This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/61nXLWiLNthRTvWX64Fv7Aiwf_E.roa File: 61nXLWiLNthRTvWX64Fv7Aiwf_E.roa (raw, json) Hash identifier: C6Ewv4dAXXufstpmAXr9+tKYxI6LwFVuw358jAoTr6Q= Subject key identifier: EB:59:D7:2D:68:8B:36:D8:51:4E:F5:97:EB:81:6F:EC:08:B0:7F:F1 Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Certificate serial: 019B7F8481FECD3CE7613E276AE309AA5E17 Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/61nXLWiLNthRTvWX64Fv7Aiwf_E.roa Signing time: Fri 02 Jan 2026 16:22:29 +0000 ROA not before: Fri 02 Jan 2026 16:22:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 185.28.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:81:fe:cd:3c:e7:61:3e:27:6a:e3:09:aa:5e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390 Validity Not Before: Jan 2 16:22:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb59d72d688b36d8514ef597eb816fec08b07ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:76:87:b1:85:23:dc:fc:a4:9f:5f:7c:42:c1: 79:27:67:0d:5f:68:25:90:6d:bc:f2:c1:8c:bf:fc: dd:52:5c:6a:6a:5c:2f:eb:1a:ca:0b:89:42:47:b9: e4:b4:b2:19:a1:b4:0c:95:66:bb:5a:51:03:ff:81: b9:50:be:df:3b:7c:ce:6d:f1:b0:cb:25:e0:b2:69: 0e:22:78:26:d9:f5:32:98:54:df:34:09:0a:e5:e5: 1e:91:53:9e:bf:78:58:d6:8c:d7:3f:1c:dc:0d:3f: 79:28:61:1f:e7:d8:77:85:d5:f9:48:6f:f4:21:39: 43:5a:5f:5d:78:b1:85:57:23:ee:40:ef:80:2e:56: 57:d5:78:17:8c:98:92:b1:d4:0c:9f:40:12:a7:3b: 91:1d:ab:18:8f:68:66:fe:8a:1e:b8:4f:04:dd:73: cf:51:51:bc:74:be:bd:84:5d:d8:0f:a9:e1:52:3e: 75:b2:7f:b7:80:ed:65:af:1a:10:26:e1:a1:58:9a: af:e9:64:0a:87:87:44:21:7b:a7:94:e6:aa:83:f7: 20:4c:fc:a4:ad:65:8c:f5:4f:b7:e2:13:87:d2:2c: 25:f3:ab:42:d0:18:19:2e:35:b1:fe:6d:33:b1:9c: fa:47:0a:68:44:81:a7:f9:1b:e9:53:4e:eb:a9:6e: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:59:D7:2D:68:8B:36:D8:51:4E:F5:97:EB:81:6F:EC:08:B0:7F:F1 X509v3 Authority Key Identifier: keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/61nXLWiLNthRTvWX64Fv7Aiwf_E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:06:88:ad:ca:c3:b5:06:aa:84:fd:83:ff:19:9b:04:3d:1a: 7d:8e:65:ad:9a:a8:3c:1b:ec:a3:3a:fc:c3:e9:4c:a4:33:09: 11:70:2f:5e:2a:87:aa:ab:4b:58:fd:7b:d2:4d:80:ec:52:c7: 69:ce:96:c2:72:20:20:b6:86:ea:0b:ca:ac:07:19:e4:57:3e: 37:74:6a:a8:9c:d0:d2:8e:e1:a4:78:b1:e4:99:bf:77:af:43: f8:3d:bc:70:6e:bd:ea:a9:4b:f7:04:e3:64:7c:a3:e7:bc:00: 56:4a:6c:ed:0f:f2:b3:7a:a2:8c:58:26:0b:76:b3:1a:23:84: 25:e8:b9:f1:fd:b4:55:68:fb:93:46:8d:7e:46:83:9f:71:6d: 7a:a6:84:1f:8e:85:86:96:01:6d:e1:c3:91:62:83:98:f8:8a: 7f:60:01:28:49:0f:c1:da:19:ca:ee:97:95:86:b5:6b:46:83: 05:21:59:4d:a3:63:81:54:ca:ad:41:b1:1b:1d:c5:10:05:62: f1:cb:c6:f8:63:31:f6:14:ba:56:e0:d9:8c:c6:60:f7:22:6c: b3:bd:a8:c3:eb:74:14:59:82:d2:bf:fa:d5:4e:29:b2:6a:2e: 2d:a4:a5:29:07:39:57:59:fc:52:fc:b6:a2:72:bd:b2:c0:cf: 34:4f:7d:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hIH+zTznYT4nauMJql4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliOTdjMjJkMGIzMzhhOGE0NWFhMTM0NWIwOTE3YmEwZGM5 NzMzOTAwHhcNMjYwMTAyMTYyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjU5ZDcyZDY4OGIzNmQ4NTE0ZWY1OTdlYjgxNmZlYzA4YjA3ZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXaHsYUj3Pykn198QsF5J2cNX2gl kG288sGMv/zdUlxqalwv6xrKC4lCR7nktLIZobQMlWa7WlED/4G5UL7fO3zObfGw yyXgsmkOIngm2fUymFTfNAkK5eUekVOev3hY1ozXPxzcDT95KGEf59h3hdX5SG/0 ITlDWl9deLGFVyPuQO+ALlZX1XgXjJiSsdQMn0ASpzuRHasYj2hm/ooeuE8E3XPP UVG8dL69hF3YD6nhUj51sn+3gO1lrxoQJuGhWJqv6WQKh4dEIXunlOaqg/cgTPyk rWWM9U+34hOH0iwl86tC0BgZLjWx/m0zsZz6RwpoRIGn+RvpU07rqW7cGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtZ1y1oizbYUU71l+uBb+wIsH/xMB8GA1UdIwQY MBaAFJuXwi0LM4qKRaoTRbCRe6DclzOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMt YWU5OTllZDdjNWQ0LzEvNjFuWExXaUxOdGhSVHZXWDY0RnY3QWl3Zl9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMjI1OGQtOGJjNS00NGVkLTgwNzMtYWU5OTllZDdjNWQ0 LzEvbTVmQ0xRc3ppb3BGcWhORnNKRjdvTnlYTTVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRwkMA0G CSqGSIb3DQEBCwUAA4IBAQCKBoitysO1BqqE/YP/GZsEPRp9jmWtmqg8G+yjOvzD 6UykMwkRcC9eKoeqq0tY/XvSTYDsUsdpzpbCciAgtobqC8qsBxnkVz43dGqonNDS juGkeLHkmb93r0P4Pbxwbr3qqUv3BONkfKPnvABWSmztD/KzeqKMWCYLdrMaI4Ql 6Lnx/bRVaPuTRo1+RoOfcW16poQfjoWGlgFt4cORYoOY+Ip/YAEoSQ/B2hnK7peV hrVrRoMFIVlNo2OBVMqtQbEbHcUQBWLxy8b4YzH2FLpW4NmMxmD3ImyzvajD63QU WYLSv/rVTimyai4tpKUpBzlXWfxS/Laicr2ywM80T31P -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:39 2026 by rpki-client