This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/tS44mZmIyFMs473UjL5U854eiII.roa File: tS44mZmIyFMs473UjL5U854eiII.roa (raw, json) Hash identifier: KoRk1peqIoiZFVFsXXW3hidWdEm/mtcGGSeO03SIlM8= Subject key identifier: B5:2E:38:99:99:88:C8:53:2C:E3:BD:D4:8C:BE:54:F3:9E:1E:88:82 Certificate issuer: /CN=ba404396ec776ebc663b37904f53bf6f2db697de Certificate serial: 019B7E3881AFD0CF7E745E1828659D0AE7F9 Authority key identifier: BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/tS44mZmIyFMs473UjL5U854eiII.roa Signing time: Fri 02 Jan 2026 10:19:50 +0000 ROA not before: Fri 02 Jan 2026 10:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199081 IP address blocks: 185.232.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.mft rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:81:af:d0:cf:7e:74:5e:18:28:65:9d:0a:e7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba404396ec776ebc663b37904f53bf6f2db697de Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b52e38999988c8532ce3bdd48cbe54f39e1e8882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:8c:a3:a2:36:3a:c1:74:49:b4:ed:89:84: 31:16:a4:c8:86:28:d1:a7:f2:43:05:b6:49:bb:f2: ea:8c:6a:07:c7:f0:83:80:e5:61:b3:a1:0c:91:28: 59:53:02:fd:30:9a:85:f7:b3:01:81:0b:04:4b:79: 34:b7:08:c6:3c:36:43:a4:69:87:77:c1:38:bd:73: f0:ef:c3:9c:2f:bd:89:29:9c:95:5a:7b:6e:21:b7: bf:30:bb:6a:d7:14:5c:40:37:d9:9d:9b:e5:1d:d8: c2:80:07:63:be:cc:a5:ae:a1:72:b0:a2:d8:fc:46: 99:f9:82:60:90:a5:37:90:fb:b1:dc:fd:4b:eb:f3: 9b:e4:8e:fc:eb:2f:34:ac:d8:eb:db:6f:c7:54:2e: c2:72:b1:45:0a:f4:6d:9d:a4:d8:58:62:f3:9e:5b: 05:37:26:08:30:ce:51:9b:79:38:d6:cf:58:85:51: 81:42:85:4a:4f:45:10:2b:d2:5d:71:d9:5a:4f:af: 56:6a:b0:c0:3c:f4:5c:8b:57:fe:06:99:5e:48:30: 42:e0:5e:9c:72:97:56:9b:8e:d4:6c:84:db:d8:02: 0e:dd:d7:6e:9e:12:00:c0:c3:eb:44:4e:1e:05:54: ff:27:cb:42:2f:6f:5d:6b:c0:1c:f4:14:6f:b4:c9: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:38:99:99:88:C8:53:2C:E3:BD:D4:8C:BE:54:F3:9E:1E:88:82 X509v3 Authority Key Identifier: keyid:BA:40:43:96:EC:77:6E:BC:66:3B:37:90:4F:53:BF:6F:2D:B6:97:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukBDlux3brxmOzeQT1O_by22l94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/tS44mZmIyFMs473UjL5U854eiII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f45f60-f4ee-42ad-b6ab-735a399f0102/1/ukBDlux3brxmOzeQT1O_by22l94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.240.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:76:01:b0:e4:d7:46:b2:97:1d:20:7c:d4:64:ca:bc:8e:ff: 42:92:7d:63:fb:24:da:bc:a2:af:e4:f6:59:87:68:87:4c:2c: 7c:d0:86:61:8c:7a:fc:04:d7:b6:e3:2c:4a:60:9b:38:c1:1e: 60:fe:e7:0d:49:c6:be:75:c9:06:8e:86:13:f3:8d:4b:84:08: 5d:ca:a0:7f:b2:da:82:b0:70:7d:b8:e2:79:0b:89:ef:53:53: 25:e0:cd:79:94:c3:e1:ca:22:ce:17:41:04:4f:10:d4:44:d7: ad:da:1d:4a:a9:78:77:02:07:9a:79:93:4f:1c:02:3e:f7:9a: 2f:c9:80:7a:8c:02:3b:fa:90:2e:c7:46:d2:bd:53:3b:89:16: 45:6e:91:63:9e:02:9a:40:7d:98:4b:f0:b9:87:7c:4a:de:92: d8:c9:4a:02:b9:73:92:b5:fb:d2:29:38:29:61:cb:5c:ba:fc: e9:ee:6c:a0:13:88:71:aa:c4:88:7f:91:3b:3e:5a:53:7a:85: 67:70:8f:7e:7d:d8:1c:00:50:02:82:73:62:2f:a2:0f:f6:7f: d0:04:4f:56:25:ec:ba:67:b2:d4:fb:49:5b:55:02:d3:c5:d2: 3f:08:47:1a:cd:c7:df:b3:9b:72:33:54:4b:6c:1a:bd:17:e3: c3:0a:03:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIGv0M9+dF4YKGWdCuf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNDA0Mzk2ZWM3NzZlYmM2NjNiMzc5MDRmNTNiZjZmMmRi Njk3ZGUwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTJlMzg5OTk5ODhjODUzMmNlM2JkZDQ4Y2JlNTRmMzllMWU4ODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGeMo6I2OsF0SbTtiYQxFqTIhijR p/JDBbZJu/LqjGoHx/CDgOVhs6EMkShZUwL9MJqF97MBgQsES3k0twjGPDZDpGmH d8E4vXPw78OcL72JKZyVWntuIbe/MLtq1xRcQDfZnZvlHdjCgAdjvsylrqFysKLY /EaZ+YJgkKU3kPux3P1L6/Ob5I786y80rNjr22/HVC7CcrFFCvRtnaTYWGLznlsF NyYIMM5Rm3k41s9YhVGBQoVKT0UQK9JdcdlaT69WarDAPPRci1f+BpleSDBC4F6c cpdWm47UbITb2AIO3ddunhIAwMPrRE4eBVT/J8tCL29da8Ac9BRvtMn0/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUuOJmZiMhTLOO91Iy+VPOeHoiCMB8GA1UdIwQY MBaAFLpAQ5bsd268Zjs3kE9Tv28ttpfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWIt NzM1YTM5OWYwMTAyLzEvdFM0NG1abUl5Rk1zNDczVWpMNVU4NTRlaUlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9mNDVmNjAtZjRlZS00MmFkLWI2YWItNzM1YTM5OWYwMTAy LzEvdWtCRGx1eDNicnhtT3plUVQxT19ieTIybDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuejwMA0G CSqGSIb3DQEBCwUAA4IBAQBfdgGw5NdGspcdIHzUZMq8jv9Ckn1j+yTavKKv5PZZ h2iHTCx80IZhjHr8BNe24yxKYJs4wR5g/ucNSca+dckGjoYT841LhAhdyqB/stqC sHB9uOJ5C4nvU1Ml4M15lMPhyiLOF0EETxDURNet2h1KqXh3AgeaeZNPHAI+95ov yYB6jAI7+pAux0bSvVM7iRZFbpFjngKaQH2YS/C5h3xK3pLYyUoCuXOStfvSKTgp Yctcuvzp7mygE4hxqsSIf5E7PlpTeoVncI9+fdgcAFACgnNiL6IP9n/QBE9WJey6 Z7LU+0lbVQLTxdI/CEcazcffs5tyM1RLbBq9F+PDCgMa -----END CERTIFICATE-----Generated at Tue Jan 27 00:06:50 2026 by rpki-client