This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/CiXzPWmke5n548-SbTCFdFEYvdY.roa File: CiXzPWmke5n548-SbTCFdFEYvdY.roa (raw, json) Hash identifier: neMp5JrpOzLPa+wb8gpytOuldw6oEOTtfnGZtatHKXc= Subject key identifier: 0A:25:F3:3D:69:A4:7B:99:F9:E3:CF:92:6D:30:85:74:51:18:BD:D6 Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Certificate serial: 019B7DCABE16544EAC3B4981A70A7D6E420A Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/CiXzPWmke5n548-SbTCFdFEYvdY.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197726 IP address blocks: 185.112.12.0/23 maxlen: 23 185.112.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:be:16:54:4e:ac:3b:49:81:a7:0a:7d:6e:42:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a25f33d69a47b99f9e3cf926d3085745118bdd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:21:d0:d2:9c:fd:9f:cd:5d:f4:76:e8:2f: 27:4e:b0:ed:05:56:f2:01:a4:a7:e8:fa:76:81:62: 00:97:bd:1d:02:59:20:82:aa:56:8f:33:42:02:e2: 6a:bd:dc:88:b0:f3:d7:a3:3a:5d:1b:39:dc:17:4a: 8e:02:dc:e5:4f:a8:6f:cd:f0:d3:ef:94:7c:01:06: a0:96:3e:88:d8:67:c0:18:ff:53:29:db:08:be:83: 65:1f:c6:f6:35:73:45:fb:af:1c:85:bf:a7:66:d8: fe:7e:3e:cb:e3:d5:0c:99:d6:e5:a6:93:8a:a8:f3: 3c:dd:da:41:a1:2e:36:07:51:71:d8:2f:eb:4c:5c: 4b:88:78:c1:83:96:68:91:c6:6c:fd:42:f4:46:82: 77:6e:a4:7e:9f:3e:e7:58:13:db:98:15:a9:6f:63: 3a:d1:fe:4b:ab:7e:f2:86:63:14:75:0d:0e:c8:25: 1f:76:e1:84:95:ab:c7:94:2a:92:93:35:94:2e:7a: d8:07:a1:40:9c:ed:60:47:99:85:b3:75:2b:98:60: 76:b8:e5:20:c7:1a:57:cc:95:62:53:b9:4a:0f:dc: d2:f1:08:56:6c:20:f0:eb:5f:d7:58:0e:64:31:4a: 94:ab:54:60:ba:d0:2c:e2:a1:63:d3:a1:de:3d:df: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:25:F3:3D:69:A4:7B:99:F9:E3:CF:92:6D:30:85:74:51:18:BD:D6 X509v3 Authority Key Identifier: keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/CiXzPWmke5n548-SbTCFdFEYvdY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.12.0/22 Signature Algorithm: sha256WithRSAEncryption 49:71:ed:8e:36:13:e3:c3:c6:b4:9e:30:58:4e:3c:0a:a7:4a: 62:c0:9f:6b:1f:75:5c:2e:49:ee:fc:c7:00:bd:34:ff:61:04: 18:c8:12:bb:72:51:f1:b5:e7:e8:02:02:44:f6:7c:2b:e4:77: 9a:76:0d:2b:74:a4:70:46:c9:a6:13:fc:fb:38:8d:28:55:e9: 4a:74:0d:24:c0:e0:30:33:a7:c4:07:e1:1e:e7:3e:26:25:8e: 82:74:73:6f:47:a3:dc:3f:3a:a7:40:85:b8:8f:fe:6b:c9:cc: e8:a4:92:9a:f4:df:fb:85:d6:00:93:a1:40:ee:2e:40:d4:c7: a0:45:82:81:89:c4:87:c6:00:92:a0:c1:ba:06:bd:32:2f:9b: 91:da:ef:5f:2b:43:1f:c3:6f:7e:60:c5:b1:08:c8:f7:17:ef: 0f:a9:8d:38:07:ba:f1:4b:29:a0:c3:92:a4:cb:0a:9a:3a:c6: ec:72:3e:62:ba:41:14:a3:ba:68:4d:2d:f5:72:db:3f:3b:7b: 2d:37:ab:fd:d9:db:cc:f2:8c:e8:4c:c6:fb:23:f5:42:74:94: 75:ef:37:6c:bb:c3:5c:d7:02:d2:5c:d4:14:db:cb:35:32:30: 12:77:ea:c8:97:c0:da:03:eb:e4:f0:7f:69:08:09:4b:17:b4: 7e:7b:a7:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yr4WVE6sO0mBpwp9bkIKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTc0YzI4NzhkNmI1MzYxMzliODk1ZjA4YzljNmRiMThl MTJhOWIwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTI1ZjMzZDY5YTQ3Yjk5ZjllM2NmOTI2ZDMwODU3NDUxMThiZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAoh0NKc/Z/NXfR26C8nTrDtBVby AaSn6Pp2gWIAl70dAlkggqpWjzNCAuJqvdyIsPPXozpdGzncF0qOAtzlT6hvzfDT 75R8AQaglj6I2GfAGP9TKdsIvoNlH8b2NXNF+68chb+nZtj+fj7L49UMmdblppOK qPM83dpBoS42B1Fx2C/rTFxLiHjBg5ZokcZs/UL0RoJ3bqR+nz7nWBPbmBWpb2M6 0f5Lq37yhmMUdQ0OyCUfduGElavHlCqSkzWULnrYB6FAnO1gR5mFs3UrmGB2uOUg xxpXzJViU7lKD9zS8QhWbCDw61/XWA5kMUqUq1RgutAs4qFj06HePd9bVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAol8z1ppHuZ+ePPkm0whXRRGL3WMB8GA1UdIwQY MBaAFOBXTCh41rU2E5uJXwjJxtsY4SqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUt NDQ2MDE5OTY2YTE5LzEvQ2lYelBXbWtlNW41NDgtU2JUQ0ZkRkVZdmRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8yOGQ2MDAtYTg2OS00YWIxLTliMmUtNDQ2MDE5OTY2YTE5 LzEvNEZkTUtIald0VFlUbTRsZkNNbkcyeGpoS3BzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXAMMA0G CSqGSIb3DQEBCwUAA4IBAQBJce2ONhPjw8a0njBYTjwKp0piwJ9rH3VcLknu/McA vTT/YQQYyBK7clHxtefoAgJE9nwr5Headg0rdKRwRsmmE/z7OI0oVelKdA0kwOAw M6fEB+Ee5z4mJY6CdHNvR6PcPzqnQIW4j/5ryczopJKa9N/7hdYAk6FA7i5A1Meg RYKBicSHxgCSoMG6Br0yL5uR2u9fK0Mfw29+YMWxCMj3F+8PqY04B7rxSymgw5Kk ywqaOsbscj5iukEUo7poTS31cts/O3stN6v92dvM8ozoTMb7I/VCdJR17zdsu8Nc 1wLSXNQU28s1MjASd+rIl8DaA+vk8H9pCAlLF7R+e6cf -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:06 2026 by rpki-client