This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/flQssGcGnPHhqNGkKwTNsJejaeQ.roa File: flQssGcGnPHhqNGkKwTNsJejaeQ.roa (raw, json) Hash identifier: 7MK/e6VIAjwZyf2enbWUdzme5SKLDGdFufR5UtJ+Iyo= Subject key identifier: 7E:54:2C:B0:67:06:9C:F1:E1:A8:D1:A4:2B:04:CD:B0:97:A3:69:E4 Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b Certificate serial: 019B7759169B0D4919DC8C2B723C05594CD1 Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/flQssGcGnPHhqNGkKwTNsJejaeQ.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206353 IP address blocks: 185.186.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:9b:0d:49:19:dc:8c:2b:72:3c:05:59:4c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e542cb067069cf1e1a8d1a42b04cdb097a369e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:05:e6:8d:5c:ec:ff:f0:0b:8e:c4:3a:e9: d2:dc:75:25:db:3e:32:c3:35:99:24:de:99:25:d0: cb:b0:45:5a:20:e3:82:56:56:74:a7:0d:55:d0:21: b4:45:7a:31:2e:b3:8a:04:79:1c:13:0f:ef:e0:1c: f5:61:6b:6c:20:2b:8f:7b:b4:fb:bc:97:b4:d7:e3: e8:eb:62:8a:59:ca:8f:72:f8:a3:be:03:88:a0:94: 86:f8:be:00:99:db:1b:df:9b:af:0f:f0:5b:13:ae: 2e:2c:18:26:77:5d:a3:50:73:5c:0d:63:fd:21:f6: 47:fb:71:f3:10:6e:15:6b:28:76:97:ff:ea:38:4a: 05:37:32:c2:97:82:cd:4c:7e:c6:92:2e:99:31:e6: f0:e8:f7:41:ba:45:46:cd:92:51:14:7d:3b:70:dc: ad:3e:f6:27:59:37:91:98:74:4b:eb:50:ad:8a:1f: fe:a4:d0:6a:c0:65:bc:fd:02:06:0f:ef:08:72:fe: ee:40:75:db:c0:01:0d:87:2c:3d:08:ce:67:bb:15: bc:2c:6c:c5:6f:95:ca:b9:77:a8:a7:43:2f:36:2e: ce:8c:a7:79:dd:99:f4:11:68:5b:97:8a:30:30:b7: 5a:70:60:dc:8b:39:73:be:7f:18:f9:91:32:56:b1: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:2C:B0:67:06:9C:F1:E1:A8:D1:A4:2B:04:CD:B0:97:A3:69:E4 X509v3 Authority Key Identifier: keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/flQssGcGnPHhqNGkKwTNsJejaeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.128.0/24 Signature Algorithm: sha256WithRSAEncryption b2:4b:7f:75:57:3a:c8:77:30:6c:0d:54:ee:33:bf:c9:67:4f: 87:67:7a:25:f8:c2:76:ed:aa:3e:19:82:68:a0:16:89:0a:8a: 2a:27:e6:76:a0:2d:bf:69:15:07:7a:d3:95:a8:65:c4:16:d2: 6b:dd:f4:b2:a2:81:a8:05:ba:5f:07:f2:43:ff:b0:06:73:6a: b3:d5:8c:8d:a7:21:67:08:15:5f:ac:72:bc:6a:21:e1:26:5f: 4c:1b:2b:21:f9:cb:df:27:83:8a:fb:93:e0:c9:d5:44:eb:d4: af:e6:87:14:3c:c9:20:ab:e9:6a:68:43:1d:65:39:51:89:47: d4:8d:96:da:e4:d1:ac:3e:e2:ff:ce:de:9b:4d:97:3d:7a:15: c8:95:c5:c9:41:ad:3f:f5:25:83:51:0a:da:ec:91:f1:92:59: fc:93:f4:c7:5d:de:5a:da:83:8a:62:5a:a8:88:38:ad:49:7a: 8f:60:a2:bd:b6:6b:41:ee:db:89:76:7c:fd:76:e6:09:f1:57: 34:21:e8:93:2f:b6:e1:a3:df:e6:71:ec:0e:08:81:26:3a:6a: 9e:e7:0e:c5:b6:25:88:ec:fd:70:dc:92:25:15:b9:0f:12:22: 6b:69:b4:47:f7:84:8a:81:17:f9:63:86:03:7d:bb:0a:01:c4: 0f:67:3c:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRabDUkZ3IwrcjwFWUzRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YTg1NTA2NTliYjY4ZTc3MGQ4YjAxMjZiNzI2MWZiODdk ODI0MGIwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTU0MmNiMDY3MDY5Y2YxZTFhOGQxYTQyYjA0Y2RiMDk3YTM2OWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoigF5o1c7P/wC47EOunS3HUl2z4y wzWZJN6ZJdDLsEVaIOOCVlZ0pw1V0CG0RXoxLrOKBHkcEw/v4Bz1YWtsICuPe7T7 vJe01+Po62KKWcqPcvijvgOIoJSG+L4Amdsb35uvD/BbE64uLBgmd12jUHNcDWP9 IfZH+3HzEG4Vayh2l//qOEoFNzLCl4LNTH7Gki6ZMebw6PdBukVGzZJRFH07cNyt PvYnWTeRmHRL61Ctih/+pNBqwGW8/QIGD+8Icv7uQHXbwAENhyw9CM5nuxW8LGzF b5XKuXeop0MvNi7OjKd53Zn0EWhbl4owMLdacGDcizlzvn8Y+ZEyVrFPmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5ULLBnBpzx4ajRpCsEzbCXo2nkMB8GA1UdIwQY MBaAFDioVQZZu2jncNiwEmtyYfuH2CQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEt MWQ3MDNiNDk2NjM0LzEvZmxRc3NHY0duUEhocU5Ha0t3VE5zSmVqYWVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEtMWQ3MDNiNDk2NjM0 LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubqAMA0G CSqGSIb3DQEBCwUAA4IBAQCyS391VzrIdzBsDVTuM7/JZ0+HZ3ol+MJ27ao+GYJo oBaJCooqJ+Z2oC2/aRUHetOVqGXEFtJr3fSyooGoBbpfB/JD/7AGc2qz1YyNpyFn CBVfrHK8aiHhJl9MGysh+cvfJ4OK+5PgydVE69Sv5ocUPMkgq+lqaEMdZTlRiUfU jZba5NGsPuL/zt6bTZc9ehXIlcXJQa0/9SWDUQra7JHxkln8k/THXd5a2oOKYlqo iDitSXqPYKK9tmtB7tuJdnz9duYJ8Vc0IeiTL7bho9/mcewOCIEmOmqe5w7FtiWI 7P1w3JIlFbkPEiJrabRH94SKgRf5Y4YDfbsKAcQPZzzF -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:45 2026 by rpki-client