:c0:36:1d:d1:4b:40:61:1b:d3:7d:12:a6: 95:2b:f4:e9:f2:2c:37:d8:de:fa:c3:91:6b:af:91: 69:ec:1e:49:5c:8f:91:84:bc:16:77:92:f8:53:40: a4:c4:17:c9:99:fe:55:60:32:a2:4d:0b:7a:bd:0f: ab:a2:dc:93:0c:0f:0f:c2:df:83:48:7e:c0:d8:8d: b7:77:a6:20:18:af:59:52:66:d2:7a:ca:5b:70:9e: e5:5e:9e:e8:77:b8:d7:d1:98:9a:c3:92:e8:8b:15: b2:d2:76:ee:1e:fb:48:80:48:1f:49:33:3c:fc:3d: 6e:77:e9:ee:d4:ed:5c:4a:a7:ac:97:3b:5e:27:89: b8:54:64:e1:7d:b0:5b:02:1d:41:8b:b3:cf:d0:9f: fd:0c:35:b8:68:61:73:00:1d:bf:94:ae:ab:ec:3e: bd:9d:95:7d:90:c9:d7:6c:3e:83:f5:ce:00:bf:3a: a5:eb:72:44:6a:2e:45:e3:5f:12:5e:c7:da:d8:3f: d2:5c:69:32:02:5a:a3:28:75:61:3d:b1:12:b9:4f: 3c:65:18:49:8b:46:6a:f6:e2:74:80:89:83:e2:fb: 49:46:9e:4e:89:85:c1:30:71:3b:6b:87:ce:b5:94: 68:f4:60:af:e7:e8:7d:27:27:d1:fc:b2:12:c9:04: bd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:5F:22:E8:2E:C1:DC:AB:89:88:BF:19:01:52:7B:E8:B3:02:11 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/P1pfIuguwdyriYi_GQFSe-izAhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.148.104.0/22 185.176.24.0/24 185.176.26.0/24 Signature Algorithm: sha256WithRSAEncryption 50:c7:98:9b:e7:09:aa:29:03:c8:ce:38:9e:3a:05:7f:3b:4e: cf:04:c5:6d:e6:27:81:88:b9:b8:fa:f3:0e:9e:f0:47:d4:af: e2:d1:03:e5:c5:e1:0a:a7:a4:90:3e:bd:e2:e2:9c:24:53:5a: 22:4a:65:db:80:aa:97:43:a2:0a:34:65:06:dd:1f:e2:ea:03: ee:cb:f0:f1:f8:6f:e3:bd:cc:aa:ff:1f:bb:03:87:d3:da:f1: 78:a8:97:af:b0:ef:1d:67:9b:7d:9d:59:eb:2f:78:82:00:f4: e1:24:96:b8:6c:a6:1b:d0:0c:66:83:95:5d:fc:de:9f:d7:ef: 2b:81:08:42:16:fd:a0:d3:52:64:c5:30:02:78:5e:38:18:e8: 47:77:e5:8c:de:b3:c5:50:d5:cc:5d:c9:71:4d:92:10:4f:71: 1a:fc:76:a9:3a:ad:ea:71:d9:a4:bd:3a:8f:6b:c0:26:e1:f2: 31:b4:f4:d8:bb:7f:ad:7b:c3:92:53:3e:48:ad:c3:e8:8c:d5: 0a:ae:40:89:60:4f:c9:14:95:92:4d:15:fc:8c:be:4e:96:79: 41:1a:ba:7e:4b:9c:a3:54:0d:fa:e4:e6:53:52:15:02:a1:c9: 64:f7:df:49:80:d4:0a:6d:83:cd:27:ac:40:44:20:00:bb:8c: f9:de:64:12 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XQGQFpUTmXeybJGTP9d2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjVhNWYyMmU4MmVjMWRjYWI4OTg4YmYxOTAxNTI3YmU4YjMwMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjjANh3RS0BhG9N9EqaVK/Tp8iw3 2N76w5Frr5Fp7B5JXI+RhLwWd5L4U0CkxBfJmf5VYDKiTQt6vQ+rotyTDA8Pwt+D SH7A2I23d6YgGK9ZUmbSespbcJ7lXp7od7jX0Ziaw5LoixWy0nbuHvtIgEgfSTM8 /D1ud+nu1O1cSqeslzteJ4m4VGThfbBbAh1Bi7PP0J/9DDW4aGFzAB2/lK6r7D69 nZV9kMnXbD6D9c4Avzql63JEai5F418SXsfa2D/SXGkyAlqjKHVhPbESuU88ZRhJ i0Zq9uJ0gImD4vtJRp5OiYXBMHE7a4fOtZRo9GCv5+h9JyfR/LISyQS92wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD9aXyLoLsHcq4mIvxkBUnvoswIRMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvUDFwZkl1Z3V3ZHlyaVlpX0dRRlNlLWl6QWhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuZRoAwQA ubAYAwQAubAaMA0GCSqGSIb3DQEBCwUAA4IBAQBQx5ib5wmqKQPIzjieOgV/O07P BMVt5ieBiLm4+vMOnvBH1K/i0QPlxeEKp6SQPr3i4pwkU1oiSmXbgKqXQ6IKNGUG 3R/i6gPuy/Dx+G/jvcyq/x+7A4fT2vF4qJevsO8dZ5t9nVnrL3iCAPThJJa4bKYb 0Axmg5Vd/N6f1+8rgQhCFv2g01JkxTACeF44GOhHd+WM3rPFUNXMXclxTZIQT3Ea /HapOq3qcdmkvTqPa8Am4fIxtPTYu3+te8OSUz5IrcPojNUKrkCJYE/JFJWSTRX8 jL5OlnlBGrp+S5yjVA365OZTUhUCoclk999JgNQKbYPNJ6xARCAAu4z53mQS -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:46 2026 by rpki-client