This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa File: Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa (raw, json) Hash identifier: keE5gBWDN7d06/rNw4aGS5QaZg/Yuv2eluYkRO/QO9I= Subject key identifier: 46:8E:E2:57:96:4D:55:8C:CD:B2:CB:AE:0E:01:A8:11:B0:CC:42:82 Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a Certificate serial: 019B79ED0EA109D4EC246935EE5DECACF27E Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203292 IP address blocks: 185.73.176.0/22 maxlen: 22 185.73.176.0/24 maxlen: 24 185.73.177.0/24 maxlen: 24 185.73.178.0/24 maxlen: 24 185.73.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0e:a1:09:d4:ec:24:69:35:ee:5d:ec:ac:f2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468ee257964d558ccdb2cbae0e01a811b0cc4282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:4f:76:62:46:43:5c:43:cf:a2:70:3a:fc: c7:31:84:ba:34:36:a4:8c:c6:35:80:fe:80:a3:37: 35:b3:6f:3b:2d:b8:cc:d3:05:50:ca:31:7a:6f:3f: 1b:73:49:a6:de:80:19:6f:82:3c:d2:01:4a:6c:25: f5:45:ee:db:52:c3:96:bb:13:e2:14:9b:10:01:ed: c7:d4:59:47:5c:bd:ee:14:fa:bb:a6:b1:4d:bf:c7: 3d:e1:e7:fd:08:e3:28:7c:24:df:12:28:af:d3:32: 96:56:a8:90:08:72:4c:e2:ce:05:6d:04:0d:66:c2: 1b:eb:f3:ed:5a:e7:25:02:7c:f0:13:1a:40:f4:8e: 52:87:38:bf:9c:c5:89:60:40:92:10:6a:bd:9c:31: 08:e9:3a:a8:c1:ad:b0:c3:1d:42:49:d0:d8:d0:d9: ca:26:34:31:b8:bc:05:78:4b:d1:5b:39:2e:73:48: 8a:d0:3e:01:57:90:40:10:90:a7:72:7f:44:93:69: 5e:91:d5:51:74:11:87:8a:08:bf:23:b0:80:73:9c: ed:6e:10:72:7a:b9:3a:25:36:44:a4:91:d5:82:af: ff:e0:9b:65:2e:21:ee:b1:2a:01:1b:97:d7:9b:59: 1d:14:a6:de:62:9f:97:0f:f7:7a:3b:ee:4e:e7:49: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:E2:57:96:4D:55:8C:CD:B2:CB:AE:0E:01:A8:11:B0:CC:42:82 X509v3 Authority Key Identifier: keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/Ro7iV5ZNVYzNssuuDgGoEbDMQoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.176.0/22 Signature Algorithm: sha256WithRSAEncryption 66:7a:2d:b0:0f:fa:81:a5:e1:f6:54:6c:39:27:d2:63:76:48: f5:ce:27:20:9b:e6:30:d1:a0:62:59:48:d1:7c:24:e5:9f:c7: a0:a8:54:71:18:d0:53:72:f4:76:76:53:03:b0:2a:5c:29:77: e7:a2:3e:1f:e2:06:55:74:17:0d:2f:2d:6c:87:4a:60:0a:d9: 02:ba:73:a6:75:3d:f1:6f:45:5e:c4:8f:e2:7a:7f:b9:f2:d5: 25:11:60:ec:6e:4e:68:86:a2:78:10:ee:60:03:75:25:e4:ba: 3e:69:95:cd:da:e3:9c:88:dd:d6:b7:88:d5:09:61:c4:31:7e: bb:b2:c1:e0:b9:06:84:fa:f0:62:52:89:64:1e:11:e6:c1:33: d6:ba:db:41:6e:82:a9:67:bd:31:ba:81:91:14:84:35:db:6f: f9:b9:46:a5:4a:6d:a1:0c:0d:11:db:0a:63:d4:18:a7:7e:13: 1c:e7:06:62:fe:14:02:63:a6:86:90:eb:ee:f2:08:6e:b3:56: 65:92:7b:c8:0e:07:18:91:2c:9e:9a:b5:fd:09:11:1a:9c:c6: 3d:08:7d:e4:9a:38:b3:4b:c8:1e:24:a6:b5:ef:f5:d6:5c:c8: b7:bd:b2:f5:2a:87:56:6c:9d:40:84:3d:e4:f4:86:2e:a5:a7: 3c:3b:a6:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Q6hCdTsJGk17l3srPJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2UzMWFhMjA1ZDc0MTAxNDQ3ZWZmZDZjMzEzNTE4NjE0 NjQ1M2EwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhlZTI1Nzk2NGQ1NThjY2RiMmNiYWUwZTAxYTgxMWIwY2M0MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dhPdmJGQ1xDz6JwOvzHMYS6NDak jMY1gP6Aozc1s287LbjM0wVQyjF6bz8bc0mm3oAZb4I80gFKbCX1Re7bUsOWuxPi FJsQAe3H1FlHXL3uFPq7prFNv8c94ef9COMofCTfEiiv0zKWVqiQCHJM4s4FbQQN ZsIb6/PtWuclAnzwExpA9I5Shzi/nMWJYECSEGq9nDEI6Tqowa2wwx1CSdDY0NnK JjQxuLwFeEvRWzkuc0iK0D4BV5BAEJCncn9Ek2lekdVRdBGHigi/I7CAc5ztbhBy erk6JTZEpJHVgq//4JtlLiHusSoBG5fXm1kdFKbeYp+XD/d6O+5O50nONQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaO4leWTVWMzbLLrg4BqBGwzEKCMB8GA1UdIwQY MBaAFOXOMaogXXQQFEfv/WwxNRhhRkU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDIt YmY4NjZkYTc0N2FmLzEvUm83aVY1Wk5WWXpOc3N1dURnR29FYkRNUW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84Yzg1MjQtN2Y4NS00MzEzLThlZDItYmY4NjZkYTc0N2Fm LzEvNWM0eHFpQmRkQkFVUi1fOWJERTFHR0ZHUlRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUmwMA0G CSqGSIb3DQEBCwUAA4IBAQBmei2wD/qBpeH2VGw5J9Jjdkj1zicgm+Yw0aBiWUjR fCTln8egqFRxGNBTcvR2dlMDsCpcKXfnoj4f4gZVdBcNLy1sh0pgCtkCunOmdT3x b0VexI/ien+58tUlEWDsbk5ohqJ4EO5gA3Ul5Lo+aZXN2uOciN3Wt4jVCWHEMX67 ssHguQaE+vBiUolkHhHmwTPWuttBboKpZ70xuoGRFIQ122/5uUalSm2hDA0R2wpj 1BinfhMc5wZi/hQCY6aGkOvu8ghus1ZlknvIDgcYkSyemrX9CREanMY9CH3kmjiz S8geJKa17/XWXMi3vbL1KodWbJ1AhD3k9IYupac8O6a0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:20 2026 by rpki-client