This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa File: dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa (raw, json) Hash identifier: FQBN+1FQkvOKlz8zc9u6RmD3hivGzzNsAeQ1Z6/0iFk= Subject key identifier: 75:FB:86:1C:2E:72:E8:2B:3A:3A:D2:8B:59:F9:C3:A8:B2:32:A6:9F Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019B7F15EAE65FBA5F1284998180E6FE4C7F Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208002 IP address blocks: 185.137.212.0/24 maxlen: 24 185.137.213.0/24 maxlen: 24 185.137.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ea:e6:5f:ba:5f:12:84:99:81:80:e6:fe:4c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75fb861c2e72e82b3a3ad28b59f9c3a8b232a69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:5b:0e:dd:e1:ce:04:5f:bc:a7:23:74:a6: 00:27:49:70:85:60:b6:6d:58:55:2f:a7:34:a5:4e: 12:8d:8d:7a:eb:4b:33:34:88:ae:5b:0f:c8:22:83: 13:32:5b:cc:b2:80:b6:57:63:d9:83:62:f8:bf:d9: 90:eb:53:f4:66:e2:c6:84:be:ba:c1:46:cc:51:75: 61:a3:60:3d:c1:c9:ea:67:55:71:cb:00:37:53:79: 0f:df:ea:8a:a9:f5:cd:29:46:3a:fb:70:03:30:ec: 61:17:5d:1f:63:53:55:68:42:06:19:dc:15:f8:d1: 77:51:40:b3:44:14:22:5d:f9:99:33:67:18:81:7c: 88:42:c5:b0:ad:41:8b:a3:8e:5b:e7:38:85:6e:55: 40:8b:35:e7:b9:f5:bf:2e:81:17:80:69:9a:5d:77: b1:2b:b2:f9:bb:54:d4:30:b2:21:2c:a8:d7:a8:3f: fe:d5:d3:d3:50:6d:c0:ec:ba:fd:e2:dd:27:d9:fb: ec:08:e3:95:21:c8:89:b6:8a:d5:49:53:c9:b5:49: dd:be:77:9d:71:44:3d:b6:07:bd:0d:76:a4:e0:fa: 2c:87:b6:c7:99:67:9d:42:47:17:a3:1b:a4:c3:17: 27:86:85:2a:71:4a:1f:e3:41:84:56:9b:9a:2e:f8: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FB:86:1C:2E:72:E8:2B:3A:3A:D2:8B:59:F9:C3:A8:B2:32:A6:9F X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/dfuGHC5y6Cs6OtKLWfnDqLIypp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.212.0-185.137.214.255 Signature Algorithm: sha256WithRSAEncryption b0:a3:f0:27:21:64:f1:7b:52:05:ca:98:5d:e4:a3:3e:c0:5a: 74:e6:be:9f:93:b1:2e:a1:41:50:9b:1a:44:c7:f2:88:b2:b1: e3:87:48:29:ea:d2:3a:3d:67:cd:e7:9e:d4:bf:43:73:c3:46: 9e:0a:e6:fb:c8:15:60:3c:af:77:b4:3c:7f:ce:10:e9:f6:62: 03:fc:63:1d:17:7a:23:11:04:37:23:c2:11:48:05:97:8e:0f: d5:40:7e:a8:d3:82:b8:ed:88:33:89:07:ff:42:72:03:7f:30: c2:b6:cd:14:ad:65:07:c1:7c:0f:80:65:0b:7f:be:3c:f2:00: 34:12:b3:ed:52:93:c0:5a:cf:c3:d6:a4:21:b0:59:1e:7e:eb: ae:2f:cf:14:e6:04:2f:70:d3:35:5d:99:be:4a:a2:11:c2:ca: b1:f8:95:94:21:df:62:91:14:4b:44:bb:62:c6:d7:a4:bb:35: 3d:33:e8:5f:34:dc:c2:7f:4a:3c:a4:30:1b:bc:3e:70:15:bc: 5d:06:9d:ba:f8:3c:0e:2c:00:36:3d:34:8d:43:e4:3f:42:fa: fd:a4:70:72:81:9a:80:3d:15:26:d7:be:bf:60:8d:79:c6:fa: 60:eb:0e:3b:ad:50:03:9e:6a:bd:33:fe:ee:ee:95:25:8f:69: 38:d0:50:56 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FermX7pfEoSZgYDm/kx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWZiODYxYzJlNzJlODJiM2EzYWQyOGI1OWY5YzNhOGIyMzJhNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWhbDt3hzgRfvKcjdKYAJ0lwhWC2 bVhVL6c0pU4SjY1660szNIiuWw/IIoMTMlvMsoC2V2PZg2L4v9mQ61P0ZuLGhL66 wUbMUXVho2A9wcnqZ1VxywA3U3kP3+qKqfXNKUY6+3ADMOxhF10fY1NVaEIGGdwV +NF3UUCzRBQiXfmZM2cYgXyIQsWwrUGLo45b5ziFblVAizXnufW/LoEXgGmaXXex K7L5u1TUMLIhLKjXqD/+1dPTUG3A7Lr94t0n2fvsCOOVIciJtorVSVPJtUndvned cUQ9tge9DXak4Posh7bHmWedQkcXoxukwxcnhoUqcUof40GEVpuaLvjpKwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHX7hhwucugrOjrSi1n5w6iyMqafMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvZGZ1R0hDNXk2Q3M2T3RLTFdmbkRxTEl5cHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5idQD BAC5idYwDQYJKoZIhvcNAQELBQADggEBALCj8CchZPF7UgXKmF3koz7AWnTmvp+T sS6hQVCbGkTH8oiyseOHSCnq0jo9Z83nntS/Q3PDRp4K5vvIFWA8r3e0PH/OEOn2 YgP8Yx0XeiMRBDcjwhFIBZeOD9VAfqjTgrjtiDOJB/9CcgN/MMK2zRStZQfBfA+A ZQt/vjzyADQSs+1Sk8Baz8PWpCGwWR5+664vzxTmBC9w0zVdmb5KohHCyrH4lZQh 32KRFEtEu2LG16S7NT0z6F803MJ/SjykMBu8PnAVvF0Gnbr4PA4sADY9NI1D5D9C +v2kcHKBmoA9FSbXvr9gjXnG+mDrDjutUAOear0z/u7ulSWPaTjQUFY= -----END CERTIFICATE-----Generated at Mon Jan 26 03:06:05 2026 by rpki-client