This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/tIWXntXKAgFX0o2CV5R3EvscJgw.roa File: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (raw, json) Hash identifier: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE= Subject key identifier: B4:85:97:9E:D5:CA:02:01:57:D2:8D:82:57:94:77:12:FB:1C:26:0C Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d Certificate serial: 019B79EC4A869AA824F964A4EB17239184A3 Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/tIWXntXKAgFX0o2CV5R3EvscJgw.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208000 IP address blocks: 185.139.50.0/24 maxlen: 24 185.139.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4a:86:9a:a8:24:f9:64:a4:eb:17:23:91:84:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b485979ed5ca020157d28d8257947712fb1c260c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:32:91:c2:55:b1:5a:af:79:df:3f:20:38: 72:5d:c2:51:86:f3:78:d4:7f:80:e3:d5:9a:48:5a: a5:d7:7a:be:a2:21:06:2c:45:64:5c:77:1c:31:cb: 02:be:5a:e9:96:37:89:f2:68:39:7a:b1:f0:b1:1a: 0c:e7:a6:32:63:79:20:08:a7:7c:d3:b2:4b:ac:88: a3:f0:b4:ba:7c:8a:52:4a:80:fc:10:e9:52:cb:d1: d1:fd:ed:d6:8b:6d:ce:bd:28:29:36:50:40:ed:6e: a7:5a:f4:4c:49:ce:fc:76:b8:86:bf:c2:1c:d2:aa: 91:bc:3b:a9:64:e9:34:95:10:a6:7d:51:a5:33:6d: 80:63:c6:6e:95:6d:d7:c6:b9:64:84:57:d5:2a:ee: 7a:eb:e6:db:6d:69:67:44:f1:eb:1b:28:a6:ae:53: 23:fe:0a:99:a0:6f:22:50:09:72:91:df:dc:14:ba: b3:5f:7b:52:fd:4b:88:6b:a6:ee:0f:22:52:5b:cd: b6:22:a3:e4:45:52:fa:b0:36:62:67:91:b2:75:ca: f1:75:2a:cc:0f:8d:78:e9:4c:13:34:6e:37:ca:22: 1a:88:f1:90:fb:61:5c:4f:4f:44:92:24:60:78:e9: 06:71:42:73:e6:f2:f9:ed:bc:3c:56:60:89:50:7d: e0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:97:9E:D5:CA:02:01:57:D2:8D:82:57:94:77:12:FB:1C:26:0C X509v3 Authority Key Identifier: keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/tIWXntXKAgFX0o2CV5R3EvscJgw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.50.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:56:f9:c2:14:e5:85:ad:1d:81:3f:0d:81:5b:4c:77:4b:20: 9b:14:a4:75:d3:c3:d1:d6:15:06:f1:02:fc:e4:ae:a7:5e:95: 6c:aa:ef:7b:d8:ea:67:51:1a:4d:eb:a9:b1:a8:0e:8e:c9:dd: a7:e2:5e:e0:1a:85:13:65:bc:4e:ef:53:22:8b:5d:7f:7d:e9: 5a:e1:de:ea:4b:cc:9a:e4:fe:b8:82:a8:71:3e:60:a8:5e:ba: 65:c7:19:a8:c1:89:27:3f:d8:e0:80:bf:9c:b9:a9:69:6b:cd: 43:ec:71:61:22:74:eb:43:fb:9f:b7:aa:38:43:b2:45:f6:09: 17:da:df:f8:b0:e1:f4:af:b0:3f:36:01:50:c9:e9:9d:09:8c: 83:12:48:8d:05:9a:4d:41:66:2c:a3:d4:6d:9c:34:5c:90:09: 67:96:65:29:b5:f2:61:4e:7c:e5:fd:51:ef:c3:a7:ca:cd:a4: 42:51:fb:af:02:d5:ec:f3:e7:d1:bf:9a:59:78:42:b6:52:2c: 10:76:49:de:df:51:3b:5c:6b:60:ec:6c:99:93:cb:72:a0:fd: d9:5e:af:73:ac:12:5c:93:c7:b2:9c:f2:11:5a:c1:61:a4:c0: 4c:26:8f:f4:8c:01:c6:17:3a:64:ac:68:80:ca:67:32:81:4d: 19:ed:63:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EqGmqgk+WSk6xcjkYSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz MmEwNWQwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDg1OTc5ZWQ1Y2EwMjAxNTdkMjhkODI1Nzk0NzcxMmZiMWMyNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWsykcJVsVqved8/IDhyXcJRhvN4 1H+A49WaSFql13q+oiEGLEVkXHccMcsCvlrpljeJ8mg5erHwsRoM56YyY3kgCKd8 07JLrIij8LS6fIpSSoD8EOlSy9HR/e3Wi23OvSgpNlBA7W6nWvRMSc78driGv8Ic 0qqRvDupZOk0lRCmfVGlM22AY8ZulW3XxrlkhFfVKu566+bbbWlnRPHrGyimrlMj /gqZoG8iUAlykd/cFLqzX3tS/UuIa6buDyJSW822IqPkRVL6sDZiZ5GydcrxdSrM D4146UwTNG43yiIaiPGQ+2FcT09EkiRgeOkGcUJz5vL57bw8VmCJUH3gmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSFl57VygIBV9KNgleUdxL7HCYMMB8GA1UdIwQY MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt NWEwNmY3ODg3ZGJkLzEvdElXWG50WEtBZ0ZYMG8yQ1Y1UjNFdnNjSmd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYsyMA0G CSqGSIb3DQEBCwUAA4IBAQBaVvnCFOWFrR2BPw2BW0x3SyCbFKR108PR1hUG8QL8 5K6nXpVsqu972OpnURpN66mxqA6Oyd2n4l7gGoUTZbxO71Mii11/fela4d7qS8ya 5P64gqhxPmCoXrplxxmowYknP9jggL+cualpa81D7HFhInTrQ/uft6o4Q7JF9gkX 2t/4sOH0r7A/NgFQyemdCYyDEkiNBZpNQWYso9RtnDRckAlnlmUptfJhTnzl/VHv w6fKzaRCUfuvAtXs8+fRv5pZeEK2UiwQdkne31E7XGtg7GyZk8tyoP3ZXq9zrBJc k8eynPIRWsFhpMBMJo/0jAHGFzpkrGiAymcygU0Z7WOU -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:58 2026 by rpki-client