This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/rroLiEQZHgTeW99j0qiBIrwu5EA.roa File: rroLiEQZHgTeW99j0qiBIrwu5EA.roa (raw, json) Hash identifier: VmsVwoTJ6PHL/2Ntb43rkgeOI/CytWooyIbWbTn6sKE= Subject key identifier: AE:BA:0B:88:44:19:1E:04:DE:5B:DF:63:D2:A8:81:22:BC:2E:E4:40 Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Certificate serial: 019B7F156D663DB2EE0EBD62B3984207EA40 Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/rroLiEQZHgTeW99j0qiBIrwu5EA.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204807 IP address blocks: 185.189.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6d:66:3d:b2:ee:0e:bd:62:b3:98:42:07:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeba0b8844191e04de5bdf63d2a88122bc2ee440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:60:c2:e3:7a:78:6e:d4:79:f2:f5:5a:f8: 84:2b:40:0f:1d:b2:56:fa:5e:be:87:3b:ea:45:0d: 03:ae:7a:f5:77:ac:28:d2:33:c5:71:1e:62:aa:54: eb:33:c5:e4:05:c7:f1:f6:fb:58:0b:86:15:54:3a: b0:79:5e:e1:f4:3a:5d:29:47:b5:f8:e4:05:6d:19: 16:33:a0:57:ed:c7:4b:6d:73:60:b8:e7:ed:f2:dc: ad:69:19:68:03:b0:8f:92:b3:32:2b:4f:70:99:f4: 84:c9:35:eb:e4:de:d6:ed:4c:22:e2:94:d0:66:ee: 6b:43:ba:42:ef:0d:10:b9:27:b7:11:b7:30:68:09: ef:f3:31:77:94:c5:44:2e:70:24:05:94:cb:d7:93: ec:b1:40:3b:b3:83:fa:aa:29:71:93:51:d7:d7:5b: 9c:e8:c4:8d:8f:0d:be:56:93:bc:a5:13:f8:8d:cc: 75:59:91:9e:d6:34:9b:1f:dd:04:55:b1:01:97:f8: a4:79:eb:de:b2:ef:03:6b:55:2a:31:ac:10:bf:71: 8e:c0:0f:41:fa:ee:a5:3b:22:78:ce:4e:12:b6:20: 16:f7:78:0a:4b:97:d5:8e:18:f6:59:19:7e:5f:d6: c7:88:31:ac:bc:78:99:09:9f:48:11:8a:8d:fb:a1: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:0B:88:44:19:1E:04:DE:5B:DF:63:D2:A8:81:22:BC:2E:E4:40 X509v3 Authority Key Identifier: keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/rroLiEQZHgTeW99j0qiBIrwu5EA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.109.0/24 Signature Algorithm: sha256WithRSAEncryption b2:ab:c0:7f:53:89:b1:79:b2:05:d6:05:e1:d4:67:f0:02:7f: bc:d3:f9:c5:b6:0b:71:0f:a3:8c:99:34:b2:91:36:11:5e:a5: 63:4e:3d:58:7f:13:ee:8a:85:7e:92:e3:e4:fc:09:1d:c1:74: ca:3f:f5:ad:95:01:c8:5f:29:d5:6f:c9:a9:1b:a9:03:6a:f5: 29:62:47:bc:8c:fd:0f:07:57:5c:49:ee:75:86:7d:93:7d:ba: a3:2b:3a:95:61:45:0d:c6:da:85:60:cd:0d:9a:ac:52:46:a1: 78:48:b9:d8:93:94:c5:6c:dc:21:e5:c0:c3:38:d9:4a:1c:e4: 16:bf:2b:00:b8:fc:72:aa:72:b0:5b:0a:68:e3:85:0c:b2:5b: e5:18:f8:8c:e5:d3:fd:7b:98:28:17:e7:a2:9f:40:ab:46:30: 48:ac:97:98:fd:b1:10:78:51:4b:cc:d9:f5:47:d5:5f:3f:43: 1c:c4:20:10:1d:cf:e2:75:b0:72:54:54:25:16:a1:95:f4:3a: 06:0d:89:9c:6d:e3:6c:c2:2f:8f:b7:2f:5c:17:da:ab:d6:51: 02:74:5b:88:e1:2c:ad:0a:eb:86:40:15:ec:d6:c0:f7:87:b3: ed:8d:71:41:dc:6d:09:01:6b:16:2b:da:de:0c:8f:d9:14:78: 31:42:b6:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FW1mPbLuDr1is5hCB+pAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjE5MGQ2Zjg5YTQzNGNjZTVjYjhjMGQ0YjM4YTE2Njlk ZWZiNTkwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWJhMGI4ODQ0MTkxZTA0ZGU1YmRmNjNkMmE4ODEyMmJjMmVlNDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaRgwuN6eG7UefL1WviEK0APHbJW +l6+hzvqRQ0Drnr1d6wo0jPFcR5iqlTrM8XkBcfx9vtYC4YVVDqweV7h9DpdKUe1 +OQFbRkWM6BX7cdLbXNguOft8tytaRloA7CPkrMyK09wmfSEyTXr5N7W7Uwi4pTQ Zu5rQ7pC7w0QuSe3EbcwaAnv8zF3lMVELnAkBZTL15PssUA7s4P6qilxk1HX11uc 6MSNjw2+VpO8pRP4jcx1WZGe1jSbH90EVbEBl/ikeevesu8Da1UqMawQv3GOwA9B +u6lOyJ4zk4StiAW93gKS5fVjhj2WRl+X9bHiDGsvHiZCZ9IEYqN+6HjcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK66C4hEGR4E3lvfY9KogSK8LuRAMB8GA1UdIwQY MBaAFHCxkNb4mkNMzly4wNSzihZp3vtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYt NDZiZDdkNzk0ZmI2LzEvcnJvTGlFUVpIZ1RlVzk5ajBxaUJJcnd1NUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yM2RjNjEtN2U5ZC00MGIzLTkxYjYtNDZiZDdkNzk0ZmI2 LzEvY0xHUTF2aWFRMHpPWExqQTFMT0tGbW5lLTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub1tMA0G CSqGSIb3DQEBCwUAA4IBAQCyq8B/U4mxebIF1gXh1GfwAn+80/nFtgtxD6OMmTSy kTYRXqVjTj1YfxPuioV+kuPk/AkdwXTKP/WtlQHIXynVb8mpG6kDavUpYke8jP0P B1dcSe51hn2TfbqjKzqVYUUNxtqFYM0NmqxSRqF4SLnYk5TFbNwh5cDDONlKHOQW vysAuPxyqnKwWwpo44UMslvlGPiM5dP9e5goF+ein0CrRjBIrJeY/bEQeFFLzNn1 R9VfP0McxCAQHc/idbByVFQlFqGV9DoGDYmcbeNswi+Pty9cF9qr1lECdFuI4Syt CuuGQBXs1sD3h7PtjXFB3G0JAWsWK9reDI/ZFHgxQraJ -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:37 2026 by rpki-client