This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa File: uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa (raw, json) Hash identifier: rrB4HqghjaNhMjUMgJmTsjzw4hoiQcENyKRyhlNILHk= Subject key identifier: B9:1D:6F:7D:EE:9F:47:A9:66:28:BC:7F:2A:96:27:BB:5A:64:41:EF Certificate issuer: /CN=6b22ad4cf647a48b631ff84f227ea0252130552d Certificate serial: 019B7910B8E2C4312A3F5075A41E4F3628C3 Authority key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa Signing time: Thu 01 Jan 2026 10:18:17 +0000 ROA not before: Thu 01 Jan 2026 10:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212083 IP address blocks: 147.189.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b8:e2:c4:31:2a:3f:50:75:a4:1e:4f:36:28:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b22ad4cf647a48b631ff84f227ea0252130552d Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b91d6f7dee9f47a96628bc7f2a9627bb5a6441ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b8:0b:e6:23:89:4f:da:dc:23:b7:5e:e1:26: 00:0c:c0:43:23:c6:e0:ab:ac:60:db:76:3b:48:29: 2e:54:85:23:02:70:86:bf:8a:93:96:4f:d5:07:a1: 71:5f:81:bb:de:4b:65:76:bd:a6:9e:1d:9f:8f:81: 88:c1:2f:c7:4a:54:8d:67:9c:b1:45:46:50:36:39: ee:02:00:7d:fa:71:29:5b:50:82:4d:2b:69:fb:00: 9a:a1:be:ef:cc:7a:60:48:b0:c2:4b:62:e8:bc:2c: 80:d7:00:eb:2a:d6:3d:ad:d3:2c:77:1d:eb:8f:14: bc:f0:0f:af:2c:93:94:0d:26:40:1b:b2:96:13:72: 32:f1:63:89:57:07:18:20:cb:c8:aa:36:21:1a:9e: 76:df:f0:0b:65:ce:0e:ce:32:b0:9b:63:a4:0a:f9: 63:bf:f5:09:3e:1c:49:5f:d9:20:a8:41:da:93:80: 80:91:99:ae:c9:4e:29:01:0e:31:60:a6:4a:f8:ac: b9:66:60:f1:a6:92:63:02:f1:b4:0e:37:9f:c3:9c: 38:55:86:58:14:08:c8:e1:d4:d0:c4:7b:5a:07:63: bb:6c:c0:68:73:1c:cd:8a:3e:9f:17:81:8c:8b:32: fd:89:91:53:e5:b8:4d:22:27:e4:fe:29:60:85:5f: 2c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1D:6F:7D:EE:9F:47:A9:66:28:BC:7F:2A:96:27:BB:5A:64:41:EF X509v3 Authority Key Identifier: keyid:6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/uR1vfe6fR6lmKLx_KpYnu1pkQe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.161.0/24 Signature Algorithm: sha256WithRSAEncryption 37:9f:b8:71:5c:94:64:bd:23:3e:2e:9f:af:2e:d7:af:bf:a7: ca:45:f1:e6:79:f7:12:64:ef:33:bd:7b:78:50:b6:a0:38:a8: 89:14:e8:8e:2d:89:e8:50:a9:d1:cc:5d:fd:d5:f4:dd:4b:65: 44:94:c0:db:4f:c9:c6:25:4e:b3:de:89:b8:b8:c8:29:e5:0f: 90:2d:90:82:8e:f1:4b:50:fd:67:1d:d7:f4:95:09:ef:f8:99: d1:6f:d9:a9:ce:d4:33:de:36:75:38:d9:55:68:f8:11:db:74: 5c:4e:e3:d3:50:b7:f4:2c:68:bd:a9:e5:f9:ae:c5:95:01:22: 7c:c6:07:c5:ce:eb:6e:a3:24:01:dd:1c:10:74:f9:29:c9:68: 94:8e:23:9f:16:ac:bb:25:da:d0:33:24:06:c5:04:3b:69:1e: 48:da:e7:d3:42:bf:69:a3:14:6a:cf:ff:aa:b2:6a:2e:a0:df: 0a:c3:49:c9:7b:3b:89:b1:de:2e:04:4e:e7:6d:03:ea:78:34: 9d:fc:a0:45:a7:61:ad:9e:70:f7:7d:79:02:4e:54:af:66:f5: 0c:16:ee:09:f0:19:48:61:47:02:c6:1e:88:92:7d:f9:cf:f4: 35:46:44:d3:16:5e:9d:48:af:18:41:25:14:1e:f5:04:47:19: a7:d1:aa:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELjixDEqP1B1pB5PNijDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjJhZDRjZjY0N2E0OGI2MzFmZjg0ZjIyN2VhMDI1MjEz MDU1MmQwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTFkNmY3ZGVlOWY0N2E5NjYyOGJjN2YyYTk2MjdiYjVhNjQ0MWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7gL5iOJT9rcI7de4SYADMBDI8bg q6xg23Y7SCkuVIUjAnCGv4qTlk/VB6FxX4G73ktldr2mnh2fj4GIwS/HSlSNZ5yx RUZQNjnuAgB9+nEpW1CCTStp+wCaob7vzHpgSLDCS2LovCyA1wDrKtY9rdMsdx3r jxS88A+vLJOUDSZAG7KWE3Iy8WOJVwcYIMvIqjYhGp523/ALZc4OzjKwm2OkCvlj v/UJPhxJX9kgqEHak4CAkZmuyU4pAQ4xYKZK+Ky5ZmDxppJjAvG0Djefw5w4VYZY FAjI4dTQxHtaB2O7bMBocxzNij6fF4GMizL9iZFT5bhNIifk/ilghV8sJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkdb33un0epZii8fyqWJ7taZEHvMB8GA1UdIwQY MBaAFGsirUz2R6SLYx/4TyJ+oCUhMFUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2It NjlhNDRmMDQ4ZGI4LzEvdVIxdmZlNmZSNmxtS0x4X0twWW51MXBrUWU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC81OTUwMjQtOGJmZi00ZjE4LThjY2ItNjlhNDRmMDQ4ZGI4 LzEvYXlLdFRQWkhwSXRqSF9oUEluNmdKU0V3VlMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk72hMA0G CSqGSIb3DQEBCwUAA4IBAQA3n7hxXJRkvSM+Lp+vLtevv6fKRfHmefcSZO8zvXt4 ULagOKiJFOiOLYnoUKnRzF391fTdS2VElMDbT8nGJU6z3om4uMgp5Q+QLZCCjvFL UP1nHdf0lQnv+JnRb9mpztQz3jZ1ONlVaPgR23RcTuPTULf0LGi9qeX5rsWVASJ8 xgfFzutuoyQB3RwQdPkpyWiUjiOfFqy7JdrQMyQGxQQ7aR5I2ufTQr9poxRqz/+q smouoN8Kw0nJezuJsd4uBE7nbQPqeDSd/KBFp2GtnnD3fXkCTlSvZvUMFu4J8BlI YUcCxh6Ikn35z/Q1RkTTFl6dSK8YQSUUHvUERxmn0arg -----END CERTIFICATE-----Generated at Wed Jan 21 15:06:13 2026 by rpki-client