This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/ItYXiGPx0Y7gidugw99Su1Ihb4A.roa File: ItYXiGPx0Y7gidugw99Su1Ihb4A.roa (raw, json) Hash identifier: m2YjVpmW7E6MJX+auloFO1THu1a7R7YZy5fNsp6qz8c= Subject key identifier: 22:D6:17:88:63:F1:D1:8E:E0:89:DB:A0:C3:DF:52:BB:52:21:6F:80 Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749 Certificate serial: 019B78355119FEDD3474A750A340B0E9996F Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/ItYXiGPx0Y7gidugw99Su1Ihb4A.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209299 IP address blocks: 185.192.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:51:19:fe:dd:34:74:a7:50:a3:40:b0:e9:99:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749 Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22d6178863f1d18ee089dba0c3df52bb52216f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:de:25:1c:e7:82:ec:53:e3:77:c5:46:79:8f: 2f:01:6b:81:89:f2:97:d2:6d:6a:92:fe:ad:62:4b: 8c:94:28:4b:04:bb:71:90:de:32:30:fd:22:3b:23: 4e:cc:2b:8e:bd:7f:72:ca:6b:12:1c:d6:bd:86:20: 82:8e:96:5a:cb:ae:1b:d3:83:27:75:67:36:6e:d7: b0:22:35:65:18:68:d0:53:a4:d8:88:67:b6:17:d9: 71:a9:38:97:7c:82:52:b2:b8:56:22:75:cc:15:8f: 25:86:6d:a9:46:10:b6:90:f6:64:81:65:5a:f1:5e: 72:07:0d:e1:2d:ab:79:ff:e4:3c:83:b4:fa:36:33: 6b:4b:87:7b:e8:4f:0d:d1:23:0c:84:c0:20:c9:e5: b8:6e:ad:f3:4e:1e:04:60:6d:13:e8:fa:6c:80:b6: 68:13:0f:51:10:19:b6:ea:5c:cc:00:72:2d:cf:ef: ae:a0:89:c9:29:b2:a0:9a:f2:c7:93:11:7c:1f:68: 17:e9:81:d7:31:58:4f:7a:c2:8d:9d:a9:0a:aa:73: 9e:8f:36:c2:6c:34:c2:59:a2:1e:76:32:c9:0a:61: 08:db:2d:cc:a2:39:18:33:45:2d:b7:8d:29:b2:68: 4d:3e:11:a0:ba:c1:69:5a:62:42:e6:17:39:66:53: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:17:88:63:F1:D1:8E:E0:89:DB:A0:C3:DF:52:BB:52:21:6F:80 X509v3 Authority Key Identifier: keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/ItYXiGPx0Y7gidugw99Su1Ihb4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.192.15.0/24 Signature Algorithm: sha256WithRSAEncryption d9:6c:04:29:e7:ec:2c:5a:90:40:55:3a:28:81:1c:c4:41:ae: 50:1f:2c:a9:fe:01:5d:2b:2f:1a:13:d9:4c:4e:67:51:be:58: 80:9e:c1:85:95:07:23:28:dd:29:43:1e:30:d4:e8:41:89:cb: c6:89:83:ff:c2:83:63:a8:f2:43:b6:53:23:8e:a7:78:91:c1: 53:89:42:e0:5b:ee:c9:f9:71:cb:2a:c8:81:a7:49:eb:ca:eb: b0:66:bb:27:80:04:b0:18:82:ef:3f:ed:07:49:94:9e:bf:4f: 38:54:3d:a0:0a:12:39:7a:0a:49:0e:41:7e:b5:cb:10:05:92: 12:b3:48:b2:8e:f2:92:e8:d7:84:db:e3:72:ec:e6:b5:5b:d8: 21:3b:27:3d:ae:8b:02:dd:6f:13:96:61:ae:c7:72:36:8a:47: 06:e3:b1:04:22:6e:5f:80:63:29:0c:8e:2b:94:28:7b:2d:83: 51:0c:b8:58:e4:d2:0d:57:ab:b7:43:24:3c:58:12:22:21:31: c0:f9:79:56:63:19:81:1b:78:61:34:c8:27:85:6d:7b:e1:bc: ca:b8:a7:97:5d:02:f0:dd:44:5a:6a:67:33:9b:a1:b3:32:04: 05:11:1f:a7:90:c5:f0:e3:11:12:33:85:e8:c7:4c:b9:bd:6e: 4d:47:00:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NVEZ/t00dKdQo0Cw6ZlvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm YmU3NDkwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmQ2MTc4ODYzZjFkMThlZTA4OWRiYTBjM2RmNTJiYjUyMjE2ZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7N4lHOeC7FPjd8VGeY8vAWuBifKX 0m1qkv6tYkuMlChLBLtxkN4yMP0iOyNOzCuOvX9yymsSHNa9hiCCjpZay64b04Mn dWc2btewIjVlGGjQU6TYiGe2F9lxqTiXfIJSsrhWInXMFY8lhm2pRhC2kPZkgWVa 8V5yBw3hLat5/+Q8g7T6NjNrS4d76E8N0SMMhMAgyeW4bq3zTh4EYG0T6PpsgLZo Ew9REBm26lzMAHItz++uoInJKbKgmvLHkxF8H2gX6YHXMVhPesKNnakKqnOejzbC bDTCWaIedjLJCmEI2y3MojkYM0Utt40psmhNPhGgusFpWmJC5hc5ZlNw3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLWF4hj8dGO4InboMPfUrtSIW+AMB8GA1UdIwQY MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt M2FlNGY5Y2YyNjgzLzEvSXRZWGlHUHgwWTdnaWR1Z3c5OVN1MUloYjRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucAPMA0G CSqGSIb3DQEBCwUAA4IBAQDZbAQp5+wsWpBAVToogRzEQa5QHyyp/gFdKy8aE9lM TmdRvliAnsGFlQcjKN0pQx4w1OhBicvGiYP/woNjqPJDtlMjjqd4kcFTiULgW+7J +XHLKsiBp0nryuuwZrsngASwGILvP+0HSZSev084VD2gChI5egpJDkF+tcsQBZIS s0iyjvKS6NeE2+Ny7Oa1W9ghOyc9rosC3W8TlmGux3I2ikcG47EEIm5fgGMpDI4r lCh7LYNRDLhY5NINV6u3QyQ8WBIiITHA+XlWYxmBG3hhNMgnhW174bzKuKeXXQLw 3URaamczm6GzMgQFER+nkMXw4xESM4Xox0y5vW5NRwAi -----END CERTIFICATE-----Generated at Tue Feb 10 03:07:16 2026 by rpki-client