This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa File: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (raw, json) Hash identifier: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ= Subject key identifier: 8C:9E:F8:9A:99:BC:07:5A:72:BD:3D:4C:36:10:AD:49:ED:1C:C5:19 Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609 Certificate serial: 019B7910060C2358B0EDC53FDA16F1D9BA00 Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210175 IP address blocks: 185.160.141.0/24 maxlen: 24 2a0d:1580:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:06:0c:23:58:b0:ed:c5:3f:da:16:f1:d9:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609 Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c9ef89a99bc075a72bd3d4c3610ad49ed1cc519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:55:bf:4b:b3:24:8a:2c:0c:de:bd:1d:ff:22: 14:ab:76:bd:68:b0:52:fa:99:9a:cd:e6:ad:23:a5: e9:ad:c2:fe:40:6a:0e:bf:a6:a4:df:70:ea:25:41: e4:c8:ca:1f:dd:67:7b:b1:db:1b:66:f6:d6:b4:55: 38:58:ba:ed:37:a4:05:fa:cd:28:2b:c0:c4:ec:dd: aa:63:63:1c:b8:77:12:cc:fe:b0:fc:a5:50:25:78: 75:6e:19:76:9e:54:7f:a1:b2:44:f0:02:95:38:30: bd:47:a5:17:a4:89:4f:5b:5e:8c:4e:19:a1:26:f3: 45:f2:d2:76:8a:52:1c:2f:f5:bb:ec:e2:21:0e:b1: 76:61:54:a4:88:42:3b:36:c0:4c:2d:21:e0:30:99: a0:8d:4d:06:1a:4a:58:74:ea:0f:9a:0e:03:65:81: b3:a8:d4:c8:e9:17:c1:5f:a9:dd:c8:4b:c1:b1:73: 2e:ad:67:08:35:ab:9c:32:2a:d3:64:dc:3b:0f:ba: 08:20:de:4c:7e:42:b5:85:3d:81:b1:68:e1:70:7b: 72:28:99:4c:a5:3d:a9:0e:29:37:20:2d:96:b6:da: ba:c3:2c:c7:2e:d5:da:11:94:9b:96:e0:4d:55:36: c2:e2:fb:fe:d9:33:2a:78:c0:91:e4:16:f7:94:76: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:F8:9A:99:BC:07:5A:72:BD:3D:4C:36:10:AD:49:ED:1C:C5:19 X509v3 Authority Key Identifier: keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.141.0/24 IPv6: 2a0d:1580:30::/48 Signature Algorithm: sha256WithRSAEncryption 97:8c:09:85:1b:aa:ac:24:ef:62:e8:7c:ec:41:e5:85:e8:bf: a5:ce:1b:0c:ab:49:de:8b:5c:3d:4b:58:d9:83:6b:da:de:df: 4e:46:86:5b:85:d7:57:45:64:5d:fe:50:9a:4c:80:03:6d:1f: 86:d9:f8:5b:30:28:25:fa:bd:1d:d9:06:0a:a1:71:ab:c4:32: 21:ae:fa:36:b3:c1:3a:92:96:93:72:79:a2:cb:9c:e4:e7:73: 75:28:37:43:08:ee:0c:30:a2:ed:b6:a0:ca:66:79:0e:26:80: 7c:a7:c4:51:47:a1:b3:54:cf:d3:8b:1f:0f:5d:f6:7d:b1:2a: 82:6f:65:04:48:93:ca:53:7c:58:88:35:d3:6e:7e:cc:e5:2f: 91:a0:23:1e:4a:f4:30:ac:ab:0d:eb:5f:32:ba:64:4b:bd:23: 87:10:47:90:18:9b:4d:7b:f2:61:55:8d:27:db:20:bf:ac:11: 28:e0:9c:6c:cd:de:69:1a:aa:33:94:22:b9:0f:0d:98:01:15: 57:c6:4d:fa:f3:0f:93:53:1d:4e:92:12:10:9a:81:2b:f0:24: 4e:c2:00:29:c7:43:5c:cc:d2:9f:d5:a9:7d:ef:0d:24:0b:7d: bb:74:91:41:5f:e4:82:8a:c2:0c:e9:2f:ce:8e:f8:bc:18:54: 08:0c:fb:0d -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EAYMI1iw7cU/2hbx2boAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODZhODY0MzYzM2U5ODc0MTExYThiY2YzNTE4YTA5MDVm Mjg2MDkwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzllZjg5YTk5YmMwNzVhNzJiZDNkNGMzNjEwYWQ0OWVkMWNjNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FW/S7MkiiwM3r0d/yIUq3a9aLBS +pmazeatI6XprcL+QGoOv6ak33DqJUHkyMof3Wd7sdsbZvbWtFU4WLrtN6QF+s0o K8DE7N2qY2McuHcSzP6w/KVQJXh1bhl2nlR/obJE8AKVODC9R6UXpIlPW16MThmh JvNF8tJ2ilIcL/W77OIhDrF2YVSkiEI7NsBMLSHgMJmgjU0GGkpYdOoPmg4DZYGz qNTI6RfBX6ndyEvBsXMurWcINaucMirTZNw7D7oIIN5MfkK1hT2BsWjhcHtyKJlM pT2pDik3IC2Wttq6wyzHLtXaEZSbluBNVTbC4vv+2TMqeMCR5Bb3lHZikQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIye+JqZvAdacr09TDYQrUntHMUZMB8GA1UdIwQY MBaAFLWGqGQ2M+mHQRGovPNRigkF8oYJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMt NDQ5OWUzMjM5ZjFmLzEvako3NG1wbThCMXB5dlQxTU5oQ3RTZTBjeFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8yMGNjYWMtMzNlZS00NWRjLWJjOWMtNDQ5OWUzMjM5ZjFm LzEvdFlhb1pEWXo2WWRCRWFpODgxR0tDUVh5aGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuaCNMA8E AgACMAkDBwAqDRWAADAwDQYJKoZIhvcNAQELBQADggEBAJeMCYUbqqwk72LofOxB 5YXov6XOGwyrSd6LXD1LWNmDa9re305GhluF11dFZF3+UJpMgANtH4bZ+FswKCX6 vR3ZBgqhcavEMiGu+jazwTqSlpNyeaLLnOTnc3UoN0MI7gwwou22oMpmeQ4mgHyn xFFHobNUz9OLHw9d9n2xKoJvZQRIk8pTfFiINdNufszlL5GgIx5K9DCsqw3rXzK6 ZEu9I4cQR5AYm0178mFVjSfbIL+sESjgnGzN3mkaqjOUIrkPDZgBFVfGTfrzD5NT HU6SEhCagSvwJE7CACnHQ1zM0p/VqX3vDSQLfbt0kUFf5IKKwgzpL86O+LwYVAgM +w0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:30 2026 by rpki-client