This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/0p95IngmkZetH0gXJAOs3SDAY0E.roa File: 0p95IngmkZetH0gXJAOs3SDAY0E.roa (raw, json) Hash identifier: LNPnqbLWCMHvDTcExFmSigDZZyvSElARaSkh4q6WPOA= Subject key identifier: D2:9F:79:22:78:26:91:97:AD:1F:48:17:24:03:AC:DD:20:C0:63:41 Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Certificate serial: 019B7AC7CA5EFE7190769DF91B46FF9054BA Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/0p95IngmkZetH0gXJAOs3SDAY0E.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205943 IP address blocks: 185.201.68.0/24 maxlen: 24 185.201.69.0/24 maxlen: 24 185.201.70.0/24 maxlen: 24 2a0a:bf40::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ca:5e:fe:71:90:76:9d:f9:1b:46:ff:90:54:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d29f792278269197ad1f48172403acdd20c06341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:ae:c3:04:51:dd:aa:37:b9:07:c0:2c:64: a2:ec:29:b9:b4:62:5b:28:4e:3f:09:60:7e:09:f4: 65:31:52:e2:3e:9c:4f:a3:cc:5a:13:92:6d:15:56: 1f:61:cf:d3:b4:43:28:ce:71:e7:cd:08:b5:20:4c: a4:86:04:17:8a:c8:93:19:01:dc:b4:89:c1:cd:9a: 8a:f2:2f:46:d6:e6:f6:fd:fa:f4:dd:8a:af:a1:f9: c4:67:58:5e:ee:b3:e1:e3:d9:f7:05:4c:bf:47:95: e1:29:10:cc:ad:75:54:25:82:fd:64:3c:ed:05:ea: 03:c8:3b:1a:3d:32:8c:a2:7d:8b:69:af:ee:92:2e: f8:c6:bc:06:31:0b:d7:55:0e:3f:98:b9:ec:65:51: e3:11:ff:17:3a:31:e2:20:29:69:f9:af:36:da:1c: bf:a9:1c:1d:af:ea:54:e3:15:24:83:69:86:74:13: bd:e3:21:bb:3c:8c:d1:86:6b:ae:6a:cb:cc:20:61: de:f7:af:1b:e6:15:cd:b7:6a:37:25:b3:97:61:27: ff:52:8f:0b:64:ce:13:ce:b3:aa:79:d1:e5:c0:93: e2:ad:c5:bd:6d:e6:a1:e9:36:0d:89:f1:37:1d:fc: 4b:23:32:b9:97:fe:42:3f:e5:66:d4:32:b1:76:11: 54:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9F:79:22:78:26:91:97:AD:1F:48:17:24:03:AC:DD:20:C0:63:41 X509v3 Authority Key Identifier: keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/0p95IngmkZetH0gXJAOs3SDAY0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.201.68.0-185.201.70.255 IPv6: 2a0a:bf40::/36 Signature Algorithm: sha256WithRSAEncryption b2:09:4c:1d:09:0d:45:3d:fb:64:3e:e7:9f:2c:f1:e1:6f:f1: fb:13:72:49:22:eb:5e:57:aa:b9:d2:e6:e7:af:ac:14:f1:8e: 1f:61:29:91:de:42:db:c2:1a:8f:9b:9c:35:89:c9:41:62:59: c3:31:1c:8c:ba:e1:88:ed:49:ba:02:31:90:a0:b9:82:20:74: 7c:e9:04:15:aa:c4:4d:68:fd:09:d4:de:87:01:99:8d:b9:c0: f6:43:21:26:99:24:8f:c2:f3:4e:85:ad:83:22:96:38:42:ec: f1:6d:46:12:f0:4b:a1:1f:86:b8:c1:a2:76:f0:bf:d5:85:04: 0c:e1:2a:28:3c:68:0c:37:90:c9:a0:3f:09:f6:c7:34:ee:91: f4:c6:8c:df:9b:c8:d6:e8:a2:ec:ea:33:44:d9:ba:7f:dd:bc: 77:69:ba:26:8d:fa:f0:1d:8c:08:45:ef:b7:a7:fb:66:55:60: a1:c4:ef:93:ef:b4:34:89:4a:df:f9:21:4a:6f:d5:cf:ae:45: 7a:25:16:e5:4c:09:50:68:b2:28:50:56:fe:e5:47:6c:4d:a3: 29:74:42:db:25:9f:df:c1:5a:6a:f4:5a:10:18:eb:9b:78:d4: 30:b1:41:a0:3e:e7:8b:d1:9b:62:e0:8a:a4:52:4d:31:90:02: 0f:a1:3b:f6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6x8pe/nGQdp35G0b/kFS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZjdlN2NmODE3NmUzMDI3NjRkNDgyOTlmYzIyYTliZGM2 YmE2ODMwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjlmNzkyMjc4MjY5MTk3YWQxZjQ4MTcyNDAzYWNkZDIwYzA2MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO6uwwRR3ao3uQfALGSi7Cm5tGJb KE4/CWB+CfRlMVLiPpxPo8xaE5JtFVYfYc/TtEMoznHnzQi1IEykhgQXisiTGQHc tInBzZqK8i9G1ub2/fr03YqvofnEZ1he7rPh49n3BUy/R5XhKRDMrXVUJYL9ZDzt BeoDyDsaPTKMon2Laa/uki74xrwGMQvXVQ4/mLnsZVHjEf8XOjHiIClp+a822hy/ qRwdr+pU4xUkg2mGdBO94yG7PIzRhmuuasvMIGHe968b5hXNt2o3JbOXYSf/Uo8L ZM4TzrOqedHlwJPircW9beah6TYNifE3HfxLIzK5l/5CP+Vm1DKxdhFUmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNKfeSJ4JpGXrR9IFyQDrN0gwGNBMB8GA1UdIwQY MBaAFAP358+BduMCdk1IKZ/CKpvca6aDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUt M2NmM2I0NjNhODZhLzEvMHA5NUluZ21rWmV0SDBnWEpBT3MzU0RBWTBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9hZTQ1NDctMmNhMi00Y2JkLWExYjUtM2NmM2I0NjNhODZh LzEvQV9mbno0RjI0d0oyVFVncG44SXFtOXhycG9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAK5yUQD BAC5yUYwDgQCAAIwCAMGBCoKv0AAMA0GCSqGSIb3DQEBCwUAA4IBAQCyCUwdCQ1F PftkPuefLPHhb/H7E3JJIuteV6q50ubnr6wU8Y4fYSmR3kLbwhqPm5w1iclBYlnD MRyMuuGI7Um6AjGQoLmCIHR86QQVqsRNaP0J1N6HAZmNucD2QyEmmSSPwvNOha2D IpY4QuzxbUYS8EuhH4a4waJ28L/VhQQM4SooPGgMN5DJoD8J9sc07pH0xozfm8jW 6KLs6jNE2bp/3bx3abomjfrwHYwIRe+3p/tmVWChxO+T77Q0iUrf+SFKb9XPrkV6 JRblTAlQaLIoUFb+5UdsTaMpdELbJZ/fwVpq9FoQGOubeNQwsUGgPueL0Zti4Iqk Uk0xkAIPoTv2 -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:20 2026 by rpki-client