This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa File: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (raw, json) Hash identifier: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M= Subject key identifier: B5:6D:91:D0:64:54:A3:23:6D:2B:6F:D8:90:5B:D6:CF:4C:CA:07:37 Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb Certificate serial: 019B7AC7E4649412381FA051EAD9153D21C8 Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.151.44.0/23 maxlen: 23 185.151.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e4:64:94:12:38:1f:a0:51:ea:d9:15:3d:21:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b56d91d06454a3236d2b6fd8905bd6cf4cca0737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:c2:89:ce:a2:6a:fe:11:72:aa:a0:f1:45: 0c:d2:78:91:db:88:de:2e:28:ed:bb:c9:d1:2d:d1: 9b:db:26:33:30:cb:5c:e5:25:c4:9a:e1:ce:32:c2: 0f:ce:c5:11:5f:9b:f9:45:e8:29:77:36:48:52:84: 3f:e4:77:f9:7a:11:5c:32:c1:fb:65:82:92:11:4a: cf:23:a5:3d:c5:e8:57:c0:ce:e7:54:1d:e0:ac:93: 3c:1e:ef:69:3a:39:19:87:65:17:fb:9e:44:9c:a8: f2:da:0d:4a:ce:06:a2:cd:cc:11:4c:ab:ab:1c:54: aa:b1:af:40:7e:f8:64:04:43:1d:ab:1e:83:23:4e: 26:33:d4:c0:a9:87:2e:c4:76:dd:69:2b:a9:f0:7c: 10:2a:41:c7:f6:6a:13:b5:7e:3c:93:c2:75:b1:55: d5:64:4a:83:ba:d9:69:10:a0:1d:c7:08:a4:90:19: 6a:0c:70:9c:76:44:0b:5b:f9:4b:aa:92:fc:87:7a: 26:f1:cf:e3:16:be:4d:36:a2:4b:f8:36:7c:9f:33: 3f:e6:80:ef:78:ea:79:86:52:50:29:c3:f6:cc:50: cb:1d:fc:26:d2:62:8f:4e:b9:b3:09:bd:5c:16:90: cd:b3:9d:05:cf:ff:fa:d7:85:5d:3b:74:e3:fc:d0: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:91:D0:64:54:A3:23:6D:2B:6F:D8:90:5B:D6:CF:4C:CA:07:37 X509v3 Authority Key Identifier: keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.44.0/23 185.151.47.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:33:47:be:80:5d:26:72:c2:1d:a5:c8:ca:7c:47:29:ca:1a: 7e:6a:98:9a:fc:3e:07:b9:45:b9:4d:13:64:0d:d5:a9:bf:1e: 6d:29:47:43:56:09:f3:09:fb:39:29:da:1c:ec:5d:b3:73:83: 7c:16:f2:9d:20:15:42:d0:29:a8:79:1b:17:d1:ef:c0:93:c2: 8c:71:4c:34:39:50:85:f0:cc:7c:4c:e5:ca:fb:ab:3a:d4:96: 59:27:55:a4:49:91:09:4e:99:21:b8:2f:40:16:74:01:96:8b: d3:14:01:17:e8:70:9a:14:98:cd:1a:f2:dd:c2:ec:7c:58:a2: a7:8f:0f:17:9c:41:2f:8f:63:8a:b8:70:56:ba:7b:18:4b:81: d9:59:38:ac:0e:2e:80:ec:28:e1:e6:a4:24:5c:ba:72:be:c0: 91:46:20:fe:c0:e4:b1:b1:8d:c8:b0:09:70:df:02:76:c2:3a: 59:97:3c:b1:36:82:a0:0b:a0:dc:4c:cd:29:47:cb:45:63:80: 49:24:cb:eb:27:5f:6c:43:06:aa:b2:33:7a:b7:c9:6c:21:46: ad:58:d1:e8:fb:1e:96:5f:13:eb:37:13:21:b7:4f:00:1d:30: 1e:f0:57:bf:3b:65:74:8f:de:ee:c0:81:ec:c0:7c:06:9c:ce: 42:98:57:d1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x+RklBI4H6BR6tkVPSHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNGUyMWIyN2Q2Zjg0ZWJkZDg4OGM2OGU3OWNlNTU1Yzg0 NmRhY2IwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTZkOTFkMDY0NTRhMzIzNmQyYjZmZDg5MDViZDZjZjRjY2EwNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS/Cic6iav4Rcqqg8UUM0niR24je Lijtu8nRLdGb2yYzMMtc5SXEmuHOMsIPzsURX5v5RegpdzZIUoQ/5Hf5ehFcMsH7 ZYKSEUrPI6U9xehXwM7nVB3grJM8Hu9pOjkZh2UX+55EnKjy2g1KzgaizcwRTKur HFSqsa9AfvhkBEMdqx6DI04mM9TAqYcuxHbdaSup8HwQKkHH9moTtX48k8J1sVXV ZEqDutlpEKAdxwikkBlqDHCcdkQLW/lLqpL8h3om8c/jFr5NNqJL+DZ8nzM/5oDv eOp5hlJQKcP2zFDLHfwm0mKPTrmzCb1cFpDNs50Fz//614VdO3Tj/NB/lQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLVtkdBkVKMjbStv2JBb1s9Mygc3MB8GA1UdIwQY MBaAFLxOIbJ9b4Tr3YiMaOec5VXIRtrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUt ODNlNzNjYjI1ZWE1LzEvdFcyUjBHUlVveU50SzJfWWtGdld6MHpLQnpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUtODNlNzNjYjI1ZWE1 LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuZcsAwQA uZcvMA0GCSqGSIb3DQEBCwUAA4IBAQAqM0e+gF0mcsIdpcjKfEcpyhp+apia/D4H uUW5TRNkDdWpvx5tKUdDVgnzCfs5Kdoc7F2zc4N8FvKdIBVC0CmoeRsX0e/Ak8KM cUw0OVCF8Mx8TOXK+6s61JZZJ1WkSZEJTpkhuC9AFnQBlovTFAEX6HCaFJjNGvLd wux8WKKnjw8XnEEvj2OKuHBWunsYS4HZWTisDi6A7Cjh5qQkXLpyvsCRRiD+wOSx sY3IsAlw3wJ2wjpZlzyxNoKgC6DcTM0pR8tFY4BJJMvrJ19sQwaqsjN6t8lsIUat WNHo+x6WXxPrNxMht08AHTAe8Fe/O2V0j97uwIHswHwGnM5CmFfR -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:20 2026 by rpki-client