This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa File: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (raw, json) Hash identifier: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU= Subject key identifier: AC:BA:51:66:F1:4D:F6:D2:C9:39:92:AC:45:0D:A2:37:46:CE:4E:40 Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53 Certificate serial: 019B7F82E9A6B12570B5C665F6D4AC5CA91E Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa Signing time: Fri 02 Jan 2026 16:20:44 +0000 ROA not before: Fri 02 Jan 2026 16:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200428 IP address blocks: 185.107.188.0/22 maxlen: 22 2a06:4540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e9:a6:b1:25:70:b5:c6:65:f6:d4:ac:5c:a9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53 Validity Not Before: Jan 2 16:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acba5166f14df6d2c93992ac450da23746ce4e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:5d:b3:6c:23:8b:a0:57:35:3e:0c:d5:90: 75:05:b5:33:45:57:1d:1a:ae:50:29:56:5f:49:b1: 0e:3e:56:14:f5:ee:2b:f2:41:01:be:47:ab:c9:3b: 3f:39:98:d5:10:81:79:f8:a3:7b:f0:30:25:a3:78: 8a:52:09:b5:65:aa:b1:b9:4a:49:6d:84:68:6b:cd: d3:5a:95:0e:c9:32:64:24:18:61:f6:ef:75:43:52: 4b:2f:a5:c1:99:c7:08:8b:98:df:cc:b4:b3:32:12: 75:1c:0e:8b:f4:17:00:68:86:7e:41:51:fb:6f:cf: 2a:b6:9e:06:cf:b3:5f:f1:e3:7d:36:8b:b8:25:aa: d8:71:a9:b2:98:e0:ec:f0:2a:f5:5a:fc:c8:11:e5: 10:d2:e7:46:f1:00:e5:d1:c0:f2:05:27:44:14:f5: 7b:9f:9b:3e:f3:e7:a8:2f:01:17:b6:63:67:72:78: c3:0f:9f:02:bb:10:61:4b:a7:71:1d:c8:7c:17:64: 9a:e1:fe:2f:12:c4:e9:e1:06:a7:ba:92:bd:d4:cb: 18:a4:d8:db:34:52:4f:60:2a:a5:fd:66:ba:45:21: 7a:f1:51:66:50:49:73:26:04:3e:92:45:bb:fb:b6: 3f:05:b2:d2:37:95:fa:18:86:1b:ef:8a:d1:2b:fd: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:51:66:F1:4D:F6:D2:C9:39:92:AC:45:0D:A2:37:46:CE:4E:40 X509v3 Authority Key Identifier: keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.107.188.0/22 IPv6: 2a06:4540::/29 Signature Algorithm: sha256WithRSAEncryption 47:a4:a2:5a:4d:54:aa:51:5b:ea:8d:54:f9:dd:36:f6:74:eb: 95:ae:99:24:a1:7b:dd:5c:10:30:0c:ff:fe:18:d4:da:06:60: e5:0d:a5:1c:d1:a8:80:b9:34:0a:88:fe:85:04:54:87:6d:97: bf:67:85:b7:e0:b9:9e:68:de:ec:ff:41:09:57:61:31:17:ac: 92:3e:c8:78:1e:e0:3f:15:12:a9:74:74:c0:b0:55:77:d3:31: 7f:70:67:b5:b1:9b:df:b2:52:3f:37:71:8f:63:49:35:04:64: c5:d6:ec:ca:7f:e2:8b:6b:ad:8a:ff:84:73:be:c9:71:fc:1c: e5:30:bb:a8:fe:23:ad:18:a7:54:44:30:4a:80:47:b6:ed:dd: a3:58:3b:e8:e6:0b:75:02:23:6b:38:ef:76:d1:05:14:fb:b5: f0:b6:e2:fb:e5:35:20:4d:83:62:66:cc:6a:74:2f:74:bd:de: 78:8f:8a:da:78:7b:ac:e2:ef:f5:d9:eb:0b:be:90:d9:13:32: ef:70:72:de:d3:6b:f5:9c:57:b5:97:45:24:a2:cd:cf:0e:21: 0c:b1:99:7f:9c:e3:00:0c:36:1a:ad:5e:ea:34:18:04:c9:e6: a5:17:8f:0f:e5:6f:53:26:e9:cd:3a:ed:9a:c6:2e:26:2c:12: b9:16:0e:40 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gummsSVwtcZl9tSsXKkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4 OThlNTMwHhcNMjYwMTAyMTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2JhNTE2NmYxNGRmNmQyYzkzOTkyYWM0NTBkYTIzNzQ2Y2U0ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV5ds2wji6BXNT4M1ZB1BbUzRVcd Gq5QKVZfSbEOPlYU9e4r8kEBvkeryTs/OZjVEIF5+KN78DAlo3iKUgm1ZaqxuUpJ bYRoa83TWpUOyTJkJBhh9u91Q1JLL6XBmccIi5jfzLSzMhJ1HA6L9BcAaIZ+QVH7 b88qtp4Gz7Nf8eN9Nou4JarYcamymODs8Cr1WvzIEeUQ0udG8QDl0cDyBSdEFPV7 n5s+8+eoLwEXtmNncnjDD58CuxBhS6dxHch8F2Sa4f4vEsTp4QanupK91MsYpNjb NFJPYCql/Wa6RSF68VFmUElzJgQ+kkW7+7Y/BbLSN5X6GIYb74rRK/3qswIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKy6UWbxTfbSyTmSrEUNojdGzk5AMB8GA1UdIwQY MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt ZTk1ZTJkM2QyM2UwLzEvckxwUlp2Rk45dExKT1pLc1JRMmlOMGJPVGtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWu8MA0E AgACMAcDBQMqBkVAMA0GCSqGSIb3DQEBCwUAA4IBAQBHpKJaTVSqUVvqjVT53Tb2 dOuVrpkkoXvdXBAwDP/+GNTaBmDlDaUc0aiAuTQKiP6FBFSHbZe/Z4W34LmeaN7s /0EJV2ExF6ySPsh4HuA/FRKpdHTAsFV30zF/cGe1sZvfslI/N3GPY0k1BGTF1uzK f+KLa62K/4Rzvslx/BzlMLuo/iOtGKdURDBKgEe27d2jWDvo5gt1AiNrOO920QUU +7XwtuL75TUgTYNiZsxqdC90vd54j4raeHus4u/12esLvpDZEzLvcHLe02v1nFe1 l0Ukos3PDiEMsZl/nOMADDYarV7qNBgEyealF48P5W9TJunNOu2axi4mLBK5Fg5A -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:07 2026 by rpki-client