This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/_a0tUF2pNgWfD8OvNlNztg1Ec8c.roa File: _a0tUF2pNgWfD8OvNlNztg1Ec8c.roa (raw, json) Hash identifier: pNVgv9HkjiIVawMVQfKe39+BIhySc8Uon8fScm4gi/w= Subject key identifier: FD:AD:2D:50:5D:A9:36:05:9F:0F:C3:AF:36:53:73:B6:0D:44:73:C7 Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748 Certificate serial: 019B7C7F738860E543A2A0B8E0A46CE77C2C Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/_a0tUF2pNgWfD8OvNlNztg1Ec8c.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211997 IP address blocks: 185.233.32.0/24 maxlen: 24 2a10:d780::/32 maxlen: 32 2a10:d780::/48 maxlen: 48 2a10:d780:1::/48 maxlen: 48 2a10:d780:2::/48 maxlen: 48 2a10:d780:3::/48 maxlen: 48 2a10:d780:cccc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:73:88:60:e5:43:a2:a0:b8:e0:a4:6c:e7:7c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdad2d505da936059f0fc3af365373b60d4473c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:f1:07:11:0b:8e:3d:92:9e:6d:a8:01:aa: 59:03:95:f6:1b:01:04:bd:65:2f:29:76:65:31:f8: ab:32:ee:07:aa:2f:86:44:37:0f:15:ff:e9:2d:f8: e3:98:3d:75:7a:ad:b2:28:f5:3c:c5:3d:36:19:c3: de:f9:ed:4e:4b:70:24:e4:e1:9c:bc:8f:28:54:54: 3a:2f:6c:25:7b:46:38:41:44:d8:23:ca:50:32:fb: 1d:f8:4e:f9:1e:08:44:8f:e2:2f:ab:f5:a6:76:79: f4:e7:5d:44:d7:68:7d:a0:77:6d:77:8f:d1:0a:c8: 76:08:96:c3:4e:e5:8a:19:42:b5:b5:ff:b8:85:31: d4:e8:33:0e:28:16:49:93:95:fe:2f:dd:75:a0:ac: fd:9b:3f:13:3c:50:9f:a7:3f:08:a7:a9:f8:2c:96: 1b:d2:35:4a:c0:e8:dd:4c:5f:e1:31:5e:c6:a5:d6: d2:65:bf:a0:43:98:ca:a5:69:ef:32:12:90:e2:57: 5c:1b:64:99:52:a7:fc:45:c4:99:4c:45:0a:62:ad: 4f:ca:f3:d5:c1:2c:9b:1a:79:c6:f0:86:09:9e:b6: 1b:90:d9:bf:0d:bf:bc:8c:4d:0b:16:f1:ce:8d:8f: a4:b5:c6:85:d5:41:55:8b:0c:67:5b:ca:bf:48:f8: 2c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AD:2D:50:5D:A9:36:05:9F:0F:C3:AF:36:53:73:B6:0D:44:73:C7 X509v3 Authority Key Identifier: keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/_a0tUF2pNgWfD8OvNlNztg1Ec8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.32.0/24 IPv6: 2a10:d780::/32 Signature Algorithm: sha256WithRSAEncryption 18:7f:30:71:20:d6:4e:05:8a:a7:48:8b:91:57:0a:e7:4c:35: de:18:fb:88:d3:f5:37:ac:b2:cf:d8:3e:59:1c:b4:d5:23:92: ce:c0:70:7e:64:35:cb:c8:a5:a5:1c:0a:e6:da:56:ea:60:ff: 3e:4a:19:9c:60:8c:ae:c3:f6:ec:a4:5e:1a:93:25:1b:ae:01: 5f:33:93:19:82:27:31:17:9e:76:fe:57:69:a3:ac:c5:e1:31: 7e:dc:4f:e2:e4:ce:b2:60:eb:d5:cc:5c:94:57:8b:ef:63:10: 4d:94:68:5a:93:66:bc:da:5e:42:58:95:14:86:0e:f6:c9:2c: 6a:39:50:7b:ff:b6:80:e5:70:bd:8b:dc:2b:2b:ef:be:46:11: 96:4c:ff:ed:c0:9b:67:bd:1b:48:af:4e:34:46:71:c1:ec:15: ef:48:fc:cc:9f:a0:fe:23:67:fc:1b:ca:88:c1:fa:15:d2:24: 67:92:f8:07:b0:60:ef:c4:85:dc:09:52:1b:1d:8c:54:9b:0a: d6:62:e7:1a:85:b8:f1:d1:d4:c8:3f:44:21:b2:8b:94:6c:83: 0a:38:42:7d:f8:41:bb:97:b5:3d:3f:5c:e6:06:d7:3b:2e:3d: 97:0e:ed:ee:9f:8a:bc:6a:50:60:b6:11:74:68:b5:fa:23:c4: f3:55:a9:fa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f3OIYOVDoqC44KRs53wsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZWMyOTU0NzZjYTFkOTM0ZGIwNGQwMDI0NGZjNTA3OWI5 Yzk3NDgwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGFkMmQ1MDVkYTkzNjA1OWYwZmMzYWYzNjUzNzNiNjBkNDQ3M2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWzxBxELjj2Snm2oAapZA5X2GwEE vWUvKXZlMfirMu4Hqi+GRDcPFf/pLfjjmD11eq2yKPU8xT02GcPe+e1OS3Ak5OGc vI8oVFQ6L2wle0Y4QUTYI8pQMvsd+E75HghEj+Ivq/Wmdnn0511E12h9oHdtd4/R Csh2CJbDTuWKGUK1tf+4hTHU6DMOKBZJk5X+L911oKz9mz8TPFCfpz8Ip6n4LJYb 0jVKwOjdTF/hMV7GpdbSZb+gQ5jKpWnvMhKQ4ldcG2SZUqf8RcSZTEUKYq1PyvPV wSybGnnG8IYJnrYbkNm/Db+8jE0LFvHOjY+ktcaF1UFViwxnW8q/SPgs4wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP2tLVBdqTYFnw/DrzZTc7YNRHPHMB8GA1UdIwQY MBaAFJLsKVR2yh2TTbBNACRPxQebnJdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2It M2JhNjkxMzE0NThiLzEvX2EwdFVGMnBOZ1dmRDhPdk5sTnp0ZzFFYzhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81ODM5NGEtOGNmNi00YjExLWJlY2ItM2JhNjkxMzE0NThi LzEva3V3cFZIYktIWk5Oc0UwQUpFX0ZCNXVjbDBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuekgMA0E AgACMAcDBQAqENeAMA0GCSqGSIb3DQEBCwUAA4IBAQAYfzBxINZOBYqnSIuRVwrn TDXeGPuI0/U3rLLP2D5ZHLTVI5LOwHB+ZDXLyKWlHArm2lbqYP8+ShmcYIyuw/bs pF4akyUbrgFfM5MZgicxF552/ldpo6zF4TF+3E/i5M6yYOvVzFyUV4vvYxBNlGha k2a82l5CWJUUhg72ySxqOVB7/7aA5XC9i9wrK+++RhGWTP/twJtnvRtIr040RnHB 7BXvSPzMn6D+I2f8G8qIwfoV0iRnkvgHsGDvxIXcCVIbHYxUmwrWYucahbjx0dTI P0QhsouUbIMKOEJ9+EG7l7U9P1zmBtc7Lj2XDu3un4q8alBgthF0aLX6I8TzVan6 -----END CERTIFICATE-----Generated at Tue Jan 27 03:06:56 2026 by rpki-client