This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/13pODHcx3eQP7xOkMHNEefG7IIQ.roa File: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (raw, json) Hash identifier: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4= Subject key identifier: D7:7A:4E:0C:77:31:DD:E4:0F:EF:13:A4:30:73:44:79:F1:BB:20:84 Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77 Certificate serial: 019B7910095A4FCAFDDB1C91752CE4AF5B00 Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/13pODHcx3eQP7xOkMHNEefG7IIQ.roa Signing time: Thu 01 Jan 2026 10:17:32 +0000 ROA not before: Thu 01 Jan 2026 10:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41847 IP address blocks: 185.144.220.0/22 maxlen: 24 185.144.220.0/24 maxlen: 24 185.144.221.0/24 maxlen: 24 185.144.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:09:5a:4f:ca:fd:db:1c:91:75:2c:e4:af:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d77a4e0c7731dde40fef13a430734479f1bb2084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:72:0e:4e:c7:fe:4c:27:c6:81:53:63:27:64: ad:36:80:54:9b:2f:75:ae:87:69:d8:9f:39:31:54: cc:21:1d:c0:1e:6c:4a:c9:3b:77:a7:df:3e:51:33: 9a:93:c4:a2:b0:6d:e2:b2:8a:8d:72:6e:c7:27:4a: 63:03:91:c0:c3:0a:dc:25:5b:81:c8:e8:7b:dd:c7: 33:a9:2e:16:23:fc:68:11:d2:2f:ed:c5:96:77:24: ac:e2:10:8a:c2:03:eb:3c:43:ab:b5:84:bb:17:6f: 5a:91:a6:b9:d8:7d:8a:5c:9b:25:18:c7:da:0f:9b: c7:1a:38:76:f5:22:0e:e4:63:04:84:1d:c4:11:cf: e4:02:71:a6:dc:d8:88:e8:f0:d5:d2:e4:1d:97:a7: 28:cb:8d:a1:5a:e7:f4:77:ad:b8:c7:43:52:61:15: ea:d2:72:9f:92:8f:e6:64:38:02:7d:b5:36:65:c2: 8d:36:84:44:15:d2:b8:e7:2b:3f:c4:0e:cd:1c:41: c7:d7:1f:9b:a0:e1:47:58:f0:bc:cd:f9:46:da:c8: ac:94:bc:fc:fa:d8:60:db:34:f2:9c:69:04:4b:85: 5c:3c:d4:b7:0a:e0:11:b0:52:0a:a0:ca:f8:dc:f9: db:aa:98:02:7b:54:b2:b6:38:f2:98:bb:9f:55:21: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7A:4E:0C:77:31:DD:E4:0F:EF:13:A4:30:73:44:79:F1:BB:20:84 X509v3 Authority Key Identifier: keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/13pODHcx3eQP7xOkMHNEefG7IIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.220.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:93:68:74:f3:0d:30:34:b5:54:46:4c:95:6e:94:2e:b9:3e: 11:73:2e:62:9e:38:85:93:e0:bc:f1:7b:9f:cf:d7:ac:18:ab: 3d:94:08:1b:a3:58:29:67:0b:bb:ab:97:48:9d:93:54:13:1c: 04:e0:3c:3e:47:90:d9:42:bc:d2:01:d1:2f:5c:3e:48:8f:e2: b7:1a:d5:3b:80:fb:97:6f:f9:ea:d7:8a:35:71:ea:0d:b2:ba: 98:48:3d:ad:80:f5:a3:d9:53:c9:ea:75:68:65:ca:7b:ed:05: 06:4b:09:5e:c3:db:ee:d3:fe:05:4a:a5:48:da:18:c0:cf:e7: 0b:1d:f6:02:42:e9:39:ae:6c:8e:d1:84:af:ee:5e:93:84:d0: 15:4a:21:87:45:d3:ed:8a:1b:66:ea:7e:65:30:85:c0:15:ab: a7:0b:9f:5c:67:d7:63:8a:0c:b6:28:cb:42:67:13:bd:52:ff: d2:36:94:26:5b:37:a2:85:2a:05:63:cd:c4:1c:ad:4e:81:73: 8a:1b:bf:d3:2d:01:78:4a:c8:5c:8a:c8:01:b0:76:fd:4b:12: cb:63:00:c4:a5:a5:77:69:f2:ec:4c:1b:f5:32:ef:06:2c:35: cf:dc:94:f3:29:c2:bc:62:0b:5b:c2:46:c4:48:de:1b:41:c3: 20:c9:b6:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAlaT8r92xyRdSzkr1sAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3 OWVmNzcwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzdhNGUwYzc3MzFkZGU0MGZlZjEzYTQzMDczNDQ3OWYxYmIyMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HIOTsf+TCfGgVNjJ2StNoBUmy91 rodp2J85MVTMIR3AHmxKyTt3p98+UTOak8SisG3isoqNcm7HJ0pjA5HAwwrcJVuB yOh73cczqS4WI/xoEdIv7cWWdySs4hCKwgPrPEOrtYS7F29akaa52H2KXJslGMfa D5vHGjh29SIO5GMEhB3EEc/kAnGm3NiI6PDV0uQdl6coy42hWuf0d624x0NSYRXq 0nKfko/mZDgCfbU2ZcKNNoREFdK45ys/xA7NHEHH1x+boOFHWPC8zflG2sislLz8 +thg2zTynGkES4VcPNS3CuARsFIKoMr43PnbqpgCe1SytjjymLufVSEfxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNd6Tgx3Md3kD+8TpDBzRHnxuyCEMB8GA1UdIwQY MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt ZGFhNzM5MGI1YmE3LzEvMTNwT0RIY3gzZVFQN3hPa01ITkVlZkc3SUlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3 LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZDcMA0G CSqGSIb3DQEBCwUAA4IBAQAKk2h08w0wNLVURkyVbpQuuT4Rcy5injiFk+C88Xuf z9esGKs9lAgbo1gpZwu7q5dInZNUExwE4Dw+R5DZQrzSAdEvXD5Ij+K3GtU7gPuX b/nq14o1ceoNsrqYSD2tgPWj2VPJ6nVoZcp77QUGSwlew9vu0/4FSqVI2hjAz+cL HfYCQuk5rmyO0YSv7l6ThNAVSiGHRdPtihtm6n5lMIXAFaunC59cZ9djigy2KMtC ZxO9Uv/SNpQmWzeihSoFY83EHK1OgXOKG7/TLQF4SshcisgBsHb9SxLLYwDEpaV3 afLsTBv1Mu8GLDXP3JTzKcK8YgtbwkbESN4bQcMgybaI -----END CERTIFICATE-----Generated at Tue Feb 3 00:00:08 2026 by rpki-client