This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa File: wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa (raw, json) Hash identifier: sIqceuhoMcr1nLCZQCrjxxlbwlSCs6IOU3UVRrd7u3k= Subject key identifier: C0:BE:6C:4B:09:E8:F0:C6:E9:6D:EF:7F:0E:85:9B:05:9F:9E:41:21 Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3 Certificate serial: 019B791146F5C7694368006B12F7C039D06F Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211937 IP address blocks: 185.230.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:f5:c7:69:43:68:00:6b:12:f7:c0:39:d0:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716752b91747957dccff0e71da674f329d832de3 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0be6c4b09e8f0c6e96def7f0e859b059f9e4121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:ca:0c:3a:e9:31:56:8f:fe:9c:32:d5:49: be:9c:79:c6:1e:59:01:03:1a:61:5e:4d:4a:ba:5e: 5a:00:09:a2:1f:4f:9d:b7:1c:06:d7:21:ec:41:32: 06:f4:b2:81:5a:21:60:33:6b:64:bc:b9:ed:ae:42: d9:c6:a1:ac:43:a5:0b:5c:6b:ad:3b:35:6c:09:84: 9e:d9:dd:59:54:25:53:c6:9f:95:52:0c:b2:06:61: 7d:be:c8:b4:a6:a4:a0:f0:4e:18:ab:84:e8:73:bc: 1a:fd:5a:fb:f2:f2:cd:c9:b8:cc:d2:57:c9:c6:31: 36:76:ef:a7:77:c6:ac:b4:2c:17:08:f3:a5:d4:d6: 32:ff:1a:22:1f:ae:4d:36:c7:9a:20:d4:57:7e:d3: 05:27:a6:2a:96:ad:a7:17:9b:dc:87:73:be:06:3c: e4:21:f5:27:0b:71:ba:d6:c4:b7:34:a9:4a:10:0d: 73:b0:0e:50:32:32:9f:69:d7:70:13:f1:c4:00:14: 14:cf:16:2a:ef:c1:ad:52:8e:75:e5:64:1e:24:f8: 59:6d:1b:54:b9:66:8e:62:d9:09:f8:c5:c1:40:49: c9:b2:6d:85:6d:67:3a:f0:4f:69:b0:6c:4d:13:f4: b5:df:f4:71:dd:27:9a:76:95:93:5e:66:f0:8a:d5: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BE:6C:4B:09:E8:F0:C6:E9:6D:EF:7F:0E:85:9B:05:9F:9E:41:21 X509v3 Authority Key Identifier: keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.199.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:fa:b0:81:9b:43:6e:a1:c7:2b:dc:8f:ba:e7:bc:fe:2f:dc: e4:52:09:09:38:20:17:c4:c4:2b:d7:76:47:70:48:f9:09:76: 2c:cc:44:70:a2:c4:6a:d2:ba:d0:4d:8c:7b:2d:4a:17:a4:47: fb:87:37:99:15:83:0a:84:cf:77:f6:e8:4b:3e:46:5b:c2:7a: fa:fc:47:97:ac:2b:51:e9:af:66:e9:88:7b:5b:ec:09:22:11: ab:ef:e9:aa:b6:6c:c1:e1:86:a8:50:dc:5b:77:44:a5:33:ec: 33:0f:bf:3d:ff:a6:40:c9:0b:ee:b0:cf:5f:f9:1c:aa:b8:cc: 94:b7:98:5d:fe:e6:30:e7:6a:12:2d:b1:5d:e7:74:d6:0a:95: fc:07:29:80:fe:b0:1f:20:c1:81:88:0e:b7:20:60:8a:f5:f9: 2d:94:cc:08:ea:0e:5b:eb:f3:dc:33:93:6b:14:85:55:d9:31: c6:0d:29:cc:07:ca:91:1b:41:fd:a3:54:96:6d:a4:08:7c:cf: 41:7a:a0:e6:1e:57:94:20:39:ad:23:1b:ac:8d:35:ae:d4:37: 19:b5:6d:a6:1a:a1:1c:23:b5:81:8a:5f:51:41:28:ed:3f:87: 5c:0d:8b:d2:26:49:94:37:11:86:f7:32:d6:4f:8e:2a:9a:c2: a2:d3:e8:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUb1x2lDaABrEvfAOdBvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjc1MmI5MTc0Nzk1N2RjY2ZmMGU3MWRhNjc0ZjMyOWQ4 MzJkZTMwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGJlNmM0YjA5ZThmMGM2ZTk2ZGVmN2YwZTg1OWIwNTlmOWU0MTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1PKDDrpMVaP/pwy1Um+nHnGHlkB AxphXk1Kul5aAAmiH0+dtxwG1yHsQTIG9LKBWiFgM2tkvLntrkLZxqGsQ6ULXGut OzVsCYSe2d1ZVCVTxp+VUgyyBmF9vsi0pqSg8E4Yq4Toc7wa/Vr78vLNybjM0lfJ xjE2du+nd8astCwXCPOl1NYy/xoiH65NNseaINRXftMFJ6Yqlq2nF5vch3O+Bjzk IfUnC3G61sS3NKlKEA1zsA5QMjKfaddwE/HEABQUzxYq78GtUo515WQeJPhZbRtU uWaOYtkJ+MXBQEnJsm2FbWc68E9psGxNE/S13/Rx3SeadpWTXmbwitU8aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMC+bEsJ6PDG6W3vfw6FmwWfnkEhMB8GA1UdIwQY MBaAFHFnUrkXR5V9zP8OcdpnTzKdgy3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMt MjFiYzYzZjE2NWY4LzEvd0w1c1N3bm84TWJwYmU5X0RvV2JCWi1lUVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMtMjFiYzYzZjE2NWY4 LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuebHMA0G CSqGSIb3DQEBCwUAA4IBAQAc+rCBm0Nuoccr3I+657z+L9zkUgkJOCAXxMQr13ZH cEj5CXYszERwosRq0rrQTYx7LUoXpEf7hzeZFYMKhM939uhLPkZbwnr6/EeXrCtR 6a9m6Yh7W+wJIhGr7+mqtmzB4YaoUNxbd0SlM+wzD789/6ZAyQvusM9f+RyquMyU t5hd/uYw52oSLbFd53TWCpX8BymA/rAfIMGBiA63IGCK9fktlMwI6g5b6/PcM5Nr FIVV2THGDSnMB8qRG0H9o1SWbaQIfM9BeqDmHleUIDmtIxusjTWu1DcZtW2mGqEc I7WBil9RQSjtP4dcDYvSJkmUNxGG9zLWT44qmsKi0+hW -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:05 2026 by rpki-client