This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/trEBVhTnYojMGk31Am98ZfEdQ9o.roa File: trEBVhTnYojMGk31Am98ZfEdQ9o.roa (raw, json) Hash identifier: ZUjcn+k6KVdZ0YruJwm/37Xg7sBIq8yD/WZghxDB9RQ= Subject key identifier: B6:B1:01:56:14:E7:62:88:CC:1A:4D:F5:02:6F:7C:65:F1:1D:43:DA Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Certificate serial: 019B7FF20468072708103BC81E14FF5CFEF8 Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/trEBVhTnYojMGk31Am98ZfEdQ9o.roa Signing time: Fri 02 Jan 2026 18:22:05 +0000 ROA not before: Fri 02 Jan 2026 18:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204870 IP address blocks: 185.174.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:04:68:07:27:08:10:3b:c8:1e:14:ff:5c:fe:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Validity Not Before: Jan 2 18:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6b1015614e76288cc1a4df5026f7c65f11d43da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:30:a1:1a:b9:08:67:8d:87:f9:03:67:d3:bb: b4:85:ca:43:0c:bc:db:bc:4e:34:77:06:ac:32:f8: 80:14:77:05:1b:7d:45:16:01:15:2a:f3:b3:6f:a4: cd:33:aa:7b:8d:65:d6:93:45:d7:ec:4d:4c:9a:0f: 8c:0c:19:3b:74:05:18:41:d3:24:8a:73:2c:3b:86: 64:b9:bd:79:b7:70:54:ec:77:1c:f9:7e:37:4c:e0: bd:54:2c:30:a8:0d:cd:90:70:9a:da:e8:d4:d5:cb: 1d:38:89:9c:68:dc:ea:35:c9:b4:04:e0:11:57:df: a9:2a:e0:0c:26:a4:5d:02:ce:a5:7e:8e:49:71:be: ca:0d:e7:6e:e7:af:66:0b:55:4c:c8:65:05:cb:ce: c9:c7:d9:2b:bb:07:45:3b:ed:87:93:6c:d8:60:5e: cb:49:0b:65:7b:e9:93:c5:45:d9:c7:fd:b8:ab:54: 76:76:0e:b9:bb:24:07:6a:e7:52:ba:8c:7a:1a:62: 47:6d:fd:b0:7e:00:11:3a:7e:b5:dd:8d:44:92:35: 02:a6:85:93:e0:aa:ed:17:4e:cf:d0:2c:38:a8:bb: aa:47:30:3f:a8:53:af:6e:9c:90:9c:25:76:af:96: 53:8c:c7:da:eb:ef:6a:26:fa:2f:65:92:b4:14:e9: c3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B1:01:56:14:E7:62:88:CC:1A:4D:F5:02:6F:7C:65:F1:1D:43:DA X509v3 Authority Key Identifier: keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/trEBVhTnYojMGk31Am98ZfEdQ9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.154.0/23 Signature Algorithm: sha256WithRSAEncryption 25:04:ad:8b:ca:d2:aa:ff:5e:ee:fa:54:3d:19:9e:cd:1c:1b: b2:ff:f1:12:2b:83:08:30:01:3a:58:ae:ef:b0:09:ad:1e:28: 33:0e:50:0a:bf:64:08:99:88:7a:32:8a:7e:cf:7f:a9:d6:f4: 68:5b:04:93:2f:5a:b5:73:81:ed:20:7f:30:8b:7f:63:81:f8: e9:30:80:dc:da:a0:d9:80:75:95:d8:4c:52:b5:c9:9e:4a:f0: 8f:b3:62:d0:fc:ec:66:6a:22:97:39:db:07:a3:92:a4:b3:3c: 4e:45:2c:9d:dd:45:b7:e2:85:82:41:2b:4e:d6:3a:ae:ed:fa: 2c:63:bb:0b:8c:b7:b7:83:58:dc:eb:9e:83:81:f8:c6:da:d5: ee:aa:c8:7e:c1:f7:b4:28:e6:87:3c:9b:ad:90:a1:ae:14:5c: cd:07:7a:bc:c7:19:ea:a7:c7:cb:fe:d0:a5:a5:88:cd:da:51: 38:d2:90:9e:f9:eb:f1:38:ff:c2:7f:88:cc:ff:62:5a:e9:89: 05:88:4f:9e:d2:d0:ea:bb:2c:f1:08:f5:8a:aa:4f:39:f4:85: 67:b8:a2:ef:03:d1:24:19:5e:a0:a6:cf:d9:bd:55:3f:52:d0: f7:f8:f8:27:dc:e4:17:82:32:0e:fb:a1:aa:73:45:88:8a:87: e8:33:55:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8gRoBycIEDvIHhT/XP74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm NzE0YTAwHhcNMjYwMTAyMTgyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmIxMDE1NjE0ZTc2Mjg4Y2MxYTRkZjUwMjZmN2M2NWYxMWQ0M2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDChGrkIZ42H+QNn07u0hcpDDLzb vE40dwasMviAFHcFG31FFgEVKvOzb6TNM6p7jWXWk0XX7E1Mmg+MDBk7dAUYQdMk inMsO4Zkub15t3BU7Hcc+X43TOC9VCwwqA3NkHCa2ujU1csdOImcaNzqNcm0BOAR V9+pKuAMJqRdAs6lfo5Jcb7KDedu569mC1VMyGUFy87Jx9kruwdFO+2Hk2zYYF7L SQtle+mTxUXZx/24q1R2dg65uyQHaudSuox6GmJHbf2wfgAROn613Y1EkjUCpoWT 4KrtF07P0Cw4qLuqRzA/qFOvbpyQnCV2r5ZTjMfa6+9qJvovZZK0FOnDlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLaxAVYU52KIzBpN9QJvfGXxHUPaMB8GA1UdIwQY MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct NDQ3ZWRjNGY5YWY2LzEvdHJFQlZoVG5Zb2pNR2szMUFtOThaZkVkUTlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2 LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBua6aMA0G CSqGSIb3DQEBCwUAA4IBAQAlBK2LytKq/17u+lQ9GZ7NHBuy//ESK4MIMAE6WK7v sAmtHigzDlAKv2QImYh6Mop+z3+p1vRoWwSTL1q1c4HtIH8wi39jgfjpMIDc2qDZ gHWV2ExStcmeSvCPs2LQ/OxmaiKXOdsHo5KkszxORSyd3UW34oWCQStO1jqu7fos Y7sLjLe3g1jc656DgfjG2tXuqsh+wfe0KOaHPJutkKGuFFzNB3q8xxnqp8fL/tCl pYjN2lE40pCe+evxOP/Cf4jM/2Ja6YkFiE+e0tDquyzxCPWKqk859IVnuKLvA9Ek GV6gps/ZvVU/UtD3+Pgn3OQXgjIO+6Gqc0WIiofoM1UR -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:45 2026 by rpki-client