This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/cl6lci4JzB4m70ik3dAlKuTRGek.roa File: cl6lci4JzB4m70ik3dAlKuTRGek.roa (raw, json) Hash identifier: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M= Subject key identifier: 72:5E:A5:72:2E:09:CC:1E:26:EF:48:A4:DD:D0:25:2A:E4:D1:19:E9 Certificate issuer: /CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Certificate serial: 019B76EB8B9D20DF6F3DE420AD13B10CE09A Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/cl6lci4JzB4m70ik3dAlKuTRGek.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 185.98.152.0/22 maxlen: 22 2a01:a480::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8b:9d:20:df:6f:3d:e4:20:ad:13:b1:0c:e0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55 Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=725ea5722e09cc1e26ef48a4ddd0252ae4d119e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:73:4a:a3:0c:49:08:8b:12:99:62:b3:31: b2:0a:83:3d:4e:31:bb:41:67:dc:b1:96:dc:9f:52: a6:e2:b1:46:23:7b:2c:ab:61:d9:ea:11:59:82:68: 93:d3:8c:11:26:29:31:07:07:4f:89:1a:e8:5b:d2: 92:44:f9:88:16:13:0e:8d:ca:8b:ef:fe:b9:32:28: e4:5f:08:69:bb:d5:c4:54:47:6e:22:86:be:34:90: 81:b7:69:ac:35:8b:9b:72:bd:e2:05:c3:ef:7b:cd: 2d:57:c3:6d:86:a1:95:7b:4d:3e:a2:ab:1d:fe:2a: 1d:78:65:f6:0b:8a:f1:83:74:d1:e2:06:9e:77:0b: 5c:13:b6:78:97:52:4f:e6:12:87:0c:80:14:32:e0: 4e:f6:94:be:f6:85:99:e4:92:43:f5:9c:cf:44:58: a7:5a:ca:7e:04:43:ec:2e:d2:0a:b6:95:5b:65:bc: d7:c8:00:28:77:7d:1e:d5:4b:b2:0a:07:8f:8b:27: 05:6e:45:0a:56:97:85:fa:68:69:45:26:bf:c8:3e: 66:5b:10:e0:5c:da:14:07:e3:82:5c:b7:4d:36:6b: 3b:1c:b7:50:dc:16:09:99:29:ff:cd:e4:11:f4:91: 2b:cf:b0:f2:07:f1:46:f3:a2:55:b7:ff:aa:95:88: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:A5:72:2E:09:CC:1E:26:EF:48:A4:DD:D0:25:2A:E4:D1:19:E9 X509v3 Authority Key Identifier: keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/cl6lci4JzB4m70ik3dAlKuTRGek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.98.152.0/22 IPv6: 2a01:a480::/32 Signature Algorithm: sha256WithRSAEncryption 90:e4:8e:92:e8:13:7c:c1:be:b3:3f:ca:dc:57:23:00:84:d1: 27:3e:68:bc:2c:ab:3c:72:05:56:d6:76:24:1b:95:66:83:97: 69:9e:f4:3b:e9:c0:c8:68:fc:d6:06:8b:2b:e8:0a:d3:fa:c9: a1:67:07:25:c4:39:27:e4:0c:c8:83:08:d4:a1:fb:e4:69:4b: ff:44:59:a2:f3:47:4a:32:c0:33:e7:a3:cf:b6:63:49:66:05: d2:fd:92:bc:0e:c7:6b:5b:2f:26:84:b3:89:a3:50:28:b0:a4: 6f:85:e3:01:5f:a3:10:8f:e4:de:d6:dd:06:9a:d5:eb:13:91: fc:27:42:7c:3c:cf:a5:63:eb:dc:5c:82:04:b0:6e:a4:d2:a3: c5:05:2a:39:aa:45:81:40:93:77:f6:a2:1d:b6:58:60:9b:c5: 9c:9d:e4:00:fd:d1:b5:cd:a0:9d:d1:bd:2c:4d:f6:8c:25:07: cd:23:e3:8b:38:e4:66:0a:a7:4f:dd:d9:34:7f:8e:19:eb:50: af:52:9b:70:c1:f8:39:ca:94:cd:80:d7:7b:fb:b5:b7:a9:8a: c3:2a:90:b5:68:47:2b:2d:43:58:10:9b:3b:6f:fe:10:80:4a: 7b:a2:0c:4e:f1:e7:22:46:18:a0:39:8e:d2:25:54:ba:9b:61: 20:96:53:a4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt264udIN9vPeQgrROxDOCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx OWRlNTUwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjVlYTU3MjJlMDljYzFlMjZlZjQ4YTRkZGQwMjUyYWU0ZDExOWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1RzSqMMSQiLEpliszGyCoM9TjG7 QWfcsZbcn1Km4rFGI3ssq2HZ6hFZgmiT04wRJikxBwdPiRroW9KSRPmIFhMOjcqL 7/65MijkXwhpu9XEVEduIoa+NJCBt2msNYubcr3iBcPve80tV8NthqGVe00+oqsd /iodeGX2C4rxg3TR4gaedwtcE7Z4l1JP5hKHDIAUMuBO9pS+9oWZ5JJD9ZzPRFin Wsp+BEPsLtIKtpVbZbzXyAAod30e1UuyCgePiycFbkUKVpeF+mhpRSa/yD5mWxDg XNoUB+OCXLdNNms7HLdQ3BYJmSn/zeQR9JErz7DyB/FG86JVt/+qlYgvSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHJepXIuCcweJu9IpN3QJSrk0RnpMB8GA1UdIwQY MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt NDhlMzBlMmY3YzM2LzEvY2w2bGNpNEp6QjRtNzBpazNkQWxLdVRSR2VrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2 LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWKYMA0E AgACMAcDBQAqAaSAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ5I6S6BN8wb6zP8rcVyMA hNEnPmi8LKs8cgVW1nYkG5Vmg5dpnvQ76cDIaPzWBosr6ArT+smhZwclxDkn5AzI gwjUofvkaUv/RFmi80dKMsAz56PPtmNJZgXS/ZK8DsdrWy8mhLOJo1AosKRvheMB X6MQj+Te1t0GmtXrE5H8J0J8PM+lY+vcXIIEsG6k0qPFBSo5qkWBQJN39qIdtlhg m8WcneQA/dG1zaCd0b0sTfaMJQfNI+OLOORmCqdP3dk0f44Z61CvUptwwfg5ypTN gNd7+7W3qYrDKpC1aEcrLUNYEJs7b/4QgEp7ogxO8eciRhigOY7SJVS6m2EgllOk -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:20 2026 by rpki-client