This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/S66f2Gul6I0fFXwc0F6Uwsxne9U.roa File: S66f2Gul6I0fFXwc0F6Uwsxne9U.roa (raw, json) Hash identifier: NavMROKg+QjDM1u2vWxChfQLt+8NvkpuOrMKOryHnhk= Subject key identifier: 4B:AE:9F:D8:6B:A5:E8:8D:1F:15:7C:1C:D0:5E:94:C2:CC:67:7B:D5 Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Certificate serial: 019B7C1257A0910BF22FCAFDC2A92DEB00A2 Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/S66f2Gul6I0fFXwc0F6Uwsxne9U.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57324 IP address blocks: 93.187.32.0/24 maxlen: 24 93.187.33.0/24 maxlen: 24 93.187.34.0/24 maxlen: 24 93.187.35.0/24 maxlen: 24 93.187.36.0/24 maxlen: 24 93.187.37.0/24 maxlen: 24 93.187.38.0/24 maxlen: 24 93.187.39.0/24 maxlen: 24 185.52.117.0/24 maxlen: 24 185.52.118.0/24 maxlen: 24 185.52.119.0/24 maxlen: 24 2a00:dd00:3::/48 maxlen: 48 2a00:dd00:4::/48 maxlen: 48 2a00:dd00:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:57:a0:91:0b:f2:2f:ca:fd:c2:a9:2d:eb:00:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bae9fd86ba5e88d1f157c1cd05e94c2cc677bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a3:11:c0:8c:c3:19:8d:ca:c1:28:78:6d:eb: 7f:ff:28:a8:72:81:3e:02:8c:46:4b:e5:14:ec:4e: a2:81:e4:b0:9d:af:52:32:ea:67:b4:3c:e7:5a:6d: e2:2b:95:84:20:9f:cc:8a:13:36:f7:bc:47:81:fb: 3f:d0:c2:e0:43:8c:73:9b:48:b3:9e:7d:b7:c2:47: ba:1f:6f:ec:a2:58:33:b2:92:c4:6c:9d:c2:4e:62: e8:a4:74:b6:34:fd:1a:a8:f8:d2:1a:18:04:d3:82: 7e:5e:b8:06:c2:4e:47:3f:a1:2d:4e:ad:58:b4:2e: 66:94:92:36:a6:dd:fa:8b:e1:6e:08:5b:42:e9:c6: d7:05:b5:5b:03:fe:e4:09:34:83:11:eb:48:b8:1d: 0b:4e:2e:5c:16:b6:ce:27:e6:59:c4:bd:98:86:92: 66:a9:ab:0c:bb:80:9c:99:1c:59:f6:e3:34:17:ff: b0:11:db:bb:63:e2:3e:e1:9b:de:8c:c8:12:3f:9b: c3:e8:d5:ce:f4:20:5b:a6:f9:b5:b7:bd:e2:8c:0f: 37:1c:0f:59:17:78:3d:40:a1:62:64:de:43:c5:16: 5b:a8:62:b6:e7:2b:13:45:6a:e4:3e:0b:23:bf:61: eb:20:3f:ec:39:07:02:e1:11:06:b1:e7:fd:2b:75: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AE:9F:D8:6B:A5:E8:8D:1F:15:7C:1C:D0:5E:94:C2:CC:67:7B:D5 X509v3 Authority Key Identifier: keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/S66f2Gul6I0fFXwc0F6Uwsxne9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.32.0/21 185.52.117.0-185.52.119.255 IPv6: 2a00:dd00:3::-2a00:dd00:4:ffff:ffff:ffff:ffff:ffff 2a00:dd00:6::/48 Signature Algorithm: sha256WithRSAEncryption 76:bc:47:dd:0e:8b:f3:94:23:ee:2c:e0:2d:d7:b9:99:33:d0: