This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/_1jwukIhOCi8MpxTLw5Kv601c_s.roa File: _1jwukIhOCi8MpxTLw5Kv601c_s.roa (raw, json) Hash identifier: 0/3KAxQZwAWnmzvMwd4pIg6xUGZxILgfs+mT+10r3v8= Subject key identifier: FF:58:F0:BA:42:21:38:28:BC:32:9C:53:2F:0E:4A:BF:AD:35:73:FB Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Certificate serial: 019B78352940E51852B814393209F4D3AD70 Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/_1jwukIhOCi8MpxTLw5Kv601c_s.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202629 IP address blocks: 185.235.28.0/22 maxlen: 24 185.235.28.0/24 maxlen: 24 185.235.29.0/24 maxlen: 24 185.235.30.0/24 maxlen: 24 185.235.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:29:40:e5:18:52:b8:14:39:32:09:f4:d3:ad:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff58f0ba42213828bc329c532f0e4abfad3573fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:e1:2c:e4:c7:b5:52:79:9f:91:56:90:6f: 0e:ef:cd:07:6d:20:ae:49:ed:79:7c:2a:11:c5:37: 16:af:c3:df:6d:72:df:71:fe:7d:87:e2:75:9c:30: 0f:47:00:91:f0:06:dc:44:5d:39:cd:e6:20:0c:e5: 14:86:d8:4c:6d:61:54:4c:9b:10:a4:0e:ea:a0:59: 0d:e0:e2:c9:d3:86:29:63:ee:01:d0:50:40:68:e5: 44:e1:2c:0a:b5:aa:10:c3:cb:ed:20:84:97:01:c8: 1c:9f:26:17:84:53:0c:fc:f9:99:5e:cd:58:f5:c3: 1d:6f:1f:d4:7f:e1:01:36:d8:23:d3:99:6d:42:97: 54:91:fa:0d:e4:b4:b6:cc:94:90:a9:18:23:6e:a6: a9:f9:fb:27:12:1a:d1:9a:4b:bb:84:27:0d:33:b8: df:3f:46:43:09:05:83:89:c3:64:c3:5e:64:6a:0e: 0d:1c:ca:12:56:1f:50:d9:9e:b2:e3:ec:c0:0c:3f: 39:a9:9d:41:96:13:1b:db:e5:77:ef:6c:b4:9b:29: 5b:75:02:e2:95:0d:00:f1:ca:fb:e8:3b:78:97:3f: 76:77:95:bc:c0:7d:8a:db:bf:32:e8:c4:95:18:b6: 60:0a:d2:9b:be:05:31:7a:58:3b:b7:6a:c7:a7:43: 84:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:F0:BA:42:21:38:28:BC:32:9C:53:2F:0E:4A:BF:AD:35:73:FB X509v3 Authority Key Identifier: keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/_1jwukIhOCi8MpxTLw5Kv601c_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.28.0/22 Signature Algorithm: sha256WithRSAEncryption 95:ca:e5:c0:48:1e:c2:70:8a:74:99:7d:64:09:c3:d3:16:a5: a3:b9:28:7b:a8:be:0c:25:fb:ba:f0:01:b9:88:cc:23:da:ee: a4:b6:2c:d0:43:c9:ed:3e:f6:d9:e4:ff:64:e3:b6:80:a7:35: 00:77:98:f0:61:84:23:50:a5:3d:c9:55:6d:13:f8:a3:b8:5b: ba:27:68:33:ed:4e:07:9c:d1:0a:bc:71:6a:79:41:4f:75:82: 83:58:a3:c9:a1:f7:1f:48:f8:d8:f3:0b:20:f5:90:18:ff:14: 9e:ad:9c:a6:bf:cd:c5:0c:75:f9:97:29:23:0d:33:5e:31:09: 9c:48:f2:e4:9e:4b:2e:1c:19:01:36:18:75:c7:1d:e2:83:d8: 98:20:fe:df:c0:18:d8:b6:8d:67:49:ce:e3:fd:7b:1b:ed:ec: 89:d5:05:0a:40:bd:6a:bc:ab:6f:7a:2c:c2:82:c8:75:e7:e4: f1:a9:ba:6a:0b:32:40:81:11:c7:05:5d:25:8b:e1:f8:a8:4d: 72:e0:c7:99:37:b7:37:fd:75:15:8a:3e:32:d5:a0:06:11:79: 01:8a:4d:0c:9b:ba:97:8e:38:78:f5:8c:9f:f9:68:7a:a5:d6: b3:59:be:31:92:a8:86:04:66:fa:fd:27:ec:1e:78:b5:6a:cf: df:61:6e:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSlA5RhSuBQ5Mgn0061wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy ZTRjMTMwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjU4ZjBiYTQyMjEzODI4YmMzMjljNTMyZjBlNGFiZmFkMzU3M2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucbhLOTHtVJ5n5FWkG8O780HbSCu Se15fCoRxTcWr8PfbXLfcf59h+J1nDAPRwCR8AbcRF05zeYgDOUUhthMbWFUTJsQ pA7qoFkN4OLJ04YpY+4B0FBAaOVE4SwKtaoQw8vtIISXAcgcnyYXhFMM/PmZXs1Y 9cMdbx/Uf+EBNtgj05ltQpdUkfoN5LS2zJSQqRgjbqap+fsnEhrRmku7hCcNM7jf P0ZDCQWDicNkw15kag4NHMoSVh9Q2Z6y4+zADD85qZ1BlhMb2+V372y0mylbdQLi lQ0A8cr76Dt4lz92d5W8wH2K278y6MSVGLZgCtKbvgUxelg7t2rHp0OEgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9Y8LpCITgovDKcUy8OSr+tNXP7MB8GA1UdIwQY MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt YTg4YmI3ODA1YjA5LzEvXzFqd3VrSWhPQ2k4TXB4VEx3NUt2NjAxY19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5 LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuescMA0G CSqGSIb3DQEBCwUAA4IBAQCVyuXASB7CcIp0mX1kCcPTFqWjuSh7qL4MJfu68AG5 iMwj2u6ktizQQ8ntPvbZ5P9k47aApzUAd5jwYYQjUKU9yVVtE/ijuFu6J2gz7U4H nNEKvHFqeUFPdYKDWKPJofcfSPjY8wsg9ZAY/xSerZymv83FDHX5lykjDTNeMQmc SPLknksuHBkBNhh1xx3ig9iYIP7fwBjYto1nSc7j/Xsb7eyJ1QUKQL1qvKtveizC gsh15+TxqbpqCzJAgRHHBV0li+H4qE1y4MeZN7c3/XUVij4y1aAGEXkBik0Mm7qX jjh49Yyf+Wh6pdazWb4xkqiGBGb6/SfsHni1as/fYW47 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:40 2026 by rpki-client