This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/ISm6RQxOZnxLUyH-R-CphPRNqZo.roa File: ISm6RQxOZnxLUyH-R-CphPRNqZo.roa (raw, json) Hash identifier: T+YGLuiGKtWgSDHKqlkXSycewSm5xaVhDYtV47JELiM= Subject key identifier: 21:29:BA:45:0C:4E:66:7C:4B:53:21:FE:47:E0:A9:84:F4:4D:A9:9A Certificate issuer: /CN=1a879de1c75fbbd2c31d1d90814056f27d57d776 Certificate serial: 019B7AC8A9E6D570F35967AC2369A63F6E9D Authority key identifier: 1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/ISm6RQxOZnxLUyH-R-CphPRNqZo.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48206 IP address blocks: 185.142.40.0/24 maxlen: 24 185.142.41.0/24 maxlen: 24 185.142.42.0/24 maxlen: 24 185.142.43.0/24 maxlen: 24 185.142.43.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a9:e6:d5:70:f3:59:67:ac:23:69:a6:3f:6e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a879de1c75fbbd2c31d1d90814056f27d57d776 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2129ba450c4e667c4b5321fe47e0a984f44da99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:04:d8:a4:04:e1:46:2f:6e:3a:03:60:da: ff:b9:cf:2a:cb:28:e6:03:82:43:3d:c1:0d:a5:23: ae:47:18:f3:c5:16:75:9e:5f:35:8e:ef:42:f7:ab: fc:6d:53:c3:85:eb:01:31:fe:e7:10:a1:77:b1:f7: 28:31:53:6f:28:45:40:4f:27:d5:99:90:a8:bc:89: 93:af:41:1c:47:34:75:43:3e:cb:41:0b:7d:40:a2: 45:93:22:75:12:13:a9:5d:25:f7:03:12:02:f8:52: 29:6c:76:18:6f:11:aa:16:5b:5a:05:3d:ba:35:7e: 1b:05:dd:d4:7d:49:21:8b:d6:3a:06:fc:26:59:05: 6f:97:56:22:3b:72:27:91:3f:bd:08:e4:ff:41:04: 18:29:9e:25:63:37:10:32:01:30:ae:c9:1d:d1:be: 77:51:6b:ba:28:6b:3c:f6:c2:65:2b:21:03:86:70: a5:c4:6e:38:4c:19:97:99:81:60:dd:1c:31:73:f2: c2:19:9a:9e:d7:5a:71:7d:8c:c4:58:04:b9:13:e5: 01:e9:82:d7:52:2a:9f:f8:d9:48:0c:77:54:8d:4a: 30:4d:1e:30:d1:e8:11:9f:4d:f1:c8:91:e5:d2:92: 3d:89:1f:cb:03:c8:53:57:93:43:5d:e4:5b:e6:8e: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:29:BA:45:0C:4E:66:7C:4B:53:21:FE:47:E0:A9:84:F4:4D:A9:9A X509v3 Authority Key Identifier: keyid:1A:87:9D:E1:C7:5F:BB:D2:C3:1D:1D:90:81:40:56:F2:7D:57:D7:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goed4cdfu9LDHR2QgUBW8n1X13Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/ISm6RQxOZnxLUyH-R-CphPRNqZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6a6313-8546-4031-be9b-8b2ebe4e29ce/1/Goed4cdfu9LDHR2QgUBW8n1X13Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.40.0/22 Signature Algorithm: sha256WithRSAEncryption 86:6f:61:9a:6c:06:aa:76:8c:a2:3c:4c:6f:6c:8c:48:c8:65: e7:6c:74:45:4c:00:8b:75:e5:af:b3:ce:b4:08:29:47:0b:3e: a7:49:e1:8a:fc:fb:50:ee:71:3d:9e:88:fd:37:b0:a3:b0:45: c1:ca:24:ee:a1:c8:26:45:48:aa:97:69:e2:dd:07:4a:f5:5f: 8d:d5:d7:37:8f:b9:0f:f3:f5:e1:50:91:3a:ea:77:4d:aa:1f: 04:51:84:d4:a4:e1:08:ed:24:c2:08:10:85:82:aa:a2:59:78: a3:37:3a:96:c3:09:d4:6d:10:49:26:15:bc:6d:53:c3:a5:f8: fb:a1:ad:83:11:0f:2c:45:8c:41:3b:b3:ac:50:7e:c8:4f:ab: 6f:58:1e:ca:37:7e:f5:df:27:2d:5c:bc:be:33:e7:84:34:39: 4f:44:e1:71:ef:72:27:e1:51:5e:32:ea:1f:81:d8:46:74:f7: e1:23:c3:0a:a7:8e:21:85:6f:42:99:ea:f7:6f:6e:94:8e:d9: 9c:df:f5:a0:82:eb:9e:ee:00:91:9a:43:9b:f1:f7:2a:0a:b8: 57:fb:78:ae:13:86:47:08:33:ae:46:94:53:59:e0:6c:6b:7e: 78:8a:f9:6f:7a:15:53:94:d4:49:69:bc:cd:84:d6:f9:a7:fa: 99:28:74:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKnm1XDzWWesI2mmP26dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhODc5ZGUxYzc1ZmJiZDJjMzFkMWQ5MDgxNDA1NmYyN2Q1 N2Q3NzYwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTI5YmE0NTBjNGU2NjdjNGI1MzIxZmU0N2UwYTk4NGY0NGRhOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/YE2KQE4UYvbjoDYNr/uc8qyyjm A4JDPcENpSOuRxjzxRZ1nl81ju9C96v8bVPDhesBMf7nEKF3sfcoMVNvKEVATyfV mZCovImTr0EcRzR1Qz7LQQt9QKJFkyJ1EhOpXSX3AxIC+FIpbHYYbxGqFltaBT26 NX4bBd3UfUkhi9Y6BvwmWQVvl1YiO3InkT+9COT/QQQYKZ4lYzcQMgEwrskd0b53 UWu6KGs89sJlKyEDhnClxG44TBmXmYFg3Rwxc/LCGZqe11pxfYzEWAS5E+UB6YLX Uiqf+NlIDHdUjUowTR4w0egRn03xyJHl0pI9iR/LA8hTV5NDXeRb5o6q7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEpukUMTmZ8S1Mh/kfgqYT0TamaMB8GA1UdIwQY MBaAFBqHneHHX7vSwx0dkIFAVvJ9V9d2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWIt OGIyZWJlNGUyOWNlLzEvSVNtNlJReE9abnhMVXlILVItQ3BoUFJOcVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82YTYzMTMtODU0Ni00MDMxLWJlOWItOGIyZWJlNGUyOWNl LzEvR29lZDRjZGZ1OUxESFIyUWdVQlc4bjFYMTNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY4oMA0G CSqGSIb3DQEBCwUAA4IBAQCGb2GabAaqdoyiPExvbIxIyGXnbHRFTACLdeWvs860 CClHCz6nSeGK/PtQ7nE9noj9N7CjsEXByiTuocgmRUiql2ni3QdK9V+N1dc3j7kP 8/XhUJE66ndNqh8EUYTUpOEI7STCCBCFgqqiWXijNzqWwwnUbRBJJhW8bVPDpfj7 oa2DEQ8sRYxBO7OsUH7IT6tvWB7KN3713yctXLy+M+eENDlPROFx73In4VFeMuof gdhGdPfhI8MKp44hhW9Cmer3b26Ujtmc3/Wgguue7gCRmkOb8fcqCrhX+3iuE4ZH CDOuRpRTWeBsa354ivlvehVTlNRJabzNhNb5p/qZKHS4 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:40 2026 by rpki-client