This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/CT6AmpmwQYVv1EKJIyyUy447UEw.roa File: CT6AmpmwQYVv1EKJIyyUy447UEw.roa (raw, json) Hash identifier: rWsWFJC6V8Pa2TgdCs9ZugYzi8jqhX1g3/gCu45aAXE= Subject key identifier: 09:3E:80:9A:99:B0:41:85:6F:D4:42:89:23:2C:94:CB:8E:3B:50:4C Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9 Certificate serial: 019B7C7F58CF6932EFB40D96C0C07D8B8AC0 Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/CT6AmpmwQYVv1EKJIyyUy447UEw.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5484 IP address blocks: 185.33.25.0/24 maxlen: 24 185.46.216.0/24 maxlen: 24 185.46.217.0/24 maxlen: 24 185.46.218.0/24 maxlen: 24 185.46.219.0/24 maxlen: 24 185.128.152.0/24 maxlen: 24 185.128.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:58:cf:69:32:ef:b4:0d:96:c0:c0:7d:8b:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9 Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=093e809a99b041856fd44289232c94cb8e3b504c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:0a:99:39:2b:83:68:80:a4:3d:f0:18:67: d4:93:e5:4b:67:88:7d:e5:a2:6f:4c:b2:45:7b:e3: e8:ff:a7:5a:81:d0:d4:91:20:95:c5:45:80:ad:b2: 82:35:14:49:24:d0:86:34:f0:d5:b9:e0:a2:28:7e: aa:92:45:3b:32:de:25:01:ee:f2:1d:60:4e:db:26: 58:a1:4a:60:cd:81:84:a7:d8:86:7c:14:00:6f:06: 22:58:cf:af:34:1d:74:fc:23:87:93:be:77:98:ac: d2:41:9b:21:c4:c5:f8:2a:a0:74:2e:52:a6:f1:18: f6:6e:5d:5e:4f:83:20:ae:7b:4e:09:97:4f:02:a5: 36:83:75:27:1e:66:69:53:60:96:9f:23:13:67:98: 7f:59:ab:d3:7f:16:a9:31:cc:e5:53:e2:f2:41:7c: c0:60:78:fc:56:05:cd:6a:de:87:c3:33:8a:bd:9c: 9b:75:a5:3e:4a:4c:15:67:33:11:37:5f:7a:66:57: 92:60:a9:93:dc:62:9e:d1:cf:f1:2c:08:10:79:d7: c8:1b:c6:02:f4:2f:86:9d:66:de:23:e6:d7:12:26: 45:06:9c:ae:f2:05:d0:d5:2f:b2:fd:c0:a0:9d:2d: 01:19:f7:fb:74:c6:fe:7c:39:67:60:11:1c:b2:3a: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:80:9A:99:B0:41:85:6F:D4:42:89:23:2C:94:CB:8E:3B:50:4C X509v3 Authority Key Identifier: keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/CT6AmpmwQYVv1EKJIyyUy447UEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.33.25.0/24 185.46.216.0/22 185.128.152.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:81:ad:d7:e0:09:29:35:3c:24:ab:14:a8:40:b1:64:7a:56: 65:c4:43:a1:21:c2:91:c4:77:a1:6e:c3:04:94:b7:38:46:8a: e9:8a:ae:f6:67:ed:f0:a0:94:f9:76:ab:06:8c:76:0b:a6:92: b8:6a:2b:1e:c1:94:04:6c:e9:2c:81:18:54:a3:f9:09:7a:21: 1c:2e:14:9f:87:db:86:47:ae:66:8b:3d:84:a4:84:de:03:e1: 3c:9e:7a:e2:39:21:13:c1:99:ce:1f:fd:c1:d8:07:9a:7b:61: 39:e4:e8:b2:72:37:57:4d:d8:2c:d5:f7:6f:e8:24:8d:f5:20: e2:05:3a:ee:2a:e4:79:12:85:d0:3c:a4:57:15:ce:57:05:63: 5d:d0:50:19:b0:b1:59:ac:e0:42:0b:c1:44:c1:46:2e:8d:d5: ba:12:94:67:ce:06:bb:8a:15:17:d5:f7:3f:57:23:56:0e:4f: 34:87:8a:53:9d:39:a3:a6:92:aa:1b:5a:64:44:31:0c:a6:bc: c5:4f:7a:60:26:d3:78:05:f2:71:17:03:18:18:a6:21:f9:49: 72:5a:06:99:33:6a:40:f5:e8:1b:3b:31:4b:98:75:82:6e:fa: 69:63:3c:a4:9e:45:6d:7d:04:ad:19:5c:76:77:5c:c5:83:d9: b3:e6:0e:5a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f1jPaTLvtA2WwMB9i4rAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0 ZDRhZDkwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTNlODA5YTk5YjA0MTg1NmZkNDQyODkyMzJjOTRjYjhlM2I1MDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzncKmTkrg2iApD3wGGfUk+VLZ4h9 5aJvTLJFe+Po/6dagdDUkSCVxUWArbKCNRRJJNCGNPDVueCiKH6qkkU7Mt4lAe7y HWBO2yZYoUpgzYGEp9iGfBQAbwYiWM+vNB10/COHk753mKzSQZshxMX4KqB0LlKm 8Rj2bl1eT4MgrntOCZdPAqU2g3UnHmZpU2CWnyMTZ5h/WavTfxapMczlU+LyQXzA YHj8VgXNat6HwzOKvZybdaU+SkwVZzMRN196ZleSYKmT3GKe0c/xLAgQedfIG8YC 9C+GnWbeI+bXEiZFBpyu8gXQ1S+y/cCgnS0BGff7dMb+fDlnYBEcsjon0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAk+gJqZsEGFb9RCiSMslMuOO1BMMB8GA1UdIwQY MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt NGNhN2I0YzAyYmU5LzEvQ1Q2QW1wbXdRWVZ2MUVLSkl5eVV5NDQ3VUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5 LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuSEZAwQC uS7YAwQBuYCYMA0GCSqGSIb3DQEBCwUAA4IBAQA8ga3X4AkpNTwkqxSoQLFkelZl xEOhIcKRxHehbsMElLc4Rorpiq72Z+3woJT5dqsGjHYLppK4aisewZQEbOksgRhU o/kJeiEcLhSfh9uGR65miz2EpITeA+E8nnriOSETwZnOH/3B2Aeae2E55OiycjdX Tdgs1fdv6CSN9SDiBTruKuR5EoXQPKRXFc5XBWNd0FAZsLFZrOBCC8FEwUYujdW6 EpRnzga7ihUX1fc/VyNWDk80h4pTnTmjppKqG1pkRDEMprzFT3pgJtN4BfJxFwMY GKYh+UlyWgaZM2pA9egbOzFLmHWCbvppYzyknkVtfQStGVx2d1zFg9mz5g5a -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:44 2026 by rpki-client