This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa File: xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa (raw, json) Hash identifier: s14zG8n95cnLanJ2EGUmy/+O9/gNhrX1fm7XyiLB6RQ= Subject key identifier: C5:DE:48:66:2C:F5:60:1D:8F:74:1F:AA:F9:52:A8:59:4A:A5:7D:68 Certificate issuer: /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Certificate serial: 019B7E38862B04F90FCF0AA095B024AC919A Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 185.114.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:86:2b:04:f9:0f:cf:0a:a0:95:b0:24:ac:91:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1 Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5de48662cf5601d8f741faaf952a8594aa57d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:74:66:8e:9a:de:da:6f:27:0c:58:3a:63:ef: 11:1e:e5:8b:d8:e1:d8:44:7a:7f:6d:07:e7:bd:32: b5:b8:aa:09:e5:9d:8f:c3:65:c7:17:2b:4f:81:10: cd:ac:bf:93:84:8e:5d:90:ee:be:ed:29:8c:49:d2: 6f:d2:5c:b1:3d:cc:13:12:40:b4:5f:73:48:c1:2d: 6d:dd:d7:67:ff:30:57:9b:c4:0b:65:ac:db:2f:e7: b5:11:4b:9b:37:dd:6e:ef:6e:b6:4f:32:41:0f:b0: 1d:06:a5:07:fa:da:8b:8d:11:07:14:d1:38:d6:11: c2:bb:21:e6:9b:25:62:f5:ee:17:8c:11:3b:6f:6c: b1:52:b7:5f:30:65:bd:74:20:f5:af:02:93:81:a8: 62:a5:b8:3a:54:b7:93:1f:8b:d6:68:05:d7:46:41: bc:a7:f9:8b:d7:11:17:4e:73:34:fe:4c:b1:be:30: c9:b7:8e:ab:27:13:5c:15:50:4f:1c:c7:0f:ee:7c: 89:80:38:86:a4:e1:df:15:44:95:9f:9e:1f:1e:ef: f3:83:b0:53:78:95:85:56:8e:be:02:67:85:c4:41: b6:10:c8:6a:c9:fb:ef:95:f4:77:08:81:25:4f:07: 7a:d0:c7:09:24:ea:61:b6:84:14:ab:e4:d0:07:04: d8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DE:48:66:2C:F5:60:1D:8F:74:1F:AA:F9:52:A8:59:4A:A5:7D:68 X509v3 Authority Key Identifier: keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/xd5IZiz1YB2PdB-q-VKoWUqlfWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.33.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:1d:2b:b1:3e:47:bc:1c:c9:a9:e3:47:a5:fe:cb:14:e3:cd: 89:c6:58:fe:f1:b1:de:d0:da:9e:03:72:ee:14:1a:b4:f1:85: 7a:f1:0c:2e:66:62:2e:9c:f0:cf:3f:26:1f:b5:b1:92:49:86: 88:c2:f7:14:90:44:38:9b:9a:a0:84:de:df:9b:d9:a5:29:57: b3:a4:13:87:eb:d0:8a:15:a4:39:c4:06:f8:8f:4c:ae:17:02: de:ab:52:17:c1:38:f5:7a:00:53:83:b1:cb:87:25:eb:85:d2: 41:9c:48:1d:c2:64:f4:51:9b:98:31:1f:4d:b8:4f:4c:a4:48: 0e:68:29:d4:d0:96:43:4c:a5:6c:c5:e0:8b:d6:da:43:30:6f: 83:e0:55:54:10:dd:41:8c:07:e2:9d:59:a1:3c:63:ad:73:14: 1d:32:d5:ce:f7:c7:aa:0c:21:91:94:50:e1:9c:4f:d4:83:b1: f1:45:be:2f:70:49:47:c6:c6:ff:4c:e0:c6:23:68:a6:57:8d: 80:35:d1:63:7c:a5:88:7b:2e:a1:96:36:93:7c:be:65:bd:a3: bf:2c:82:13:f2:47:ac:ce:b6:ca:84:c9:b1:09:7c:5f:6b:22: 38:2b:77:2a:11:cb:d9:be:ed:d9:a5:87:f9:52:72:a3:a8:2b: 29:30:f3:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIYrBPkPzwqglbAkrJGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTRhN2UyYThjNzAxMjMyNWFlOTczZWQxYTJiYmEwNWIy YmI5YzEwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWRlNDg2NjJjZjU2MDFkOGY3NDFmYWFmOTUyYTg1OTRhYTU3ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HRmjpre2m8nDFg6Y+8RHuWL2OHY RHp/bQfnvTK1uKoJ5Z2Pw2XHFytPgRDNrL+ThI5dkO6+7SmMSdJv0lyxPcwTEkC0 X3NIwS1t3ddn/zBXm8QLZazbL+e1EUubN91u7262TzJBD7AdBqUH+tqLjREHFNE4 1hHCuyHmmyVi9e4XjBE7b2yxUrdfMGW9dCD1rwKTgahipbg6VLeTH4vWaAXXRkG8 p/mL1xEXTnM0/kyxvjDJt46rJxNcFVBPHMcP7nyJgDiGpOHfFUSVn54fHu/zg7BT eJWFVo6+AmeFxEG2EMhqyfvvlfR3CIElTwd60McJJOphtoQUq+TQBwTYiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXeSGYs9WAdj3QfqvlSqFlKpX1oMB8GA1UdIwQY MBaAFBIUp+KoxwEjJa6XPtGiu6BbK7nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQt ZTljMzY0OWMxMjE4LzEveGQ1SVppejFZQjJQZEItcS1WS29XVXFsZldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNjhkYmMtM2Y5NC00ZmVkLThkOWQtZTljMzY0OWMxMjE4 LzEvRWhTbjRxakhBU01scnBjLTBhSzdvRnNydWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXIhMA0G CSqGSIb3DQEBCwUAA4IBAQCcHSuxPke8HMmp40el/ssU482Jxlj+8bHe0NqeA3Lu FBq08YV68QwuZmIunPDPPyYftbGSSYaIwvcUkEQ4m5qghN7fm9mlKVezpBOH69CK FaQ5xAb4j0yuFwLeq1IXwTj1egBTg7HLhyXrhdJBnEgdwmT0UZuYMR9NuE9MpEgO aCnU0JZDTKVsxeCL1tpDMG+D4FVUEN1BjAfinVmhPGOtcxQdMtXO98eqDCGRlFDh nE/Ug7HxRb4vcElHxsb/TODGI2imV42ANdFjfKWIey6hljaTfL5lvaO/LIIT8kes zrbKhMmxCXxfayI4K3cqEcvZvu3ZpYf5UnKjqCspMPPQ -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:44 2026 by rpki-client