This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/1tXKvbccZVqmGCzOIY3BaiKWNpI.roa File: 1tXKvbccZVqmGCzOIY3BaiKWNpI.roa (raw, json) Hash identifier: ZMIDM8rVxwZQ46a51953kpL3cP7HCn+o1QL6WgtS1ZM= Subject key identifier: D6:D5:CA:BD:B7:1C:65:5A:A6:18:2C:CE:21:8D:C1:6A:22:96:36:92 Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b Certificate serial: 019B76EAC7114E48C3DD09D88128139CB86C Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/1tXKvbccZVqmGCzOIY3BaiKWNpI.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207179 IP address blocks: 185.140.224.0/23 maxlen: 23 185.140.226.0/23 maxlen: 23 2a07:2080::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c7:11:4e:48:c3:dd:09:d8:81:28:13:9c:b8:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6d5cabdb71c655aa6182cce218dc16a22963692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:6c:3c:63:71:c2:5d:c5:05:a5:e7:e8:3e: 1d:af:1d:ef:e7:a5:45:5c:57:89:c1:1f:42:ef:e2: 8d:3d:ec:b6:82:0b:ba:e7:6b:97:55:8f:13:cb:6b: 26:fe:d1:c7:ba:7f:a4:81:2c:1f:23:dc:49:2d:96: 9f:c7:e6:aa:8f:a0:58:09:8f:8a:14:1e:a3:fa:d2: 28:75:11:0d:30:df:db:9a:14:be:de:3e:77:5d:f6: 4d:73:61:46:43:73:64:de:10:72:ab:04:98:87:be: 3e:19:9e:ed:60:58:1b:1b:ec:47:82:d3:18:9e:07: fb:78:60:d5:ea:83:f1:01:85:49:41:6a:85:87:30: 1c:06:66:68:6f:97:df:73:02:4d:3c:f4:27:a1:8d: bc:a6:00:7e:8c:ab:b1:9b:99:df:e0:fa:31:d6:25: ef:5c:3b:ca:5b:4f:e7:2a:f7:b8:37:84:2d:37:0b: 66:df:e8:12:b2:ec:bb:1d:7e:37:4d:ed:bd:0b:7e: 82:cb:30:90:a2:d3:e2:92:a3:68:c4:b2:e5:03:90: 9c:30:13:50:e0:ea:84:85:3b:29:ce:5b:58:62:e6: 22:d2:4b:7b:69:fa:d5:fa:ef:0c:1f:03:44:93:2c: 8c:eb:87:7a:99:0a:75:14:40:46:18:fc:d6:6b:d5: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D5:CA:BD:B7:1C:65:5A:A6:18:2C:CE:21:8D:C1:6A:22:96:36:92 X509v3 Authority Key Identifier: keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/1tXKvbccZVqmGCzOIY3BaiKWNpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.224.0/22 IPv6: 2a07:2080::/29 Signature Algorithm: sha256WithRSAEncryption a1:c7:61:c4:d2:3a:0f:43:7c:1c:c9:c5:d1:6e:83:08:9c:ab: f4:b1:8a:c9:10:fe:bc:5d:ad:dc:56:e1:24:de:12:c9:46:76: 5e:af:10:7a:dd:88:f8:4f:f7:02:0f:ac:8b:7f:05:96:9e:29: 3a:cd:e5:66:d7:75:94:18:54:ee:63:2c:d7:d2:21:ec:04:6b: 28:ca:0d:5c:58:b7:d3:80:cb:22:0d:50:13:0f:22:1e:ad:1e: c1:c5:55:39:c4:c7:78:e1:ea:50:65:fd:dd:57:f1:65:f4:56: 7f:da:3b:51:57:f5:8a:1f:cc:7d:0f:38:1e:e6:d1:88:7b:6b: 55:c2:a1:60:b4:fc:68:a1:ea:05:97:21:97:da:5f:ed:7c:8b: 35:7e:bb:15:73:ae:2d:db:e3:62:72:88:5b:67:a4:13:73:be: d9:1e:3b:8c:da:19:b2:92:15:62:fa:71:81:d5:b1:dc:5d:54: 2c:f7:d8:de:8c:2c:22:70:ce:12:e9:c3:0c:74:4a:f9:a6:9e: 0b:a7:a4:a3:48:82:cb:6b:2b:eb:f8:de:55:63:72:7c:f8:86: f4:d0:b4:10:2f:79:6c:46:e6:38:8c:71:eb:e0:c1:a5:de:1b: 9d:aa:00:2c:7c:dd:b1:32:76:3c:cc:62:e3:d0:8c:dd:56:1f: c4:63:df:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26scRTkjD3QnYgSgTnLhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNWU4MzgzMTJlMDRhZWY5Zjk1MzZlMjBjZDQxMjgzYTdi OGI3N2IwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmQ1Y2FiZGI3MWM2NTVhYTYxODJjY2UyMThkYzE2YTIyOTYzNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2i9sPGNxwl3FBaXn6D4drx3v56VF XFeJwR9C7+KNPey2ggu652uXVY8Ty2sm/tHHun+kgSwfI9xJLZafx+aqj6BYCY+K FB6j+tIodRENMN/bmhS+3j53XfZNc2FGQ3Nk3hByqwSYh74+GZ7tYFgbG+xHgtMY ngf7eGDV6oPxAYVJQWqFhzAcBmZob5ffcwJNPPQnoY28pgB+jKuxm5nf4Pox1iXv XDvKW0/nKve4N4QtNwtm3+gSsuy7HX43Te29C36CyzCQotPikqNoxLLlA5CcMBNQ 4OqEhTspzltYYuYi0kt7afrV+u8MHwNEkyyM64d6mQp1FEBGGPzWa9Xb+QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNbVyr23HGVaphgsziGNwWoiljaSMB8GA1UdIwQY MBaAFO1eg4MS4Ervn5U24gzUEoOnuLd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYt ZWRhY2E5ZDEzNjFhLzEvMXRYS3ZiY2NaVnFtR0N6T0lZM0JhaUtXTnBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iZWU1YWMtOTljYy00MWE3LWE2NWYtZWRhY2E5ZDEzNjFh LzEvN1Y2RGd4TGdTdS1mbFRiaUROUVNnNmU0dDNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYzgMA0E AgACMAcDBQMqByCAMA0GCSqGSIb3DQEBCwUAA4IBAQChx2HE0joPQ3wcycXRboMI nKv0sYrJEP68Xa3cVuEk3hLJRnZerxB63Yj4T/cCD6yLfwWWnik6zeVm13WUGFTu YyzX0iHsBGsoyg1cWLfTgMsiDVATDyIerR7BxVU5xMd44epQZf3dV/Fl9FZ/2jtR V/WKH8x9Dzge5tGIe2tVwqFgtPxooeoFlyGX2l/tfIs1frsVc64t2+NicohbZ6QT c77ZHjuM2hmykhVi+nGB1bHcXVQs99jejCwicM4S6cMMdEr5pp4Lp6SjSILLayvr +N5VY3J8+Ib00LQQL3lsRuY4jHHr4MGl3hudqgAsfN2xMnY8zGLj0IzdVh/EY98J -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:43 2026 by rpki-client