This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa File: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (raw, json) Hash identifier: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo= Subject key identifier: 68:D7:46:9B:4F:A9:26:C9:C7:18:0C:4F:41:6A:46:4B:52:AF:E5:95 Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68 Certificate serial: 019B79ECB041C3FBA2E759663610A5201213 Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207281 IP address blocks: 185.63.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b0:41:c3:fb:a2:e7:59:66:36:10:a5:20:12:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68 Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68d7469b4fa926c9c7180c4f416a464b52afe595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:72:91:1f:ba:4b:cc:6c:76:74:75:da:09: fa:17:5c:2a:e2:e9:83:97:b7:94:e7:ae:e1:8b:4c: 79:66:8b:09:2e:2f:1f:09:51:bb:07:99:21:44:45: cc:4c:44:61:de:14:3b:6f:ec:ea:27:85:ea:44:b4: 3e:da:2b:5d:6f:4e:9e:23:58:00:1f:25:85:e6:05: fb:ea:e4:2e:7a:1e:3f:f8:30:36:30:45:8f:54:d0: 3b:5b:45:a8:b4:06:2f:ca:17:f9:55:d0:1a:2c:b0: 80:4d:55:87:ff:64:45:9d:40:c7:b8:5e:08:45:bc: 06:63:e3:95:83:f7:27:50:e1:ec:f5:b8:a1:31:b2: ca:83:02:1c:91:df:7e:40:08:93:ef:20:94:b6:75: 46:b4:97:9a:76:f5:e8:66:7e:70:a4:b4:93:be:b6: ff:4c:21:a3:a7:91:e5:45:28:8f:aa:9b:1e:60:bb: d1:86:02:a1:24:ac:c5:f6:5d:ae:f5:a9:ac:c4:1e: 9c:e1:c3:d1:7c:43:d1:0a:01:19:d7:e8:30:16:cd: 18:33:5f:cd:bb:37:fd:4a:11:91:15:98:74:37:f4: 6b:45:fa:b0:47:f2:a7:37:f1:05:b4:a0:01:44:32: fd:64:55:bc:d2:ab:a5:25:26:0d:8a:92:36:19:01: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:46:9B:4F:A9:26:C9:C7:18:0C:4F:41:6A:46:4B:52:AF:E5:95 X509v3 Authority Key Identifier: keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.85.0/24 Signature Algorithm: sha256WithRSAEncryption 07:e7:c2:62:ee:37:79:b4:93:24:5a:1a:d1:39:39:4f:93:80: 07:0a:11:ba:87:3a:65:c3:36:a5:db:46:39:d3:3c:e0:25:95: b9:da:4d:70:12:08:54:a0:9a:b8:20:33:5a:41:3e:5c:6c:43: 21:60:2a:42:6d:2c:90:c7:6e:47:eb:64:2a:bc:a2:da:99:09: d0:4a:cd:12:4b:73:78:7d:8e:75:81:52:23:8d:e7:68:c7:92: a2:76:f5:7f:3f:04:24:b5:00:fa:d7:cc:61:54:2a:c5:53:51: 26:54:d8:a5:89:22:44:f1:95:07:79:df:1c:d3:46:24:7f:e5: ec:5a:8d:ed:8b:8e:48:ce:50:0b:a7:fd:84:1b:82:c1:21:ac: 75:91:df:25:c4:ce:85:a1:b3:b2:19:57:33:46:9e:da:f1:ee: 76:df:3b:18:b7:38:19:00:3e:7b:15:e2:d3:0b:89:f1:6a:69: bb:d0:4e:08:02:a1:27:eb:d0:47:d9:54:8b:4d:8a:f7:0c:4c: a6:d8:7d:c8:72:c3:07:9c:14:08:a6:eb:5d:51:77:ea:3a:9b: ed:d3:42:4e:17:e6:38:04:5f:67:81:d8:db:d2:58:84:0c:89: b0:42:75:05:cc:b1:24:c2:3a:21:b3:56:ee:30:60:fa:9d:39: e3:98:89:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LBBw/ui51lmNhClIBITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkOTkyNzE5MTkxYTg5NGQwNjhkYmE4ZDBhMTAwNmU5ZmVh ZGFhNjgwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGQ3NDY5YjRmYTkyNmM5YzcxODBjNGY0MTZhNDY0YjUyYWZlNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYVykR+6S8xsdnR12gn6F1wq4umD l7eU567hi0x5ZosJLi8fCVG7B5khREXMTERh3hQ7b+zqJ4XqRLQ+2itdb06eI1gA HyWF5gX76uQueh4/+DA2MEWPVNA7W0WotAYvyhf5VdAaLLCATVWH/2RFnUDHuF4I RbwGY+OVg/cnUOHs9bihMbLKgwIckd9+QAiT7yCUtnVGtJeadvXoZn5wpLSTvrb/ TCGjp5HlRSiPqpseYLvRhgKhJKzF9l2u9amsxB6c4cPRfEPRCgEZ1+gwFs0YM1/N uzf9ShGRFZh0N/RrRfqwR/KnN/EFtKABRDL9ZFW80qulJSYNipI2GQEZtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGjXRptPqSbJxxgMT0FqRktSr+WVMB8GA1UdIwQY MBaAFI2ZJxkZGolNBo26jQoQBun+rapoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEt NDgyZWM3ZDY4NzJlLzEvYU5kR20wLXBKc25IR0F4UFFXcEdTMUt2NVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEtNDgyZWM3ZDY4NzJl LzEvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT9VMA0G CSqGSIb3DQEBCwUAA4IBAQAH58Ji7jd5tJMkWhrROTlPk4AHChG6hzplwzal20Y5 0zzgJZW52k1wEghUoJq4IDNaQT5cbEMhYCpCbSyQx25H62QqvKLamQnQSs0SS3N4 fY51gVIjjedox5KidvV/PwQktQD618xhVCrFU1EmVNiliSJE8ZUHed8c00Ykf+Xs Wo3ti45IzlALp/2EG4LBIax1kd8lxM6FobOyGVczRp7a8e523zsYtzgZAD57FeLT C4nxamm70E4IAqEn69BH2VSLTYr3DEym2H3IcsMHnBQIputdUXfqOpvt00JOF+Y4 BF9ngdjb0liEDImwQnUFzLEkwjohs1buMGD6nTnjmIkP -----END CERTIFICATE-----Generated at Mon Feb 2 14:22:50 2026 by rpki-client