This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/01DTvRDJh5LAMewuiaxq8ihTWOw.roa File: 01DTvRDJh5LAMewuiaxq8ihTWOw.roa (raw, json) Hash identifier: 873+VYTyzWaUqkJstRwODHvpIJL6rDoaYBv6eGv0Qo0= Subject key identifier: D3:50:D3:BD:10:C9:87:92:C0:31:EC:2E:89:AC:6A:F2:28:53:58:EC Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B7D5CA8329F73E0752EB32684F2712493 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/01DTvRDJh5LAMewuiaxq8ihTWOw.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272381 IP address blocks: 185.75.14.0/24 maxlen: 24 185.75.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a8:32:9f:73:e0:75:2e:b3:26:84:f2:71:24:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d350d3bd10c98792c031ec2e89ac6af2285358ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:70:cc:13:c8:a2:fa:57:df:06:4a:71:79: 74:1c:49:e2:6a:a3:d8:a9:a0:c0:fe:22:52:bf:b4: d8:97:31:8f:d6:cb:90:25:92:0a:b5:42:f1:10:b1: 10:93:cc:74:50:42:c9:f6:e8:c9:c9:a7:f6:85:ee: b5:32:21:20:fb:0a:f3:cf:cf:39:03:e9:d2:9b:69: 56:0c:c2:43:94:d1:88:b5:f4:a4:d7:fd:05:1c:c1: 4d:4c:db:20:91:d6:58:fd:c8:49:5f:9f:3a:f3:b9: 87:27:df:c6:48:2e:ff:6c:88:a8:87:28:a3:8c:11: 74:41:40:48:83:4b:e1:c3:82:c4:5e:94:9c:81:74: b1:ac:7f:cc:b3:34:2f:36:da:4b:05:b2:2d:f3:b4: 78:a2:57:e1:88:3a:9a:f3:c2:71:20:80:35:9b:2d: f9:44:ca:19:d7:46:74:91:02:75:e4:8b:73:39:be: cd:dd:28:f9:6b:6d:3c:9d:f8:b1:fc:c2:62:60:a7: ac:da:90:ec:8a:77:25:51:82:81:93:ef:81:dc:d9: c4:c1:ad:e6:2c:7b:68:6f:64:df:0f:5f:38:61:d9: 50:11:5d:66:68:21:15:74:00:54:74:8e:52:66:e5: c3:1d:f7:44:70:5e:07:f6:0c:46:58:28:a9:99:e9: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:50:D3:BD:10:C9:87:92:C0:31:EC:2E:89:AC:6A:F2:28:53:58:EC X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/01DTvRDJh5LAMewuiaxq8ihTWOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.14.0/23 Signature Algorithm: sha256WithRSAEncryption 60:20:ff:73:33:b1:0e:b6:f6:0f:1b:b4:b2:b3:27:2f:b8:64: e9:ed:1f:af:c6:e2:99:81:2c:95:ed:af:8f:13:9f:55:61:c8: fb:02:39:ac:2f:35:29:d1:93:95:77:77:2f:e6:b3:51:41:7f: c1:49:81:a1:5d:a3:71:ed:bb:f8:a3:9d:dd:e5:a1:4b:90:b3: 43:f7:72:c9:71:ab:10:1d:54:2f:d2:17:3e:e9:19:60:ec:c5: 42:46:57:e8:50:ae:31:9e:d6:05:b5:8b:57:4e:16:a7:09:d7: 1c:cb:9a:23:e4:ab:52:98:41:ab:a1:64:32:9e:73:19:c9:9b: f8:6f:93:d4:da:3f:c8:22:5d:99:af:e6:77:27:8d:6c:b5:af: ad:ca:1a:86:d9:3d:f2:e5:9d:ff:5f:4f:ac:64:ab:59:f4:fd: 50:30:32:f5:00:8f:9a:9d:78:08:ae:98:33:4c:28:1c:bc:e8: 37:1e:f8:16:30:1a:c4:98:4c:1c:4f:1f:9f:d0:0e:7a:75:1e: 2f:35:2e:dd:32:dc:58:01:54:c4:0e:06:1f:58:17:68:d8:b2: a0:ff:a6:a6:55:66:ab:c5:d9:48:ef:b1:c0:6e:7d:f5:5a:4b: 25:31:c3:df:f5:3e:57:2c:d6:e5:e6:3e:c4:27:05:90:2f:3c: a6:c0:6e:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKgyn3PgdS6zJoTycSSTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzUwZDNiZDEwYzk4NzkyYzAzMWVjMmU4OWFjNmFmMjI4NTM1OGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCJwzBPIovpX3wZKcXl0HEniaqPY qaDA/iJSv7TYlzGP1suQJZIKtULxELEQk8x0UELJ9ujJyaf2he61MiEg+wrzz885 A+nSm2lWDMJDlNGItfSk1/0FHMFNTNsgkdZY/chJX58687mHJ9/GSC7/bIiohyij jBF0QUBIg0vhw4LEXpScgXSxrH/MszQvNtpLBbIt87R4olfhiDqa88JxIIA1my35 RMoZ10Z0kQJ15ItzOb7N3Sj5a208nfix/MJiYKes2pDsinclUYKBk++B3NnEwa3m LHtob2TfD184YdlQEV1maCEVdABUdI5SZuXDHfdEcF4H9gxGWCipmel86wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNNQ070QyYeSwDHsLomsavIoU1jsMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvMDFEVHZSREpoNUxBTWV3dWlheHE4aWhUV093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUsOMA0G CSqGSIb3DQEBCwUAA4IBAQBgIP9zM7EOtvYPG7SysycvuGTp7R+vxuKZgSyV7a+P E59VYcj7AjmsLzUp0ZOVd3cv5rNRQX/BSYGhXaNx7bv4o53d5aFLkLND93LJcasQ HVQv0hc+6Rlg7MVCRlfoUK4xntYFtYtXThanCdccy5oj5KtSmEGroWQynnMZyZv4 b5PU2j/IIl2Zr+Z3J41sta+tyhqG2T3y5Z3/X0+sZKtZ9P1QMDL1AI+anXgIrpgz TCgcvOg3HvgWMBrEmEwcTx+f0A56dR4vNS7dMtxYAVTEDgYfWBdo2LKg/6amVWar xdlI77HAbn31WkslMcPf9T5XLNbl5j7EJwWQLzymwG4j -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:33 2026 by rpki-client