This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/1bQOLq12VlIMZXXolofAPH9O5cY.roa File: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (raw, json) Hash identifier: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw= Subject key identifier: D5:B4:0E:2E:AD:76:56:52:0C:65:75:E8:96:87:C0:3C:7F:4E:E5:C6 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019B7EA7135F435EC32FAFDE9C766260F22C Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/1bQOLq12VlIMZXXolofAPH9O5cY.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40368 IP address blocks: 185.150.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:5f:43:5e:c3:2f:af:de:9c:76:62:60:f2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b40e2ead7656520c6575e89687c03c7f4ee5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:34:af:af:b3:4b:ac:ca:98:2f:c3:a8:7c:76: 9a:a6:53:1b:3a:a5:32:ec:c3:8d:d3:96:71:c7:a5: 75:aa:36:6a:bc:be:52:3e:7d:a1:ee:e5:4e:21:b7: b7:c0:6d:c2:1c:3b:5b:b5:8d:fc:3e:c9:47:63:fa: 59:04:e5:8f:85:bb:36:eb:cc:62:b8:3c:fa:03:2f: d3:83:d8:e0:e3:0c:25:05:67:96:f2:91:c7:10:d6: a6:1b:30:7b:d2:a4:02:71:74:66:ea:6e:5c:c1:b7: 71:26:a8:64:65:17:bb:f0:f1:87:57:7c:62:4e:58: fe:df:24:9e:bf:ec:a5:88:aa:eb:2b:48:2c:d3:81: c4:33:e3:18:c6:7f:2b:f8:04:ef:69:dc:fa:52:95: 8e:ba:30:f7:90:5c:d5:72:7f:e8:ce:52:c2:8d:b1: 77:87:8b:68:95:a2:a5:af:53:90:ba:0c:42:af:20: 19:fe:39:49:fd:a4:36:96:e5:22:64:6c:d3:e3:86: d7:8e:f5:eb:7b:8c:ba:3b:2f:55:7b:42:86:f1:5d: 87:35:74:30:9c:8f:8a:dd:07:b8:31:9e:e5:a1:b5: aa:ad:73:83:bf:24:46:78:d6:91:ca:f8:4a:7e:9c: 39:76:56:75:49:51:42:c2:f0:f9:b8:fe:95:0b:a1: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B4:0E:2E:AD:76:56:52:0C:65:75:E8:96:87:C0:3C:7F:4E:E5:C6 X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/1bQOLq12VlIMZXXolofAPH9O5cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.130.0/24 Signature Algorithm: sha256WithRSAEncryption 45:0d:99:d7:86:d3:14:d0:11:d3:28:c1:de:52:9d:28:a2:0e: 62:6c:10:da:71:0c:e9:7f:56:de:d1:be:b1:c1:46:59:90:a1: c3:bd:f3:11:9d:2d:f3:aa:0d:5d:23:c6:2b:65:12:6e:17:52: 55:15:0c:87:a1:9a:96:94:ee:f6:39:34:38:da:a7:74:c4:6a: 4b:a3:54:0f:57:81:78:d4:08:92:5e:0a:0a:9c:c4:4b:f0:fb: a2:c1:d9:a5:10:79:aa:9a:7a:31:64:54:13:05:e8:79:4a:43: 3f:02:1a:dd:8e:5f:a7:65:d8:e9:da:a9:f5:93:ab:90:f8:c1: 23:4a:3d:cf:31:39:bc:58:d2:78:4b:de:5e:3f:56:da:4d:17: a9:4b:a9:07:04:94:3b:7f:c6:4f:ea:36:70:8a:f7:8b:a9:61: 93:88:ee:14:24:5a:00:aa:f2:cc:4b:9b:19:49:d7:88:75:3d: cc:e9:28:e8:f4:e4:59:3b:dd:e1:75:5c:0d:25:ef:9b:65:8d: 5d:60:14:0e:b8:85:66:31:b8:ba:ff:53:99:13:32:9f:fb:05: 68:ff:15:86:7b:4d:c7:31:fd:13:93:a7:a4:b5:d0:f7:21:10: 79:8b:7f:34:57:f9:1b:02:81:c8:02:cb:5c:17:fc:ac:ca:af: f4:c3:b7:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxNfQ17DL6/enHZiYPIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWI0MGUyZWFkNzY1NjUyMGM2NTc1ZTg5Njg3YzAzYzdmNGVlNWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DSvr7NLrMqYL8OofHaaplMbOqUy 7MON05Zxx6V1qjZqvL5SPn2h7uVOIbe3wG3CHDtbtY38PslHY/pZBOWPhbs268xi uDz6Ay/Tg9jg4wwlBWeW8pHHENamGzB70qQCcXRm6m5cwbdxJqhkZRe78PGHV3xi Tlj+3ySev+yliKrrK0gs04HEM+MYxn8r+ATvadz6UpWOujD3kFzVcn/ozlLCjbF3 h4tolaKlr1OQugxCryAZ/jlJ/aQ2luUiZGzT44bXjvXre4y6Oy9Ve0KG8V2HNXQw nI+K3Qe4MZ7lobWqrXODvyRGeNaRyvhKfpw5dlZ1SVFCwvD5uP6VC6Fl/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNW0Di6tdlZSDGV16JaHwDx/TuXGMB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvMWJRT0xxMTJWbElNWlhYb2xvZkFQSDlPNWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZaCMA0G CSqGSIb3DQEBCwUAA4IBAQBFDZnXhtMU0BHTKMHeUp0oog5ibBDacQzpf1be0b6x wUZZkKHDvfMRnS3zqg1dI8YrZRJuF1JVFQyHoZqWlO72OTQ42qd0xGpLo1QPV4F4 1AiSXgoKnMRL8PuiwdmlEHmqmnoxZFQTBeh5SkM/Ahrdjl+nZdjp2qn1k6uQ+MEj Sj3PMTm8WNJ4S95eP1baTRepS6kHBJQ7f8ZP6jZwiveLqWGTiO4UJFoAqvLMS5sZ SdeIdT3M6Sjo9ORZO93hdVwNJe+bZY1dYBQOuIVmMbi6/1OZEzKf+wVo/xWGe03H Mf0Tk6ektdD3IRB5i380V/kbAoHIAstcF/ysyq/0w7do -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:11 2026 by rpki-client