This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/sR4VSsh46NucLoZBNFoOCKjAw_w.roa File: sR4VSsh46NucLoZBNFoOCKjAw_w.roa (raw, json) Hash identifier: iz6mxFRpjWhqFGbB1en1IQ8K5ksG0skqK0JvXZzfdr4= Subject key identifier: B1:1E:15:4A:C8:78:E8:DB:9C:2E:86:41:34:5A:0E:08:A8:C0:C3:FC Certificate issuer: /CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c Certificate serial: 019B76EB449EE81DBF6C3C51465991A558BD Authority key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/sR4VSsh46NucLoZBNFoOCKjAw_w.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44784 IP address blocks: 185.149.0.0/22 maxlen: 32 185.254.167.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:44:9e:e8:1d:bf:6c:3c:51:46:59:91:a5:58:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b11e154ac878e8db9c2e8641345a0e08a8c0c3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a3:0e:26:79:eb:af:17:88:4a:95:d1:cb:dd: 62:a9:e8:55:f2:9b:a1:e8:31:26:7e:a0:a3:e8:0a: 11:8a:bd:04:3b:80:15:7e:27:d6:eb:da:3d:82:3c: 79:91:dd:c7:8e:ca:79:62:04:ab:db:a2:6e:7e:e9: 17:89:db:3e:1a:17:8c:22:fe:fe:b8:4d:be:63:33: 1b:92:d6:73:d5:bb:6f:f4:4b:ae:c0:68:79:c0:e7: 5c:89:30:b8:ac:bc:a5:0d:af:ea:33:ca:3f:cf:35: 82:48:54:3c:15:03:09:96:ba:34:5e:b4:55:fe:9d: e4:40:b7:d3:86:12:a2:a5:21:4c:0c:23:f0:4c:ef: ee:b9:41:05:36:e5:e2:c0:53:f5:ed:95:c5:9f:a2: 69:83:6e:a6:0d:f5:46:11:04:5b:9a:0b:54:b6:2b: 91:1c:df:52:48:ad:26:cf:8b:f0:60:4b:e6:41:15: d3:16:a9:64:d9:ec:07:60:ac:74:ed:31:53:a0:84: 03:19:2f:37:44:60:c8:c5:fb:3a:3b:80:b6:c3:81: d0:fc:b6:1c:54:5b:ac:ff:c0:5a:74:bd:37:7e:62: 4b:d9:4e:2c:41:a2:de:6c:98:84:af:68:fa:66:d0: fa:a2:5d:a4:3d:5a:76:fa:87:9f:2c:05:ba:94:e2: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1E:15:4A:C8:78:E8:DB:9C:2E:86:41:34:5A:0E:08:A8:C0:C3:FC X509v3 Authority Key Identifier: keyid:6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/sR4VSsh46NucLoZBNFoOCKjAw_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.0.0/22 185.254.167.0/24 Signature Algorithm: sha256WithRSAEncryption 83:8b:0e:0d:3d:e3:c1:f0:04:f6:b7:85:bf:46:d5:e9:68:57: c4:22:97:a7:06:2b:86:61:35:79:c9:64:4d:97:35:e9:c7:07: 71:72:92:d5:a5:72:1e:c2:bd:00:70:41:22:4d:62:db:96:74: 48:e4:45:7c:ef:37:0b:d2:14:79:47:d2:3f:9f:60:31:e9:07: 67:c8:8c:59:33:a1:20:3a:2b:3c:f3:89:25:80:b4:6c:dc:47: fa:be:2f:c4:cb:c6:5f:0b:28:1b:d1:5e:c5:d4:e7:87:9f:00: e7:2b:d3:58:46:01:5f:16:e0:bf:0b:ec:4f:f6:48:4c:18:6b: 4d:74:96:f7:9b:23:9d:cb:5f:e9:ea:c7:dc:97:08:20:95:73: bc:56:a1:72:9b:c3:9b:13:5c:2d:20:ce:e8:0d:87:8c:b0:09: 88:44:38:3e:1b:f3:33:b0:54:4a:c0:c7:96:80:7d:24:e2:8d: c9:4c:31:18:17:71:1e:34:ab:93:9d:bd:b3:8c:c1:97:07:4c: c4:c4:42:c0:0f:02:80:29:70:64:76:3e:52:6c:75:ba:ee:53: 5f:d4:8b:ef:01:b9:de:ae:2b:61:13:7d:ff:59:15:d5:d7:bd: e2:f5:cd:97:9d:b2:1d:2d:66:c9:f2:32:e6:13:fe:4b:3f:09: a1:65:59:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt260Se6B2/bDxRRlmRpVi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzE4NTAyNDVkMmJmMGI1ODNhMzM5ZjJlYjRmN2MwOTA1 OTY0MGMwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTFlMTU0YWM4NzhlOGRiOWMyZTg2NDEzNDVhMGUwOGE4YzBjM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaMOJnnrrxeISpXRy91iqehV8puh 6DEmfqCj6AoRir0EO4AVfifW69o9gjx5kd3Hjsp5YgSr26JufukXids+GheMIv7+ uE2+YzMbktZz1btv9EuuwGh5wOdciTC4rLylDa/qM8o/zzWCSFQ8FQMJlro0XrRV /p3kQLfThhKipSFMDCPwTO/uuUEFNuXiwFP17ZXFn6Jpg26mDfVGEQRbmgtUtiuR HN9SSK0mz4vwYEvmQRXTFqlk2ewHYKx07TFToIQDGS83RGDIxfs6O4C2w4HQ/LYc VFus/8BadL03fmJL2U4sQaLebJiEr2j6ZtD6ol2kPVp2+oefLAW6lOKTDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLEeFUrIeOjbnC6GQTRaDgiowMP8MB8GA1UdIwQY MBaAFGzBhQJF0r8LWDozny6098CQWWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MGEwYjgtNDU0Mi00ODQwLThmMTkt MGE2OGRhMjdiM2ExLzEvc1I0VlNzaDQ2TnVjTG9aQk5Gb09DS2pBd193LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MGEwYjgtNDU0Mi00ODQwLThmMTktMGE2OGRhMjdiM2Ex LzEvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuZUAAwQA uf6nMA0GCSqGSIb3DQEBCwUAA4IBAQCDiw4NPePB8AT2t4W/RtXpaFfEIpenBiuG YTV5yWRNlzXpxwdxcpLVpXIewr0AcEEiTWLblnRI5EV87zcL0hR5R9I/n2Ax6Qdn yIxZM6EgOis884klgLRs3Ef6vi/Ey8ZfCygb0V7F1OeHnwDnK9NYRgFfFuC/C+xP 9khMGGtNdJb3myOdy1/p6sfclwgglXO8VqFym8ObE1wtIM7oDYeMsAmIRDg+G/Mz sFRKwMeWgH0k4o3JTDEYF3EeNKuTnb2zjMGXB0zExELADwKAKXBkdj5SbHW67lNf 1IvvAbnerithE33/WRXV173i9c2XnbIdLWbJ8jLmE/5LPwmhZVmv -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:37 2026 by rpki-client