This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1xOpTdWZqOJsJe5bQox7LV9MPw4.roa File: 1xOpTdWZqOJsJe5bQox7LV9MPw4.roa (raw, json) Hash identifier: BdE6Un8zDhWV9USiPjK7cKTZhfVYDSZVlQPkR/jcU4s= Subject key identifier: D7:13:A9:4D:D5:99:A8:E2:6C:25:EE:5B:42:8C:7B:2D:5F:4C:3F:0E Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3611E49956DB5D9596E632E5D46D0E Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1xOpTdWZqOJsJe5bQox7LV9MPw4.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201211 IP address blocks: 185.164.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:11:e4:99:56:db:5d:95:96:e6:32:e5:d4:6d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d713a94dd599a8e26c25ee5b428c7b2d5f4c3f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:c2:b7:37:2d:d4:57:ab:cc:89:1f:d8:d7: bc:d8:25:75:60:30:07:49:15:a4:63:33:5e:c6:68: f6:ab:2b:b7:5e:a0:40:29:39:00:55:c2:0d:4a:52: 53:48:42:00:1d:ce:db:bc:8e:cb:cf:5a:0e:8d:81: 2d:5a:fc:b5:87:be:07:ef:f1:f7:40:71:a9:f0:67: 99:de:78:b2:bb:b6:b1:f2:a2:10:2a:3d:fb:c5:ef: ad:88:58:21:ee:ec:ba:a5:75:fe:3c:63:36:19:69: 99:83:03:42:e5:cb:2e:86:cc:81:36:42:d8:05:a5: b2:47:0e:95:87:8d:9d:ae:1c:d9:53:12:dd:f1:ee: 3d:be:f5:3f:ce:9c:de:23:ed:49:c8:3f:cf:3d:76: 4d:5e:61:a6:93:cb:ef:d8:0f:b1:cf:61:83:a2:7e: 24:4b:e3:13:1d:78:64:a8:96:13:42:31:c6:8b:0e: fc:af:74:f8:94:86:fb:1e:7c:21:8e:8e:ca:d8:e1: 95:73:76:de:52:aa:33:d6:81:7c:e0:81:4e:e4:02: c7:b4:1b:95:a4:67:8e:1d:83:0d:49:36:56:00:00: e7:00:69:06:0e:02:54:b9:7c:74:cd:b1:10:c9:d0: 2e:a8:ca:b3:c7:b2:47:f9:fa:7b:5f:c0:58:4f:cf: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:13:A9:4D:D5:99:A8:E2:6C:25:EE:5B:42:8C:7B:2D:5F:4C:3F:0E X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1xOpTdWZqOJsJe5bQox7LV9MPw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.174.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:3b:c8:d5:5b:df:73:9a:4d:e4:bf:6f:c5:96:d0:46:e4:05: f3:10:ad:82:b9:ed:d9:de:f1:12:33:1b:1f:04:b6:34:12:f1: 4d:83:3e:07:01:20:f7:31:b9:4a:4e:3d:21:80:c5:44:35:98: 7e:e5:d1:a2:cf:42:f0:a3:00:e1:5e:7a:64:8d:88:eb:8b:7c: 89:7f:68:31:3d:6b:6a:ae:4e:be:d5:9d:48:31:79:99:f4:91: a4:a3:bd:63:28:3e:14:f0:86:2c:86:19:cb:4d:20:6a:fa:55: b5:bf:cd:26:2f:0a:11:59:1c:3c:37:fe:ec:9c:af:a8:98:a0: 91:d2:ee:f1:eb:38:eb:d6:da:77:81:83:ed:2b:89:bd:be:0f: c3:b3:c7:82:14:e4:1f:df:cb:f5:b5:9c:4a:ee:fe:1d:43:21: 7f:9d:64:85:3c:85:93:fc:f2:ac:c9:54:5d:b5:31:42:c1:21: 94:53:9e:f3:cf:44:3d:90:66:6b:a6:64:30:e1:2b:b2:fc:60: 9d:04:0b:0a:9f:1c:82:15:78:fe:ad:e8:bf:94:3f:52:6e:c3: 1a:22:76:7b:bf:c3:5a:f9:04:a2:96:c6:41:64:1d:46:7f:a7: 1e:1a:d7:48:80:c9:68:28:41:8c:30:83:60:a8:b8:71:7b:bc: cd:c9:39:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NhHkmVbbXZWW5jLl1G0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzEzYTk0ZGQ1OTlhOGUyNmMyNWVlNWI0MjhjN2IyZDVmNGMzZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNbCtzct1FerzIkf2Ne82CV1YDAH SRWkYzNexmj2qyu3XqBAKTkAVcINSlJTSEIAHc7bvI7Lz1oOjYEtWvy1h74H7/H3 QHGp8GeZ3niyu7ax8qIQKj37xe+tiFgh7uy6pXX+PGM2GWmZgwNC5csuhsyBNkLY BaWyRw6Vh42drhzZUxLd8e49vvU/zpzeI+1JyD/PPXZNXmGmk8vv2A+xz2GDon4k S+MTHXhkqJYTQjHGiw78r3T4lIb7Hnwhjo7K2OGVc3beUqoz1oF84IFO5ALHtBuV pGeOHYMNSTZWAADnAGkGDgJUuXx0zbEQydAuqMqzx7JH+fp7X8BYT8+O/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcTqU3VmajibCXuW0KMey1fTD8OMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvMXhPcFRkV1pxT0pzSmU1YlFveDdMVjlNUHc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaSuMA0G CSqGSIb3DQEBCwUAA4IBAQCPO8jVW99zmk3kv2/FltBG5AXzEK2Cue3Z3vESMxsf BLY0EvFNgz4HASD3MblKTj0hgMVENZh+5dGiz0LwowDhXnpkjYjri3yJf2gxPWtq rk6+1Z1IMXmZ9JGko71jKD4U8IYshhnLTSBq+lW1v80mLwoRWRw8N/7snK+omKCR 0u7x6zjr1tp3gYPtK4m9vg/Ds8eCFOQf38v1tZxK7v4dQyF/nWSFPIWT/PKsyVRd tTFCwSGUU57zz0Q9kGZrpmQw4Suy/GCdBAsKnxyCFXj+rei/lD9SbsMaInZ7v8Na +QSilsZBZB1Gf6ceGtdIgMloKEGMMINgqLhxe7zNyTkl -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:45 2026 by rpki-client