This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/dDB5YY9PZuYzIK0czNYk6awWuOU.roa File: dDB5YY9PZuYzIK0czNYk6awWuOU.roa (raw, json) Hash identifier: B1+NRVwOUhTIMmxV8tnE89O/MNjbHirt4Fghn1v7gaE= Subject key identifier: 74:30:79:61:8F:4F:66:E6:33:20:AD:1C:CC:D6:24:E9:AC:16:B8:E5 Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Certificate serial: 019B7CEDE469D0FEF4C505666F82289541FF Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/dDB5YY9PZuYzIK0czNYk6awWuOU.roa Signing time: Fri 02 Jan 2026 04:18:43 +0000 ROA not before: Fri 02 Jan 2026 04:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202354 IP address blocks: 185.239.178.0/24 maxlen: 24 185.239.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e4:69:d0:fe:f4:c5:05:66:6f:82:28:95:41:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89 Validity Not Before: Jan 2 04:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=743079618f4f66e63320ad1cccd624e9ac16b8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:e0:61:b4:3a:82:e8:e0:59:de:63:06:cc: 54:f7:e8:20:50:5a:e4:ad:b7:fa:58:2f:bc:cb:5e: ff:3e:25:31:e7:85:c6:8b:ba:7e:b7:b9:a4:89:fd: d7:2e:e8:74:94:7b:2e:2c:27:e1:4d:4d:33:28:5c: 10:50:03:f2:28:ab:06:e5:bc:5b:5c:0f:55:46:d3: 7d:41:ae:ae:f7:d5:3c:26:da:5a:8f:44:ea:d0:47: 00:01:f9:4a:ac:a3:05:82:c5:c6:e6:44:8e:4f:bd: 21:13:65:ad:69:b5:44:69:ac:87:f2:46:57:b9:55: a4:41:cb:bf:16:22:ad:e6:de:33:61:f9:e7:ba:17: ed:ad:19:14:73:cc:68:14:ae:37:6d:3b:db:ce:08: 8d:3a:70:36:cd:19:03:75:58:cb:a1:13:9c:23:ca: 5a:2f:71:60:3f:3f:f5:98:d2:ec:b3:48:e9:74:30: f9:8d:94:96:b1:c9:92:c8:58:8a:17:45:40:11:94: 64:ec:49:55:b4:51:43:3f:c7:e5:e1:d3:b9:89:49: b7:08:47:6c:f4:38:f8:c5:f1:01:b4:4b:cb:a9:b4: 1c:5d:28:0b:93:99:fb:69:33:be:f1:77:f9:1e:e1: 03:c5:41:e7:89:04:57:db:ed:1d:15:ea:f7:49:7a: 67:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:79:61:8F:4F:66:E6:33:20:AD:1C:CC:D6:24:E9:AC:16:B8:E5 X509v3 Authority Key Identifier: keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/dDB5YY9PZuYzIK0czNYk6awWuOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.178.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:80:79:de:83:4c:1e:86:07:ab:56:99:b0:a0:00:d4:02:3c: 5d:49:9e:f9:6e:0e:e1:69:14:f8:8a:9e:8d:0d:23:84:b7:b1: ef:aa:74:d8:3d:73:0e:a9:81:72:5e:9c:d8:86:a0:33:4b:54: a8:bc:93:70:32:2b:46:0f:f9:6b:0f:68:40:95:a1:e2:01:e6: b5:a0:9e:4f:91:b9:f2:e6:0e:78:1f:c1:37:3d:fc:4e:f7:39: bc:82:f8:58:7f:95:7a:7f:11:44:80:42:9d:65:89:a5:c2:b3: f7:c9:95:c9:fa:68:67:be:03:25:1c:50:1b:54:7d:f4:84:58: ff:33:5b:50:d9:02:85:0d:84:93:d8:30:a9:88:ea:27:e0:3d: a8:51:a6:2b:d9:af:6c:ae:5b:87:b2:00:78:6d:c9:04:9c:25: b6:5b:bb:fa:b9:c1:34:a8:83:3b:97:ca:54:a0:e8:a6:af:db: 80:27:b9:d3:e3:e8:b2:4e:10:b0:d3:49:7a:68:ca:9a:9b:c2: f4:c5:13:90:10:23:9e:30:d2:de:02:8d:20:24:b4:e5:6b:8c: 64:6d:5b:63:f3:18:51:5a:26:75:ce:09:6d:67:d0:bb:b3:ac: 3f:58:2e:46:86:92:34:61:36:10:73:85:7b:7d:d8:8d:da:3a: 14:bf:6f:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87eRp0P70xQVmb4IolUH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2 YjllODkwHhcNMjYwMTAyMDQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDMwNzk2MThmNGY2NmU2MzMyMGFkMWNjY2Q2MjRlOWFjMTZiOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjrgYbQ6gujgWd5jBsxU9+ggUFrk rbf6WC+8y17/PiUx54XGi7p+t7mkif3XLuh0lHsuLCfhTU0zKFwQUAPyKKsG5bxb XA9VRtN9Qa6u99U8Jtpaj0Tq0EcAAflKrKMFgsXG5kSOT70hE2WtabVEaayH8kZX uVWkQcu/FiKt5t4zYfnnuhftrRkUc8xoFK43bTvbzgiNOnA2zRkDdVjLoROcI8pa L3FgPz/1mNLss0jpdDD5jZSWscmSyFiKF0VAEZRk7ElVtFFDP8fl4dO5iUm3CEds 9Dj4xfEBtEvLqbQcXSgLk5n7aTO+8Xf5HuEDxUHniQRX2+0dFer3SXpnPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQweWGPT2bmMyCtHMzWJOmsFrjlMB8GA1UdIwQY MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt ZDc1ODY5YzBjNzFlLzEvZERCNVlZOVBadVl6SUswY3pOWWs2YXdXdU9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBue+yMA0G CSqGSIb3DQEBCwUAA4IBAQBKgHneg0wehgerVpmwoADUAjxdSZ75bg7haRT4ip6N DSOEt7HvqnTYPXMOqYFyXpzYhqAzS1SovJNwMitGD/lrD2hAlaHiAea1oJ5Pkbny 5g54H8E3PfxO9zm8gvhYf5V6fxFEgEKdZYmlwrP3yZXJ+mhnvgMlHFAbVH30hFj/ M1tQ2QKFDYST2DCpiOon4D2oUaYr2a9srluHsgB4bckEnCW2W7v6ucE0qIM7l8pU oOimr9uAJ7nT4+iyThCw00l6aMqam8L0xROQECOeMNLeAo0gJLTla4xkbVtj8xhR WiZ1zgltZ9C7s6w/WC5GhpI0YTYQc4V7fdiN2joUv2+s -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:51 2026 by rpki-client