This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa File: A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa (raw, json) Hash identifier: yW7YhSTGjTCd5hdSGTzNJGlqpUw27PcefgpccczhLt0= Subject key identifier: 03:58:91:E9:B4:33:7D:6A:ED:FB:74:BE:0E:B0:D8:F3:8B:10:D4:95 Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Certificate serial: 019B7910C484540CC685A912A37625E8F6DE Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa Signing time: Thu 01 Jan 2026 10:18:20 +0000 ROA not before: Thu 01 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56334 IP address blocks: 185.136.20.0/24 maxlen: 24 185.136.21.0/24 maxlen: 24 185.136.22.0/24 maxlen: 24 2a06:f800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c4:84:54:0c:c6:85:a9:12:a3:76:25:e8:f6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291 Validity Not Before: Jan 1 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=035891e9b4337d6aedfb74be0eb0d8f38b10d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8e:89:51:49:f0:78:b2:64:f9:a4:a6:9a:31: be:05:11:73:f1:45:d9:79:02:b0:bf:fa:4d:89:be: e9:aa:54:9e:81:78:4b:1b:2a:19:cd:f6:3c:67:8b: 72:d6:84:6f:57:aa:74:c5:c0:cc:e8:30:10:f2:5d: 6c:52:7b:52:42:12:d3:ab:ef:5a:f3:3d:29:f1:90: 09:06:c6:a8:c7:1d:31:e1:17:47:08:aa:c9:99:04: 63:f8:fd:44:2d:ce:91:43:a2:a9:a1:09:21:5a:30: 8c:59:79:c0:2b:09:80:60:1a:33:28:a7:1d:54:25: 23:0c:85:ba:b5:67:27:4b:70:a3:90:9e:72:d1:5f: cf:0a:07:71:ad:46:b1:a5:2e:b1:47:ed:c7:03:7d: 93:d7:38:05:2a:7c:ea:65:fe:03:28:af:6c:4f:76: b4:a2:15:13:82:2c:8b:c6:97:04:a8:24:a8:11:0f: e9:5c:52:aa:f1:d0:d3:cc:72:e2:6d:fb:74:21:0f: 18:13:1f:f0:36:c0:67:f2:95:45:1e:f2:e9:f2:67: c8:f6:10:e6:d0:c1:41:17:79:73:5c:5d:32:47:2d: c5:d4:fc:bc:c2:54:3e:ed:cb:91:d8:56:65:ca:3f: 7d:85:2a:33:d8:68:6a:11:56:34:a3:d0:39:9c:69: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:58:91:E9:B4:33:7D:6A:ED:FB:74:BE:0E:B0:D8:F3:8B:10:D4:95 X509v3 Authority Key Identifier: keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.20.0-185.136.22.255 IPv6: 2a06:f800::/29 Signature Algorithm: sha256WithRSAEncryption 84:96:1c:1f:c8:84:c5:90:30:9f:9c:48:c9:ba:41:c8:20:22: 8d:b4:ae:5b:79:6b:7b:ba:0f:12:05:c1:b4:0d:fd:54:35:69: aa:56:d5:24:15:99:89:1f:b2:aa:4b:47:56:0d:ea:90:7b:78: d6:dd:ef:24:73:1c:33:96:c6:ed:21:d3:72:ab:5a:8b:ec:c6: f4:e7:67:7a:99:35:e8:1f:96:7a:ac:ca:23:14:82:95:80:d8: f6:e7:33:92:36:15:fc:1d:99:e7:6f:82:18:62:a6:c7:82:28: 36:ac:73:63:93:16:19:c4:f0:10:d1:a1:6e:34:3b:92:f9:50: 46:84:57:c9:c8:c2:69:99:76:ac:b9:a5:91:80:47:07:9a:98: 7a:3f:3f:e3:77:69:b9:15:6f:7c:b5:b8:2a:22:5d:10:ca:93: c1:89:68:68:72:55:8a:eb:c7:96:96:80:56:75:e8:fa:c3:41: da:ab:41:a5:f9:c3:8e:1f:48:5d:17:37:1b:c8:22:37:fe:e0: 3c:b9:d2:60:8b:81:43:c4:de:fa:7c:b8:0b:c9:d1:b5:fc:02: ab:2c:fb:9c:e1:9b:3a:b4:84:b9:fa:2f:b2:5f:97:8f:2c:b7: c3:7e:0d:57:36:03:cb:9b:04:ef:86:ae:5c:8b:18:fd:1d:7f: c8:75:3b:ee -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EMSEVAzGhakSo3Yl6PbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk MDUyOTEwHhcNMjYwMTAxMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzU4OTFlOWI0MzM3ZDZhZWRmYjc0YmUwZWIwZDhmMzhiMTBkNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I6JUUnweLJk+aSmmjG+BRFz8UXZ eQKwv/pNib7pqlSegXhLGyoZzfY8Z4ty1oRvV6p0xcDM6DAQ8l1sUntSQhLTq+9a 8z0p8ZAJBsaoxx0x4RdHCKrJmQRj+P1ELc6RQ6KpoQkhWjCMWXnAKwmAYBozKKcd VCUjDIW6tWcnS3CjkJ5y0V/PCgdxrUaxpS6xR+3HA32T1zgFKnzqZf4DKK9sT3a0 ohUTgiyLxpcEqCSoEQ/pXFKq8dDTzHLibft0IQ8YEx/wNsBn8pVFHvLp8mfI9hDm 0MFBF3lzXF0yRy3F1Py8wlQ+7cuR2FZlyj99hSoz2GhqEVY0o9A5nGk8BQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFANYkem0M31q7ft0vg6w2POLENSVMB8GA1UdIwQY MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt MTBjYmM1OTdhNzFhLzEvQTFpUjZiUXpmV3J0LTNTLURyRFk4NHNRMUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5iBQD BAC5iBYwDQQCAAIwBwMFAyoG+AAwDQYJKoZIhvcNAQELBQADggEBAISWHB/IhMWQ MJ+cSMm6QcggIo20rlt5a3u6DxIFwbQN/VQ1aapW1SQVmYkfsqpLR1YN6pB7eNbd 7yRzHDOWxu0h03KrWovsxvTnZ3qZNegflnqsyiMUgpWA2PbnM5I2Ffwdmedvghhi pseCKDasc2OTFhnE8BDRoW40O5L5UEaEV8nIwmmZdqy5pZGARweamHo/P+N3abkV b3y1uCoiXRDKk8GJaGhyVYrrx5aWgFZ16PrDQdqrQaX5w44fSF0XNxvIIjf+4Dy5 0mCLgUPE3vp8uAvJ0bX8Aqss+5zhmzq0hLn6L7Jfl48st8N+DVc2A8ubBO+GrlyL GP0df8h1O+4= -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:30 2026 by rpki-client