This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/47fmLu8UcYsmHdmBdck_ql59f5M.roa File: 47fmLu8UcYsmHdmBdck_ql59f5M.roa (raw, json) Hash identifier: ZblBR2/w1rIwhbzwuKN2kKmflX9a5wlTCaHuPYPzgd8= Subject key identifier: E3:B7:E6:2E:EF:14:71:8B:26:1D:D9:81:75:C9:3F:AA:5E:7D:7F:93 Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb Certificate serial: 019B7834AEE302F7080E8B86D843E70A4589 Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/47fmLu8UcYsmHdmBdck_ql59f5M.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47242 IP address blocks: 185.73.136.0/24 maxlen: 24 185.73.137.0/24 maxlen: 24 185.73.138.0/24 maxlen: 24 185.73.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ae:e3:02:f7:08:0e:8b:86:d8:43:e7:0a:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3b7e62eef14718b261dd98175c93faa5e7d7f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fe:c1:f8:b9:07:d8:f2:5a:df:86:86:58:7f: da:0b:56:4d:38:c1:44:b5:63:02:5e:88:7a:4d:55: b9:c6:ac:f2:39:36:fe:a4:bc:9f:a8:c6:77:8e:d9: 92:3e:15:96:bf:10:e2:43:9c:f0:3a:6d:70:cf:c9: 63:ca:8c:0f:b4:c1:3f:80:8c:cd:98:64:f3:d0:b4: e8:b6:03:2c:ac:39:5e:07:31:0d:d7:89:da:de:2a: ab:1e:bf:48:c8:5c:b6:48:4e:9a:22:3f:2c:a9:5a: f2:14:08:0a:b3:9e:82:06:77:14:41:fa:50:5e:a5: 5c:ae:8f:1f:d1:a1:c1:a4:c8:18:01:20:19:ab:2b: 37:ae:fa:9f:d9:c0:6d:20:7b:00:42:f8:3e:e8:04: d5:fe:69:67:d5:e5:45:24:99:e8:44:5f:82:3c:7d: 56:96:3c:3d:45:0d:fb:c2:35:7c:fd:2c:53:55:1b: 2f:a6:fe:7c:99:83:7e:8a:52:bf:25:fc:2f:51:b2: 34:f2:fb:65:0d:39:38:4b:c7:ae:b5:0d:05:e4:3f: 0f:a8:9b:46:94:5f:24:e5:d1:b0:06:db:30:ca:b1: 0e:76:c7:92:59:83:82:6e:16:54:bf:3a:d1:d4:ef: a0:fe:b9:73:53:2b:44:e0:51:8a:b3:9c:4d:60:d0: 23:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B7:E6:2E:EF:14:71:8B:26:1D:D9:81:75:C9:3F:AA:5E:7D:7F:93 X509v3 Authority Key Identifier: keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/47fmLu8UcYsmHdmBdck_ql59f5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.136.0/22 Signature Algorithm: sha256WithRSAEncryption 25:33:49:90:b0:bc:0a:dc:a9:84:22:71:e7:0f:99:f4:83:ab: 49:23:72:70:fd:45:3f:3d:3b:c3:51:5a:4f:f1:23:f7:df:fc: aa:d5:5f:49:1f:94:2f:02:1f:b7:2b:7c:0d:ba:82:7d:2d:cc: 6e:f9:5b:ef:b0:8e:d0:cf:e3:a9:a1:08:8b:3b:96:33:a4:46: ae:91:62:e1:95:d6:a8:76:e6:ac:df:95:d6:37:fa:40:e1:fa: 0e:ec:00:de:bf:1d:3b:e9:ab:28:09:a5:9f:9d:82:2b:bf:a0: f2:2e:00:7a:62:40:c2:ff:ce:fb:f5:60:37:b9:e2:e4:10:45: df:49:9e:52:e3:40:23:d5:c0:bd:93:27:d7:30:fd:ae:e0:73: f8:c3:8d:80:b0:04:5e:df:77:f5:96:ac:13:04:24:ae:8c:b4: cf:ee:d9:a9:ee:f0:9e:f5:1b:55:45:9f:10:cb:82:56:3e:3b: 34:dc:90:cf:27:45:50:2d:e9:8d:4e:1c:35:8a:de:57:5f:f4: f5:f2:42:61:43:98:43:1f:f6:64:5a:58:19:5f:42:4b:6a:9a: b6:b7:2a:c5:66:28:50:27:a8:30:a3:33:58:b1:e0:e5:e5:36: d9:e8:1f:dd:34:0e:1d:b1:3d:79:86:08:73:a3:f0:23:cf:d7: 27:18:87:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NK7jAvcIDouG2EPnCkWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZWQ2MjA1NWE1MTkxYzAyZWM1MTEyZTk1MTgxYTg5YWMw NjBjZWIwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2I3ZTYyZWVmMTQ3MThiMjYxZGQ5ODE3NWM5M2ZhYTVlN2Q3ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP7B+LkH2PJa34aGWH/aC1ZNOMFE tWMCXoh6TVW5xqzyOTb+pLyfqMZ3jtmSPhWWvxDiQ5zwOm1wz8ljyowPtME/gIzN mGTz0LTotgMsrDleBzEN14na3iqrHr9IyFy2SE6aIj8sqVryFAgKs56CBncUQfpQ XqVcro8f0aHBpMgYASAZqys3rvqf2cBtIHsAQvg+6ATV/mln1eVFJJnoRF+CPH1W ljw9RQ37wjV8/SxTVRsvpv58mYN+ilK/JfwvUbI08vtlDTk4S8eutQ0F5D8PqJtG lF8k5dGwBtswyrEOdseSWYOCbhZUvzrR1O+g/rlzUytE4FGKs5xNYNAjZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOO35i7vFHGLJh3ZgXXJP6pefX+TMB8GA1UdIwQY MBaAFLbtYgVaUZHALsURLpUYGomsBgzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjkt YzgxMjY2YjdjNDllLzEvNDdmbUx1OFVjWXNtSGRtQmRja19xbDU5ZjVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjktYzgxMjY2YjdjNDll LzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUmIMA0G CSqGSIb3DQEBCwUAA4IBAQAlM0mQsLwK3KmEInHnD5n0g6tJI3Jw/UU/PTvDUVpP 8SP33/yq1V9JH5QvAh+3K3wNuoJ9Lcxu+VvvsI7Qz+OpoQiLO5YzpEaukWLhldao duas35XWN/pA4foO7ADevx076asoCaWfnYIrv6DyLgB6YkDC/8779WA3ueLkEEXf SZ5S40Aj1cC9kyfXMP2u4HP4w42AsARe33f1lqwTBCSujLTP7tmp7vCe9RtVRZ8Q y4JWPjs03JDPJ0VQLemNThw1it5XX/T18kJhQ5hDH/ZkWlgZX0JLapq2tyrFZihQ J6gwozNYseDl5TbZ6B/dNA4dsT15hghzo/Ajz9cnGIdQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:31 2026 by rpki-client