This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u7dpvZoIvw4Dui4WzZ2ih9qFegs.roa File: u7dpvZoIvw4Dui4WzZ2ih9qFegs.roa (raw, json) Hash identifier: Kz2haFw8Q3HUecos9x+oMZwLILjifRaKUdip9sawr00= Subject key identifier: BB:B7:69:BD:9A:08:BF:0E:03:BA:2E:16:CD:9D:A2:87:DA:85:7A:0B Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79104C784681212001FB82E580106E94 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u7dpvZoIvw4Dui4WzZ2ih9qFegs.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34828 IP address blocks: 185.241.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4c:78:46:81:21:20:01:fb:82:e5:80:10:6e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb769bd9a08bf0e03ba2e16cd9da287da857a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:74:31:d8:8a:d2:23:56:1c:fb:bd:99:d9: b6:f6:b5:e4:b5:3f:12:af:99:4e:b7:4f:e4:7f:9a: 0e:8b:b7:1a:ea:61:af:14:c5:6b:a5:37:32:cb:96: 12:cf:e9:49:6d:06:28:17:91:12:15:77:45:5c:d9: 3e:51:67:0d:35:cc:ea:29:ab:c2:58:6a:90:bf:d9: 4b:77:da:36:24:f0:1c:78:c9:2d:6c:c5:0c:9d:a5: af:d5:52:76:6a:8d:f7:93:5a:3c:df:1a:50:e8:3a: 90:23:6b:40:3a:23:51:c1:67:f1:40:2b:fb:31:ea: b9:cc:fe:50:13:73:33:d7:42:f7:eb:f2:cc:51:64: 41:c9:80:05:6f:a9:6b:2b:b7:4e:e0:2a:ab:87:de: 8c:1c:99:7a:64:6f:31:c4:3f:35:2a:bf:39:6e:7b: 83:5d:2c:90:8d:b6:ac:a9:59:83:7a:15:0b:d2:af: 15:6f:e0:d7:f2:d8:04:46:63:19:80:6f:d3:44:d9: 8e:94:04:fb:f6:4e:23:13:8b:6a:c9:32:fa:c0:d7: 61:28:e3:66:67:80:3e:b8:c8:50:40:ad:5b:60:aa: 49:8e:83:e7:33:9f:fe:e6:fe:1a:ee:02:3c:86:7e: e5:eb:85:c1:c2:cc:b9:5c:63:36:b9:5b:67:75:f7: c4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B7:69:BD:9A:08:BF:0E:03:BA:2E:16:CD:9D:A2:87:DA:85:7A:0B X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/u7dpvZoIvw4Dui4WzZ2ih9qFegs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.241.10.0/24 Signature Algorithm: sha256WithRSAEncryption 09:69:66:a0:c6:18:6b:d4:64:93:28:d5:ea:77:27:78:53:49: d0:a8:d4:5e:17:6c:ce:8d:da:9a:bf:f8:39:59:fd:de:30:8e: b4:2a:6c:12:d1:e1:14:ac:ec:99:79:60:46:82:52:3b:fc:32: a5:c6:37:19:52:7e:1f:e7:a5:2f:5b:3c:b9:82:a1:bd:a9:ed: b4:f2:20:08:62:ef:cc:bb:a6:0f:9e:06:ed:57:5e:1f:c0:2e: ed:a6:11:e6:e2:b9:69:c1:98:99:60:0a:84:b5:3d:51:1d:a6: d0:f2:73:35:10:9b:df:64:02:1a:04:55:2e:65:6f:de:62:2a: 17:51:5c:56:8b:b3:74:b4:00:2e:20:bf:91:5d:2a:e5:f1:08: 10:9c:aa:0e:38:32:81:df:95:32:20:4d:dd:b7:e5:8d:a6:e4: ee:22:d8:15:3f:e6:ef:c9:55:33:57:3f:a2:74:c4:80:16:43: e3:0c:f2:56:c3:8e:d6:36:a2:87:91:53:7c:91:c1:34:53:ff: 09:3c:a8:63:73:31:84:a5:37:70:b4:ec:4f:3b:d8:26:c6:1c: 32:bd:01:e5:a3:b7:ec:d2:ba:c5:2b:17:10:b2:0f:63:b0:97: f6:6e:aa:57:d8:21:80:c1:4a:4f:ba:0d:72:55:1d:e0:d1:98: f6:eb:95:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEx4RoEhIAH7guWAEG6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmI3NjliZDlhMDhiZjBlMDNiYTJlMTZjZDlkYTI4N2RhODU3YTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEd0MdiK0iNWHPu9mdm29rXktT8S r5lOt0/kf5oOi7ca6mGvFMVrpTcyy5YSz+lJbQYoF5ESFXdFXNk+UWcNNczqKavC WGqQv9lLd9o2JPAceMktbMUMnaWv1VJ2ao33k1o83xpQ6DqQI2tAOiNRwWfxQCv7 Meq5zP5QE3Mz10L36/LMUWRByYAFb6lrK7dO4Cqrh96MHJl6ZG8xxD81Kr85bnuD XSyQjbasqVmDehUL0q8Vb+DX8tgERmMZgG/TRNmOlAT79k4jE4tqyTL6wNdhKONm Z4A+uMhQQK1bYKpJjoPnM5/+5v4a7gI8hn7l64XBwsy5XGM2uVtndffEIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLu3ab2aCL8OA7ouFs2doofahXoLMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvdTdkcHZab0l2dzREdWk0V3paMmloOXFGZWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufEKMA0G CSqGSIb3DQEBCwUAA4IBAQAJaWagxhhr1GSTKNXqdyd4U0nQqNReF2zOjdqav/g5 Wf3eMI60KmwS0eEUrOyZeWBGglI7/DKlxjcZUn4f56UvWzy5gqG9qe208iAIYu/M u6YPngbtV14fwC7tphHm4rlpwZiZYAqEtT1RHabQ8nM1EJvfZAIaBFUuZW/eYioX UVxWi7N0tAAuIL+RXSrl8QgQnKoOODKB35UyIE3dt+WNpuTuItgVP+bvyVUzVz+i dMSAFkPjDPJWw47WNqKHkVN8kcE0U/8JPKhjczGEpTdwtOxPO9gmxhwyvQHlo7fs 0rrFKxcQsg9jsJf2bqpX2CGAwUpPug1yVR3g0Zj265Vp -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:51 2026 by rpki-client