This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/_eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa File: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (raw, json) Hash identifier: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ= Subject key identifier: FD:E0:21:AC:8A:EE:84:89:09:BE:04:3B:5D:88:69:3A:19:01:9F:94 Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25 Certificate serial: 019B7C129040091D7D92D64AF21C440811B2 Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/_eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa Signing time: Fri 02 Jan 2026 00:19:09 +0000 ROA not before: Fri 02 Jan 2026 00:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.55.188.0/24 maxlen: 24 185.55.190.0/24 maxlen: 24 185.55.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:90:40:09:1d:7d:92:d6:4a:f2:1c:44:08:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25 Validity Not Before: Jan 2 00:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fde021ac8aee848909be043b5d88693a19019f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:a0:52:36:fe:c3:b8:01:a1:3f:5c:69:f1: c3:76:50:02:4c:e3:b8:9a:52:81:cf:84:a0:b5:50: 77:f3:7c:53:4b:02:1f:c3:c8:99:87:33:10:f7:b9: db:6a:bd:57:29:fd:03:60:5c:66:2a:7a:3c:e9:7c: 69:3e:32:a1:67:47:86:21:f4:04:47:24:32:d0:ad: 34:d7:17:b9:3c:ed:10:c8:5c:7a:02:6c:c5:46:a5: 74:f1:5e:7d:d2:00:3b:13:da:cb:a2:f9:da:06:91: c1:ab:8b:5d:60:01:ca:8c:e3:a2:56:5c:cd:23:68: 4f:dd:56:9d:37:e5:7e:8c:68:d1:b1:17:63:32:7c: e2:29:35:0e:a8:9b:37:d0:1d:8a:e4:5b:d8:eb:24: 33:26:a5:4d:5d:3f:20:1b:66:00:0b:96:e9:8b:f7: dc:46:df:2b:f5:5d:4f:84:50:ac:09:da:83:88:0d: e9:b2:37:cc:c6:58:15:84:54:fc:f2:fa:a3:8e:9e: 51:9a:30:df:ce:79:18:dc:fe:96:02:2d:a5:3a:d8: 81:d7:f0:8b:b0:3e:91:66:d2:65:76:4c:f6:03:4a: 1d:9b:bd:73:79:cb:cd:f2:63:c8:1f:16:de:51:cd: 84:4f:cc:f5:a4:ec:51:a3:2e:7c:a9:b1:a0:22:9d: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:21:AC:8A:EE:84:89:09:BE:04:3B:5D:88:69:3A:19:01:9F:94 X509v3 Authority Key Identifier: keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/_eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.188.0/24 185.55.190.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:79:25:53:7c:e9:a1:87:a7:dd:10:cd:22:4c:7b:b2:12:6f: a8:06:e9:7d:c8:6b:ac:12:79:72:cc:aa:00:08:af:76:20:3c: 0f:82:5f:3a:e6:b1:f8:cd:34:74:bf:bf:27:66:01:2e:39:c7: ab:91:21:7d:36:6a:45:f0:ec:f5:74:30:07:18:4c:63:1d:ad: c2:bb:9e:9c:14:f9:84:37:3c:e1:0c:03:5d:57:0f:da:e3:90: cf:85:8a:2e:c9:63:d0:86:2a:6a:13:d1:06:95:4f:da:14:5e: 4a:c8:67:bf:41:15:41:55:96:83:0e:81:7c:e2:0c:d7:15:60: fb:a4:58:29:98:5d:19:56:70:0e:c9:95:b5:a1:5d:4a:ba:34: aa:56:ec:e7:7e:54:f6:2e:8d:a1:c0:9b:30:0d:7c:0a:5d:f2: cb:96:ea:6a:af:ba:d6:ac:fd:36:62:eb:e1:63:05:5c:cb:c6: fd:ef:bf:90:98:76:d7:9e:39:d8:38:06:af:2e:9d:65:81:07: 58:2c:54:fc:c7:e1:1c:61:4b:dc:65:98:95:b6:2a:5d:c3:00: b8:7a:bb:7f:44:0f:37:c2:d7:86:36:64:49:f4:5b:cf:05:6e: ae:3e:d0:f3:22:e6:ee:16:56:79:45:89:d0:46:28:46:f8:1a: 43:a4:22:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EpBACR19ktZK8hxECBGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw YzRjMjUwHhcNMjYwMTAyMDAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGUwMjFhYzhhZWU4NDg5MDliZTA0M2I1ZDg4NjkzYTE5MDE5Zjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwOgUjb+w7gBoT9cafHDdlACTOO4 mlKBz4SgtVB383xTSwIfw8iZhzMQ97nbar1XKf0DYFxmKno86XxpPjKhZ0eGIfQE RyQy0K001xe5PO0QyFx6AmzFRqV08V590gA7E9rLovnaBpHBq4tdYAHKjOOiVlzN I2hP3VadN+V+jGjRsRdjMnziKTUOqJs30B2K5FvY6yQzJqVNXT8gG2YAC5bpi/fc Rt8r9V1PhFCsCdqDiA3psjfMxlgVhFT88vqjjp5RmjDfznkY3P6WAi2lOtiB1/CL sD6RZtJldkz2A0odm71zecvN8mPIHxbeUc2ET8z1pOxRoy58qbGgIp0NwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP3gIayK7oSJCb4EO12IaToZAZ+UMB8GA1UdIwQY MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et NDFhMDY3NmVkZDYxLzEvX2VBaHJJcnVoSWtKdmdRN1hZaHBPaGtCbjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuTe8AwQB uTe+MA0GCSqGSIb3DQEBCwUAA4IBAQAaeSVTfOmhh6fdEM0iTHuyEm+oBul9yGus EnlyzKoACK92IDwPgl865rH4zTR0v78nZgEuOcerkSF9NmpF8Oz1dDAHGExjHa3C u56cFPmENzzhDANdVw/a45DPhYouyWPQhipqE9EGlU/aFF5KyGe/QRVBVZaDDoF8 4gzXFWD7pFgpmF0ZVnAOyZW1oV1KujSqVuznflT2Lo2hwJswDXwKXfLLlupqr7rW rP02YuvhYwVcy8b977+QmHbXnjnYOAavLp1lgQdYLFT8x+EcYUvcZZiVtipdwwC4 ert/RA83wteGNmRJ9FvPBW6uPtDzIubuFlZ5RYnQRihG+BpDpCK2 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:22 2026 by rpki-client