This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa File: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (raw, json) Hash identifier: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8= Subject key identifier: 7A:D3:35:00:8A:D9:A7:93:7C:C5:00:14:4B:B7:7E:12:40:41:3B:A4 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B7AC7E67842CB19FE9EF2739786ABAB60 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206961 IP address blocks: 185.165.124.0/22 maxlen: 24 185.197.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e6:78:42:cb:19:fe:9e:f2:73:97:86:ab:ab:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ad335008ad9a7937cc500144bb77e1240413ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:17:8d:5c:47:7f:d9:72:ca:94:95:b4:82: 66:54:4e:b5:b4:ba:d8:28:70:10:8a:e7:1f:6c:5c: 94:c8:60:12:da:17:fc:22:5f:30:1c:a1:ea:56:7c: 89:29:8e:b8:f0:79:b0:54:41:05:40:e9:42:ed:c3: 18:1b:ae:37:fd:56:5d:ca:4f:8c:c7:48:81:b4:48: f4:8a:dd:a3:1a:07:16:9b:9b:53:7f:77:19:24:23: 76:b0:53:d5:e1:de:26:95:3e:f3:aa:1c:89:fd:43: 5a:bb:05:8e:c9:c3:16:68:fa:e2:3e:c2:43:f3:74: 96:17:10:f5:5d:80:45:40:cc:d2:c3:9c:b7:31:30: 90:3b:fc:1c:e7:5e:90:1d:0b:96:75:ff:58:21:8d: 7b:e5:79:b4:b4:96:a1:41:cf:e2:e5:bb:d4:6a:47: 4a:a7:b5:e1:fd:45:15:1b:8b:8c:f0:57:90:ca:54: 2f:83:54:96:bc:58:1f:a8:1d:a9:7c:c0:ba:21:69: ef:25:73:26:de:b4:ab:ce:b4:0e:69:07:18:ed:3f: 9c:f6:07:88:52:c0:a5:d4:5c:01:6d:95:c8:77:91: 15:f6:0f:8c:57:89:56:e2:8c:2b:d1:99:f6:f4:a4: 36:eb:e0:63:15:ac:a8:af:5b:fe:69:65:53:92:93: 86:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D3:35:00:8A:D9:A7:93:7C:C5:00:14:4B:B7:7E:12:40:41:3B:A4 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.165.124.0/22 185.197.140.0/22 Signature Algorithm: sha256WithRSAEncryption 07:47:52:51:9d:f3:a7:ba:36:93:3e:55:47:38:cf:50:51:d9: a8:d7:d6:66:5a:23:7f:7a:3c:fb:a0:11:56:e4:87:54:1a:b4: 06:b0:d6:81:3b:fe:2b:23:8b:81:dc:41:83:43:7c:82:cc:06: 6a:e3:75:e7:97:c9:9d:f0:0e:0e:03:55:71:ff:9c:3c:97:7d: a3:2f:d5:1c:51:85:48:be:e3:c5:8a:7b:1a:75:dd:99:af:56: da:6d:ed:fc:3a:d7:0e:92:a0:26:ff:62:be:f1:f5:3a:3e:50: b2:1e:7a:21:29:13:4f:3d:86:47:e8:45:a5:cc:f1:36:f1:1a: 2c:dd:77:ae:62:45:5f:02:1b:9b:7f:50:72:89:e9:26:a6:30: d0:ae:10:8c:28:da:90:f1:09:81:39:cf:bb:c3:c1:40:9b:7d: 69:33:66:c1:2d:90:b2:a8:08:e5:96:33:df:37:9c:49:3b:dc: 2e:f3:b4:05:89:39:63:e6:ad:59:92:d2:ea:3e:02:8d:fa:43: 3b:8d:02:e7:30:6b:84:54:fd:f6:41:7e:49:20:df:9f:88:39: 9b:3e:79:7d:3c:7f:20:32:78:4c:2f:ee:00:65:96:1d:1b:3a: 01:6b:81:8a:01:0f:22:95:8c:b0:d3:ab:9e:fe:48:37:14:88: a0:e2:ef:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x+Z4QssZ/p7yc5eGq6tgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQzMzUwMDhhZDlhNzkzN2NjNTAwMTQ0YmI3N2UxMjQwNDEzYmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14XjVxHf9lyypSVtIJmVE61tLrY KHAQiucfbFyUyGAS2hf8Il8wHKHqVnyJKY648HmwVEEFQOlC7cMYG643/VZdyk+M x0iBtEj0it2jGgcWm5tTf3cZJCN2sFPV4d4mlT7zqhyJ/UNauwWOycMWaPriPsJD 83SWFxD1XYBFQMzSw5y3MTCQO/wc516QHQuWdf9YIY175Xm0tJahQc/i5bvUakdK p7Xh/UUVG4uM8FeQylQvg1SWvFgfqB2pfMC6IWnvJXMm3rSrzrQOaQcY7T+c9geI UsCl1FwBbZXId5EV9g+MV4lW4owr0Zn29KQ26+BjFayor1v+aWVTkpOGBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHrTNQCK2aeTfMUAFEu3fhJAQTukMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvZXRNMUFJclpwNU44eFFBVVM3ZC1Fa0JCTzZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuaV8AwQC ucWMMA0GCSqGSIb3DQEBCwUAA4IBAQAHR1JRnfOnujaTPlVHOM9QUdmo19ZmWiN/ ejz7oBFW5IdUGrQGsNaBO/4rI4uB3EGDQ3yCzAZq43Xnl8md8A4OA1Vx/5w8l32j L9UcUYVIvuPFinsadd2Zr1babe38OtcOkqAm/2K+8fU6PlCyHnohKRNPPYZH6EWl zPE28Ros3XeuYkVfAhubf1ByiekmpjDQrhCMKNqQ8QmBOc+7w8FAm31pM2bBLZCy qAjlljPfN5xJO9wu87QFiTlj5q1ZktLqPgKN+kM7jQLnMGuEVP32QX5JIN+fiDmb Pnl9PH8gMnhML+4AZZYdGzoBa4GKAQ8ilYyw06ue/kg3FIig4u9A -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:42 2026 by rpki-client