This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/44Stl3msveF1YCvCfN2G3HepMdM.roa File: 44Stl3msveF1YCvCfN2G3HepMdM.roa (raw, json) Hash identifier: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s= Subject key identifier: E3:84:AD:97:79:AC:BD:E1:75:60:2B:C2:7C:DD:86:DC:77:A9:31:D3 Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Certificate serial: 019B7EA511A1D5F1F5E7BB9D102DDF360148 Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/44Stl3msveF1YCvCfN2G3HepMdM.roa Signing time: Fri 02 Jan 2026 12:18:25 +0000 ROA not before: Fri 02 Jan 2026 12:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56443 IP address blocks: 185.105.58.0/24 maxlen: 24 185.128.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:11:a1:d5:f1:f5:e7:bb:9d:10:2d:df:36:01:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522 Validity Not Before: Jan 2 12:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e384ad9779acbde175602bc27cdd86dc77a931d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ba:96:41:46:e6:fe:f1:61:21:16:ff:27:50: a3:61:df:de:01:77:e7:12:7a:50:c3:63:8a:f2:a0: 1e:f3:2a:86:01:8c:2c:bc:1c:17:6f:11:d6:fd:5c: 6c:f7:47:cc:8e:e1:b3:75:e5:f6:62:db:bb:76:68: 04:2d:68:0d:88:49:e9:01:6e:dd:b4:7c:9d:95:71: 74:25:20:db:57:ad:6c:43:f8:45:d1:9e:ee:dc:81: 4d:78:cd:7a:ae:6f:a6:ce:6a:e1:0d:d6:14:a3:8f: dc:c6:61:9b:e8:7e:3e:bf:2c:3e:9f:ad:e8:23:da: 94:d5:6e:1f:90:84:9a:d5:9c:92:bc:55:6e:d9:30: e8:bf:12:0b:79:bd:e6:23:ce:5b:d1:dc:5f:ac:27: 7b:db:67:c0:3a:ff:05:cd:e9:f0:86:1c:ce:d7:4c: a1:e0:ef:59:15:d0:54:87:e3:f0:b7:d1:64:39:51: 79:bc:01:ef:7a:5d:ae:47:98:c6:c2:10:6a:97:93: a9:f1:a0:48:b1:ca:88:11:98:a8:d0:93:de:f6:c1: 0c:5e:20:3c:d7:93:eb:03:91:4f:f4:25:da:29:1b: 3c:e7:54:89:0d:b4:80:ce:90:a2:5b:45:8b:f7:87: 72:e0:51:20:67:d2:c6:8c:ab:04:1b:60:84:6a:8a: aa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:84:AD:97:79:AC:BD:E1:75:60:2B:C2:7C:DD:86:DC:77:A9:31:D3 X509v3 Authority Key Identifier: keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/44Stl3msveF1YCvCfN2G3HepMdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.58.0/24 185.128.132.0/23 Signature Algorithm: sha256WithRSAEncryption ad:93:91:cc:fa:ff:30:0c:5d:ba:79:d5:09:2b:d6:a6:8b:36: 83:a1:5f:d3:6a:4d:16:b9:cb:aa:61:f5:7d:f4:52:34:c9:d5: ae:66:08:5a:fc:d5:81:c4:75:76:e3:2e:cc:07:b1:a9:98:b9: 27:d1:d7:85:9b:14:3c:8a:ef:66:64:ce:d7:48:68:8a:d9:f7: 5a:01:9b:5d:98:d6:25:16:2a:0c:73:e0:5e:72:76:b4:c6:ff: 2b:0c:87:43:ed:6f:48:7e:11:ab:7b:a1:53:7f:f0:f9:b7:0f: 9b:7f:95:e5:6a:c6:e8:e2:16:d2:82:18:26:6b:fa:2b:ef:23: bc:da:ae:b8:54:09:57:7a:df:00:a1:63:67:87:b4:48:4b:15: 69:ec:56:0c:50:da:91:51:59:35:59:21:8f:9c:3e:84:a9:36: 35:56:b4:a7:74:b0:3f:5e:26:d1:0b:7f:9f:e7:6f:4e:83:9d: 2a:66:af:22:c2:1d:a1:d8:a8:0a:89:58:6e:75:fc:9a:52:5b: 3d:e2:37:30:f7:bc:ba:51:c6:80:84:cd:c5:c9:7d:45:21:10: 53:2d:5f:d0:ac:bc:91:35:18:ab:f0:7e:cb:d5:2f:5b:c5:b7: 7d:27:62:e5:08:e3:29:ff:07:af:14:a7:af:69:69:c7:0d:15: b6:8f:ed:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pRGh1fH157udEC3fNgFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh YTg1MjIwHhcNMjYwMTAyMTIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzg0YWQ5Nzc5YWNiZGUxNzU2MDJiYzI3Y2RkODZkYzc3YTkzMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbqWQUbm/vFhIRb/J1CjYd/eAXfn EnpQw2OK8qAe8yqGAYwsvBwXbxHW/Vxs90fMjuGzdeX2Ytu7dmgELWgNiEnpAW7d tHydlXF0JSDbV61sQ/hF0Z7u3IFNeM16rm+mzmrhDdYUo4/cxmGb6H4+vyw+n63o I9qU1W4fkISa1ZySvFVu2TDovxILeb3mI85b0dxfrCd722fAOv8FzenwhhzO10yh 4O9ZFdBUh+Pwt9FkOVF5vAHvel2uR5jGwhBql5Op8aBIscqIEZio0JPe9sEMXiA8 15PrA5FP9CXaKRs851SJDbSAzpCiW0WL94dy4FEgZ9LGjKsEG2CEaoqqwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOOErZd5rL3hdWArwnzdhtx3qTHTMB8GA1UdIwQY MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt NzBhMWFmNTFkZmJlLzEvNDRTdGwzbXN2ZUYxWUN2Q2ZOMkczSGVwTWRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWk6AwQB uYCEMA0GCSqGSIb3DQEBCwUAA4IBAQCtk5HM+v8wDF26edUJK9amizaDoV/Tak0W ucuqYfV99FI0ydWuZgha/NWBxHV24y7MB7GpmLkn0deFmxQ8iu9mZM7XSGiK2fda AZtdmNYlFioMc+Becna0xv8rDIdD7W9IfhGre6FTf/D5tw+bf5Xlasbo4hbSghgm a/or7yO82q64VAlXet8AoWNnh7RISxVp7FYMUNqRUVk1WSGPnD6EqTY1VrSndLA/ XibRC3+f529Og50qZq8iwh2h2KgKiVhudfyaUls94jcw97y6UcaAhM3FyX1FIRBT LV/QrLyRNRir8H7L1S9bxbd9J2LlCOMp/wevFKevaWnHDRW2j+3p -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:46 2026 by rpki-client