This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa File: pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa (raw, json) Hash identifier: 7lKx77Hc9KgFYGzg2QAOvKEB3C9Rd04K7P5Wr+labxk= Subject key identifier: A4:EE:23:0D:DC:E4:0A:93:20:27:C0:2A:88:EB:2C:1F:67:99:0B:51 Certificate issuer: /CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e Certificate serial: 019B79101FB4D30CB0665DA7EBF7BE5C4279 Authority key identifier: 76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59651 IP address blocks: 185.68.152.0/22 maxlen: 22 185.94.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.mft rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1f:b4:d3:0c:b0:66:5d:a7:eb:f7:be:5c:42:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7672c0fe08371764058c6ab85dfb5dcdc109f77e Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4ee230ddce40a932027c02a88eb2c1f67990b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:47:72:42:bd:a3:25:ad:6c:38:69:04:d8: 66:f5:d7:54:2c:a3:e2:d8:3f:cc:d2:a5:cb:52:71: bb:ea:98:86:6f:c2:0f:01:d0:cf:8a:ac:5a:b5:fe: 76:10:2d:a1:85:5b:d4:fd:77:4f:5e:0d:da:90:0d: a1:41:97:0d:5d:ef:7e:5a:c5:0f:1c:f3:38:b1:bb: b5:a0:20:ec:a1:d5:f3:da:0f:1a:10:6c:07:38:bd: 92:34:04:b6:92:27:92:64:c0:37:15:fa:69:cf:5f: 23:98:90:f0:7c:ba:ea:82:c1:1f:08:3c:bf:52:a4: c3:aa:94:f7:ff:8d:1d:b8:26:0f:48:a8:8a:7c:6f: 86:09:66:7a:83:e8:d8:19:e4:f0:79:51:83:a9:5d: 77:2e:91:34:51:27:08:c1:3f:27:4c:84:16:ad:78: c5:3a:e0:89:37:dd:da:95:a2:48:20:f0:c1:05:d9: b0:24:fa:d4:01:3b:1e:5c:63:62:d9:d9:9c:ba:0f: b0:53:43:d0:ae:d4:59:0f:29:83:0d:db:37:f3:72: 84:23:78:5e:d3:19:b0:be:33:db:07:cb:5f:dc:32: 61:e0:8a:da:0d:87:1c:f9:60:a2:ea:4f:ca:1d:f0: 65:0f:c6:33:76:37:f1:2f:52:77:e9:1e:49:82:15: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EE:23:0D:DC:E4:0A:93:20:27:C0:2A:88:EB:2C:1F:67:99:0B:51 X509v3 Authority Key Identifier: keyid:76:72:C0:FE:08:37:17:64:05:8C:6A:B8:5D:FB:5D:CD:C1:09:F7:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnLA_gg3F2QFjGq4XftdzcEJ934.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/pO4jDdzkCpMgJ8AqiOssH2eZC1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9f2f6-191d-4f0f-a3c4-c3c80e4704e4/1/dnLA_gg3F2QFjGq4XftdzcEJ934.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.152.0/22 185.94.32.0/22 Signature Algorithm: sha256WithRSAEncryption 86:c2:8a:60:f0:18:c4:4b:e0:99:cf:5f:15:5a:77:46:37:2a: f4:1f:52:2a:97:63:8f:c9:ce:93:50:52:ad:f7:6d:eb:3e:4e: fb:b1:b0:49:3c:59:2c:95:4c:bf:42:52:bf:64:04:0d:7c:1f: ae:e8:e8:ab:bf:e8:2b:89:d6:9e:8d:1c:f1:16:71:07:31:cb: 54:e0:0f:e0:6b:e9:1d:36:85:d9:3c:5c:4a:72:8a:59:5d:f6: b7:ee:91:a6:97:80:8f:76:78:5d:82:41:44:18:d0:6d:77:70: ce:e7:ac:b9:1b:b9:ac:0e:cc:82:02:f0:8d:b0:7d:ef:ea:ae: 43:64:fc:71:f9:b3:e1:31:84:e0:7e:fe:c0:ed:11:14:ba:37: 44:be:25:e4:36:3a:d0:b8:d9:a7:a2:a1:1b:48:71:b8:75:ad: f9:82:a1:f2:72:3b:b8:78:df:b0:24:3a:28:74:7a:3c:75:bb: e5:a9:4a:ff:1e:db:80:1c:b3:91:65:6a:2a:a6:8f:39:92:15: ad:79:d0:96:5c:50:94:6e:ab:cc:1a:a5:b7:30:97:69:98:76: 20:6c:f6:d5:09:06:07:5c:c8:2f:f3:a4:7c:21:1e:04:ac:56: 91:8f:fe:8f:d8:40:43:25:5b:ea:7f:d4:dc:f8:21:f6:89:96: aa:8f:65:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EB+00wywZl2n6/e+XEJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NzJjMGZlMDgzNzE3NjQwNThjNmFiODVkZmI1ZGNkYzEw OWY3N2UwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGVlMjMwZGRjZTQwYTkzMjAyN2MwMmE4OGViMmMxZjY3OTkwYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtBHckK9oyWtbDhpBNhm9ddULKPi 2D/M0qXLUnG76piGb8IPAdDPiqxatf52EC2hhVvU/XdPXg3akA2hQZcNXe9+WsUP HPM4sbu1oCDsodXz2g8aEGwHOL2SNAS2kieSZMA3Ffppz18jmJDwfLrqgsEfCDy/ UqTDqpT3/40duCYPSKiKfG+GCWZ6g+jYGeTweVGDqV13LpE0UScIwT8nTIQWrXjF OuCJN93alaJIIPDBBdmwJPrUATseXGNi2dmcug+wU0PQrtRZDymDDds383KEI3he 0xmwvjPbB8tf3DJh4IraDYcc+WCi6k/KHfBlD8YzdjfxL1J36R5JghWRlwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKTuIw3c5AqTICfAKojrLB9nmQtRMB8GA1UdIwQY MBaAFHZywP4INxdkBYxquF37Xc3BCfd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQt YzNjODBlNDcwNGU0LzEvcE80akRkemtDcE1nSjhBcWlPc3NIMmVaQzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOWYyZjYtMTkxZC00ZjBmLWEzYzQtYzNjODBlNDcwNGU0 LzEvZG5MQV9nZzNGMlFGakdxNFhmdGR6Y0VKOTM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuUSYAwQC uV4gMA0GCSqGSIb3DQEBCwUAA4IBAQCGwopg8BjES+CZz18VWndGNyr0H1Iql2OP yc6TUFKt923rPk77sbBJPFkslUy/QlK/ZAQNfB+u6Oirv+gridaejRzxFnEHMctU 4A/ga+kdNoXZPFxKcopZXfa37pGml4CPdnhdgkFEGNBtd3DO56y5G7msDsyCAvCN sH3v6q5DZPxx+bPhMYTgfv7A7REUujdEviXkNjrQuNmnoqEbSHG4da35gqHycju4 eN+wJDoodHo8dbvlqUr/HtuAHLORZWoqpo85khWtedCWXFCUbqvMGqW3MJdpmHYg bPbVCQYHXMgv86R8IR4ErFaRj/6P2EBDJVvqf9Tc+CH2iZaqj2XD -----END CERTIFICATE-----Generated at Tue Jan 20 00:42:15 2026 by rpki-client