This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa File: dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa (raw, json) Hash identifier: SLk8Y+y9+rWVkNqKhTbWNpjrcVoW5RWdkt0Yj1ZsWoc= Subject key identifier: 75:61:2C:C6:16:46:B8:A8:17:51:7D:CB:6F:1D:91:2C:41:57:EF:B6 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE0494AE7C71677344131A34517CA Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8896 IP address blocks: 185.41.241.0/24 maxlen: 24 185.152.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e0:49:4a:e7:c7:16:77:34:41:31:a3:45:17:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75612cc61646b8a817517dcb6f1d912c4157efb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:5e:a5:43:dc:a3:94:53:a9:71:fc:05:31: 07:1f:8b:a0:ce:c1:bc:d5:e4:04:28:7a:f2:9a:68: 8b:c4:8d:c6:6e:2a:8a:df:db:82:84:55:a7:33:2a: 2b:af:d8:3b:ab:b8:d2:35:72:7c:ef:5d:87:43:d6: e9:24:1a:04:5a:e2:e6:41:32:a6:cb:1e:19:88:5d: e6:f5:23:21:7f:c4:e2:84:54:5e:d4:9c:57:00:6a: ac:60:8b:f3:d0:f4:64:88:6e:40:c9:53:81:55:09: 66:21:a1:ba:f3:4a:66:71:5d:71:23:cf:a2:65:0c: 89:4e:98:4b:54:13:4b:1f:c5:10:09:aa:be:09:0b: 44:47:61:c5:ea:86:f4:ef:f5:e2:f3:4b:2e:67:f1: f9:f4:64:a3:38:58:90:75:51:1d:25:8f:10:1c:31: 6a:0f:bc:68:a4:7e:61:b0:95:5b:13:9e:b0:61:a5: 41:c6:c9:42:35:85:d9:95:3c:7a:22:1b:64:e4:e2: 5b:a3:f2:de:33:a2:5e:17:c6:d0:f1:28:bd:13:fd: ee:b9:10:c8:e7:07:53:a4:ea:7f:89:d6:de:a3:5f: e6:fd:71:79:d9:a8:76:79:8c:e4:b3:23:27:fe:75: de:35:0b:d7:fd:1f:98:0f:ce:11:19:dd:81:c7:dd: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:2C:C6:16:46:B8:A8:17:51:7D:CB:6F:1D:91:2C:41:57:EF:B6 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/dWEsxhZGuKgXUX3Lbx2RLEFX77Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.241.0/24 185.152.33.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f8:51:7b:c0:76:44:18:18:9a:9c:ce:70:94:e0:04:f8:9d: 83:8b:bf:90:d8:86:2e:9e:d1:f4:d4:37:24:9e:ba:ea:2f:4f: 73:39:26:83:cc:93:b6:ca:e9:ca:c8:99:17:78:89:45:9f:a9: 2a:f7:32:a1:3f:6a:4e:a7:5e:d6:19:a7:25:39:3f:9a:79:d4: f3:f5:80:2f:e4:d0:fb:e8:7b:30:fe:14:80:d9:d3:73:87:17: 39:b1:9d:fa:46:79:cb:a1:9e:5d:4e:a1:93:a8:57:e7:3d:d2: f3:8d:c9:de:cf:85:92:ab:10:ba:e6:18:71:7e:71:fe:c2:4b: 90:b6:0b:9a:16:97:28:0e:c2:4d:f7:f4:36:1f:e0:1f:4a:6b: 24:34:6a:73:88:4b:15:54:c3:90:85:81:53:36:dc:a6:49:1c: 08:0f:ee:84:3b:e0:46:25:a8:f1:c6:a8:67:22:1e:b6:a3:3d: e5:5c:33:c8:44:fd:8c:1f:52:c3:6f:48:9e:3b:49:c2:ae:73: e4:7d:4d:43:bd:f0:78:a1:ab:2d:d5:18:1e:5b:cb:f4:7c:58: 01:78:a7:b5:29:ac:ec:1d:30:e3:3b:d0:9c:7f:72:8f:8e:ea: 93:47:92:c3:59:0c:e5:3c:b0:cc:53:9a:c2:b3:48:e6:99:2e: f4:32:17:a4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87OBJSufHFnc0QTGjRRfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTYxMmNjNjE2NDZiOGE4MTc1MTdkY2I2ZjFkOTEyYzQxNTdlZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJepUPco5RTqXH8BTEHH4ugzsG8 1eQEKHrymmiLxI3GbiqK39uChFWnMyorr9g7q7jSNXJ8712HQ9bpJBoEWuLmQTKm yx4ZiF3m9SMhf8TihFRe1JxXAGqsYIvz0PRkiG5AyVOBVQlmIaG680pmcV1xI8+i ZQyJTphLVBNLH8UQCaq+CQtER2HF6ob07/Xi80suZ/H59GSjOFiQdVEdJY8QHDFq D7xopH5hsJVbE56wYaVBxslCNYXZlTx6Ihtk5OJbo/LeM6JeF8bQ8Si9E/3uuRDI 5wdTpOp/idbeo1/m/XF52ah2eYzksyMn/nXeNQvX/R+YD84RGd2Bx91cKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHVhLMYWRrioF1F9y28dkSxBV++2MB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvZFdFc3hoWkd1S2dYVVgzTGJ4MlJMRUZYNzdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuSnxAwQA uZghMA0GCSqGSIb3DQEBCwUAA4IBAQAl+FF7wHZEGBianM5wlOAE+J2Di7+Q2IYu ntH01DcknrrqL09zOSaDzJO2yunKyJkXeIlFn6kq9zKhP2pOp17WGaclOT+aedTz 9YAv5ND76Hsw/hSA2dNzhxc5sZ36RnnLoZ5dTqGTqFfnPdLzjcnez4WSqxC65hhx fnH+wkuQtguaFpcoDsJN9/Q2H+AfSmskNGpziEsVVMOQhYFTNtymSRwID+6EO+BG JajxxqhnIh62oz3lXDPIRP2MH1LDb0ieO0nCrnPkfU1DvfB4oast1RgeW8v0fFgB eKe1KazsHTDjO9Ccf3KPjuqTR5LDWQzlPLDMU5rCs0jmmS70Mhek -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:18 2026 by rpki-client