This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/g873udppqiGZfDfxEVPwS0fN2iE.roa File: g873udppqiGZfDfxEVPwS0fN2iE.roa (raw, json) Hash identifier: vGYcXaCIiPom9FCy5Ogp8Jq2cO/kNZJXFstzgmVZSYM= Subject key identifier: 83:CE:F7:B9:DA:69:AA:21:99:7C:37:F1:11:53:F0:4B:47:CD:DA:21 Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786 Certificate serial: 019B7E37861E1AD11F4D43599EAADEE05CD8 Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/g873udppqiGZfDfxEVPwS0fN2iE.roa Signing time: Fri 02 Jan 2026 10:18:46 +0000 ROA not before: Fri 02 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 185.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:86:1e:1a:d1:1f:4d:43:59:9e:aa:de:e0:5c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786 Validity Not Before: Jan 2 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83cef7b9da69aa21997c37f11153f04b47cdda21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:c9:85:cd:31:77:b4:c7:b1:0d:1e:df:c2: 73:0e:58:58:42:e8:2d:ab:4e:ac:17:de:55:97:c8: 87:55:e0:00:ed:aa:34:26:78:39:52:f3:ec:bc:aa: 95:68:4e:f8:0e:62:82:67:58:7f:58:56:84:41:b2: a6:8b:9e:53:26:58:00:50:d1:c5:41:a0:bc:4f:e8: 32:d0:87:36:b5:3b:55:60:19:ab:9f:28:ea:1b:d9: cc:c2:16:d8:af:65:43:f8:93:18:24:5e:cd:34:9a: 5e:a3:52:4d:a5:c3:bf:8b:6b:c1:fd:e9:49:29:c1: 0d:f0:06:89:f1:37:90:7c:51:c0:4b:78:70:f2:84: 2f:43:d5:0e:72:12:8a:82:c9:33:ff:5d:7b:83:7a: 8a:eb:22:d2:7f:99:d3:12:24:9b:74:3d:de:8c:e3: ab:e1:61:22:9a:51:0d:14:97:f6:2c:26:8d:db:cd: 96:5e:a6:1f:ff:f9:a1:88:d0:47:f6:4d:28:8d:4c: 9c:d3:79:51:f7:5b:a5:a3:0b:67:33:ec:92:3f:97: c1:1c:d3:4b:01:90:f8:3d:af:68:2b:0b:f3:0f:05: 9f:d9:2a:43:86:08:36:c0:53:13:70:94:c1:12:74: f4:10:87:90:9f:43:00:0b:d8:4a:b5:f0:e4:c7:49: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CE:F7:B9:DA:69:AA:21:99:7C:37:F1:11:53:F0:4B:47:CD:DA:21 X509v3 Authority Key Identifier: keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/g873udppqiGZfDfxEVPwS0fN2iE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.148.0/24 Signature Algorithm: sha256WithRSAEncryption c9:41:c6:d1:b2:c3:e3:5a:26:dc:81:bd:33:56:fb:e3:5e:4c: ec:3d:7f:91:65:b4:e2:bd:8a:a4:70:ee:cf:f4:b6:99:e4:18: 89:d6:4f:7c:67:b4:6c:ad:87:1f:9a:c7:c8:b0:0c:c5:83:4a: cf:08:3e:79:03:85:a1:80:3e:ff:52:b6:f8:f4:b6:df:b5:1b: 97:45:a1:cf:9c:6c:1b:97:f4:a2:c0:bd:a6:af:de:1b:35:c9: 97:39:db:db:8c:de:3a:bc:50:dc:a7:9c:97:16:5b:7a:22:90: 76:f9:15:66:74:1e:90:d7:81:63:87:70:bd:b7:d0:7a:bc:7f: f0:4d:9c:b4:bb:22:97:2c:53:e7:6d:3e:d3:ee:86:32:e1:5f: f6:39:a2:de:ce:2a:ee:78:6e:6f:28:19:1f:19:49:cb:c8:c1: a9:a3:b4:82:da:c2:4a:db:94:e3:55:c4:8e:07:fb:3c:ef:ba: a0:32:96:b7:ff:b8:d8:99:88:eb:a5:9d:53:28:d7:f6:e4:81: f9:30:44:e1:19:b5:13:90:7a:ce:d5:7a:5a:6c:ec:67:c6:75: 2a:45:ee:db:b3:35:d6:a6:9f:a8:9a:fb:0b:e2:59:9d:78:06: 99:b9:6c:89:eb:c4:15:4b:4e:4e:33:5f:74:4b:0d:a6:1f:11: 0f:b6:08:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N4YeGtEfTUNZnqre4FzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi ZWQ3ODYwHhcNMjYwMTAyMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2NlZjdiOWRhNjlhYTIxOTk3YzM3ZjExMTUzZjA0YjQ3Y2RkYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mfJhc0xd7THsQ0e38JzDlhYQugt q06sF95Vl8iHVeAA7ao0Jng5UvPsvKqVaE74DmKCZ1h/WFaEQbKmi55TJlgAUNHF QaC8T+gy0Ic2tTtVYBmrnyjqG9nMwhbYr2VD+JMYJF7NNJpeo1JNpcO/i2vB/elJ KcEN8AaJ8TeQfFHAS3hw8oQvQ9UOchKKgskz/117g3qK6yLSf5nTEiSbdD3ejOOr 4WEimlENFJf2LCaN282WXqYf//mhiNBH9k0ojUyc03lR91ulowtnM+ySP5fBHNNL AZD4Pa9oKwvzDwWf2SpDhgg2wFMTcJTBEnT0EIeQn0MAC9hKtfDkx0k3vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIPO97naaaohmXw38RFT8EtHzdohMB8GA1UdIwQY MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt NjdiYTdhMjE1NjMwLzEvZzg3M3VkcHBxaUdaZkRmeEVWUHdTMGZOMmlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYSUMA0G CSqGSIb3DQEBCwUAA4IBAQDJQcbRssPjWibcgb0zVvvjXkzsPX+RZbTivYqkcO7P 9LaZ5BiJ1k98Z7RsrYcfmsfIsAzFg0rPCD55A4WhgD7/Urb49LbftRuXRaHPnGwb l/SiwL2mr94bNcmXOdvbjN46vFDcp5yXFlt6IpB2+RVmdB6Q14Fjh3C9t9B6vH/w TZy0uyKXLFPnbT7T7oYy4V/2OaLezirueG5vKBkfGUnLyMGpo7SC2sJK25TjVcSO B/s877qgMpa3/7jYmYjrpZ1TKNf25IH5METhGbUTkHrO1XpabOxnxnUqRe7bszXW pp+omvsL4lmdeAaZuWyJ68QVS05OM190Sw2mHxEPtgjw -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:03 2026 by rpki-client