This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/awMrblVcKEMHhOxSuC24vtYngkk.roa File: awMrblVcKEMHhOxSuC24vtYngkk.roa (raw, json) Hash identifier: 04ORlz9p15mB2l8YyRPH4E2/hzlpfmbbHrNJqGimeC4= Subject key identifier: 6B:03:2B:6E:55:5C:28:43:07:84:EC:52:B8:2D:B8:BE:D6:27:82:49 Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B7C131610EEA4F4A661AA7C08E2264478 Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/awMrblVcKEMHhOxSuC24vtYngkk.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16262 IP address blocks: 185.245.42.0/23 maxlen: 24 185.245.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:16:10:ee:a4:f4:a6:61:aa:7c:08:e2:26:44:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b032b6e555c28430784ec52b82db8bed6278249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:a3:87:af:4f:9a:73:62:01:d5:28:81:96: 25:a6:f4:6d:91:8f:ae:ec:4e:7a:56:7d:13:9f:ab: 55:d7:e6:43:76:29:1f:c2:82:b0:09:71:70:40:fe: e0:18:d5:36:59:ca:4b:08:f3:0b:b9:ec:97:6d:17: cb:87:4a:e8:e6:aa:3c:7f:fc:b2:77:ee:2f:e8:eb: 1b:90:38:34:36:b8:57:43:0f:30:98:a1:26:3a:40: 8c:46:3c:0f:10:ca:e0:4c:3b:a8:35:ff:81:c1:8f: 62:a6:f6:80:5d:eb:b8:8d:cf:d0:b7:39:3b:63:f7: 53:12:c7:9c:05:07:ec:d7:80:84:2a:6c:83:cf:b3: 14:68:84:5d:55:6e:b6:f7:dc:99:fd:ab:9e:fb:4d: dd:d9:3e:e2:7b:fa:0c:6b:0f:c2:c8:5e:d7:13:3e: 8a:b9:dc:57:04:90:45:fd:8f:4e:42:0d:b2:d4:e2: 78:7d:94:6f:34:e5:a8:62:1f:95:d1:fd:3d:38:99: 37:42:d8:57:cc:bb:fc:fc:b6:a5:3f:cb:63:bf:94: b1:09:09:24:55:a2:04:d1:43:47:e1:2f:a9:28:3a: ab:25:87:e6:47:68:84:d2:e7:ab:6e:ed:c9:c3:b2: c2:f9:03:0f:e0:c7:0f:bf:95:fa:f8:e9:9c:39:36: 4d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:03:2B:6E:55:5C:28:43:07:84:EC:52:B8:2D:B8:BE:D6:27:82:49 X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/awMrblVcKEMHhOxSuC24vtYngkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.42.0/23 Signature Algorithm: sha256WithRSAEncryption 50:c2:85:66:5d:1f:d1:28:a6:37:ba:b5:eb:a9:2e:d3:99:29: 43:0e:6e:1c:c1:aa:43:07:4b:a4:51:e6:c4:5d:a9:a8:3b:47: ba:98:d6:31:67:c0:7f:09:01:9e:f0:d2:8d:d6:8d:bf:b4:64: a7:ba:41:bd:32:5d:dc:34:3f:16:30:62:e0:91:a7:03:e7:ff: ce:b7:cc:75:d7:78:cb:c0:9c:f6:1b:61:6a:ed:b2:ff:a4:2f: c2:94:65:76:2b:18:55:2c:65:83:cf:40:86:0b:6f:da:7a:a4: a0:e9:4d:eb:b2:16:7f:49:69:01:50:2c:19:af:dd:fc:ba:77: 86:c8:56:72:38:70:77:77:15:e6:39:a5:32:b6:84:98:5a:fa: 33:b9:a2:45:3d:42:99:d2:92:1e:67:21:f0:48:b1:f6:f6:fa: f4:09:13:eb:4d:d1:05:b7:4c:97:af:90:80:77:34:a4:79:59: 5d:f0:fa:94:94:5d:53:a5:45:c6:46:20:d9:3e:4d:41:b5:d9: ee:84:dc:26:9b:e1:04:91:f4:fa:c6:8b:da:4c:09:be:8e:99: 5f:fe:32:40:ef:8f:33:59:cb:73:39:df:4a:57:bd:a6:7e:ba: 3b:62:7c:db:a7:90:63:f7:d3:38:5d:4c:6e:55:fa:e1:12:2d: ec:b7:fd:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExYQ7qT0pmGqfAjiJkR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjAzMmI2ZTU1NWMyODQzMDc4NGVjNTJiODJkYjhiZWQ2Mjc4MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ejh69PmnNiAdUogZYlpvRtkY+u 7E56Vn0Tn6tV1+ZDdikfwoKwCXFwQP7gGNU2WcpLCPMLueyXbRfLh0ro5qo8f/yy d+4v6OsbkDg0NrhXQw8wmKEmOkCMRjwPEMrgTDuoNf+BwY9ipvaAXeu4jc/Qtzk7 Y/dTEsecBQfs14CEKmyDz7MUaIRdVW6299yZ/aue+03d2T7ie/oMaw/CyF7XEz6K udxXBJBF/Y9OQg2y1OJ4fZRvNOWoYh+V0f09OJk3QthXzLv8/LalP8tjv5SxCQkk VaIE0UNH4S+pKDqrJYfmR2iE0uerbu3Jw7LC+QMP4McPv5X6+OmcOTZN6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGsDK25VXChDB4TsUrgtuL7WJ4JJMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvYXdNcmJsVmNLRU1IaE94U3VDMjR2dFluZ2trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufUqMA0G CSqGSIb3DQEBCwUAA4IBAQBQwoVmXR/RKKY3urXrqS7TmSlDDm4cwapDB0ukUebE XamoO0e6mNYxZ8B/CQGe8NKN1o2/tGSnukG9Ml3cND8WMGLgkacD5//Ot8x113jL wJz2G2Fq7bL/pC/ClGV2KxhVLGWDz0CGC2/aeqSg6U3rshZ/SWkBUCwZr938uneG yFZyOHB3dxXmOaUytoSYWvozuaJFPUKZ0pIeZyHwSLH29vr0CRPrTdEFt0yXr5CA dzSkeVld8PqUlF1TpUXGRiDZPk1BtdnuhNwmm+EEkfT6xovaTAm+jplf/jJA748z WctzOd9KV72mfro7Ynzbp5Bj99M4XUxuVfrhEi3st/2v -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:10 2026 by rpki-client