This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa File: FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa (raw, json) Hash identifier: PRoV3H39Cr/JXk4LsEV4xIWemZ70bZuFShd6vkqQqrE= Subject key identifier: 14:ED:65:42:21:BD:49:C7:73:42:D9:71:76:5C:35:16:52:90:F8:8D Certificate issuer: /CN=18e937c103db046f22553ef99438fa2959240da5 Certificate serial: 019B791117A778E09DFBD7CD9CDD5FF56903 Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46489 IP address blocks: 185.42.204.0/22 maxlen: 24 2a01:62e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:17:a7:78:e0:9d:fb:d7:cd:9c:dd:5f:f5:69:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e937c103db046f22553ef99438fa2959240da5 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14ed654221bd49c77342d971765c35165290f88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:3d:e1:dd:9a:f2:cd:93:f8:5d:b0:1e:ce: 1a:df:bd:4a:74:86:ba:e9:8a:5c:bf:3a:56:1d:44: c4:b6:3c:a6:c5:48:b2:06:54:99:b4:fe:01:db:c2: f2:0d:dc:7e:73:20:a4:dc:da:7c:1e:4c:d1:6a:d0: ab:ed:22:cb:20:f7:3e:74:36:db:7b:6b:51:8e:43: d0:71:bd:6b:75:02:a4:c5:81:1c:00:a1:5c:fb:7b: 3d:00:9c:4b:e6:f8:61:0c:3d:b9:4b:5d:ae:96:2a: 7c:87:90:49:c1:2b:3f:99:4d:5e:b7:d8:e1:a0:40: 74:5f:07:bc:5e:05:cc:ab:03:e4:8d:33:00:f0:dd: 8b:05:02:d3:b1:32:10:60:81:29:97:8a:be:1d:3b: b1:4a:43:25:e1:a5:e7:30:27:35:07:d2:9a:d4:6a: b5:fd:d5:27:5c:ab:f5:c0:a2:58:84:42:ee:3b:23: 9f:7d:b2:58:db:29:c3:c2:6a:91:b7:c6:8b:6b:8b: 99:79:84:91:2d:50:ed:bb:df:f1:93:c1:9d:72:37: 12:1b:72:4d:2d:c3:0a:98:59:c3:a6:78:ce:8d:b0: 90:70:62:f4:57:e2:4a:c2:48:a0:7e:20:33:c7:4e: c4:3d:3a:8b:2a:a7:ef:4f:38:ac:fe:f7:03:dd:99: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:65:42:21:BD:49:C7:73:42:D9:71:76:5C:35:16:52:90:F8:8D X509v3 Authority Key Identifier: keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/FO1lQiG9ScdzQtlxdlw1FlKQ-I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.204.0/22 IPv6: 2a01:62e0::/32 Signature Algorithm: sha256WithRSAEncryption d2:36:df:c2:80:4e:36:93:0a:39:54:32:50:d3:4e:c0:a0:ae: ae:08:99:3f:11:62:66:38:e1:14:aa:88:ab:b8:f5:66:aa:16: cb:7d:fd:e5:90:78:de:ed:b5:ef:ac:d2:76:5c:9a:8a:b2:3d: 60:dc:b1:fc:d5:6f:16:75:24:bb:d5:46:89:07:d7:82:54:e1: 60:83:7f:a6:29:c1:c1:e1:88:44:24:9f:8e:c0:22:19:63:84: f4:62:6c:99:bf:c1:2e:a8:cc:61:33:28:de:f9:fd:86:cd:97: b6:53:9b:91:8e:8b:43:9b:6e:ed:7f:bf:9c:f0:1e:9f:3c:99: 0d:af:5c:20:be:68:cf:b2:8c:a8:49:45:bc:db:07:56:a0:15: 5f:05:29:5a:3f:d1:77:af:d6:2c:79:cd:fb:57:ac:e7:ff:a7: 1a:a4:94:f1:a1:43:71:ad:e9:c8:7c:3e:5c:25:04:98:52:6f: 16:84:65:ea:b4:7b:b3:6f:15:bf:19:09:49:90:7f:56:e0:4c: 7a:88:6e:7d:fc:62:df:5f:b7:88:2d:22:54:46:db:e1:a3:04: c1:89:77:91:e3:fa:e2:55:28:29:28:4c:8b:67:44:9a:57:17: 52:8c:8f:27:f5:5b:98:6a:06:0f:9b:17:95:65:b0:2c:ff:72: ee:2e:af:7d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EReneOCd+9fNnN1f9WkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTkzN2MxMDNkYjA0NmYyMjU1M2VmOTk0MzhmYTI5NTky NDBkYTUwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGVkNjU0MjIxYmQ0OWM3NzM0MmQ5NzE3NjVjMzUxNjUyOTBmODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe094d2a8s2T+F2wHs4a371KdIa6 6YpcvzpWHUTEtjymxUiyBlSZtP4B28LyDdx+cyCk3Np8HkzRatCr7SLLIPc+dDbb e2tRjkPQcb1rdQKkxYEcAKFc+3s9AJxL5vhhDD25S12ulip8h5BJwSs/mU1et9jh oEB0Xwe8XgXMqwPkjTMA8N2LBQLTsTIQYIEpl4q+HTuxSkMl4aXnMCc1B9Ka1Gq1 /dUnXKv1wKJYhELuOyOffbJY2ynDwmqRt8aLa4uZeYSRLVDtu9/xk8GdcjcSG3JN LcMKmFnDpnjOjbCQcGL0V+JKwkigfiAzx07EPTqLKqfvTzis/vcD3ZnxRQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBTtZUIhvUnHc0LZcXZcNRZSkPiNMB8GA1UdIwQY MBaAFBjpN8ED2wRvIlU++ZQ4+ilZJA2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYt Y2FlNmE3MDlkMTRhLzEvRk8xbFFpRzlTY2R6UXRseGRsdzFGbEtRLUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83YWVkYWQtYjRjZi00NjljLWFlYmYtY2FlNmE3MDlkMTRh LzEvR09rM3dRUGJCRzhpVlQ3NWxEajZLVmtrRGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSrMMA0E AgACMAcDBQAqAWLgMA0GCSqGSIb3DQEBCwUAA4IBAQDSNt/CgE42kwo5VDJQ007A oK6uCJk/EWJmOOEUqoiruPVmqhbLff3lkHje7bXvrNJ2XJqKsj1g3LH81W8WdSS7 1UaJB9eCVOFgg3+mKcHB4YhEJJ+OwCIZY4T0YmyZv8EuqMxhMyje+f2GzZe2U5uR jotDm27tf7+c8B6fPJkNr1wgvmjPsoyoSUW82wdWoBVfBSlaP9F3r9Ysec37V6zn /6capJTxoUNxrenIfD5cJQSYUm8WhGXqtHuzbxW/GQlJkH9W4Ex6iG59/GLfX7eI LSJURtvhowTBiXeR4/riVSgpKEyLZ0SaVxdSjI8n9VuYagYPmxeVZbAs/3LuLq99 -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:01 2026 by rpki-client