This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/X_VAzsonJf2-Y0J7PUgtiVvr18s.roa File: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (raw, json) Hash identifier: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc= Subject key identifier: 5F:F5:40:CE:CA:27:25:FD:BE:63:42:7B:3D:48:2D:89:5B:EB:D7:CB Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e Certificate serial: 019B79EC3B917F621C711A3096EE6268695D Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/X_VAzsonJf2-Y0J7PUgtiVvr18s.roa Signing time: Thu 01 Jan 2026 14:18:03 +0000 ROA not before: Thu 01 Jan 2026 14:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59494 IP address blocks: 185.145.140.0/22 maxlen: 22 185.145.140.0/23 maxlen: 23 185.145.142.0/23 maxlen: 23 193.187.80.0/23 maxlen: 23 2a07:4480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3b:91:7f:62:1c:71:1a:30:96:ee:62:68:69:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff540ceca2725fdbe63427b3d482d895bebd7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:da:2b:86:81:5d:59:e0:80:42:ff:33:1e:1a: 44:24:56:db:c3:78:58:3d:dc:be:df:a3:2e:4b:04: 9d:ee:5a:68:bd:13:39:58:d6:94:7d:08:87:64:ff: 5f:43:21:b9:9c:6b:91:91:1e:28:e4:71:74:9d:21: 0b:02:25:dc:74:d1:20:df:8a:00:63:a1:e7:bb:62: c9:d1:41:23:7a:a0:d9:b5:23:14:ea:4d:96:1e:4c: 0d:3d:16:f6:9c:68:62:24:58:a0:07:36:ac:7c:ce: 19:31:c2:29:fb:57:5b:4f:8b:17:c3:0f:01:9e:23: c2:d4:7b:86:35:82:91:8b:77:6c:fc:e3:54:6f:7b: 83:71:99:76:9a:84:d1:f8:47:12:d4:7a:9a:5f:5e: be:28:d3:fc:3c:26:9b:d7:20:7c:1b:81:ce:c9:57: 9f:22:87:c1:45:43:9a:2c:b7:a7:43:54:c3:10:a1: c5:fe:5d:71:4d:96:d2:28:84:98:f5:ec:ec:1f:9d: 01:7b:60:5a:a7:c5:38:32:2d:c6:09:86:7b:5a:1a: 6f:a4:e7:69:13:72:43:a7:cf:74:d8:b5:6b:80:b8: 8a:72:09:0d:43:92:77:6a:6f:b1:dd:d8:00:12:1e: 8e:c0:b1:7a:b7:c4:06:3d:cf:5c:12:23:f2:f0:95: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:40:CE:CA:27:25:FD:BE:63:42:7B:3D:48:2D:89:5B:EB:D7:CB X509v3 Authority Key Identifier: keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/X_VAzsonJf2-Y0J7PUgtiVvr18s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.140.0/22 193.187.80.0/23 IPv6: 2a07:4480::/32 Signature Algorithm: sha256WithRSAEncryption 63:58:cc:c1:60:8b:af:80:33:37:74:b5:ae:3d:fb:5e:71:eb: 3e:f4:f3:0f:9a:68:9a:e1:bd:6e:4b:db:93:d9:1d:a3:09:d6: 9b:15:29:f3:a1:d8:fc:f3:ed:3c:f2:f8:cc:7f:73:a3:76:39: e9:cc:57:54:e4:61:88:bb:da:3c:63:6b:fb:28:f5:0f:60:11: dc:77:86:41:46:12:31:02:68:73:ad:84:7d:6f:94:23:3e:98: af:9e:9d:1c:63:0e:ee:50:d4:c1:2c:c0:bf:9e:ea:30:b4:3a: 68:c0:a3:0d:aa:76:6a:88:0a:3b:d4:ce:77:57:eb:66:7a:86: 75:16:5a:61:cf:3d:14:e1:e7:bf:65:8b:a9:aa:44:54:28:e4: 51:39:da:df:29:01:f4:34:3f:6a:b3:7d:bf:b1:29:22:4b:29: a5:5f:bf:ea:bb:ca:ba:d1:a9:d9:93:75:61:08:07:b8:6f:93: a6:56:8b:0e:5e:dd:f4:fb:4b:e2:ad:79:3a:e3:fe:87:94:98: 9b:05:77:db:df:94:82:8b:e0:c0:83:8a:4a:ca:ad:28:33:b6: d3:26:38:b4:76:15:6c:bd:76:13:af:4f:f3:c4:3d:95:ae:99: ee:88:a5:47:60:c9:d0:64:66:55:6d:9c:31:41:bb:75:92:4b: 6e:85:ad:71 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57DuRf2IccRowlu5iaGldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMmFlZjRjN2JmZTdlMDcyZjYyZDJkZDUwNWFiNTdlMzdl YTM4NWUwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY1NDBjZWNhMjcyNWZkYmU2MzQyN2IzZDQ4MmQ4OTViZWJkN2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltorhoFdWeCAQv8zHhpEJFbbw3hY Pdy+36MuSwSd7lpovRM5WNaUfQiHZP9fQyG5nGuRkR4o5HF0nSELAiXcdNEg34oA Y6Hnu2LJ0UEjeqDZtSMU6k2WHkwNPRb2nGhiJFigBzasfM4ZMcIp+1dbT4sXww8B niPC1HuGNYKRi3ds/ONUb3uDcZl2moTR+EcS1HqaX16+KNP8PCab1yB8G4HOyVef IofBRUOaLLenQ1TDEKHF/l1xTZbSKISY9ezsH50Be2Bap8U4Mi3GCYZ7WhpvpOdp E3JDp8902LVrgLiKcgkNQ5J3am+x3dgAEh6OwLF6t8QGPc9cEiPy8JW7+wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFF/1QM7KJyX9vmNCez1ILYlb69fLMB8GA1UdIwQY MBaAFGEq70x7/n4HL2LS3VBatX436jheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgt YTIwN2M3YTE5ZWQyLzEvWF9WQXpzb25KZjItWTBKN1BVZ3RpVnZyMThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83MjA3YTktMjdmNC00NGVjLWJmNzgtYTIwN2M3YTE5ZWQy LzEvWVNydlRIdi1mZ2N2WXRMZFVGcTFmamZxT0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuZGMAwQB wbtQMA0EAgACMAcDBQAqB0SAMA0GCSqGSIb3DQEBCwUAA4IBAQBjWMzBYIuvgDM3 dLWuPfteces+9PMPmmia4b1uS9uT2R2jCdabFSnzodj88+088vjMf3OjdjnpzFdU 5GGIu9o8Y2v7KPUPYBHcd4ZBRhIxAmhzrYR9b5QjPpivnp0cYw7uUNTBLMC/nuow tDpowKMNqnZqiAo71M53V+tmeoZ1Flphzz0U4ee/ZYupqkRUKORROdrfKQH0ND9q s32/sSkiSymlX7/qu8q60anZk3VhCAe4b5OmVosOXt30+0virXk64/6HlJibBXfb 35SCi+DAg4pKyq0oM7bTJji0dhVsvXYTr0/zxD2VrpnuiKVHYMnQZGZVbZwxQbt1 kktuha1x -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:37 2026 by rpki-client