This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/64ihED3jNS0XaSeuUSeyFg_2bZM.roa File: 64ihED3jNS0XaSeuUSeyFg_2bZM.roa (raw, json) Hash identifier: /BfCWPD85MIAwhiqpxCqxKLQ9kOdpzvT6SrltrLnWac= Subject key identifier: EB:88:A1:10:3D:E3:35:2D:17:69:27:AE:51:27:B2:16:0F:F6:6D:93 Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926 Certificate serial: 019B7D5C1F1D71B5885E45671A91270F989D Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/64ihED3jNS0XaSeuUSeyFg_2bZM.roa Signing time: Fri 02 Jan 2026 06:19:07 +0000 ROA not before: Fri 02 Jan 2026 06:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60619 IP address blocks: 185.249.144.0/22 maxlen: 22 2a0c:6280::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1f:1d:71:b5:88:5e:45:67:1a:91:27:0f:98:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926 Validity Not Before: Jan 2 06:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb88a1103de3352d176927ae5127b2160ff66d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d4:32:99:b5:32:d9:9b:7d:d3:fc:0c:93:0f: f5:35:57:9f:ed:b0:fa:2a:f9:13:a9:b6:46:be:ef: 20:bd:57:f9:0e:43:56:84:7b:f0:82:10:84:90:46: 13:ae:06:40:2a:03:74:a7:19:2e:33:00:fd:f4:be: cc:56:66:e0:3e:34:b4:0d:82:f8:50:31:e1:dc:03: 9f:5f:2a:70:b0:6e:9f:14:f7:ab:fc:0a:f0:65:32: 6f:2c:4a:ed:8a:15:20:f8:48:f5:6c:15:68:d1:a0: 65:70:a5:94:65:7d:04:5c:6c:28:2b:df:f8:df:ae: 50:eb:83:44:8d:27:d5:69:30:9d:ab:83:6c:b2:e0: e3:55:47:d7:11:8a:fd:4a:96:32:54:02:74:fe:24: 1b:f2:12:ff:3e:7a:94:62:de:4e:3e:f9:f7:1d:6b: 08:49:17:99:9a:76:e2:db:77:84:c9:c8:db:6b:06: b0:2f:47:de:2d:ec:38:47:c1:ea:cb:cd:0b:a4:bc: 19:d4:f7:fd:b2:b9:5f:22:c6:63:a9:7c:6b:96:e5: 9f:ae:3f:eb:4a:a7:a0:80:78:e7:72:6d:82:0a:75: 52:4c:63:4a:58:05:7e:7c:a5:35:92:bf:2b:e6:4a: 90:5f:63:96:36:71:7e:6a:9c:b7:4d:df:2a:65:15: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:88:A1:10:3D:E3:35:2D:17:69:27:AE:51:27:B2:16:0F:F6:6D:93 X509v3 Authority Key Identifier: keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/64ihED3jNS0XaSeuUSeyFg_2bZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.144.0/22 IPv6: 2a0c:6280::/29 Signature Algorithm: sha256WithRSAEncryption 6f:cc:90:b4:ef:91:57:81:d5:91:92:07:21:8b:cd:ca:b2:3e: 0d:64:10:cd:ab:48:34:84:6f:99:e7:3d:5a:44:aa:3e:11:d6: ae:c5:03:37:95:1c:45:c1:00:50:70:4b:ef:3e:e0:57:79:7f: ae:4e:4c:3e:86:c8:d6:94:b1:85:83:5c:6c:87:26:70:8e:e1: 40:50:45:20:63:5b:88:66:16:2a:6a:43:72:a0:10:71:f1:b4: 4b:d8:7a:66:34:7e:7f:8d:1d:6a:cd:79:e5:42:a6:4d:eb:c1: 2e:16:8a:d9:27:35:2e:50:01:eb:31:a4:e2:c2:4e:85:82:5a: 5c:cd:b9:48:84:fb:18:58:cd:fd:a5:9f:de:ee:6c:52:a3:21: 6d:6d:bf:aa:9a:f3:a5:8f:79:55:ef:4c:5e:ef:e3:fc:4d:e5: 09:9e:11:25:db:5a:01:fb:ab:0c:fa:b4:4d:d9:5b:ba:6f:e9: b3:72:dd:32:2f:c0:27:15:6d:72:77:54:72:62:cd:46:89:6c: 6d:0a:f5:76:14:67:16:c1:36:e1:81:94:34:87:fb:cc:52:a9: 10:6d:d6:ed:c2:07:e5:41:02:bf:34:ec:a8:7f:dc:1b:00:41: 96:67:66:b1:e5:4c:45:09:34:17:2a:80:86:9d:37:aa:bb:eb: c4:d9:8b:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XB8dcbWIXkVnGpEnD5idMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz Yjc5MjYwHhcNMjYwMTAyMDYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjg4YTExMDNkZTMzNTJkMTc2OTI3YWU1MTI3YjIxNjBmZjY2ZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tQymbUy2Zt90/wMkw/1NVef7bD6 KvkTqbZGvu8gvVf5DkNWhHvwghCEkEYTrgZAKgN0pxkuMwD99L7MVmbgPjS0DYL4 UDHh3AOfXypwsG6fFPer/ArwZTJvLErtihUg+Ej1bBVo0aBlcKWUZX0EXGwoK9/4 365Q64NEjSfVaTCdq4NssuDjVUfXEYr9SpYyVAJ0/iQb8hL/PnqUYt5OPvn3HWsI SReZmnbi23eEycjbawawL0feLew4R8Hqy80LpLwZ1Pf9srlfIsZjqXxrluWfrj/r SqeggHjncm2CCnVSTGNKWAV+fKU1kr8r5kqQX2OWNnF+apy3Td8qZRVmgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOuIoRA94zUtF2knrlEnshYP9m2TMB8GA1UdIwQY MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt ZDQ0MmM0ZjllOWJkLzEvNjRpaEVEM2pOUzBYYVNldVVTZXlGZ18yYlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufmQMA0E AgACMAcDBQMqDGKAMA0GCSqGSIb3DQEBCwUAA4IBAQBvzJC075FXgdWRkgchi83K sj4NZBDNq0g0hG+Z5z1aRKo+EdauxQM3lRxFwQBQcEvvPuBXeX+uTkw+hsjWlLGF g1xshyZwjuFAUEUgY1uIZhYqakNyoBBx8bRL2HpmNH5/jR1qzXnlQqZN68EuForZ JzUuUAHrMaTiwk6FglpczblIhPsYWM39pZ/e7mxSoyFtbb+qmvOlj3lV70xe7+P8 TeUJnhEl21oB+6sM+rRN2Vu6b+mzct0yL8AnFW1yd1RyYs1GiWxtCvV2FGcWwTbh gZQ0h/vMUqkQbdbtwgflQQK/NOyof9wbAEGWZ2ax5UxFCTQXKoCGnTequ+vE2Yt7 -----END CERTIFICATE-----Generated at Wed Jan 21 08:03:57 2026 by rpki-client