This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/T_X3p707ipvGBChHLm6Jdl1I-Eo.roa File: T_X3p707ipvGBChHLm6Jdl1I-Eo.roa (raw, json) Hash identifier: WFxJoWSdsZJM1VlMsZnptgMQml3r3hbons15+0MPPXc= Subject key identifier: 4F:F5:F7:A7:BD:3B:8A:9B:C6:04:28:47:2E:6E:89:76:5D:48:F8:4A Certificate issuer: /CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5 Certificate serial: 019C24FC25DD8038064BBEAD87E94068F393 Authority key identifier: A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/T_X3p707ipvGBChHLm6Jdl1I-Eo.roa Signing time: Tue 03 Feb 2026 19:30:30 +0000 ROA not before: Tue 03 Feb 2026 19:30:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209224 IP address blocks: 185.164.84.0/23 maxlen: 24 185.164.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.mft rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:fc:25:dd:80:38:06:4b:be:ad:87:e9:40:68:f3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87ea7eb7a6e9d0d49ac05f25a3793ea6bf9bcd5 Validity Not Before: Feb 3 19:30:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ff5f7a7bd3b8a9bc60428472e6e89765d48f84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:88:77:1c:53:fe:37:42:36:07:c2:ee:64: f2:f4:5a:0a:f6:19:8d:e2:ca:79:9c:ba:d9:94:41: a5:bd:5b:a8:35:a2:44:a2:03:0c:9d:ae:44:fd:06: d1:8d:d1:e1:0b:b6:32:d8:f1:9b:17:92:ba:2c:9d: f6:ba:d2:49:68:1b:4d:59:62:ec:15:d8:b0:45:84: 7d:f9:0f:b1:a7:da:73:b5:9c:2d:04:8c:1d:74:f8: a1:6a:0f:f5:89:51:65:ed:30:05:bc:82:4a:56:b5: 97:10:09:7a:8b:f9:e0:5d:64:bb:d2:5a:fe:af:30: e2:90:a5:d1:4f:7b:1e:b9:72:0f:d1:dc:34:2e:7a: 41:84:c8:83:29:93:ee:37:fb:15:65:d5:1c:25:90: c7:a3:42:05:80:58:86:a1:dc:75:b9:41:79:64:2a: 1a:ae:87:78:8d:67:16:78:fe:03:6a:6c:5c:60:93: 8b:86:31:0f:b5:ff:34:ff:67:1c:36:b8:b8:e2:08: b9:c4:55:78:23:83:22:5d:07:28:8a:36:0a:9b:9e: b6:49:50:21:34:1f:07:4e:2e:97:18:c2:cd:d6:23: a0:72:76:8a:9f:6e:66:e1:5d:3d:5f:16:bd:d6:5e: 46:0b:71:7f:c2:d1:d7:23:b7:69:35:d7:7c:15:28: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:F7:A7:BD:3B:8A:9B:C6:04:28:47:2E:6E:89:76:5D:48:F8:4A X509v3 Authority Key Identifier: keyid:A8:7E:A7:EB:7A:6E:9D:0D:49:AC:05:F2:5A:37:93:EA:6B:F9:BC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qH6n63punQ1JrAXyWjeT6mv5vNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/T_X3p707ipvGBChHLm6Jdl1I-Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/61d272-adfc-48ef-b23b-b433230f46e2/1/qH6n63punQ1JrAXyWjeT6mv5vNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.84.