This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/73qIjcwhVoNUSh6y8S9vmR-78LI.roa File: 73qIjcwhVoNUSh6y8S9vmR-78LI.roa (raw, json) Hash identifier: W2dcEwkCBgOixH5r0yINyyX7ud/0OMWWSsCwZ1EhRwo= Subject key identifier: EF:7A:88:8D:CC:21:56:83:54:4A:1E:B2:F1:2F:6F:99:1F:BB:F0:B2 Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b Certificate serial: 019B797F4A452A5B459A613809CDCDBF5AB0 Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/73qIjcwhVoNUSh6y8S9vmR-78LI.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204572 IP address blocks: 185.246.144.0/22 maxlen: 22 2a0d:8580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4a:45:2a:5b:45:9a:61:38:09:cd:cd:bf:5a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef7a888dcc215683544a1eb2f12f6f991fbbf0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:2a:ec:77:8d:f1:0f:b6:e4:d3:3d:ff:f3: 34:ea:cd:ae:a1:d2:96:8c:2c:88:4c:5e:3d:4f:0d: f0:5f:e9:f8:e2:0b:81:3d:ae:4b:44:de:a0:72:0b: 03:9c:60:85:db:bc:96:aa:b5:83:b8:d8:40:0d:46: 63:ac:57:eb:c5:ef:76:dd:32:99:b5:7b:b5:aa:94: 03:d8:c0:36:5c:59:2f:ca:01:f0:d6:e9:ae:56:43: 32:cd:05:84:eb:9c:d7:23:d4:31:53:04:f3:f6:bf: 2b:66:5e:c6:fe:38:d4:c4:41:4b:ec:87:6c:64:3b: be:5e:cb:69:84:33:d2:59:48:79:3a:e2:0b:a2:df: e6:2b:d9:b0:d8:d4:d2:3e:c1:55:8b:3b:31:4e:96: e9:17:fd:6e:6a:36:02:f5:76:f0:a8:a6:65:2c:1a: 02:97:ad:5e:c6:6e:ec:16:0a:38:8b:89:38:05:85: 93:9a:7e:f2:2f:15:8e:c0:f3:96:f4:5f:f4:ac:4c: 14:47:28:39:75:f2:42:c4:4c:60:d4:86:a0:76:9e: 5d:8c:ac:e1:e8:4e:4e:d2:6e:bf:23:88:57:e9:35: 0b:6a:70:56:66:1f:aa:ca:75:4a:29:68:57:0a:1a: c4:f3:97:71:29:ed:19:30:4b:df:43:f2:cc:2a:a3: 63:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7A:88:8D:CC:21:56:83:54:4A:1E:B2:F1:2F:6F:99:1F:BB:F0:B2 X509v3 Authority Key Identifier: keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/73qIjcwhVoNUSh6y8S9vmR-78LI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.144.0/22 IPv6: 2a0d:8580::/32 Signature Algorithm: sha256WithRSAEncryption 9a:61:d0:9a:25:d3:23:74:80:b3:c7:e4:1c:58:3d:36:d9:bf: 9c:88:cd:f8:78:51:bd:63:34:e1:87:43:ee:20:97:5a:9a:56: 09:96:a2:76:0f:07:17:03:01:71:d3:5f:34:e3:ea:f5:a8:68: 82:69:c7:0d:aa:43:94:67:2c:90:35:d6:46:1b:61:2b:cf:13: 53:f4:59:27:52:cf:95:db:db:ad:65:9c:59:a8:64:ad:2b:7e: 1b:f7:f7:f7:28:1d:92:08:55:35:db:a3:3b:ba:49:95:3f:c1: 1c:37:00:5f:5a:bb:11:9f:23:4e:26:e0:23:66:5a:17:81:44: 70:75:72:a5:51:14:8d:8e:b8:27:6d:9e:55:80:a0:8c:c7:fd: 47:b3:16:3d:7b:36:30:03:83:f6:d8:b8:cb:c5:c9:95:d2:c2: eb:32:4d:95:fa:c6:f6:e8:e3:b0:bd:61:41:6f:57:f1:87:e5: ec:bf:2c:f8:1c:5d:07:8c:0b:e1:90:d8:dc:6e:de:36:06:63: 91:d9:3c:cb:d8:09:81:2e:fc:f8:6b:ed:6e:c7:18:0a:24:24: b2:c0:75:6e:6c:b3:e4:04:50:33:bd:ab:d3:e9:1e:a1:4f:94: de:95:1a:05:83:7d:f0:a7:9d:98:11:0b:13:ef:d1:9c:5d:fa: 7f:d2:81:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5f0pFKltFmmE4Cc3Nv1qwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGRkODgyODUyY2M0NTg2YjFmZWUzNGMwNTAxZDVkYjdk NjBmMGIwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjdhODg4ZGNjMjE1NjgzNTQ0YTFlYjJmMTJmNmY5OTFmYmJmMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxoq7HeN8Q+25NM9//M06s2uodKW jCyITF49Tw3wX+n44guBPa5LRN6gcgsDnGCF27yWqrWDuNhADUZjrFfrxe923TKZ tXu1qpQD2MA2XFkvygHw1umuVkMyzQWE65zXI9QxUwTz9r8rZl7G/jjUxEFL7Ids ZDu+XstphDPSWUh5OuILot/mK9mw2NTSPsFVizsxTpbpF/1uajYC9XbwqKZlLBoC l61exm7sFgo4i4k4BYWTmn7yLxWOwPOW9F/0rEwURyg5dfJCxExg1Iagdp5djKzh 6E5O0m6/I4hX6TULanBWZh+qynVKKWhXChrE85dxKe0ZMEvfQ/LMKqNjBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO96iI3MIVaDVEoesvEvb5kfu/CyMB8GA1UdIwQY MBaAFMVN2IKFLMRYax/uNMBQHV231g8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWIt NmZiZTI5MzE3MWZlLzEvNzNxSWpjd2hWb05VU2g2eThTOXZtUi03OExJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82NDg3OWItNmM2OC00NTk3LTlmYWItNmZiZTI5MzE3MWZl LzEveFUzWWdvVXN4RmhySC00MHdGQWRYYmZXRHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufaQMA0E AgACMAcDBQAqDYWAMA0GCSqGSIb3DQEBCwUAA4IBAQCaYdCaJdMjdICzx+QcWD02 2b+ciM34eFG9YzThh0PuIJdamlYJlqJ2DwcXAwFx01804+r1qGiCaccNqkOUZyyQ NdZGG2ErzxNT9FknUs+V29utZZxZqGStK34b9/f3KB2SCFU126M7ukmVP8EcNwBf WrsRnyNOJuAjZloXgURwdXKlURSNjrgnbZ5VgKCMx/1HsxY9ezYwA4P22LjLxcmV 0sLrMk2V+sb26OOwvWFBb1fxh+Xsvyz4HF0HjAvhkNjcbt42BmOR2TzL2AmBLvz4 a+1uxxgKJCSywHVubLPkBFAzvavT6R6hT5TelRoFg33wp52YEQsT79GcXfp/0oGs -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:27 2026 by rpki-client