This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/Cr2RZLFh22kPNRnf9ihK3KsT_OQ.roa File: Cr2RZLFh22kPNRnf9ihK3KsT_OQ.roa (raw, json) Hash identifier: h4SAiKBq1LkThD7IVBdw9tYIwSmtDBhfmjcqgZfItbQ= Subject key identifier: 0A:BD:91:64:B1:61:DB:69:0F:35:19:DF:F6:28:4A:DC:AB:13:FC:E4 Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300 Certificate serial: 019B797ED20DCE5F64234A6E667F873A81D6 Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/Cr2RZLFh22kPNRnf9ihK3KsT_OQ.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203906 IP address blocks: 185.50.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.mft rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d2:0d:ce:5f:64:23:4a:6e:66:7f:87:3a:81:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300 Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0abd9164b161db690f3519dff6284adcab13fce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:78:7d:f6:b9:1d:d8:97:aa:fd:4b:40:ef:f4: fa:8b:49:04:a8:94:9a:04:e1:4b:74:c2:1f:b7:a1: ba:b9:21:01:91:e5:36:7a:0e:aa:c0:fa:c7:7d:b3: 67:fd:90:2f:a8:25:82:0b:57:cc:0e:d2:8a:62:f1: e6:32:69:33:52:86:9e:de:90:eb:35:38:c7:9c:4b: 30:6d:12:a0:73:7e:18:6e:9d:e2:7c:5c:70:25:52: 65:48:d8:f2:22:e3:2f:ec:06:e5:2d:4b:61:c5:4c: 16:a4:94:1b:8a:51:eb:e8:c7:60:f4:5b:7c:49:10: 61:93:4d:97:d1:26:b9:ec:66:de:c6:c9:09:17:41: 19:01:0d:54:2a:c8:8b:76:67:99:38:5d:26:77:07: bb:f2:84:01:14:56:0f:e9:92:3e:28:4c:35:bb:6b: 8c:e1:62:10:01:37:66:71:6d:9b:99:0b:ea:cb:68: b8:20:6f:a8:2d:43:1b:5f:a0:88:54:46:c7:69:8b: 60:00:13:83:86:9c:08:9f:5e:f3:7f:f8:4b:ad:20: 0a:00:07:49:f2:b2:b2:1c:88:fd:fb:fb:65:2f:c1: 04:bd:2f:19:19:5c:69:d4:ab:72:34:ae:3b:b8:06: 5c:86:aa:63:25:29:29:32:f4:9c:f8:0c:8f:17:ad: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:91:64:B1:61:DB:69:0F:35:19:DF:F6:28:4A:DC:AB:13:FC:E4 X509v3 Authority Key Identifier: keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/Cr2RZLFh22kPNRnf9ihK3KsT_OQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.50.99.0/24 Signature Algorithm: sha256WithRSAEncryption b0:52:04:33:31:7a:b6:93:85:e4:7b:a7:f8:38:14:18:9c:87: af:a9:0d:e4:6f:5b:f7:24:b8:2e:fc:8d:c1:3c:9e:7c:0d:50: dc:ff:0e:d0:9e:00:db:47:6f:24:1e:c9:1e:5a:05:31:4f:54: d7:99:20:99:fe:16:95:83:40:77:73:62:c5:ff:09:d6:06:ca: 1c:a4:42:9d:cd:14:46:55:6b:88:50:a4:93:92:4b:48:cc:42: 78:df:e1:91:6b:95:d9:e8:2b:2d:fd:39:fe:0d:d6:ef:07:17: 60:0f:cc:9b:95:80:f6:36:3a:aa:7b:c7:b7:37:ff:0d:0f:5c: 88:db:3a:03:5a:eb:6d:5d:5b:0d:6a:c4:68:c9:32:b7:82:10: 2d:94:e1:1f:5b:5a:28:94:08:3d:5a:17:38:cb:61:b4:47:3a: 77:92:46:59:ab:4f:10:ba:fc:15:f2:17:c0:1b:10:0b:be:a6: ca:c5:38:d7:75:8b:8d:f0:2b:d0:5f:7b:c0:cd:c0:3a:a4:93: b9:bf:36:04:23:97:59:8f:91:c5:6a:ba:9c:2a:23:c0:ea:17: c1:3e:b4:9a:44:7e:a2:c1:07:17:9c:cc:94:dc:c5:52:95:42: 1d:2f:f6:33:cb:76:1a:1e:e8:5e:5f:b9:0a:c5:f4:42:17:a8: f5:38:f9:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftINzl9kI0puZn+HOoHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzUxMjYyZmU4N2Y0ZTI5NWVmOWU3Zjg3YTFmOWU0OWY1 N2MzMDAwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWJkOTE2NGIxNjFkYjY5MGYzNTE5ZGZmNjI4NGFkY2FiMTNmY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXh99rkd2Jeq/UtA7/T6i0kEqJSa BOFLdMIft6G6uSEBkeU2eg6qwPrHfbNn/ZAvqCWCC1fMDtKKYvHmMmkzUoae3pDr NTjHnEswbRKgc34Ybp3ifFxwJVJlSNjyIuMv7AblLUthxUwWpJQbilHr6Mdg9Ft8 SRBhk02X0Sa57GbexskJF0EZAQ1UKsiLdmeZOF0mdwe78oQBFFYP6ZI+KEw1u2uM 4WIQATdmcW2bmQvqy2i4IG+oLUMbX6CIVEbHaYtgABODhpwIn17zf/hLrSAKAAdJ 8rKyHIj9+/tlL8EEvS8ZGVxp1KtyNK47uAZchqpjJSkpMvSc+AyPF60IkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAq9kWSxYdtpDzUZ3/YoStyrE/zkMB8GA1UdIwQY MBaAFBTFEmL+h/Tile+ef4eh+eSfV8MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1VU1l2Nkg5T0tWNzU1X2g2SDU1SjlYd3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iZGZkMTktMjAxYS00NDRkLThkODgt NmVmNGM3Yzc0NzBiLzEvQ3IyUlpMRmgyMmtQTlJuZjlpaEszS3NUX09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iZGZkMTktMjAxYS00NDRkLThkODgtNmVmNGM3Yzc0NzBi LzEvRk1VU1l2Nkg5T0tWNzU1X2g2SDU1SjlYd3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTJjMA0G CSqGSIb3DQEBCwUAA4IBAQCwUgQzMXq2k4Xke6f4OBQYnIevqQ3kb1v3JLgu/I3B PJ58DVDc/w7QngDbR28kHskeWgUxT1TXmSCZ/haVg0B3c2LF/wnWBsocpEKdzRRG VWuIUKSTkktIzEJ43+GRa5XZ6Cst/Tn+DdbvBxdgD8yblYD2Njqqe8e3N/8ND1yI 2zoDWuttXVsNasRoyTK3ghAtlOEfW1oolAg9Whc4y2G0Rzp3kkZZq08QuvwV8hfA GxALvqbKxTjXdYuN8CvQX3vAzcA6pJO5vzYEI5dZj5HFarqcKiPA6hfBPrSaRH6i wQcXnMyU3MVSlUIdL/Yzy3YaHuheX7kKxfRCF6j1OPl9 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:58 2026 by rpki-client