This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa File: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (raw, json) Hash identifier: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps= Subject key identifier: 03:00:14:F2:0B:3C:7D:4D:E0:16:A2:83:CF:83:C2:B1:94:04:AA:D7 Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019B7758EAA55C593DED15A32310D2366665 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202755 IP address blocks: 185.155.172.0/24 maxlen: 24 185.155.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ea:a5:5c:59:3d:ed:15:a3:23:10:d2:36:66:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=030014f20b3c7d4de016a283cf83c2b19404aad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:c1:12:c1:f4:85:95:b3:7b:e2:d7:64:07: 8c:c4:23:f5:c4:94:dd:9d:28:a0:a5:26:ba:4f:12: 9a:87:5d:f6:b6:70:27:55:50:84:e5:87:1f:07:e9: 94:47:2f:e2:e2:ea:92:c1:a2:90:f5:1a:53:b3:ad: a0:70:ab:d2:46:58:7c:82:de:6c:bc:38:97:c7:92: a1:12:30:88:95:c9:f8:52:e4:d4:fc:2b:60:9a:0c: eb:cc:1e:88:3e:f9:b7:49:06:2d:25:98:ba:11:7d: 23:2d:64:9e:53:72:75:92:42:29:34:b7:88:e7:b9: b3:f1:63:05:2d:82:1e:84:8d:36:b1:7f:32:26:1c: b9:3e:ca:08:42:a1:73:3c:ef:3a:88:36:4c:0f:38: 28:f8:fc:73:f2:3a:ae:bf:29:cd:c6:fb:94:98:7a: 85:80:e4:38:58:05:0d:e8:e8:fd:05:2d:1c:4a:13: 7e:64:13:71:8b:3d:44:02:98:e2:1d:3b:84:13:a1: 28:45:a9:c6:f2:f7:15:34:76:b2:9b:52:be:cf:75: a1:8e:7b:f0:ce:40:42:1f:fc:7c:70:bd:8d:a0:be: dc:9b:08:44:4d:8d:76:fe:07:e2:52:c5:21:5d:4f: d5:31:73:2e:b8:96:61:af:b0:a5:bf:51:79:ad:cf: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:00:14:F2:0B:3C:7D:4D:E0:16:A2:83:CF:83:C2:B1:94:04:AA:D7 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.172.0/24 185.155.174.0/24 Signature Algorithm: sha256WithRSAEncryption bf:97:98:f9:9b:b2:92:dc:39:83:aa:f2:71:ae:26:e8:29:41: 7a:36:f7:0b:7b:77:07:19:5f:ef:98:d1:9d:38:43:c9:43:61: 51:5b:5b:34:3a:14:cf:fd:fd:7d:a8:f7:32:a3:8e:b8:81:92: af:fd:a8:2b:90:eb:55:59:80:cc:35:60:db:c9:a8:58:f2:81: 9f:cd:80:8a:c8:8f:85:3b:99:64:10:97:9a:bf:9e:c8:e2:2c: f0:98:df:82:fb:68:69:50:7c:f6:89:c6:79:5f:c7:88:b0:62: 7c:cd:5d:af:a2:88:49:8d:ca:a1:b0:b1:28:7e:69:2f:c9:91: 66:98:5c:f6:b9:ab:23:3f:c7:cd:89:ba:a2:56:95:e3:f0:af: 9e:5b:62:e7:e2:86:a8:34:49:da:b6:76:a3:21:a1:f6:34:c8: 37:b0:26:3f:e8:e1:b3:1e:9c:e7:df:97:a6:87:78:b7:0b:82: a1:a6:01:4f:7a:b8:ef:be:c4:d5:58:24:37:fb:60:01:a4:5f: 75:63:ed:06:8b:df:f7:f1:27:4c:a4:c1:46:d5:8f:91:ff:b3: ff:5f:44:95:2d:d3:97:ee:5b:4e:ea:38:14:74:94:8b:0c:da: 47:7a:d3:9e:04:6c:31:b1:7b:1d:48:6d:d2:78:6c:3b:c9:37: 65:1c:a0:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WOqlXFk97RWjIxDSNmZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzAwMTRmMjBiM2M3ZDRkZTAxNmEyODNjZjgzYzJiMTk0MDRhYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7vBEsH0hZWze+LXZAeMxCP1xJTd nSigpSa6TxKah132tnAnVVCE5YcfB+mURy/i4uqSwaKQ9RpTs62gcKvSRlh8gt5s vDiXx5KhEjCIlcn4UuTU/CtgmgzrzB6IPvm3SQYtJZi6EX0jLWSeU3J1kkIpNLeI 57mz8WMFLYIehI02sX8yJhy5PsoIQqFzPO86iDZMDzgo+Pxz8jquvynNxvuUmHqF gOQ4WAUN6Oj9BS0cShN+ZBNxiz1EApjiHTuEE6EoRanG8vcVNHaym1K+z3Whjnvw zkBCH/x8cL2NoL7cmwhETY12/gfiUsUhXU/VMXMuuJZhr7Clv1F5rc+5RQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAMAFPILPH1N4Baig8+DwrGUBKrXMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvQXdBVThnczhmVTNnRnFLRHo0UENzWlFFcXRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZusAwQA uZuuMA0GCSqGSIb3DQEBCwUAA4IBAQC/l5j5m7KS3DmDqvJxriboKUF6NvcLe3cH GV/vmNGdOEPJQ2FRW1s0OhTP/f19qPcyo464gZKv/agrkOtVWYDMNWDbyahY8oGf zYCKyI+FO5lkEJeav57I4izwmN+C+2hpUHz2icZ5X8eIsGJ8zV2voohJjcqhsLEo fmkvyZFmmFz2uasjP8fNibqiVpXj8K+eW2Ln4oaoNEnatnajIaH2NMg3sCY/6OGz Hpzn35emh3i3C4KhpgFPerjvvsTVWCQ3+2ABpF91Y+0Gi9/38SdMpMFG1Y+R/7P/ X0SVLdOX7ltO6jgUdJSLDNpHetOeBGwxsXsdSG3SeGw7yTdlHKBR -----END CERTIFICATE-----Generated at Sun Jan 11 06:33:03 2026 by rpki-client