This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/71hLP2iLb16Ja7jTFMHRm2jnG4s.roa File: 71hLP2iLb16Ja7jTFMHRm2jnG4s.roa (raw, json) Hash identifier: uX7PtYBV/V7p3RQFDa+MhX5C5sTxOsiUcDeuAHVj/vk= Subject key identifier: EF:58:4B:3F:68:8B:6F:5E:89:6B:B8:D3:14:C1:D1:9B:68:E7:1B:8B Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb Certificate serial: 019B7F14DA53C5EA3ED34DC4966263BE8420 Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/71hLP2iLb16Ja7jTFMHRm2jnG4s.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60607 IP address blocks: 185.28.160.0/24 maxlen: 24 185.28.161.0/24 maxlen: 24 185.28.162.0/24 maxlen: 24 185.28.163.0/24 maxlen: 24 185.160.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:da:53:c5:ea:3e:d3:4d:c4:96:62:63:be:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef584b3f688b6f5e896bb8d314c1d19b68e71b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:d3:68:35:3b:2b:a9:67:75:e7:74:c3:a8: eb:1d:9a:06:c7:6b:cc:b1:fa:39:90:96:71:66:a6: c6:f9:69:e3:3e:5f:a8:59:52:5e:ef:44:4c:98:90: 71:ef:46:c5:36:18:fb:1b:5c:a5:56:cc:d2:89:14: 84:4e:a7:73:dc:da:9e:3d:61:5f:f9:71:a2:51:91: 58:21:61:50:29:1e:63:46:f9:2f:5f:f8:bd:ec:a2: 68:5c:e5:1f:9a:52:c7:85:5a:ed:16:ce:d2:62:74: d7:fc:51:f7:f2:29:77:80:fb:e1:1b:44:e8:5f:cf: 3b:90:5e:a8:97:20:fb:b4:4f:29:d0:37:10:81:5a: b2:a8:3b:8f:bd:9d:c4:0c:fb:fe:4e:a6:6c:e3:cc: eb:27:4b:25:1d:7b:2f:49:aa:6a:c4:df:57:43:c0: 16:9b:5b:ed:c8:3a:27:fc:04:36:76:38:6d:7c:76: 16:c0:24:76:8f:19:02:7f:6a:58:c7:73:99:6a:2d: cf:b4:31:53:f5:50:0d:72:3a:1b:da:1c:54:6b:56: 97:0b:25:c1:b2:f6:a2:f0:65:60:45:b1:32:1b:ef: 6f:9e:61:66:25:21:34:13:ea:a7:ef:42:2a:da:84: 8a:c2:df:d0:9b:1a:c8:48:b7:9f:fc:47:a1:ea:da: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:58:4B:3F:68:8B:6F:5E:89:6B:B8:D3:14:C1:D1:9B:68:E7:1B:8B X509v3 Authority Key Identifier: keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/71hLP2iLb16Ja7jTFMHRm2jnG4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.160.0/22 185.160.198.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:42:22:09:b2:44:78:df:d2:6e:56:3a:9b:e3:20:d9:94:74: 4f:93:01:74:a5:42:4a:d8:dd:65:7f:39:7a:21:6a:f2:8e:f5: 1f:3d:bc:12:e5:5b:d9:52:dd:8d:e4:b0:cd:26:09:27:98:39: 77:23:62:7e:6b:7d:b3:1c:c1:08:36:4c:95:95:06:88:3c:93: 87:65:37:44:bb:b0:37:c2:09:7d:e4:5e:cf:f1:2a:8b:9a:79: bf:06:1c:55:53:30:09:f2:31:a3:dc:71:06:c6:0b:66:b2:7d: dc:17:98:c6:0b:78:aa:cf:43:2e:8d:44:e2:9a:e4:13:23:8b: a5:7c:cf:8c:5c:33:f3:cb:bc:a3:5f:70:84:96:72:88:e5:67: 9f:39:7d:b5:a2:6c:20:aa:f4:c2:5a:da:f7:5a:81:5e:14:c5: b2:37:f7:8b:1c:c8:64:a8:91:49:97:95:a6:42:b4:81:93:7e: a6:08:5c:a6:d0:0f:46:0a:c7:62:08:5b:3b:a2:f1:bc:d2:91: 61:de:ae:74:00:d2:f8:42:54:f4:94:22:b2:4e:02:1a:af:e5: 95:52:03:0e:a1:8c:8c:32:fa:35:78:d8:16:3c:e9:50:29:fe: 13:a7:09:1e:b1:31:46:56:ac:34:8b:f2:0e:45:1d:68:13:23: 05:62:29:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FNpTxeo+003ElmJjvoQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2 NzcyYmIwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjU4NGIzZjY4OGI2ZjVlODk2YmI4ZDMxNGMxZDE5YjY4ZTcxYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDLTaDU7K6lnded0w6jrHZoGx2vM sfo5kJZxZqbG+WnjPl+oWVJe70RMmJBx70bFNhj7G1ylVszSiRSETqdz3NqePWFf +XGiUZFYIWFQKR5jRvkvX/i97KJoXOUfmlLHhVrtFs7SYnTX/FH38il3gPvhG0To X887kF6olyD7tE8p0DcQgVqyqDuPvZ3EDPv+TqZs48zrJ0slHXsvSapqxN9XQ8AW m1vtyDon/AQ2djhtfHYWwCR2jxkCf2pYx3OZai3PtDFT9VANcjob2hxUa1aXCyXB svai8GVgRbEyG+9vnmFmJSE0E+qn70Iq2oSKwt/QmxrISLef/Eeh6tq9ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO9YSz9oi29eiWu40xTB0Zto5xuLMB8GA1UdIwQY MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt ZDM4YTc2NjBiNTFlLzEvNzFoTFAyaUxiMTZKYTdqVEZNSFJtMmpuRzRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuRygAwQA uaDGMA0GCSqGSIb3DQEBCwUAA4IBAQAtQiIJskR439JuVjqb4yDZlHRPkwF0pUJK 2N1lfzl6IWryjvUfPbwS5VvZUt2N5LDNJgknmDl3I2J+a32zHMEINkyVlQaIPJOH ZTdEu7A3wgl95F7P8SqLmnm/BhxVUzAJ8jGj3HEGxgtmsn3cF5jGC3iqz0MujUTi muQTI4ulfM+MXDPzy7yjX3CElnKI5WefOX21omwgqvTCWtr3WoFeFMWyN/eLHMhk qJFJl5WmQrSBk36mCFym0A9GCsdiCFs7ovG80pFh3q50ANL4QlT0lCKyTgIar+WV UgMOoYyMMvo1eNgWPOlQKf4TpwkesTFGVqw0i/IORR1oEyMFYil7 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:17 2026 by rpki-client