This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa File: Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa (raw, json) Hash identifier: 6I0ghzBeN79J1UAgpVFm5cx7tXZBN44byXnGOpV99sA= Subject key identifier: 46:BC:3D:A3:75:82:A7:03:4E:11:86:15:B4:AF:30:1E:EF:D0:26:46 Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0 Certificate serial: 019B7CEE24AD1AFAB6D3239E00D0C259095C Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa Signing time: Fri 02 Jan 2026 04:19:00 +0000 ROA not before: Fri 02 Jan 2026 04:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50749 IP address blocks: 185.134.96.0/22 maxlen: 22 185.202.56.0/22 maxlen: 22 185.202.56.0/24 maxlen: 24 185.202.57.0/24 maxlen: 24 185.202.58.0/24 maxlen: 24 185.202.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:24:ad:1a:fa:b6:d3:23:9e:00:d0:c2:59:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46bc3da37582a7034e118615b4af301eefd02646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:24:8a:57:85:a0:c1:68:8e:ab:81:d1:b8: 4b:bf:26:06:21:96:3e:cc:eb:a8:13:15:b2:2f:3a: ca:91:6c:18:ea:2b:d3:76:06:13:67:d8:a6:07:12: 6e:fa:73:dd:94:f9:4c:83:8a:a3:08:e2:a0:28:d6: d7:f4:64:9a:07:ca:8d:ec:4b:b4:d6:fa:93:9b:00: 85:96:77:af:e5:57:23:26:3b:27:8c:cb:fa:71:09: 64:17:58:71:a7:f3:08:ec:ee:18:5d:95:76:f1:ff: c6:d9:bd:27:09:26:77:f1:6d:ad:8f:1f:0e:24:84: b9:64:d0:70:86:ad:da:06:13:99:ad:82:03:2b:e7: 42:30:17:4a:58:15:de:df:07:56:f6:c6:56:dc:63: a4:49:31:6e:c2:50:b0:76:b7:6c:84:63:5f:cd:d3: 9a:78:e3:0f:0f:1d:8d:62:c6:1e:35:54:2c:b3:3e: 26:26:db:bf:fc:e8:f5:4f:3c:07:4a:5b:3f:c4:6b: bf:b7:a7:a0:cf:fd:b0:3b:d5:f8:3b:49:c3:9a:9d: 6f:c2:86:68:e4:21:76:f3:9b:40:9a:f0:b1:5a:86: fc:5b:e3:db:72:b2:7d:68:98:55:bd:3d:49:96:6a: bd:d6:b2:c4:18:09:5d:14:0e:3f:3a:2a:db:a6:91: a5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BC:3D:A3:75:82:A7:03:4E:11:86:15:B4:AF:30:1E:EF:D0:26:46 X509v3 Authority Key Identifier: keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/Rrw9o3WCpwNOEYYVtK8wHu_QJkY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.96.0/22 185.202.56.0/22 Signature Algorithm: sha256WithRSAEncryption 94:8d:1d:83:77:0b:97:dd:cd:ea:57:c2:36:f8:cc:8c:3f:14: 08:6c:7a:65:86:64:36:40:9f:d5:1f:0b:43:2a:1a:06:88:6b: 97:e4:c1:7d:7f:44:de:36:3e:72:39:70:ac:a9:cc:c4:f6:98: 4a:70:d8:11:78:e6:d2:c9:b8:a9:51:70:e3:fa:41:60:9d:b6: e2:2f:42:d4:d9:be:6b:62:ad:c5:95:c6:aa:71:5c:b1:ee:3a: 09:41:56:7f:50:14:42:82:d2:e7:d3:f4:53:45:37:5c:5c:38: 52:be:be:f8:15:8e:bc:b0:9c:60:3b:70:3d:36:f4:75:60:db: d9:18:9f:c7:fc:64:db:cf:ff:58:cb:15:c3:d9:62:bd:3d:a9: b0:3c:5c:81:38:80:1e:e5:b6:10:4d:90:90:51:6f:64:d6:f2: dd:c1:b7:c3:64:33:00:3e:78:70:53:bd:d6:cd:9f:ca:93:d8: 5a:54:b4:30:b2:e9:ab:51:a7:3b:87:da:b1:91:fb:e7:3e:21: 6f:3a:e6:c8:2d:d0:ea:a9:98:58:cd:2a:8c:6d:03:fa:e0:95: a3:b2:01:98:57:29:d8:ae:ce:e6:f3:a6:d2:4d:98:6c:6f:19: 76:d7:7f:71:d0:09:75:b7:53:cb:1e:19:b1:29:90:dc:60:b8: 2d:80:7c:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87iStGvq20yOeANDCWQlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMDY0NGY3MDYyMWRkNGEyNGE3OGI2N2I0NjAyOTQ4NTcz NzU4YzAwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmJjM2RhMzc1ODJhNzAzNGUxMTg2MTViNGFmMzAxZWVmZDAyNjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSUkileFoMFojquB0bhLvyYGIZY+ zOuoExWyLzrKkWwY6ivTdgYTZ9imBxJu+nPdlPlMg4qjCOKgKNbX9GSaB8qN7Eu0 1vqTmwCFlnev5VcjJjsnjMv6cQlkF1hxp/MI7O4YXZV28f/G2b0nCSZ38W2tjx8O JIS5ZNBwhq3aBhOZrYIDK+dCMBdKWBXe3wdW9sZW3GOkSTFuwlCwdrdshGNfzdOa eOMPDx2NYsYeNVQssz4mJtu//Oj1TzwHSls/xGu/t6egz/2wO9X4O0nDmp1vwoZo 5CF285tAmvCxWob8W+PbcrJ9aJhVvT1Jlmq91rLEGAldFA4/OirbppGlMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEa8PaN1gqcDThGGFbSvMB7v0CZGMB8GA1UdIwQY MBaAFO4GRPcGId1KJKeLZ7RgKUhXN1jAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzkt MDBjZDVlYzAwZDExLzEvUnJ3OW8zV0Nwd05PRVlZVnRLOHdIdV9RSmtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wMmRhYzMtMzllYi00NjljLWFjYzktMDBjZDVlYzAwZDEx LzEvN2daRTl3WWgzVW9rcDR0bnRHQXBTRmMzV01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuYZgAwQC uco4MA0GCSqGSIb3DQEBCwUAA4IBAQCUjR2DdwuX3c3qV8I2+MyMPxQIbHplhmQ2 QJ/VHwtDKhoGiGuX5MF9f0TeNj5yOXCsqczE9phKcNgReObSybipUXDj+kFgnbbi L0LU2b5rYq3FlcaqcVyx7joJQVZ/UBRCgtLn0/RTRTdcXDhSvr74FY68sJxgO3A9 NvR1YNvZGJ/H/GTbz/9YyxXD2WK9PamwPFyBOIAe5bYQTZCQUW9k1vLdwbfDZDMA PnhwU73WzZ/Kk9haVLQwsumrUac7h9qxkfvnPiFvOubILdDqqZhYzSqMbQP64JWj sgGYVynYrs7m86bSTZhsbxl2139x0Al1t1PLHhmxKZDcYLgtgHwR -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:40 2026 by rpki-client