This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/bTd9b59X3xCVqHskXGvrFeaO9v8.roa File: bTd9b59X3xCVqHskXGvrFeaO9v8.roa (raw, json) Hash identifier: EN2goF9sb3IS/bx2WJv29WoAXPuGDZ3/PX98KuSaxyM= Subject key identifier: 6D:37:7D:6F:9F:57:DF:10:95:A8:7B:24:5C:6B:EB:15:E6:8E:F6:FF Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b Certificate serial: 019B7EA4EECACAF4A9FD420692EDE28C6408 Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/bTd9b59X3xCVqHskXGvrFeaO9v8.roa Signing time: Fri 02 Jan 2026 12:18:16 +0000 ROA not before: Fri 02 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 394354 IP address blocks: 185.159.196.0/24 maxlen: 24 185.159.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.mft rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ee:ca:ca:f4:a9:fd:42:06:92:ed:e2:8c:64:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b Validity Not Before: Jan 2 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d377d6f9f57df1095a87b245c6beb15e68ef6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:cf:e8:90:1d:97:56:21:2f:9a:9e:a2:71: cc:d5:77:5b:f5:d7:4b:f6:d1:2d:fc:a9:75:40:a2: cf:a3:a3:82:94:ce:4a:00:b8:2e:9c:64:7d:3e:95: 1f:a2:c8:dd:6b:b7:18:70:bf:64:70:09:77:e2:9a: 10:ef:8a:69:90:b1:8e:6d:b4:65:d5:ef:45:3f:c3: c2:d7:09:b1:b2:cc:c4:e5:33:82:68:5b:60:fb:2d: 14:f8:72:45:12:54:01:23:e6:37:06:dc:73:84:c5: 10:df:36:d8:ef:de:d0:39:f3:bf:2c:09:bb:8d:0d: 1a:52:42:45:e9:d3:77:bc:0e:37:de:c5:57:42:04: 31:85:cd:3e:13:7b:49:52:9a:f6:4d:d2:24:59:7b: c9:b8:c9:6b:6a:f0:ba:74:59:f6:ce:64:79:eb:64: e4:a7:12:27:86:de:d4:76:1f:e0:c6:a4:e7:a0:38: d6:4a:b5:03:a7:12:ae:36:34:45:38:22:20:ca:9f: fc:f4:9b:1e:82:35:1d:2c:7d:11:e0:60:4f:a9:09: 9f:2e:5d:b1:ee:f4:25:f9:0c:d0:02:0b:5f:6c:fc: 5a:ca:fa:13:60:ac:01:ff:46:89:19:65:f8:8c:f0: 2d:c2:0d:1e:37:1a:7b:28:73:28:ea:87:e8:53:ca: 4c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:37:7D:6F:9F:57:DF:10:95:A8:7B:24:5C:6B:EB:15:E6:8E:F6:FF X509v3 Authority Key Identifier: keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/bTd9b59X3xCVqHskXGvrFeaO9v8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.196.0/24 185.159.198.0/24 Signature Algorithm: sha256WithRSAEncryption 97:22:f1:24:c3:8c:d8:7f:a3:13:d2:79:d8:b2:41:a7:bc:5f: c7:05:4c:83:22:45:bc:37:1f:b2:48:2d:32:3d:23:8f:fa:50: a1:b6:4d:d5:b2:9c:bb:3c:ce:08:2e:da:0f:a6:fe:5d:2a:80: 45:39:3c:c4:ef:9d:bd:97:00:ad:c5:7c:4e:21:3f:7a:d5:3e: bc:3e:ff:7d:d7:7a:7c:a0:7e:3b:b8:1f:24:81:6e:f6:e3:6c: eb:fc:2a:21:01:b5:37:46:70:76:a4:f3:cd:a3:f3:a0:b7:7d: d7:f8:53:01:0f:16:4b:80:10:1c:93:b7:d0:73:6c:e8:41:c6: 97:d3:36:bf:db:9c:c3:68:67:05:93:e4:20:92:db:9c:45:05: e5:e5:91:04:8d:4c:e0:d7:0f:4d:74:89:a3:50:3a:b1:c8:93: ed:48:9b:1c:e9:e9:56:78:89:fa:89:03:53:5c:5d:c2:3f:8b: 20:38:40:ce:9b:d9:c5:7f:f3:71:d3:a6:4f:ab:5b:28:1b:76: d4:79:34:62:58:80:0b:64:0a:84:15:60:4f:45:f6:fc:6d:fc: 49:b5:45:87:7d:92:13:05:dd:bd:ab:36:77:e1:e4:2c:0a:7e: ab:98:ad:be:11:6a:92:28:ee:9e:53:c7:2c:f9:4c:c0:c6:76: 3a:fe:a2:90 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pO7KyvSp/UIGku3ijGQIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2JkZTc1ZDUzNmU5MWIyOGEyMzQ2OTM0OWQxY2YyOGI4 ODRhM2IwHhcNMjYwMTAyMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDM3N2Q2ZjlmNTdkZjEwOTVhODdiMjQ1YzZiZWIxNWU2OGVmNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJfP6JAdl1YhL5qeonHM1Xdb9ddL 9tEt/Kl1QKLPo6OClM5KALgunGR9PpUfosjda7cYcL9kcAl34poQ74ppkLGObbRl 1e9FP8PC1wmxsszE5TOCaFtg+y0U+HJFElQBI+Y3BtxzhMUQ3zbY797QOfO/LAm7 jQ0aUkJF6dN3vA433sVXQgQxhc0+E3tJUpr2TdIkWXvJuMlravC6dFn2zmR562Tk pxInht7Udh/gxqTnoDjWSrUDpxKuNjRFOCIgyp/89JsegjUdLH0R4GBPqQmfLl2x 7vQl+QzQAgtfbPxayvoTYKwB/0aJGWX4jPAtwg0eNxp7KHMo6ofoU8pMEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG03fW+fV98Qlah7JFxr6xXmjvb/MB8GA1UdIwQY MBaAFOXL3nXVNukbKKI0aTSdHPKLiEo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYt ZmNlYWNiZDczODQ1LzEvYlRkOWI1OVgzeENWcUhza1hHdnJGZWFPOXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wMTVlOTAtNTIwNC00ZDA5LThiMjYtZmNlYWNiZDczODQ1 LzEvNWN2ZWRkVTI2UnNvb2pScE5KMGM4b3VJU2pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZ/EAwQA uZ/GMA0GCSqGSIb3DQEBCwUAA4IBAQCXIvEkw4zYf6MT0nnYskGnvF/HBUyDIkW8 Nx+ySC0yPSOP+lChtk3Vspy7PM4ILtoPpv5dKoBFOTzE7529lwCtxXxOIT961T68 Pv9913p8oH47uB8kgW7242zr/CohAbU3RnB2pPPNo/Ogt33X+FMBDxZLgBAck7fQ c2zoQcaX0za/25zDaGcFk+QgktucRQXl5ZEEjUzg1w9NdImjUDqxyJPtSJsc6elW eIn6iQNTXF3CP4sgOEDOm9nFf/Nx06ZPq1soG3bUeTRiWIALZAqEFWBPRfb8bfxJ tUWHfZITBd29qzZ34eQsCn6rmK2+EWqSKO6eU8cs+UzAxnY6/qKQ -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:15 2026 by rpki-client