This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/9p7v24IWi54XMfmEVEZZq-XhIaM.roa File: 9p7v24IWi54XMfmEVEZZq-XhIaM.roa (raw, json) Hash identifier: JdpVpLfE7UnbhdOWMCYVFP9oCgWbgMDDUO/p12HpSSw= Subject key identifier: F6:9E:EF:DB:82:16:8B:9E:17:31:F9:84:54:46:59:AB:E5:E1:21:A3 Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Certificate serial: 019B7C1209AFFD9F7696D965BFBC5827CB61 Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/9p7v24IWi54XMfmEVEZZq-XhIaM.roa Signing time: Fri 02 Jan 2026 00:18:35 +0000 ROA not before: Fri 02 Jan 2026 00:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198551 IP address blocks: 185.200.144.0/22 maxlen: 22 185.200.144.0/24 maxlen: 24 185.200.145.0/24 maxlen: 24 185.200.146.0/24 maxlen: 24 185.200.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:09:af:fd:9f:76:96:d9:65:bf:bc:58:27:cb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7 Validity Not Before: Jan 2 00:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f69eefdb82168b9e1731f984544659abe5e121a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:53:b8:5b:94:30:77:8e:d8:75:fa:8f:6a:d1: a0:7d:0e:e5:30:c3:a8:83:48:76:d8:ce:1b:7f:0a: 6c:7e:bc:4e:a3:a4:77:5d:78:ee:27:47:e9:62:c2: 5e:f2:07:d3:f9:78:b1:0a:c9:3b:2d:86:41:b2:e6: 38:b7:89:0b:b9:41:4d:da:1e:84:28:2d:d9:04:cf: 3a:7f:94:59:d3:54:4f:27:d1:7d:2b:1c:83:42:79: 35:5c:df:15:48:b3:8a:70:8d:ef:38:92:d1:f8:d9: 27:d3:5c:8f:3e:c4:b5:38:d7:af:08:67:86:a4:33: 4e:1c:3e:5e:35:be:ed:c8:79:81:ad:12:0a:f5:3e: 5f:75:bd:fd:cf:d1:90:83:35:ab:da:ed:fa:21:24: e7:a8:8b:46:de:29:b5:e6:f7:3a:45:20:62:37:8e: 63:37:1f:24:3f:78:8d:5b:7c:8c:46:4c:df:35:6a: c4:84:4d:7b:99:98:4a:41:4e:1f:15:d8:32:8c:5f: 78:8c:1f:bd:6c:54:80:df:83:60:7d:4d:26:ec:2c: 26:34:e5:03:7a:d0:1d:5d:73:6d:67:8b:fd:26:b8: 1c:8d:a6:e4:ba:b4:c2:46:41:71:06:55:fb:54:6a: d2:20:db:05:ee:e6:ff:dc:c1:d3:7b:f9:46:1f:21: d2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9E:EF:DB:82:16:8B:9E:17:31:F9:84:54:46:59:AB:E5:E1:21:A3 X509v3 Authority Key Identifier: keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/9p7v24IWi54XMfmEVEZZq-XhIaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.200.144.0/22 Signature Algorithm: sha256WithRSAEncryption 90:3c:74:21:66:2c:00:8d:36:4f:62:2c:02:b3:12:c4:48:18: 30:51:f6:5d:b3:df:dc:c2:3a:ee:1d:07:5a:9e:5b:aa:fe:cc: 28:9a:4f:6f:10:95:5f:8b:39:76:f2:60:05:ad:4e:15:04:b0: 10:7e:6b:f1:b5:fd:de:7f:a3:4f:d6:97:35:1a:b4:d1:b3:01: 99:f1:02:57:6c:73:da:f4:c0:b3:d0:57:5f:2d:e7:f7:84:39: 1e:82:5f:a7:cb:0d:dd:09:ff:0a:fe:e7:f9:f7:2f:17:98:0c: a5:55:b6:b4:f2:02:17:1b:3c:1d:58:b9:1b:ad:cd:cd:26:36: 15:86:1e:e0:34:2d:b9:02:85:62:5a:35:0f:e8:b8:6e:1d:00: fc:19:8f:ba:39:29:e4:54:36:a9:60:17:eb:9d:6b:e5:14:28: 13:bf:c2:b1:02:cf:a7:aa:75:79:a2:53:c2:0b:1f:a1:67:42: ea:2d:38:4a:a4:f9:ac:50:4c:dd:3d:fe:de:1d:4c:07:04:31: 5d:d7:4d:35:f7:64:93:44:4f:98:78:12:98:3f:50:65:e5:a8: 8c:ea:89:a5:dd:27:9d:ab:1e:bd:f4:ce:7d:eb:23:19:b2:3f: 00:4a:a2:0c:a5:dc:b0:c1:de:db:ae:0e:75:52:ed:4f:90:7a: 5d:70:1e:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Egmv/Z92ltllv7xYJ8thMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWNlNTMxNWE0M2Q1NjYxY2RjZGNjMWI5ZDdkYWFjZmE2 OTkwZjcwHhcNMjYwMTAyMDAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjllZWZkYjgyMTY4YjllMTczMWY5ODQ1NDQ2NTlhYmU1ZTEyMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lO4W5Qwd47YdfqPatGgfQ7lMMOo g0h22M4bfwpsfrxOo6R3XXjuJ0fpYsJe8gfT+XixCsk7LYZBsuY4t4kLuUFN2h6E KC3ZBM86f5RZ01RPJ9F9KxyDQnk1XN8VSLOKcI3vOJLR+Nkn01yPPsS1ONevCGeG pDNOHD5eNb7tyHmBrRIK9T5fdb39z9GQgzWr2u36ISTnqItG3im15vc6RSBiN45j Nx8kP3iNW3yMRkzfNWrEhE17mZhKQU4fFdgyjF94jB+9bFSA34NgfU0m7CwmNOUD etAdXXNtZ4v9JrgcjabkurTCRkFxBlX7VGrSINsF7ub/3MHTe/lGHyHSGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPae79uCFoueFzH5hFRGWavl4SGjMB8GA1UdIwQY MBaAFGwc5TFaQ9VmHNzcwbnX2qz6aZD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgt MGZiZTdiZDc2ZmZiLzEvOXA3djI0SVdpNTRYTWZtRVZFWlpxLVhoSWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9iYjUyMGMtY2QwZC00OGQ4LTk2YTgtMGZiZTdiZDc2ZmZi LzEvYkJ6bE1WcEQxV1ljM056QnVkZmFyUHBwa1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuciQMA0G CSqGSIb3DQEBCwUAA4IBAQCQPHQhZiwAjTZPYiwCsxLESBgwUfZds9/cwjruHQda nluq/swomk9vEJVfizl28mAFrU4VBLAQfmvxtf3ef6NP1pc1GrTRswGZ8QJXbHPa 9MCz0FdfLef3hDkegl+nyw3dCf8K/uf59y8XmAylVba08gIXGzwdWLkbrc3NJjYV hh7gNC25AoViWjUP6LhuHQD8GY+6OSnkVDapYBfrnWvlFCgTv8KxAs+nqnV5olPC Cx+hZ0LqLThKpPmsUEzdPf7eHUwHBDFd100192STRE+YeBKYP1Bl5aiM6oml3Sed qx699M596yMZsj8ASqIMpdywwd7brg51Uu1PkHpdcB5V -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:21 2026 by rpki-client