This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/V9PWKj4xB85axZ-pPoY3y8jfmGI.roa File: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (raw, json) Hash identifier: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw= Subject key identifier: 57:D3:D6:2A:3E:31:07:CE:5A:C5:9F:A9:3E:86:37:CB:C8:DF:98:62 Certificate issuer: /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd Certificate serial: 019B7CECECBE3B8F1C82CBCEF88B5CD94C8C Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/V9PWKj4xB85axZ-pPoY3y8jfmGI.roa Signing time: Fri 02 Jan 2026 04:17:40 +0000 ROA not before: Fri 02 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42093 IP address blocks: 185.140.20.0/22 maxlen: 22 2a07:3c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ec:be:3b:8f:1c:82:cb:ce:f8:8b:5c:d9:4c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd Validity Not Before: Jan 2 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57d3d62a3e3107ce5ac59fa93e8637cbc8df9862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:51:be:61:8c:c6:37:2e:f3:c4:18:d2:d5: 9a:fd:6c:5a:06:cd:a1:8e:8b:a0:ee:1d:bf:5a:56: a7:28:92:4d:64:60:e0:ea:c4:a0:27:d1:e7:de:61: c8:89:3f:ef:a5:ce:52:06:90:20:b6:77:8e:78:07: bc:6c:5d:d9:c7:0b:35:96:c7:81:9e:c3:7e:27:7d: b3:a5:3e:88:b3:30:7e:04:cc:fe:42:7b:60:5b:34: 7d:13:6b:53:c1:35:87:e6:27:9d:93:2b:99:43:3a: aa:98:26:b9:ac:b2:51:39:84:2d:aa:98:13:20:3a: 1c:92:73:62:bd:ca:87:fa:eb:5d:9a:a8:6f:b7:f4: 0b:16:dc:9c:1f:e8:e9:42:7c:44:44:16:9e:63:e6: 78:d2:61:ac:37:ea:51:be:0e:a5:35:13:4d:e3:9f: aa:29:f2:44:fc:41:fe:23:c0:33:e7:2b:b6:0e:f5: 95:79:d4:e3:34:94:fc:1f:d7:a4:19:98:92:cf:3d: 8a:3e:bb:18:8c:6f:08:d1:02:db:19:1c:77:a9:4e: f5:4d:e6:2f:4f:08:9f:3e:9a:6e:04:76:34:f3:b1: 08:b1:fb:d4:44:0a:53:2c:9f:3c:f9:ef:96:5a:2d: 73:31:98:f9:80:9c:32:ce:09:92:47:91:5b:1e:ad: 01:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D3:D6:2A:3E:31:07:CE:5A:C5:9F:A9:3E:86:37:CB:C8:DF:98:62 X509v3 Authority Key Identifier: keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/V9PWKj4xB85axZ-pPoY3y8jfmGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.20.0/22 IPv6: 2a07:3c00::/29 Signature Algorithm: sha256WithRSAEncryption 3f:29:34:fe:4c:45:3e:ec:f0:7d:75:0c:e6:4f:55:fe:e5:0d: 7f:b9:cd:c9:ab:a6:a1:a5:bd:e6:06:e0:87:40:54:27:03:5b: 93:1d:40:89:7f:71:f1:0a:ea:3d:42:0d:b8:84:f5:0c:f9:0f: 07:6d:59:f4:e9:84:c7:d8:bf:3e:1b:29:e2:3e:4a:8b:87:85: 05:78:8e:8a:3c:b3:71:29:e3:7c:4c:da:f8:ba:33:69:04:a7: 3c:8b:7b:62:b0:83:52:2b:43:d0:62:92:18:57:8a:e4:ba:a0: 56:af:c8:34:31:90:b8:ac:e8:1a:c7:d2:39:5b:78:9a:7b:05: 57:75:d8:21:a4:82:1c:15:c7:65:8c:73:f5:3a:52:bb:cc:4d: 27:e4:93:b0:ac:b0:aa:d2:23:1d:f5:b7:9a:d9:94:c5:7f:7c: e5:7e:a6:60:cd:87:f4:a7:f7:fa:26:f8:24:ef:2c:01:e1:bc: 00:d9:05:de:5c:13:45:77:f7:b5:69:62:03:e0:58:b7:b1:a6: 73:cd:ab:53:93:23:ea:fe:05:11:3e:9a:37:27:f8:6c:41:46: 40:3f:9a:63:1b:9f:44:69:b2:58:a4:f3:2c:c7:b6:39:b0:9b: 36:fc:eb:d8:45:0d:48:41:2a:20:5a:d7:67:ef:88:25:d6:08: ab:47:28:64 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87Oy+O48cgsvO+Itc2UyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNTk3YTRiMGZlNDg2ZTZlNWM4NWI5ZWUwM2U3MjliZGVj N2U3YmQwHhcNMjYwMTAyMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2QzZDYyYTNlMzEwN2NlNWFjNTlmYTkzZTg2MzdjYmM4ZGY5ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJRvmGMxjcu88QY0tWa/WxaBs2h joug7h2/WlanKJJNZGDg6sSgJ9Hn3mHIiT/vpc5SBpAgtneOeAe8bF3Zxws1lseB nsN+J32zpT6IszB+BMz+QntgWzR9E2tTwTWH5iedkyuZQzqqmCa5rLJROYQtqpgT IDocknNivcqH+utdmqhvt/QLFtycH+jpQnxERBaeY+Z40mGsN+pRvg6lNRNN45+q KfJE/EH+I8Az5yu2DvWVedTjNJT8H9ekGZiSzz2KPrsYjG8I0QLbGRx3qU71TeYv TwifPppuBHY087EIsfvURApTLJ88+e+WWi1zMZj5gJwyzgmSR5FbHq0BzQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFfT1io+MQfOWsWfqT6GN8vI35hiMB8GA1UdIwQY MBaAFHtZeksP5Ibm5chbnuA+cpvex+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYt ZTdhMzgyNzUwYmI5LzEvVjlQV0tqNHhCODVheFotcFBvWTN5OGpmbUdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMDQ2MzYtYjI5NS00YWM4LWE4NmYtZTdhMzgyNzUwYmI5 LzEvZTFsNlN3X2todWJseUZ1ZTRENXltOTdINTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYwUMA0E AgACMAcDBQMqBzwAMA0GCSqGSIb3DQEBCwUAA4IBAQA/KTT+TEU+7PB9dQzmT1X+ 5Q1/uc3Jq6ahpb3mBuCHQFQnA1uTHUCJf3HxCuo9Qg24hPUM+Q8HbVn06YTH2L8+ GyniPkqLh4UFeI6KPLNxKeN8TNr4ujNpBKc8i3tisINSK0PQYpIYV4rkuqBWr8g0 MZC4rOgax9I5W3iaewVXddghpIIcFcdljHP1OlK7zE0n5JOwrLCq0iMd9bea2ZTF f3zlfqZgzYf0p/f6Jvgk7ywB4bwA2QXeXBNFd/e1aWID4Fi3saZzzatTkyPq/gUR Ppo3J/hsQUZAP5pjG59EabJYpPMsx7Y5sJs2/OvYRQ1IQSogWtdn74gl1girRyhk -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:59 2026 by rpki-client