This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/87-YSbMReH31Dgog9bWr7LIOwDc.roa File: 87-YSbMReH31Dgog9bWr7LIOwDc.roa (raw, json) Hash identifier: hDo6NZzb4X3hLyA0D8KOPVVkLe72F2UR6eTSxcHeyYw= Subject key identifier: F3:BF:98:49:B3:11:78:7D:F5:0E:0A:20:F5:B5:AB:EC:B2:0E:C0:37 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15A68ADD8703DC0629DDA8A707E1BE Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/87-YSbMReH31Dgog9bWr7LIOwDc.roa Signing time: Fri 02 Jan 2026 14:21:23 +0000 ROA not before: Fri 02 Jan 2026 14:21:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200005 IP address blocks: 185.123.168.0/22 maxlen: 24 194.35.36.0/23 maxlen: 24 194.35.38.0/24 maxlen: 24 2a0b:35c0::/32 maxlen: 32 2a0b:35c1::/32 maxlen: 32 2a0b:35c2::/32 maxlen: 32 2a0b:35c3::/32 maxlen: 32 2a0b:35c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a6:8a:dd:87:03:dc:06:29:dd:a8:a7:07:e1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3bf9849b311787df50e0a20f5b5abecb20ec037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d4:c0:c4:e4:ac:db:d5:34:34:11:a4:fe:79: 2c:91:a8:95:56:9e:5c:6d:78:85:29:1b:95:e4:50: f6:df:d7:fc:44:b8:c4:bf:ec:58:70:bf:51:0b:b6: 33:3a:1a:d3:06:e5:c0:8d:c5:5b:36:c7:69:aa:ed: cc:34:e6:a6:16:e1:41:36:60:06:3c:0d:f6:2b:57: 3b:07:d1:69:b0:7e:c6:c1:8a:24:35:fb:45:e7:2e: 7c:a3:fd:9a:25:60:88:41:19:12:0a:12:77:65:9b: 51:e2:fb:c6:a5:74:42:e7:de:44:55:4b:59:c0:67: 66:f8:a1:64:29:00:a1:8e:59:fa:b9:54:f5:f7:05: 37:6d:fd:07:bb:0d:cf:29:54:40:61:53:ea:2b:75: d3:01:e5:9d:be:3d:f6:3a:a5:2e:0f:ec:6c:a6:76: ef:bf:f5:d9:0d:1f:b8:c8:3b:5d:7e:da:c2:f4:1b: 59:55:c5:c1:d1:ce:8f:05:a0:21:a4:fc:d0:7a:af: 9d:fa:33:26:a7:21:d0:19:58:0f:fe:68:47:43:4f: 01:8a:35:67:5a:8d:b6:81:06:01:df:a2:e4:96:d9: b7:a4:f7:4d:1d:38:c7:7f:f7:bb:4a:b9:fe:2a:01: 82:70:cc:66:91:1f:b9:67:de:61:f7:fe:ba:5e:99: aa:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BF:98:49:B3:11:78:7D:F5:0E:0A:20:F5:B5:AB:EC:B2:0E:C0:37 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/87-YSbMReH31Dgog9bWr7LIOwDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.168.0/22 194.35.36.0-194.35.38.255 IPv6: 2a0b:35c0::-2a0b:35c4:0:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 43:d9:c8:c7:ae:a9:b5:f8:a2:57:8f:a2:78:0f:61:30:da:ad: 88:14:44:d6:e6:d9:cc:e7:ee:80:ef:2b:67:9f:f9:f8:8f:25: e9:67:49:6e:da:86:e2:9c:96:89:1a:e6:23:0e:2f:ed:90:88: 06:06:a0:68:69:87:a5:f0:1b:3c:bc:a6:a9:b0:db:0b:52:d0: 92:3f:97:24:f5:c9:a3:64:43:90:55:91:8b:2b:88:ea:6b:28: ff:6c:c5:70:3c:ee:97:f6:67:ae:6e:63:82:ff:52:89:5d:85: 35:1c:cf:8c:3c:b7:89:52:26:cb:cf:49:79:14:bd:c5:93:7a: a6:0a:4b:1f:85:9c:b0:18:cd:8c:35:9c:39:15:fd:96:5c:5d: 72:13:10:aa:e7:2b:e9:9e:db:ed:56:e4:71:8a:d8:ff:df:ce: fe:3f:67:11:7a:aa:da:3c:23:c0:81:cd:a5:20:ee:60:52:7d: 25:f2:4a:b5:d5:93:7c:b3:22:4b:89:52:2e:d8:39:d7:74:6b: 30:1d:47:cb:6b:76:89:ea:13:8b:a9:bb:e7:57:7f:04:b1:4e: 04:5b:8a:93:d8:e8:3d:ce:a3:ee:f5:10:f3:2c:9c:9e:ff:8a: da:21:f7:f9:ae:cb:cd:aa:bc:3d:00:15:cc:bd:93:7f:af:7a: 5e:a0:b4:88 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt/FaaK3YcD3AYp3ainB+G+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2JmOTg0OWIzMTE3ODdkZjUwZTBhMjBmNWI1YWJlY2IyMGVjMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtTAxOSs29U0NBGk/nkskaiVVp5c bXiFKRuV5FD239f8RLjEv+xYcL9RC7YzOhrTBuXAjcVbNsdpqu3MNOamFuFBNmAG PA32K1c7B9FpsH7GwYokNftF5y58o/2aJWCIQRkSChJ3ZZtR4vvGpXRC595EVUtZ wGdm+KFkKQChjln6uVT19wU3bf0Huw3PKVRAYVPqK3XTAeWdvj32OqUuD+xspnbv v/XZDR+4yDtdftrC9BtZVcXB0c6PBaAhpPzQeq+d+jMmpyHQGVgP/mhHQ08BijVn Wo22gQYB36Lkltm3pPdNHTjHf/e7Srn+KgGCcMxmkR+5Z95h9/66Xpmq3QIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFPO/mEmzEXh99Q4KIPW1q+yyDsA3MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvODctWVNiTVJlSDMxRGdvZzliV3I3TElPd0RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUAwQCuXuoMAwD BALCIyQDBADCIyYwGAQCAAIwEjAQAwUGKgs1wAMHACoLNcQAADANBgkqhkiG9w0B AQsFAAOCAQEAQ9nIx66ptfiiV4+ieA9hMNqtiBRE1ubZzOfugO8rZ5/5+I8l6WdJ btqG4pyWiRrmIw4v7ZCIBgagaGmHpfAbPLymqbDbC1LQkj+XJPXJo2RDkFWRiyuI 6mso/2zFcDzul/Znrm5jgv9SiV2FNRzPjDy3iVImy89JeRS9xZN6pgpLH4WcsBjN jDWcORX9llxdchMQqucr6Z7b7VbkcYrY/9/O/j9nEXqq2jwjwIHNpSDuYFJ9JfJK tdWTfLMiS4lSLtg513RrMB1Hy2t2ieoTi6m751d/BLFOBFuKk9joPc6j7vUQ8yyc nv+K2iH3+a7Lzaq8PQAVzL2Tf696XqC0iA== -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:36 2026 by rpki-client