This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/sO9pZ5FwOgUvmAOslbboRpxPFe0.roa File: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (raw, json) Hash identifier: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4= Subject key identifier: B0:EF:69:67:91:70:3A:05:2F:98:03:AC:95:B6:E8:46:9C:4F:15:ED Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39 Certificate serial: 019B7CEDD3536282624F0DB265AC419718D6 Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/sO9pZ5FwOgUvmAOslbboRpxPFe0.roa Signing time: Fri 02 Jan 2026 04:18:39 +0000 ROA not before: Fri 02 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59989 IP address blocks: 185.214.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d3:53:62:82:62:4f:0d:b2:65:ac:41:97:18:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39 Validity Not Before: Jan 2 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0ef696791703a052f9803ac95b6e8469c4f15ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:ec:55:f5:ef:d3:da:33:08:0c:b8:c1:5d: 14:96:18:53:34:86:a6:de:59:93:e0:42:c0:62:e0: 4e:32:bc:d3:15:45:d0:fc:91:c2:c9:29:e3:3b:d2: a0:76:af:d3:f0:e9:74:b0:df:a2:1e:8c:08:6a:f5: 29:d5:6b:53:64:1a:54:45:5c:51:01:5f:c7:d4:9a: 0f:74:3f:75:5d:d6:cb:e3:03:8b:87:02:1e:45:2a: 66:f5:6c:d7:3d:67:43:76:1d:6a:9f:14:e1:d7:16: 83:39:02:4b:28:ca:2a:7b:82:df:31:81:59:f5:59: a3:84:5f:c0:36:2f:7e:f5:0b:fa:67:d8:ed:4a:72: 07:63:28:f1:67:17:b0:91:dd:e4:aa:c0:9d:85:53: 34:9d:5d:ef:77:95:6b:4d:7b:1c:8e:71:74:ec:fa: e2:4c:c4:08:b3:ae:d6:82:7a:c6:c6:c2:04:43:bc: 84:1a:ce:e3:3c:f9:df:40:f6:3f:bb:db:a1:67:87: e3:b5:f2:71:3d:97:ff:b5:ca:64:11:26:f7:31:a6: 41:af:02:77:8b:6d:e0:f0:21:37:b4:d3:f7:06:18: 7c:8d:09:1d:03:18:5d:98:b8:3f:e9:b2:4d:7c:14: a7:9e:33:23:e8:99:1c:fc:49:7f:fd:a4:12:1d:01: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:EF:69:67:91:70:3A:05:2F:98:03:AC:95:B6:E8:46:9C:4F:15:ED X509v3 Authority Key Identifier: keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/sO9pZ5FwOgUvmAOslbboRpxPFe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.65.0/24 Signature Algorithm: sha256WithRSAEncryption 38:87:59:d6:d7:b5:32:87:00:59:78:e9:1b:29:1a:d8:aa:1a: 96:97:32:53:91:ae:b3:61:67:95:de:97:4e:a9:1d:e0:79:4a: b9:fd:57:8a:a9:2c:79:98:0e:ab:81:e5:cf:f6:3f:fc:d8:bc: 24:fb:8e:96:83:ee:0f:d1:c2:88:1b:71:c8:cd:a9:b2:6a:ad: 0e:2a:a3:32:af:a0:85:28:d2:a4:db:5b:4b:31:35:3a:5d:a6: ec:29:09:7a:ea:e7:98:cd:34:96:c0:f0:8e:8b:32:7f:32:59: 63:ae:d8:30:17:13:30:2d:70:7c:30:9e:44:2d:79:f9:29:9f: 25:8c:1a:1f:d7:44:da:b0:8b:05:8a:ea:36:44:09:08:1d:8e: 21:14:95:3c:70:fd:82:9b:22:d2:7b:65:39:d6:b1:4d:e7:29: 20:28:2c:24:f8:da:2a:1a:42:c3:4e:b2:b8:f5:e1:8c:26:84: 7f:65:20:ce:be:c6:c4:9b:9d:c1:6c:02:68:51:7a:22:8a:64: e1:63:ed:93:92:38:87:c9:fb:d8:da:a4:61:40:58:f4:3a:4a: f6:20:6b:e0:26:04:d5:59:f7:4c:06:42:8f:3a:3a:94:03:7f: 89:b3:59:ca:c2:56:7a:e3:10:66:e2:5f:ec:66:7e:7f:c4:41: 2c:ea:f6:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dNTYoJiTw2yZaxBlxjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMWJkNjJiZWVjYWIwZTkwM2IyOTgxMTI0MWRiMjQ0YmJm NTJjMzkwHhcNMjYwMTAyMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGVmNjk2NzkxNzAzYTA1MmY5ODAzYWM5NWI2ZTg0NjljNGYxNWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgrsVfXv09ozCAy4wV0UlhhTNIam 3lmT4ELAYuBOMrzTFUXQ/JHCySnjO9Kgdq/T8Ol0sN+iHowIavUp1WtTZBpURVxR AV/H1JoPdD91XdbL4wOLhwIeRSpm9WzXPWdDdh1qnxTh1xaDOQJLKMoqe4LfMYFZ 9VmjhF/ANi9+9Qv6Z9jtSnIHYyjxZxewkd3kqsCdhVM0nV3vd5VrTXscjnF07Pri TMQIs67WgnrGxsIEQ7yEGs7jPPnfQPY/u9uhZ4fjtfJxPZf/tcpkESb3MaZBrwJ3 i23g8CE3tNP3Bhh8jQkdAxhdmLg/6bJNfBSnnjMj6Jkc/El//aQSHQFf9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDvaWeRcDoFL5gDrJW26EacTxXtMB8GA1UdIwQY MBaAFMsb1ivuyrDpA7KYESQdskS79Sw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYt ZTQwMTZhZDUzY2M5LzEvc085cFo1RndPZ1V2bUFPc2xiYm9ScHhQRmUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9lMDJiNDctZjJlMC00NDAyLTgxNGYtZTQwMTZhZDUzY2M5 LzEveXh2V0stN0tzT2tEc3BnUkpCMnlSTHYxTERrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZBMA0G CSqGSIb3DQEBCwUAA4IBAQA4h1nW17UyhwBZeOkbKRrYqhqWlzJTka6zYWeV3pdO qR3geUq5/VeKqSx5mA6rgeXP9j/82Lwk+46Wg+4P0cKIG3HIzamyaq0OKqMyr6CF KNKk21tLMTU6XabsKQl66ueYzTSWwPCOizJ/MlljrtgwFxMwLXB8MJ5ELXn5KZ8l jBof10TasIsFiuo2RAkIHY4hFJU8cP2CmyLSe2U51rFN5ykgKCwk+NoqGkLDTrK4 9eGMJoR/ZSDOvsbEm53BbAJoUXoiimThY+2TkjiHyfvY2qRhQFj0Okr2IGvgJgTV WfdMBkKPOjqUA3+Js1nKwlZ64xBm4l/sZn5/xEEs6vbH -----END CERTIFICATE-----Generated at Tue Jan 27 07:44:04 2026 by rpki-client