This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/Vci5kME3AljCGz_yFCPscOsBEvk.roa File: Vci5kME3AljCGz_yFCPscOsBEvk.roa (raw, json) Hash identifier: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU= Subject key identifier: 55:C8:B9:90:C1:37:02:58:C2:1B:3F:F2:14:23:EC:70:EB:01:12:F9 Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Certificate serial: 019B79ECB0AA8750D405E463F8125A5730E4 Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/Vci5kME3AljCGz_yFCPscOsBEvk.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61200 IP address blocks: 185.16.20.0/22 maxlen: 22 185.16.20.0/23 maxlen: 23 185.16.20.0/24 maxlen: 24 185.16.21.0/24 maxlen: 24 185.16.22.0/23 maxlen: 23 185.16.22.0/24 maxlen: 24 185.16.23.0/24 maxlen: 24 2a03:cbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b0:aa:87:50:d4:05:e4:63:f8:12:5a:57:30:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00 Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=55c8b990c1370258c21b3ff21423ec70eb0112f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3d:a4:05:e8:35:b2:a1:84:7e:b1:d0:94:02: f9:01:6b:c7:da:59:e9:f8:06:ed:7d:c5:c1:c4:2d: e5:e6:a1:a4:9a:77:b7:41:e3:b8:57:61:03:46:dd: 2b:b9:f3:7c:cd:bc:15:6f:30:6a:db:03:d9:26:46: 77:de:87:8c:cb:cd:d5:f8:4c:2d:44:81:4c:8a:1d: 15:0a:d8:c3:27:cd:37:6d:79:59:45:ec:95:fa:4b: 78:1d:d7:05:b3:f1:63:03:32:c9:31:87:47:61:9a: 2d:59:c5:4b:de:fa:35:5f:f5:12:c9:c6:80:ae:6f: 2b:69:cd:18:d0:d3:81:d8:d8:46:ec:84:22:f3:ba: ea:2d:e6:af:24:3d:a5:13:20:66:8c:31:a8:17:73: bc:21:99:9c:c8:25:24:bf:15:91:64:c3:b6:3d:b0: b4:c4:32:e7:7e:76:23:21:06:6f:9a:93:4a:ca:c4: 7a:ac:53:80:f0:61:ad:d6:5b:83:59:68:85:24:a4: f2:2c:a5:01:e3:de:f5:4f:47:9e:59:3d:83:17:07: 1f:40:46:01:ec:3a:f4:d6:2e:b4:e5:86:a3:85:d0: 06:f8:58:7d:69:fc:18:42:fc:7b:c1:1b:69:0e:2c: 3d:7d:bf:97:5c:ce:62:b7:d4:54:c0:02:18:1f:5a: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C8:B9:90:C1:37:02:58:C2:1B:3F:F2:14:23:EC:70:EB:01:12:F9 X509v3 Authority Key Identifier: keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/Vci5kME3AljCGz_yFCPscOsBEvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.20.0/22 IPv6: 2a03:cbc0::/29 Signature Algorithm: sha256WithRSAEncryption 33:64:0e:24:e8:a1:fc:e7:16:c9:c8:2b:10:37:04:85:6e:69: e3:a0:bc:4c:03:cb:a2:96:ed:06:4a:31:f1:ea:6c:64:70:8a: 31:04:71:ed:ae:35:ac:19:47:8e:2f:a9:16:d5:9e:a5:59:65: 32:c3:d0:2c:1d:d3:b5:11:ff:64:ac:42:cf:b9:35:26:74:4c: 56:00:80:44:fa:a1:90:00:1c:5e:66:78:1d:cd:57:bd:f0:b8: 07:b0:6e:2d:f5:33:8d:0c:e3:12:88:51:ad:53:1e:97:a0:07: c1:7c:84:d4:ba:42:c0:82:a8:24:9b:b6:ef:19:76:1d:81:b3: d5:9e:19:1c:cd:1b:0a:e2:df:81:e3:52:f9:f3:07:0b:9c:19: cc:b6:b3:7b:52:78:24:cc:f3:0f:6d:36:22:9f:64:6b:db:02: 5e:f5:68:22:89:73:32:b8:fc:c3:ef:20:16:20:0d:24:ea:1e: 59:54:df:b9:5f:1e:fd:50:88:24:d3:c8:90:ba:a7:f1:f7:d3: f2:ef:34:ef:29:28:7e:f8:7d:fa:7b:40:10:b6:3a:a1:94:59: 43:11:75:20:fb:47:ce:3e:35:e6:e3:71:4b:3f:c9:50:db:66: b8:a3:8d:7a:2a:5f:74:cd:16:73:12:64:56:43:06:bd:34:a1: ea:a3:4d:80 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57LCqh1DUBeRj+BJaVzDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi NzZmMDAwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NWM4Yjk5MGMxMzcwMjU4YzIxYjNmZjIxNDIzZWM3MGViMDExMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD2kBeg1sqGEfrHQlAL5AWvH2lnp +AbtfcXBxC3l5qGkmne3QeO4V2EDRt0rufN8zbwVbzBq2wPZJkZ33oeMy83V+Ewt RIFMih0VCtjDJ803bXlZReyV+kt4HdcFs/FjAzLJMYdHYZotWcVL3vo1X/USycaA rm8rac0Y0NOB2NhG7IQi87rqLeavJD2lEyBmjDGoF3O8IZmcyCUkvxWRZMO2PbC0 xDLnfnYjIQZvmpNKysR6rFOA8GGt1luDWWiFJKTyLKUB4971T0eeWT2DFwcfQEYB 7Dr01i605YajhdAG+Fh9afwYQvx7wRtpDiw9fb+XXM5it9RUwAIYH1rqWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFXIuZDBNwJYwhs/8hQj7HDrARL5MB8GA1UdIwQY MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1 LWIzNjNiYjZjYWEwMi8xL1ZjaTVrTUUzQWxqQ0d6X3lGQ1BzY09zQkV2ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1LWIzNjNiYjZjYWEw Mi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5EBQw DQQCAAIwBwMFAyoDy8AwDQYJKoZIhvcNAQELBQADggEBADNkDiToofznFsnIKxA3 BIVuaeOgvEwDy6KW7QZKMfHqbGRwijEEce2uNawZR44vqRbVnqVZZTLD0Cwd07UR /2SsQs+5NSZ0TFYAgET6oZAAHF5meB3NV73wuAewbi31M40M4xKIUa1THpegB8F8 hNS6QsCCqCSbtu8Zdh2Bs9WeGRzNGwri34HjUvnzBwucGcy2s3tSeCTM8w9tNiKf ZGvbAl71aCKJczK4/MPvIBYgDSTqHllU37lfHv1QiCTTyJC6p/H30/LvNO8pKH74 ffp7QBC2OqGUWUMRdSD7R84+NebjcUs/yVDbZrijjXoqX3TNFnMSZFZDBr00oeqj TYA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:58 2026 by rpki-client