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:47:bc:cb:98:c2:4a:88:51:a1:af:25:89:c6:42:0a:36:ce: 4b:76:90:8d:ab:48:ca:38:92:39:81:31:af:98:8a:63:d7:a2: 4b:20:60:90:52:e0:e8:83:7c:da:6b:99:24:85:79:17:94:94: a2:5d:c3:fe:02:49:d5:d4:b0:28:0d:fe:10:3f:9f:7d:59:3b: d5:3d:71:63:31:71:d0:27:84:11:bd:cc:22:39:71:97:93:ed: 2e:33:b7:bf:65:fe:00:94:26:d1:28:7f:1e:b9:70:4e:6b:cb: 18:e2:3b:ad:a6:b8:a0:b7:34:c0:12:21:eb:b2:18:53:ab:b2: b2:0a:86:41:01:d1:ce:15:e2:db:10:7e:16:33:7f:b8:7c:f7: a9:9a:f5:d4:45:eb:fa:0b:73:e8:a9:25:fb:46:0c:07:51:c6: 36:1d:8c:66:ea:fc:ac:1e:94:94:f0:24:f2:21:aa:7b:65:0a: f0:b1:99:be:70:57:a2:1c:fa:b1:f5:e5:37:fa:c3:aa:bf:18: ee:10:e2:74:ea:37:42:7f:cc:09:b7:0c:5d:29:4d:fa:4a:6e: e7:e2:f4:b4:68:88:ad:e0:61:f6:f8:d7:a4:ca:9b:fe:15:b7: 50:86:a9:5e:4f:f0:0f:22:9c:e1:c4:a0:63:27:8d:55:48:4f: 42:b3:85:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwk/CXdgDgGS76th+lAaPOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4N2VhN2ViN2E2ZTlkMGQ0OWFjMDVmMjVhMzc5M2VhNmJm OWJjZDUwHhcNMjYwMjAzMTkzMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmY1ZjdhN2JkM2I4YTliYzYwNDI4NDcyZTZlODk3NjVkNDhmODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK2IdxxT/jdCNgfC7mTy9FoK9hmN 4sp5nLrZlEGlvVuoNaJEogMMna5E/QbRjdHhC7Yy2PGbF5K6LJ32utJJaBtNWWLs FdiwRYR9+Q+xp9pztZwtBIwddPihag/1iVFl7TAFvIJKVrWXEAl6i/ngXWS70lr+ rzDikKXRT3seuXIP0dw0LnpBhMiDKZPuN/sVZdUcJZDHo0IFgFiGodx1uUF5ZCoa rod4jWcWeP4DamxcYJOLhjEPtf80/2ccNri44gi5xFV4I4MiXQcoijYKm562SVAh NB8HTi6XGMLN1iOgcnaKn25m4V09Xxa91l5GC3F/wtHXI7dpNdd8FShmqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/196e9O4qbxgQoRy5uiXZdSPhKMB8GA1UdIwQY MBaAFKh+p+t6bp0NSawF8lo3k+pr+bzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUg2bjYzcHVuUTFKckFYeVdqZVQ2bXY1dk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82MWQyNzItYWRmYy00OGVmLWIyM2It YjQzMzIzMGY0NmUyLzEvVF9YM3A3MDdpcHZHQkNoSExtNkpkbDFJLUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi82MWQyNzItYWRmYy00OGVmLWIyM2ItYjQzMzIzMGY0NmUy LzEvcUg2bjYzcHVuUTFKckFYeVdqZVQ2bXY1dk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaRUMA0G CSqGSIb3DQEBCwUAA4IBAQBMR7zLmMJKiFGhryWJxkIKNs5LdpCNq0jKOJI5gTGv mIpj16JLIGCQUuDog3zaa5kkhXkXlJSiXcP+AknV1LAoDf4QP599WTvVPXFjMXHQ J4QRvcwiOXGXk+0uM7e/Zf4AlCbRKH8euXBOa8sY4jutprigtzTAEiHrshhTq7Ky CoZBAdHOFeLbEH4WM3+4fPepmvXURev6C3PoqSX7RgwHUcY2HYxm6vysHpSU8CTy Iap7ZQrwsZm+cFeiHPqx9eU3+sOqvxjuEOJ06jdCf8wJtwxdKU36Sm7n4vS0aIit 4GH2+Nekypv+FbdQhqleT/APIpzhxKBjJ41VSE9Cs4Wd -----END CERTIFICATE-----Generated at Mon Feb 9 20:51:56 2026 by rpki-client