e8:d3:ef:d2:95:3d:d5:72:87:af:d5:21:2a:d9:13:b9:09:9f: b7:0c:34:9f:61:1b:35:35:57:81:5a:da:49:7e:6e:67:28:46: 3d:8e:27:10:20:e0:7b:03:aa:d3:31:13:3b:b1:79:21:f4:fd: dc:b7:3c:8f:68:49:4a:39:e0:e1:5a:57:ca:74:a0:05:33:70: 38:16:cd:1b:15:ae:0c:0a:4f:55:11:d3:7f:e2:95:34:82:52: 57:4b:c6:9f:52:9e:9b:2b:19:d3:86:2b:84:5f:dd:b7:b2:59: 11:f6:9d:04:a2:55:88:2c:a5:fc:1a:b0:db:63:8d:f5:0a:d6: 2d:36:ca:93:0d:78:f3:26:a1:72:3d:8e:6a:85:c1:66:95:46: 6d:5b:7d:32:39:0f:0d:a1:99:2f:97:66:24:b8:dc:08:35:fd: fd:f9:44:23:77:5d:e0:a7:3e:e0:45:c5:3a:de:5b:b5:ca:6d: eb:88:af:3d:83:fb:1a:c7:af:fd:7d:26:89:b1:7e:6a:36:38: 9f:c0:d1:60:0b:bf:5a:30:7a:1b:94:c1:4e:f0:65:c8:ae:ad: ef:a9:94:c6:6f:91:4f:47:75:d2:99:70:4f:ba:a2:46:fc:81: 3b:1b:ab:ff -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt8ElegkQvyL8r9wqkt6wCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMDJiMThmNTg4YTUwYjkyNzRmZTM0NjlmZjhiZDRhMTY0 OWQ3NGQwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmFlOWZkODZiYTVlODhkMWYxNTdjMWNkMDVlOTRjMmNjNjc3YmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKMRwIzDGY3KwSh4bet//yiocoE+ AoxGS+UU7E6igeSwna9SMupntDznWm3iK5WEIJ/MihM297xHgfs/0MLgQ4xzm0iz nn23wke6H2/solgzspLEbJ3CTmLopHS2NP0aqPjSGhgE04J+XrgGwk5HP6EtTq1Y tC5mlJI2pt36i+FuCFtC6cbXBbVbA/7kCTSDEetIuB0LTi5cFrbOJ+ZZxL2YhpJm qasMu4CcmRxZ9uM0F/+wEdu7Y+I+4ZvejMgSP5vD6NXO9CBbpvm1t73ijA83HA9Z F3g9QKFiZN5DxRZbqGK25ysTRWrkPgsjv2HrID/sOQcC4REGsef9K3XavwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFEuun9hrpeiNHxV8HNBelMLMZ3vVMB8GA1UdIwQY MBaAFNwCsY9YilC5J0/jRp/4vUoWSddNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQt NjY0ZjA0ZDJhNjhkLzEvUzY2ZjJHdWw2STBmRlh3YzBGNlV3c3huZTlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jODYxYzgtYzg5YS00MDQzLWEwMmQtNjY0ZjA0ZDJhNjhk LzEvM0FLeGoxaUtVTGtuVC1OR25faTlTaFpKMTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAaBAIAATAUAwQDXbsgMAwD BAC5NHUDBAO5NHAwIwQCAAIwHTASAwcAKgDdAAADAwcAKgDdAAAEAwcAKgDdAAAG MA0GCSqGSIb3DQEBCwUAA4IBAQB2vEfdDovzlCPuLOAt17mZM9Do0+/SlT3Vcoev 1SEq2RO5CZ+3DDSfYRs1NVeBWtpJfm5nKEY9jicQIOB7A6rTMRM7sXkh9P3ctzyP aElKOeDhWlfKdKAFM3A4Fs0bFa4MCk9VEdN/4pU0glJXS8afUp6bKxnThiuEX923 slkR9p0EolWILKX8GrDbY431CtYtNsqTDXjzJqFyPY5qhcFmlUZtW30yOQ8NoZkv l2YkuNwINf39+UQjd13gpz7gRcU63lu1ym3riK89g/sax6/9fSaJsX5qNjifwNFg C79aMHoblMFO8GXIrq3vqZTGb5FPR3XSmXBPuqJG/IE7G6v/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:04 2026 by rpki-client