This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/cQbewkFEZ4acO97jlQJ5WKuKd7A.roa File: cQbewkFEZ4acO97jlQJ5WKuKd7A.roa (raw, json) Hash identifier: nw0VsiavZiymn/xF8CuU14khn+rz47RFDCWUotkUcgY= Subject key identifier: 71:06:DE:C2:41:44:67:86:9C:3B:DE:E3:95:02:79:58:AB:8A:77:B0 Certificate issuer: /CN=445df13d20f3b571a4ba610b81e6303db6d099c0 Certificate serial: 019B7F15FC9FEBA10E5D844ECC180EA2D7A3 Authority key identifier: 44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/cQbewkFEZ4acO97jlQJ5WKuKd7A.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8829 IP address blocks: 185.225.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.mft rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fc:9f:eb:a1:0e:5d:84:4e:cc:18:0e:a2:d7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445df13d20f3b571a4ba610b81e6303db6d099c0 Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7106dec2414467869c3bdee395027958ab8a77b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:8b:14:99:e5:12:73:84:c4:e4:c0:ff:df: d9:38:f3:db:ee:59:70:87:ca:e3:13:56:0b:21:c7: 9b:9f:6d:79:94:19:0f:1b:59:74:3a:e1:8d:4c:20: 13:c5:1e:49:9c:24:48:89:67:5b:0f:1f:1b:9e:64: 14:bd:35:be:8b:28:9e:0a:4a:9b:a5:1c:5f:19:83: b7:c0:f0:72:5b:ec:58:4b:11:15:b7:ad:9f:98:12: a0:75:19:87:9a:3b:61:02:d2:8a:7e:ec:b7:23:c9: 38:42:81:b7:42:5b:c6:6a:50:ca:dc:4e:22:1a:4c: de:4f:3f:e1:21:7b:13:6c:4b:35:87:b8:2e:cb:1b: 3a:42:f5:1b:10:36:ac:26:4a:68:34:f9:d7:c1:39: 92:8a:2e:5b:f8:8c:ff:7b:d6:81:89:39:3b:29:ac: 77:2d:29:60:10:d0:96:eb:f1:5a:1a:01:51:e1:9e: c3:77:1d:75:f1:ff:58:0f:ac:15:ba:ae:0e:cb:a1: f3:7c:93:f8:dc:76:e7:4d:6c:23:c3:29:1d:a2:32: a6:85:0e:a3:7d:ff:52:70:39:ae:e9:e5:eb:e8:87: 6f:5f:7e:7e:f4:7f:8f:4f:cd:7f:c6:69:41:b6:42: 78:04:75:47:93:e7:f3:d6:bf:cc:1f:da:61:84:09: 24:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:DE:C2:41:44:67:86:9C:3B:DE:E3:95:02:79:58:AB:8A:77:B0 X509v3 Authority Key Identifier: keyid:44:5D:F1:3D:20:F3:B5:71:A4:BA:61:0B:81:E6:30:3D:B6:D0:99:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RF3xPSDztXGkumELgeYwPbbQmcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/cQbewkFEZ4acO97jlQJ5WKuKd7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc46ec-6428-4e5f-9a19-4f54ad755b20/1/RF3xPSDztXGkumELgeYwPbbQmcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.225.0/24 Signature Algorithm: sha256WithRSAEncryption a6:09:da:ef:09:17:af:37:72:9b:97:42:68:4c:48:b5:2a:ff: b2:1f:4d:4e:b7:83:69:8e:cb:b3:a0:9e:49:67:6f:f6:39:83: 98:ef:f9:f5:3d:2d:fa:21:23:e7:e3:61:a0:1b:a1:31:df:54: ff:0f:50:4b:30:8a:07:5f:ff:f6:75:31:e6:fa:56:7c:f7:98: 0a:17:e1:1b:da:1a:14:50:c2:ac:74:16:b3:72:1b:d8:28:6c: 4d:63:d2:a2:f6:90:74:73:b7:99:4d:19:70:a5:93:eb:5a:00: f4:7f:f5:6f:1a:64:f3:39:3a:48:08:44:2a:75:9c:42:55:6c: 3b:d0:05:b6:f9:b0:a1:c5:18:b4:ec:15:86:f5:19:4a:7b:16: 82:bd:b2:3d:2a:45:4b:da:50:be:61:e3:70:23:e4:2f:37:f7: f7:cf:e9:84:48:67:79:da:6b:d3:af:b3:2a:fb:c6:0c:4b:96: 64:8c:85:0a:64:34:a4:a5:41:6f:55:47:63:77:61:51:84:d2: 25:e7:06:9e:a2:84:b8:9c:ea:96:2c:a3:5f:b3:83:6a:38:18: bf:9d:f2:1f:00:7e:c7:12:8d:0d:bb:5c:0a:db:5d:f8:86:75: cf:fc:84:aa:d3:65:43:ea:a5:8a:ef:59:bd:99:a0:96:f5:97: 28:7b:b8:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Ffyf66EOXYROzBgOotejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NWRmMTNkMjBmM2I1NzFhNGJhNjEwYjgxZTYzMDNkYjZk MDk5YzAwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTA2ZGVjMjQxNDQ2Nzg2OWMzYmRlZTM5NTAyNzk1OGFiOGE3N2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AKLFJnlEnOExOTA/9/ZOPPb7llw h8rjE1YLIcebn215lBkPG1l0OuGNTCATxR5JnCRIiWdbDx8bnmQUvTW+iyieCkqb pRxfGYO3wPByW+xYSxEVt62fmBKgdRmHmjthAtKKfuy3I8k4QoG3QlvGalDK3E4i GkzeTz/hIXsTbEs1h7guyxs6QvUbEDasJkpoNPnXwTmSii5b+Iz/e9aBiTk7Kax3 LSlgENCW6/FaGgFR4Z7Ddx118f9YD6wVuq4Oy6HzfJP43HbnTWwjwykdojKmhQ6j ff9ScDmu6eXr6IdvX35+9H+PT81/xmlBtkJ4BHVHk+fz1r/MH9phhAkk+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEG3sJBRGeGnDve45UCeVirinewMB8GA1UdIwQY MBaAFERd8T0g87VxpLphC4HmMD220JnAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTkt NGY1NGFkNzU1YjIwLzEvY1FiZXdrRkVaNGFjTzk3amxRSjVXS3VLZDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9kYzQ2ZWMtNjQyOC00ZTVmLTlhMTktNGY1NGFkNzU1YjIw LzEvUkYzeFBTRHp0WEdrdW1FTGdlWXdQYmJRbWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueHhMA0G CSqGSIb3DQEBCwUAA4IBAQCmCdrvCRevN3Kbl0JoTEi1Kv+yH01Ot4NpjsuzoJ5J Z2/2OYOY7/n1PS36ISPn42GgG6Ex31T/D1BLMIoHX//2dTHm+lZ895gKF+Eb2hoU UMKsdBazchvYKGxNY9Ki9pB0c7eZTRlwpZPrWgD0f/VvGmTzOTpICEQqdZxCVWw7 0AW2+bChxRi07BWG9RlKexaCvbI9KkVL2lC+YeNwI+QvN/f3z+mESGd52mvTr7Mq +8YMS5ZkjIUKZDSkpUFvVUdjd2FRhNIl5waeooS4nOqWLKNfs4NqOBi/nfIfAH7H Eo0Nu1wK2134hnXP/ISq02VD6qWK71m9maCW9Zcoe7iz -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:23 2026 by rpki-client