This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/v41zPODCDOKyhQh2VYGpMRTzGHg.roa File: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (raw, json) Hash identifier: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I= Subject key identifier: BF:8D:73:3C:E0:C2:0C:E2:B2:85:08:76:55:81:A9:31:14:F3:18:78 Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Certificate serial: 019B7759367BA35B3DD8ADA8ADDA3CE34B17 Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/v41zPODCDOKyhQh2VYGpMRTzGHg.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13127 IP address blocks: 185.222.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:36:7b:a3:5b:3d:d8:ad:a8:ad:da:3c:e3:4b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf8d733ce0c20ce2b28508765581a93114f31878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:44:3a:05:e0:17:d2:42:f1:6e:3d:a8:5a:90: d2:7b:9a:26:75:60:6f:cf:ae:47:b7:8f:6d:d7:0a: cf:bc:ac:26:b5:2a:5c:56:9d:6b:77:ee:19:dc:db: 35:65:98:c4:e2:70:6a:19:16:3a:b5:97:a9:dc:08: 33:a4:8d:1b:18:c8:1f:83:01:24:98:63:5d:07:a8: 67:60:61:3e:56:c9:db:bb:c6:56:03:a4:b6:d0:c3: bd:7a:74:27:81:6f:84:5f:9c:27:75:92:1b:c0:02: 9c:d1:20:31:98:f2:48:0b:4f:9e:c1:23:3b:20:59: 8b:1d:81:cc:cb:6e:f4:08:5d:90:53:db:ea:19:2c: a2:96:fd:be:e9:15:a6:ae:0f:d4:78:ef:0b:35:af: 62:b4:56:97:7b:8a:38:d7:9e:93:e4:8b:50:41:d8: ca:90:00:ed:c6:67:ac:da:60:4d:41:0d:fa:0b:4c: 28:28:28:b6:d6:a4:b8:3d:cc:d0:b6:4b:eb:b2:6c: 4a:83:03:7f:58:32:82:73:b8:82:7a:80:f9:58:65: ad:ec:79:2c:02:bb:a9:d5:13:4d:f2:41:71:e3:d5: 6e:da:4f:01:e5:40:92:5f:80:d4:24:60:1c:14:12: db:d9:f7:ce:7e:84:e4:be:6e:13:d2:b6:ba:ac:50: 56:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8D:73:3C:E0:C2:0C:E2:B2:85:08:76:55:81:A9:31:14:F3:18:78 X509v3 Authority Key Identifier: keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/v41zPODCDOKyhQh2VYGpMRTzGHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.232.0/24 Signature Algorithm: sha256WithRSAEncryption e0:3a:92:73:f1:ce:b1:b6:39:b4:e4:ce:f7:10:1d:8f:9e:fb: c2:7c:81:59:52:ed:4d:3c:7e:b6:f2:f8:23:4a:5e:d4:0a:9b: 2c:b7:db:1f:cb:8d:d3:ab:e8:d5:1e:b4:91:4b:33:55:15:8e: 7f:18:65:35:3d:d1:e0:31:fb:13:1a:f2:43:64:e9:40:aa:a0: 8b:eb:7c:12:53:e0:6b:2d:80:c2:d3:a8:3c:5b:0c:4d:6f:21: 49:42:33:62:b0:41:b0:ee:53:e5:61:65:39:fc:b8:7f:de:bb: c5:89:fa:2f:24:48:fd:7d:d2:17:eb:ab:05:9a:5a:d0:76:44: 7d:03:0d:5d:e9:49:c3:a9:e6:f1:77:9d:23:a9:06:a1:c7:52: 83:65:89:53:38:14:6b:8d:46:63:05:2b:7c:26:7e:76:ed:42: e6:95:c6:49:d6:a9:42:b6:7b:26:af:62:c2:92:0c:a1:93:8c: 98:92:c9:6f:30:24:ca:3a:2b:53:82:cc:ab:9c:c3:09:81:16: 3a:7c:2b:a4:e7:f9:1b:d8:12:e8:9a:9a:4c:65:3e:5d:62:a0: 40:86:1c:d7:7c:63:f1:3d:d0:53:da:f3:a4:ad:26:f4:d0:05: 13:58:08:46:43:b5:c4:00:35:7b:56:23:4c:0a:d1:d7:55:f2: 8e:b4:ed:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTZ7o1s92K2ordo840sXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzEzNzEwNmMxYTQ2YWVhMDdjMjRiMTE3MjlmZDdkMjE2 YTI0ZjUwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjhkNzMzY2UwYzIwY2UyYjI4NTA4NzY1NTgxYTkzMTE0ZjMxODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEQ6BeAX0kLxbj2oWpDSe5omdWBv z65Ht49t1wrPvKwmtSpcVp1rd+4Z3Ns1ZZjE4nBqGRY6tZep3AgzpI0bGMgfgwEk mGNdB6hnYGE+Vsnbu8ZWA6S20MO9enQngW+EX5wndZIbwAKc0SAxmPJIC0+ewSM7 IFmLHYHMy270CF2QU9vqGSyilv2+6RWmrg/UeO8LNa9itFaXe4o4156T5ItQQdjK kADtxmes2mBNQQ36C0woKCi21qS4PczQtkvrsmxKgwN/WDKCc7iCeoD5WGWt7Hks Arup1RNN8kFx49Vu2k8B5UCSX4DUJGAcFBLb2ffOfoTkvm4T0ra6rFBW1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+NczzgwgzisoUIdlWBqTEU8xh4MB8GA1UdIwQY MBaAFOLBNxBsGkauoHwksRcp/X0haiT1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODIt OWNhZjI1YTQ5OWQ3LzEvdjQxelBPRENET0t5aFFoMlZZR3BNUlR6R0hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yNDM1Y2MtNTUzMy00ZjcwLWJiODItOWNhZjI1YTQ5OWQ3 LzEvNHNFM0VHd2FScTZnZkNTeEZ5bjlmU0ZxSlBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud7oMA0G CSqGSIb3DQEBCwUAA4IBAQDgOpJz8c6xtjm05M73EB2PnvvCfIFZUu1NPH628vgj Sl7UCpsst9sfy43Tq+jVHrSRSzNVFY5/GGU1PdHgMfsTGvJDZOlAqqCL63wSU+Br LYDC06g8WwxNbyFJQjNisEGw7lPlYWU5/Lh/3rvFifovJEj9fdIX66sFmlrQdkR9 Aw1d6UnDqebxd50jqQahx1KDZYlTOBRrjUZjBSt8Jn527ULmlcZJ1qlCtnsmr2LC kgyhk4yYkslvMCTKOitTgsyrnMMJgRY6fCuk5/kb2BLomppMZT5dYqBAhhzXfGPx PdBT2vOkrSb00AUTWAhGQ7XEADV7ViNMCtHXVfKOtO0c -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:12 2026 by rpki-client