This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/35C6AJOSNoz8sqN_-_bGrGZUKpA.roa File: 35C6AJOSNoz8sqN_-_bGrGZUKpA.roa (raw, json) Hash identifier: APmpxtsjZwTYH+8Tnb5n7iPD+1J1/uTjo396nOTJWkg= Subject key identifier: DF:90:BA:00:93:92:36:8C:FC:B2:A3:7F:FB:F6:C6:AC:66:54:2A:90 Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209 Certificate serial: 019B7B35C63624F2CF7E850DB63F83378CA0 Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/35C6AJOSNoz8sqN_-_bGrGZUKpA.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31898 IP address blocks: 185.134.116.0/24 maxlen: 24 185.134.117.0/24 maxlen: 24 185.134.118.0/24 maxlen: 24 185.134.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c6:36:24:f2:cf:7e:85:0d:b6:3f:83:37:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df90ba009392368cfcb2a37ffbf6c6ac66542a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:08:5d:17:91:fd:a8:1d:69:b2:4f:02:72:27: 5a:f9:a5:36:54:39:fe:2d:3e:46:2b:ae:c6:db:8e: 5c:ff:cc:7b:d8:3a:85:4f:01:c6:9d:eb:54:e3:31: 89:29:86:29:14:90:f1:0a:51:16:11:e9:79:63:02: f0:7b:42:be:78:47:b5:e3:71:48:ce:f7:93:3e:ee: ed:7f:b4:8a:79:88:7c:e6:67:55:3a:61:41:8d:2d: 66:94:21:4f:b2:f2:6d:e1:44:a5:cb:61:c6:7e:c0: 9a:59:84:13:45:55:7f:45:99:5d:cb:cc:9c:3f:24: d7:09:1b:f6:80:ce:63:65:59:c4:a9:e1:78:a4:a6: 2f:59:ee:32:3a:11:4e:9d:43:2a:6b:9e:e1:12:3e: 16:03:83:d6:b1:a3:ff:fb:1d:c8:2f:a8:7d:ff:d8: 6d:9d:83:90:76:05:ce:1f:b1:e2:f7:07:a2:f0:a1: 52:3a:c0:52:9a:bc:4b:e9:d5:e8:d9:33:19:14:10: bd:c3:9e:5b:b2:48:81:53:45:a3:0e:8e:fd:4d:12: bf:44:af:d8:b8:2f:cd:9a:77:42:f0:63:89:62:17: 09:de:01:ab:d5:62:db:f4:ed:42:d9:39:e7:ed:a8: 55:63:27:25:05:88:6a:a2:00:d4:33:85:00:dc:06: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:90:BA:00:93:92:36:8C:FC:B2:A3:7F:FB:F6:C6:AC:66:54:2A:90 X509v3 Authority Key Identifier: keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/35C6AJOSNoz8sqN_-_bGrGZUKpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.116.0/22 Signature Algorithm: sha256WithRSAEncryption a5:45:3d:5a:c8:19:77:d5:93:1c:a7:10:41:ef:20:dd:f6:79: 7f:cd:0d:25:6a:e8:99:20:15:80:7b:30:70:60:67:6b:61:a3: f5:25:4e:85:6f:84:4a:b0:00:01:94:73:1a:62:6c:25:6d:e8: 6e:46:cc:8f:af:f9:77:72:00:22:ef:5d:f7:ea:15:d1:68:0b: 02:28:7d:e5:4e:59:a5:d6:2f:87:2b:ba:35:eb:a8:12:3c:66: 53:d0:ba:8f:9a:6d:7c:2c:9f:9e:a6:67:70:ed:1c:26:69:86: 24:19:b7:a7:d2:df:cc:8e:04:0d:71:b7:88:70:95:a9:ae:80: 95:a4:2a:9d:36:d3:e7:6a:0d:cc:10:53:6c:cb:00:0f:8b:68: 1a:0e:25:d7:71:c3:1e:59:b0:bc:ae:d9:84:e0:17:46:b0:12: fe:60:6d:f6:d4:a5:82:fd:d3:95:30:74:5d:8a:06:7e:2f:9c: 9e:92:a7:90:d3:89:12:37:b4:c1:91:38:ed:44:44:c2:a7:ee: 6a:9c:5c:c9:eb:20:f0:4c:e2:c9:6c:ac:a8:75:43:1a:3f:2d: 3b:c4:76:e7:89:0e:40:bf:db:a2:1f:ce:91:62:d6:8c:6d:a4: 66:8e:cd:0b:94:e0:c6:ac:e3:f6:7f:79:ad:84:46:c5:32:a6: 5b:92:44:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NcY2JPLPfoUNtj+DN4ygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzdlYWM0NWM4ZGJiNWU1ZWZkZDY1YzE4ODE0NDk4NjAz ZjAyMDkwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjkwYmEwMDkzOTIzNjhjZmNiMmEzN2ZmYmY2YzZhYzY2NTQyYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAhdF5H9qB1psk8Ccida+aU2VDn+ LT5GK67G245c/8x72DqFTwHGnetU4zGJKYYpFJDxClEWEel5YwLwe0K+eEe143FI zveTPu7tf7SKeYh85mdVOmFBjS1mlCFPsvJt4USly2HGfsCaWYQTRVV/RZldy8yc PyTXCRv2gM5jZVnEqeF4pKYvWe4yOhFOnUMqa57hEj4WA4PWsaP/+x3IL6h9/9ht nYOQdgXOH7Hi9wei8KFSOsBSmrxL6dXo2TMZFBC9w55bskiBU0WjDo79TRK/RK/Y uC/NmndC8GOJYhcJ3gGr1WLb9O1C2Tnn7ahVYyclBYhqogDUM4UA3Abc9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+QugCTkjaM/LKjf/v2xqxmVCqQMB8GA1UdIwQY MBaAFCDH6sRcjbteXv3WXBiBRJhgPwIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUt NzA0ZWFiNmNhM2U4LzEvMzVDNkFKT1NOb3o4c3FOXy1fYkdyR1pVS3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUtNzA0ZWFiNmNhM2U4 LzEvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYZ0MA0G CSqGSIb3DQEBCwUAA4IBAQClRT1ayBl31ZMcpxBB7yDd9nl/zQ0lauiZIBWAezBw YGdrYaP1JU6Fb4RKsAABlHMaYmwlbehuRsyPr/l3cgAi71336hXRaAsCKH3lTlml 1i+HK7o166gSPGZT0LqPmm18LJ+epmdw7RwmaYYkGben0t/MjgQNcbeIcJWproCV pCqdNtPnag3MEFNsywAPi2gaDiXXccMeWbC8rtmE4BdGsBL+YG321KWC/dOVMHRd igZ+L5yekqeQ04kSN7TBkTjtRETCp+5qnFzJ6yDwTOLJbKyodUMaPy07xHbniQ5A v9uiH86RYtaMbaRmjs0LlODGrOP2f3mthEbFMqZbkkRQ -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:52 2026 by rpki-client