This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/M_-1yevGXxmg89kgZZwEjkECaGQ.roa File: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (raw, json) Hash identifier: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug= Subject key identifier: 33:FF:B5:C9:EB:C6:5F:19:A0:F3:D9:20:65:9C:04:8E:41:02:68:64 Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Certificate serial: 019B78A28B30BB00693FBF2218112DC354F3 Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/M_-1yevGXxmg89kgZZwEjkECaGQ.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57761 IP address blocks: 185.27.216.0/24 maxlen: 24 185.27.217.0/24 maxlen: 24 185.27.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:8b:30:bb:00:69:3f:bf:22:18:11:2d:c3:54:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33ffb5c9ebc65f19a0f3d920659c048e41026864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:b9:6f:16:ea:42:49:86:0c:c2:ae:96:77: 04:9e:60:c6:00:6c:25:45:f3:e9:c0:58:7f:09:cb: 7d:98:6f:37:08:54:22:4a:17:c2:92:a0:7e:45:35: 33:5d:d1:bc:f9:b1:cd:5c:8d:b7:93:54:d3:f6:4f: 88:bd:cf:aa:43:6e:ee:74:7d:92:48:47:27:46:78: 9a:19:ec:4a:b9:38:02:10:d2:01:e6:b6:fa:4f:99: cc:8b:67:0c:7c:a5:2f:77:eb:9c:bd:6d:a8:08:61: 62:ed:af:1e:8b:18:cf:74:fb:5e:cd:9e:58:d5:db: 80:4a:b3:cc:4d:24:5e:81:67:70:eb:6f:d5:03:c3: 44:a7:72:3c:42:d6:08:db:eb:0e:ee:35:7a:ee:dd: a8:30:fc:fb:46:9b:22:42:4f:aa:44:28:56:c5:db: 0c:ff:28:af:2f:48:49:db:f0:e9:dc:31:57:ff:ac: 0d:e5:d2:8d:8e:28:54:fe:e2:b3:af:3e:d1:c1:75: c7:85:e8:41:94:21:f0:e2:a1:49:d4:ef:b4:cc:9f: 95:ed:f2:c8:c3:24:c3:49:58:6a:54:1b:3f:4a:88: 85:98:8e:4f:e7:37:b7:65:c9:d8:02:ad:85:0b:9e: af:dd:5c:8d:fb:2e:79:7b:74:46:1a:af:ab:9a:ea: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:B5:C9:EB:C6:5F:19:A0:F3:D9:20:65:9C:04:8E:41:02:68:64 X509v3 Authority Key Identifier: keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/M_-1yevGXxmg89kgZZwEjkECaGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.216.0/23 185.27.219.0/24 Signature Algorithm: sha256WithRSAEncryption 37:5e:2b:6c:c3:62:2f:56:85:fc:b7:9c:2e:18:23:66:4e:4e: 05:89:97:97:10:7a:ee:34:73:55:c7:9e:a8:95:44:73:6b:1b: ee:a7:9e:fe:ce:1c:20:9f:5a:06:a9:81:05:cc:08:47:30:82: 1b:c1:a4:f7:c2:0a:eb:22:b4:61:df:bb:1a:6d:db:3d:68:9e: 37:a3:55:9b:d5:a5:de:da:dd:17:60:54:97:1b:60:cf:b8:47: b8:4f:88:91:d8:df:4d:2f:da:f4:81:aa:90:c3:42:a6:1e:e7: 27:f2:cd:5e:10:c1:93:90:ac:b9:5e:6d:b9:d8:18:a1:4b:b9: e2:54:9a:c6:a4:1f:14:23:b5:3a:48:3f:be:5d:eb:f8:6d:32: fd:a8:ad:e7:d0:0e:3b:36:aa:64:81:c9:e2:f2:8f:f1:8c:dd: 72:60:45:5e:6f:d5:fb:f0:9a:ca:bf:b6:bf:43:3d:cf:0d:6a: 4d:33:70:60:46:bf:52:66:c0:41:93:0f:88:5e:e3:bf:3a:57: 25:1b:e2:25:df:3e:7d:46:83:b7:49:6d:17:de:ae:8d:70:33: 72:e8:62:3d:31:d0:6d:74:72:82:a5:7e:ba:bb:4b:d9:db:ba: 67:56:a6:74:7a:2f:2e:f4:12:5b:8f:a0:ce:49:f3:ec:88:41: 13:38:1a:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ooswuwBpP78iGBEtw1TzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5 N2NhYzcwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2ZmYjVjOWViYzY1ZjE5YTBmM2Q5MjA2NTljMDQ4ZTQxMDI2ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvly5bxbqQkmGDMKulncEnmDGAGwl RfPpwFh/Cct9mG83CFQiShfCkqB+RTUzXdG8+bHNXI23k1TT9k+Ivc+qQ27udH2S SEcnRniaGexKuTgCENIB5rb6T5nMi2cMfKUvd+ucvW2oCGFi7a8eixjPdPtezZ5Y 1duASrPMTSRegWdw62/VA8NEp3I8QtYI2+sO7jV67t2oMPz7RpsiQk+qRChWxdsM /yivL0hJ2/Dp3DFX/6wN5dKNjihU/uKzrz7RwXXHhehBlCHw4qFJ1O+0zJ+V7fLI wyTDSVhqVBs/SoiFmI5P5ze3ZcnYAq2FC56v3VyN+y55e3RGGq+rmuok3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDP/tcnrxl8ZoPPZIGWcBI5BAmhkMB8GA1UdIwQY MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt MjdlZTQyZDkyNWFkLzEvTV8tMXlldkdYeG1nODlrZ1pad0Vqa0VDYUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuRvYAwQA uRvbMA0GCSqGSIb3DQEBCwUAA4IBAQA3Xitsw2IvVoX8t5wuGCNmTk4FiZeXEHru NHNVx56olURzaxvup57+zhwgn1oGqYEFzAhHMIIbwaT3wgrrIrRh37sabds9aJ43 o1Wb1aXe2t0XYFSXG2DPuEe4T4iR2N9NL9r0gaqQw0KmHucn8s1eEMGTkKy5Xm25 2BihS7niVJrGpB8UI7U6SD++Xev4bTL9qK3n0A47Nqpkgcni8o/xjN1yYEVeb9X7 8JrKv7a/Qz3PDWpNM3BgRr9SZsBBkw+IXuO/OlclG+Il3z59RoO3SW0X3q6NcDNy 6GI9MdBtdHKCpX66u0vZ27pnVqZ0ei8u9BJbj6DOSfPsiEETOBpc -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:59 2026 by rpki-client