This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa File: tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa (raw, json) Hash identifier: A9GN5Q7BwonPYBSN1TVcg69kmzmTkS/zhmBwNF2zRqM= Subject key identifier: B4:8E:5E:EA:20:1A:01:9E:27:35:B9:29:08:7B:0C:AA:9D:7E:92:D4 Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435 Certificate serial: 019B79103AB4B6108EE00D2536886AB2FBCD Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa Signing time: Thu 01 Jan 2026 10:17:45 +0000 ROA not before: Thu 01 Jan 2026 10:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 185.73.32.0/23 maxlen: 23 185.73.33.0/24 maxlen: 24 185.73.34.0/24 maxlen: 24 2a05:3f40::/30 maxlen: 30 2a05:3f44::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:3a:b4:b6:10:8e:e0:0d:25:36:88:6a:b2:fb:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435 Validity Not Before: Jan 1 10:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48e5eea201a019e2735b929087b0caa9d7e92d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:f6:14:56:3e:76:53:0e:0f:84:23:ba:ca: 0b:07:0d:bd:f0:1b:5d:22:31:c3:e2:40:ec:f6:af: 9c:f0:04:86:fb:37:ad:7e:f2:ef:67:54:11:0b:ea: e0:4e:fe:23:b0:00:0c:f7:ab:c5:c9:9d:9c:01:90: f0:62:f0:46:5a:f3:c5:07:2d:8d:19:e3:1c:7d:4e: 6e:bd:48:e1:3d:47:56:52:7c:12:fb:82:07:0f:65: c5:c1:e4:01:cc:8b:a8:ff:c3:09:75:8a:f9:25:a2: 5c:f1:8a:24:fe:04:89:76:d5:85:00:86:5e:76:57: f6:14:96:70:a9:38:46:b0:33:a2:3f:ce:9d:97:77: e9:fd:01:2f:36:09:7c:6a:f9:39:2d:fa:6d:c7:e3: ac:d0:d6:a3:f3:c0:1a:5f:e3:5b:c8:56:ff:27:8a: 09:20:eb:29:80:1b:5e:45:85:0c:01:81:19:62:d8: 86:f8:18:63:a6:ea:c5:55:63:85:3b:1d:be:ad:f3: b7:20:14:7f:3b:2d:51:d2:de:ca:f6:65:0a:d3:47: 79:6b:36:0f:d8:ac:5e:f0:30:dc:25:20:41:08:34: ea:c4:fc:97:8e:6b:28:84:a1:9b:0e:53:70:ec:0f: 7a:ef:b6:a0:93:2f:97:10:07:4c:65:da:b1:e0:61: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8E:5E:EA:20:1A:01:9E:27:35:B9:29:08:7B:0C:AA:9D:7E:92:D4 X509v3 Authority Key Identifier: keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.32.0-185.73.34.255 IPv6: 2a05:3f40::/29 Signature Algorithm: sha256WithRSAEncryption 2f:4f:72:05:e3:a9:37:6d:4f:8d:41:03:8f:cc:5c:40:c6:43: c3:a0:84:00:85:50:6a:21:e0:1f:6f:73:f1:2a:dd:13:70:a8: 75:ce:38:3d:31:0b:d2:81:e9:61:5a:00:56:67:15:40:9c:0d: 5c:ec:fa:83:f3:f7:43:61:2b:8c:35:47:75:46:23:c1:f5:d4: 19:c5:54:8e:3b:d7:e6:1e:0c:3e:cc:8b:6d:dc:43:35:4b:ad: 90:40:e3:12:4b:da:0d:17:4c:67:b0:a2:45:cf:a8:92:ca:6a: 73:88:88:da:ca:fa:5e:4f:06:a0:25:ef:ca:bc:26:78:19:f2: 9b:71:7f:d5:99:d3:1d:68:19:be:05:21:48:14:ca:fa:bf:57: aa:f1:03:5b:e2:65:db:52:73:8b:b6:e5:21:8b:81:8b:4b:97: 04:9e:41:76:d7:d8:51:f3:bf:90:cf:b7:3b:97:82:44:52:c5: 69:80:e3:94:c2:8f:78:8c:b3:fc:e3:8c:a5:2d:fd:3d:23:42: d6:e3:92:f9:e3:22:d2:40:46:82:68:0a:b3:f6:51:6b:30:64: 80:da:14:5b:d6:80:c1:b6:f6:9d:87:01:55:9f:41:fb:95:ea: 17:40:e5:99:68:1f:dd:9d:64:b2:82:65:bd:01:9a:8c:d0:99: ff:6b:70:e5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EDq0thCO4A0lNohqsvvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGEyMDZjODNkNTA1ZTI1NGIzZWYzYzc2NTBmOWZiOTM0 NTM0MzUwHhcNMjYwMTAxMTAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDhlNWVlYTIwMWEwMTllMjczNWI5MjkwODdiMGNhYTlkN2U5MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/2FFY+dlMOD4QjusoLBw298Btd IjHD4kDs9q+c8ASG+zetfvLvZ1QRC+rgTv4jsAAM96vFyZ2cAZDwYvBGWvPFBy2N GeMcfU5uvUjhPUdWUnwS+4IHD2XFweQBzIuo/8MJdYr5JaJc8Yok/gSJdtWFAIZe dlf2FJZwqThGsDOiP86dl3fp/QEvNgl8avk5Lfptx+Os0Naj88AaX+NbyFb/J4oJ IOspgBteRYUMAYEZYtiG+BhjpurFVWOFOx2+rfO3IBR/Oy1R0t7K9mUK00d5azYP 2Kxe8DDcJSBBCDTqxPyXjmsohKGbDlNw7A9677agky+XEAdMZdqx4GFR3wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFLSOXuogGgGeJzW5KQh7DKqdfpLUMB8GA1UdIwQY MBaAFGjaIGyD1QXiVLPvPHZQ+fuTRTQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vZ2JJUFZCZUpVcy04OGRsRDUtNU5GTkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iYjI5OGItM2MzOS00OWIyLWFiYjEt MTFkNjM2YjU2ZGFiLzEvdEk1ZTZpQWFBWjRuTmJrcENIc01xcDEta3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iYjI5OGItM2MzOS00OWIyLWFiYjEtMTFkNjM2YjU2ZGFi LzEvYU5vZ2JJUFZCZUpVcy04OGRsRDUtNU5GTkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAW5SSAD BAC5SSIwDQQCAAIwBwMFAyoFP0AwDQYJKoZIhvcNAQELBQADggEBAC9PcgXjqTdt T41BA4/MXEDGQ8OghACFUGoh4B9vc/Eq3RNwqHXOOD0xC9KB6WFaAFZnFUCcDVzs +oPz90NhK4w1R3VGI8H11BnFVI471+YeDD7Mi23cQzVLrZBA4xJL2g0XTGewokXP qJLKanOIiNrK+l5PBqAl78q8JngZ8ptxf9WZ0x1oGb4FIUgUyvq/V6rxA1viZdtS c4u25SGLgYtLlwSeQXbX2FHzv5DPtzuXgkRSxWmA45TCj3iMs/zjjKUt/T0jQtbj kvnjItJARoJoCrP2UWswZIDaFFvWgMG29p2HAVWfQfuV6hdA5ZloH92dZLKCZb0B mozQmf9rcOU= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:18 2026 by rpki-client