This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/rFArsoFoYLfY2C4kISkWl1SGheo.roa File: rFArsoFoYLfY2C4kISkWl1SGheo.roa (raw, json) Hash identifier: eYlc685oKXF5uazF6hY6BaH41ateFLDviGpvTWxuxyk= Subject key identifier: AC:50:2B:B2:81:68:60:B7:D8:D8:2E:24:21:29:16:97:54:86:85:EA Certificate issuer: /CN=2d676a61dcf4d222ba66cda19430f61e611d8aae Certificate serial: 019B76EB41C046603AADB5C1A1943C269425 Authority key identifier: 2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/rFArsoFoYLfY2C4kISkWl1SGheo.roa Signing time: Thu 01 Jan 2026 00:18:07 +0000 ROA not before: Thu 01 Jan 2026 00:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.235.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.mft rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:41:c0:46:60:3a:ad:b5:c1:a1:94:3c:26:94:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d676a61dcf4d222ba66cda19430f61e611d8aae Validity Not Before: Jan 1 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac502bb2816860b7d8d82e2421291697548685ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d6:bc:09:51:fc:da:10:aa:ac:7a:b3:90:d4: d5:bb:a7:fc:86:d3:e3:1a:be:a8:e3:2d:7a:3e:73: 6c:38:29:a2:73:87:e3:02:af:b2:4e:bd:99:35:d2: 21:4a:dc:c9:4e:7b:1b:93:db:f4:0d:12:2a:be:5b: ec:e1:7d:f6:bd:db:00:e7:12:45:23:5b:94:af:1f: e4:fb:48:43:f1:03:32:91:27:bb:17:92:0d:f5:43: 3a:50:ab:4b:24:56:97:42:e9:2f:25:ac:4e:7a:d2: ad:bc:97:f5:a9:9d:c1:3c:7b:40:8e:ea:8a:92:5d: c1:4c:ac:dc:09:ca:a6:6f:fa:b0:7f:b2:62:9d:59: a4:9a:8a:04:85:87:91:b2:46:1e:44:60:8b:aa:14: b2:ad:77:2f:ef:b4:e1:85:58:e6:86:57:5c:01:3e: 53:81:ec:69:2d:31:d1:90:d0:d5:51:95:a3:73:7e: 9b:17:02:92:5f:9a:08:9b:1c:46:30:0f:82:24:9a: a4:e3:09:76:f2:81:3f:78:84:bd:97:63:96:70:de: a4:8b:67:c7:50:e4:e0:a4:b6:f3:e4:94:c2:4a:1c: c9:38:56:a2:74:bf:31:f7:1a:50:3d:a3:da:e7:40: 89:b4:d0:ac:39:09:bf:42:b4:d7:70:c0:f5:63:ef: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:50:2B:B2:81:68:60:B7:D8:D8:2E:24:21:29:16:97:54:86:85:EA X509v3 Authority Key Identifier: keyid:2D:67:6A:61:DC:F4:D2:22:BA:66:CD:A1:94:30:F6:1E:61:1D:8A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWdqYdz00iK6Zs2hlDD2HmEdiq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/rFArsoFoYLfY2C4kISkWl1SGheo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b2c68e-eb3b-4e01-b50a-a86a24655870/1/LWdqYdz00iK6Zs2hlDD2HmEdiq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:f3:3a:7f:19:ae:54:1b:24:9c:b5:bf:7c:5b:cd:ce:e0:cf: 9e:d1:58:6c:d8:8a:4c:7c:8a:58:4f:d3:1a:f3:90:07:7f:89: 73:e6:41:5b:55:7d:be:cc:3a:72:75:00:b2:fe:f9:0a:84:43: 24:3d:4b:ee:d4:8d:4d:23:31:79:6f:7a:ff:41:6f:95:ea:88: 41:1a:87:35:98:09:2d:79:43:dd:7c:c2:1a:af:93:59:b0:1a: 11:72:66:8b:f2:8e:fe:45:09:83:34:20:64:0e:d7:9e:8d:6a: 6a:9c:6f:c9:32:2a:03:52:e8:f8:80:1a:ca:d6:2e:e5:5f:06: 77:f6:6e:a1:be:fa:4c:ab:fb:98:fe:f0:8a:9c:a6:1c:85:62: 0f:4f:e6:1b:ad:65:1e:bc:b2:a8:eb:d5:b6:8e:6c:ad:c1:e1: cd:56:16:85:89:58:8d:0b:59:88:87:c0:bd:35:cd:c4:39:46: 66:f7:29:27:32:2e:29:57:2a:b0:2c:b9:a7:53:bc:d6:ae:f3: cf:3b:c2:60:50:0c:53:ad:ef:a3:2c:60:ea:ce:8b:58:c8:0b: 09:4f:ad:9e:dc:55:9c:7e:fe:29:89:9d:3a:5c:e1:91:10:7b: 04:f4:10:98:25:04:95:10:37:ca:d5:34:40:af:84:ac:04:61: a4:64:2a:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260HARmA6rbXBoZQ8JpQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNjc2YTYxZGNmNGQyMjJiYTY2Y2RhMTk0MzBmNjFlNjEx ZDhhYWUwHhcNMjYwMTAxMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzUwMmJiMjgxNjg2MGI3ZDhkODJlMjQyMTI5MTY5NzU0ODY4NWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9a8CVH82hCqrHqzkNTVu6f8htPj Gr6o4y16PnNsOCmic4fjAq+yTr2ZNdIhStzJTnsbk9v0DRIqvlvs4X32vdsA5xJF I1uUrx/k+0hD8QMykSe7F5IN9UM6UKtLJFaXQukvJaxOetKtvJf1qZ3BPHtAjuqK kl3BTKzcCcqmb/qwf7JinVmkmooEhYeRskYeRGCLqhSyrXcv77ThhVjmhldcAT5T gexpLTHRkNDVUZWjc36bFwKSX5oImxxGMA+CJJqk4wl28oE/eIS9l2OWcN6ki2fH UOTgpLbz5JTCShzJOFaidL8x9xpQPaPa50CJtNCsOQm/QrTXcMD1Y+/o9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxQK7KBaGC32NguJCEpFpdUhoXqMB8GA1UdIwQY MBaAFC1namHc9NIiumbNoZQw9h5hHYquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEt YTg2YTI0NjU1ODcwLzEvckZBcnNvRm9ZTGZZMkM0a0lTa1dsMVNHaGVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMmM2OGUtZWIzYi00ZTAxLWI1MGEtYTg2YTI0NjU1ODcw LzEvTFdkcVlkejAwaUs2WnMyaGxERDJIbUVkaXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuevsMA0G CSqGSIb3DQEBCwUAA4IBAQBc8zp/Ga5UGySctb98W83O4M+e0Vhs2IpMfIpYT9Ma 85AHf4lz5kFbVX2+zDpydQCy/vkKhEMkPUvu1I1NIzF5b3r/QW+V6ohBGoc1mAkt eUPdfMIar5NZsBoRcmaL8o7+RQmDNCBkDteejWpqnG/JMioDUuj4gBrK1i7lXwZ3 9m6hvvpMq/uY/vCKnKYchWIPT+YbrWUevLKo69W2jmytweHNVhaFiViNC1mIh8C9 Nc3EOUZm9yknMi4pVyqwLLmnU7zWrvPPO8JgUAxTre+jLGDqzotYyAsJT62e3FWc fv4piZ06XOGREHsE9BCYJQSVEDfK1TRAr4SsBGGkZCoQ -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:37 2026 by rpki-client