This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/ah_59veV9YghWbpFZMyNLGkp8ws.roa File: ah_59veV9YghWbpFZMyNLGkp8ws.roa (raw, json) Hash identifier: MPpvudguCL1cppkPduZLcvKZIj+pM7ZtMMe1JPdi1C4= Subject key identifier: 6A:1F:F9:F6:F7:95:F5:88:21:59:BA:45:64:CC:8D:2C:69:29:F3:0B Certificate issuer: /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Certificate serial: 019B7F82C0C1FA3E4BB47A17A6E4B68A65CF Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/ah_59veV9YghWbpFZMyNLGkp8ws.roa Signing time: Fri 02 Jan 2026 16:20:34 +0000 ROA not before: Fri 02 Jan 2026 16:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204536 IP address blocks: 185.87.180.0/22 maxlen: 22 185.87.180.0/24 maxlen: 24 185.87.181.0/24 maxlen: 24 185.87.182.0/24 maxlen: 24 185.87.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c0:c1:fa:3e:4b:b4:7a:17:a6:e4:b6:8a:65:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e Validity Not Before: Jan 2 16:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a1ff9f6f795f5882159ba4564cc8d2c6929f30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:b0:1d:27:1c:cf:28:bf:58:fc:4a:90:c8: 8e:60:41:46:69:b8:17:53:ef:ef:56:8a:d1:e8:4d: b0:b4:9a:0e:73:4e:c7:2d:68:0a:57:cb:58:a6:4d: 95:b4:53:f9:b3:03:ad:10:b9:48:33:8e:2b:28:08: 9b:f2:9f:96:89:71:a5:1e:67:19:af:b3:26:79:a2: 1b:75:dd:52:0c:7f:7d:a6:b5:98:2c:9c:b9:74:e5: a4:c1:9f:34:a8:01:96:d1:0f:09:a8:21:7b:f1:a3: a0:46:e2:fa:ae:6b:56:ca:1a:f1:75:cb:7f:71:5f: d1:3f:40:e1:89:ff:27:d8:9e:c1:cc:d2:2c:e8:30: 94:2f:8d:b1:b0:5e:3f:06:fb:0e:5f:0e:8b:57:b2: 5f:9c:f9:e9:00:4b:c7:ae:08:ab:04:fe:9c:cb:58: b5:2f:ef:e2:14:c1:63:21:7e:d9:74:fc:be:f8:69: b3:c6:1d:37:98:36:a1:a6:79:43:d2:13:d6:6d:36: cf:9d:a3:9a:0c:10:28:64:83:cc:68:32:2f:b5:34: dd:11:5a:b2:3e:93:1f:c1:87:8f:c4:00:bb:f5:58: 00:59:63:48:11:e9:05:a2:07:36:a5:38:a7:d5:ed: 4e:a6:56:22:a3:5c:56:f0:e9:73:0b:52:aa:52:d8: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1F:F9:F6:F7:95:F5:88:21:59:BA:45:64:CC:8D:2C:69:29:F3:0B X509v3 Authority Key Identifier: keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/ah_59veV9YghWbpFZMyNLGkp8ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.180.0/22 Signature Algorithm: sha256WithRSAEncryption 55:f3:67:ec:f5:00:87:47:42:c1:a2:d4:08:b6:be:70:96:6e: 7e:75:d8:d2:a3:53:6f:2b:d4:73:b5:d9:bf:14:a2:94:7e:bb: d1:38:e9:77:22:bf:ed:96:91:23:db:02:25:6b:f1:0f:af:b5: 24:d0:62:d5:b6:39:18:46:56:32:c1:44:aa:64:82:dc:b2:91: 5f:ee:40:62:7f:db:fe:7c:f8:05:07:86:4a:0b:94:ea:d5:8e: 9b:ae:30:25:37:06:75:77:1a:06:cc:62:54:45:75:28:c0:59: b3:0a:b7:15:b3:6d:e2:db:c1:ef:c6:a7:0a:40:7e:01:49:d7: 55:8e:64:ea:ab:dd:d1:01:ca:1a:ab:06:33:99:d5:67:06:8d: f0:ca:95:29:8a:06:9c:05:e7:13:05:06:21:dc:aa:de:16:fe: 5d:82:73:6e:d7:6f:5a:3f:a1:72:76:61:5d:c5:7e:34:7b:56: bb:f9:93:d9:24:ae:3b:2b:0a:7e:0a:b3:25:f6:cf:e9:04:9a: c6:49:4b:c9:de:2a:ef:36:58:e3:38:e5:fd:21:fc:69:13:97: 66:0a:7f:58:1a:89:3d:72:32:57:52:eb:81:46:f0:20:14:e6: 89:1a:b6:e1:44:ea:72:6d:69:a3:ee:af:3b:a0:74:ec:d8:54: 3c:d0:af:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsDB+j5LtHoXpuS2imXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWJlZjVhMWEzMWVmNWNmYzAzNmI5YzJiNzBhNDJhYmQw NDAwN2UwHhcNMjYwMTAyMTYyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTFmZjlmNmY3OTVmNTg4MjE1OWJhNDU2NGNjOGQyYzY5MjlmMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocCwHScczyi/WPxKkMiOYEFGabgX U+/vVorR6E2wtJoOc07HLWgKV8tYpk2VtFP5swOtELlIM44rKAib8p+WiXGlHmcZ r7MmeaIbdd1SDH99prWYLJy5dOWkwZ80qAGW0Q8JqCF78aOgRuL6rmtWyhrxdct/ cV/RP0Dhif8n2J7BzNIs6DCUL42xsF4/BvsOXw6LV7JfnPnpAEvHrgirBP6cy1i1 L+/iFMFjIX7ZdPy++Gmzxh03mDahpnlD0hPWbTbPnaOaDBAoZIPMaDIvtTTdEVqy PpMfwYePxAC79VgAWWNIEekFogc2pTin1e1OplYio1xW8OlzC1KqUtgxmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGof+fb3lfWIIVm6RWTMjSxpKfMLMB8GA1UdIwQY MBaAFNgb71oaMe9c/ANrnCtwpCq9BAB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQt OWNlZWJhOGJhMjRjLzEvYWhfNTl2ZVY5WWdoV2JwRlpNeU5MR2twOHdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81NmViZDItODE4NS00OGJkLWJiZDQtOWNlZWJhOGJhMjRj LzEvMkJ2dldob3g3MXo4QTJ1Y0szQ2tLcjBFQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVe0MA0G CSqGSIb3DQEBCwUAA4IBAQBV82fs9QCHR0LBotQItr5wlm5+ddjSo1NvK9Rztdm/ FKKUfrvROOl3Ir/tlpEj2wIla/EPr7Uk0GLVtjkYRlYywUSqZILcspFf7kBif9v+ fPgFB4ZKC5Tq1Y6brjAlNwZ1dxoGzGJURXUowFmzCrcVs23i28HvxqcKQH4BSddV jmTqq93RAcoaqwYzmdVnBo3wypUpigacBecTBQYh3KreFv5dgnNu129aP6FydmFd xX40e1a7+ZPZJK47Kwp+CrMl9s/pBJrGSUvJ3irvNljjOOX9IfxpE5dmCn9YGok9 cjJXUuuBRvAgFOaJGrbhROpybWmj7q87oHTs2FQ80K/x -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:56 2026 by rpki-client