This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/04oBM0dgh9sTGQDONT8zC1ZUeKs.roa File: 04oBM0dgh9sTGQDONT8zC1ZUeKs.roa (raw, json) Hash identifier: a198E2vy3vvQXfsujf/D2u3s7AvcBTuZCtT805HyC1c= Subject key identifier: D3:8A:01:33:47:60:87:DB:13:19:00:CE:35:3F:33:0B:56:54:78:AB Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0 Certificate serial: 019B7B36D48227BE490A9F8EB8A7C66DFE08 Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/04oBM0dgh9sTGQDONT8zC1ZUeKs.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 185.156.184.0/24 maxlen: 24 185.156.185.0/24 maxlen: 24 185.156.186.0/24 maxlen: 24 185.156.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d4:82:27:be:49:0a:9f:8e:b8:a7:c6:6d:fe:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0 Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d38a0133476087db131900ce353f330b565478ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9f:57:28:dd:54:f4:fc:a2:d5:c2:0b:18:71: dc:67:52:05:61:69:2f:24:c6:e6:24:e2:98:ae:c6: 9c:4e:bc:f4:d0:2f:fb:d3:ce:24:a2:e3:89:a2:bf: 98:19:c5:55:67:a2:74:51:f0:be:f0:f6:5b:a7:4a: 38:68:c3:1d:bf:18:73:0a:2d:ba:59:e5:27:f2:8b: ca:85:f5:0d:31:c7:30:d4:e3:08:4a:42:45:29:8b: 88:49:11:89:bf:3e:77:04:7d:a6:74:92:b7:f7:51: cd:86:21:86:d5:d8:19:52:ec:05:c0:0a:6c:74:fe: 25:78:ac:0c:ee:25:87:c4:8e:51:bd:23:12:cc:e9: c7:1b:5e:f8:bb:6d:00:06:8d:bc:e6:73:85:cb:ea: c9:c5:d6:a2:25:a6:fd:56:9b:c7:d5:e0:df:4f:a4: fa:93:57:f4:e0:e7:10:a9:d5:00:92:ae:44:2d:d5: 56:4d:b5:ae:3e:ee:38:3e:16:28:64:69:83:cc:42: 49:f0:64:f7:3c:e2:d9:29:9b:c0:a8:d3:ea:07:b7: 18:f0:36:eb:d5:89:f3:3c:36:81:4a:ff:eb:a4:40: 1e:ab:16:58:6a:74:41:3d:ae:b9:e4:17:b9:de:a4: f4:de:81:13:0e:e6:d7:b5:8d:9e:33:1f:44:59:31: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:01:33:47:60:87:DB:13:19:00:CE:35:3F:33:0B:56:54:78:AB X509v3 Authority Key Identifier: keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/04oBM0dgh9sTGQDONT8zC1ZUeKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.184.0/22 Signature Algorithm: sha256WithRSAEncryption 77:de:5c:d8:3c:c5:06:14:cc:9f:9c:1d:60:12:c3:41:ac:c5: c6:64:84:ec:52:58:41:37:e5:a4:c2:ef:9c:ee:ca:29:56:52: f3:dd:80:19:29:94:58:6e:8e:02:3e:75:b0:b2:13:f7:f7:a0: 64:e4:27:65:09:da:89:24:aa:a2:b9:64:7a:a3:2c:aa:8a:69: b9:87:2a:65:7c:0b:60:69:a6:f3:0c:3a:a9:90:b1:53:3d:35: 5c:9d:dd:51:ac:6b:63:4e:de:ae:d3:80:a9:10:dd:6e:ae:9d: 9e:1b:eb:5a:fc:5b:0c:d0:9b:b9:17:d6:24:db:c4:db:05:be: a3:f1:12:61:5c:07:a8:8f:31:4d:51:7c:c6:e1:1c:93:fc:3a: 70:9a:a5:7e:85:21:82:2b:bb:48:1d:69:cc:e3:de:71:8a:eb: e8:7b:1a:3b:6f:6b:72:f8:9c:5b:94:f8:d9:64:22:f3:7b:bb: ee:a6:6c:cd:67:c2:6c:93:65:3b:ce:71:5d:36:37:41:2e:31: 65:4a:81:63:15:67:2a:5d:fb:34:9a:a6:70:87:cc:77:b1:41: 3b:3d:ba:a1:a3:75:5c:0f:ed:ba:4c:7f:43:82:ff:07:a1:82: 0c:27:b0:23:cb:ac:e1:ae:1a:b3:d7:d1:81:09:42:03:d1:38: a1:31:b9:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtSCJ75JCp+OuKfGbf4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx ZGQ2ZTAwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzhhMDEzMzQ3NjA4N2RiMTMxOTAwY2UzNTNmMzMwYjU2NTQ3OGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z9XKN1U9Pyi1cILGHHcZ1IFYWkv JMbmJOKYrsacTrz00C/7084kouOJor+YGcVVZ6J0UfC+8PZbp0o4aMMdvxhzCi26 WeUn8ovKhfUNMccw1OMISkJFKYuISRGJvz53BH2mdJK391HNhiGG1dgZUuwFwAps dP4leKwM7iWHxI5RvSMSzOnHG174u20ABo285nOFy+rJxdaiJab9VpvH1eDfT6T6 k1f04OcQqdUAkq5ELdVWTbWuPu44PhYoZGmDzEJJ8GT3POLZKZvAqNPqB7cY8Dbr 1YnzPDaBSv/rpEAeqxZYanRBPa655Be53qT03oETDubXtY2eMx9EWTGB0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNOKATNHYIfbExkAzjU/MwtWVHirMB8GA1UdIwQY MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt ZDdjNjcwODQxNGZhLzEvMDRvQk0wZGdoOXNUR1FET05UOHpDMVpVZUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G CSqGSIb3DQEBCwUAA4IBAQB33lzYPMUGFMyfnB1gEsNBrMXGZITsUlhBN+Wkwu+c 7sopVlLz3YAZKZRYbo4CPnWwshP396Bk5CdlCdqJJKqiuWR6oyyqimm5hyplfAtg aabzDDqpkLFTPTVcnd1RrGtjTt6u04CpEN1urp2eG+ta/FsM0Ju5F9Yk28TbBb6j 8RJhXAeojzFNUXzG4RyT/DpwmqV+hSGCK7tIHWnM495xiuvoexo7b2ty+JxblPjZ ZCLze7vupmzNZ8Jsk2U7znFdNjdBLjFlSoFjFWcqXfs0mqZwh8x3sUE7Pbqho3Vc D+26TH9Dgv8HoYIMJ7Ajy6zhrhqz19GBCUID0TihMbnU -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:04 2026 by rpki-client