This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/rdAuEK8upk6mx2gdhzDvAiBjkpA.roa File: rdAuEK8upk6mx2gdhzDvAiBjkpA.roa (raw, json) Hash identifier: neSutvd2UdygUv3ATr8lKmwONQiQv6cC5T84e4a3szg= Subject key identifier: AD:D0:2E:10:AF:2E:A6:4E:A6:C7:68:1D:87:30:EF:02:20:63:92:90 Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c Certificate serial: 019B77C760FF505ED4C7D32A5A8B8FDF9129 Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/rdAuEK8upk6mx2gdhzDvAiBjkpA.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203184 IP address blocks: 185.142.150.0/24 maxlen: 24 185.142.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:ff:50:5e:d4:c7:d3:2a:5a:8b:8f:df:91:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=add02e10af2ea64ea6c7681d8730ef0220639290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:db:46:e5:41:0c:fd:18:07:99:8b:c2:46: a5:9c:b2:05:44:ff:81:65:19:3c:c5:be:1c:5e:dc: fe:5b:0b:2a:09:85:7f:b6:a5:04:82:fc:83:65:d5: 78:80:b2:50:95:6d:a5:42:8a:0a:54:8a:8a:91:30: 77:19:69:d4:1d:29:2e:d4:df:a1:d3:d1:66:8a:a2: 7c:ea:6b:df:4b:c5:c1:df:c1:f4:04:1e:78:87:69: 39:39:bd:c2:a4:8b:e7:4f:77:5b:99:d9:51:10:65: b0:86:40:c1:71:98:63:ab:ed:03:13:15:35:09:de: 97:f7:24:a0:10:e1:bc:2f:c4:a0:f5:a8:85:7a:ea: 2a:f5:3d:87:8a:6f:09:dd:6e:22:be:fd:74:ba:4f: 65:93:5f:fa:04:ae:c8:cc:4c:db:bc:a1:a9:4b:56: d5:ea:7e:29:af:ea:38:77:ef:6e:88:06:63:5a:31: ca:45:3e:c7:7b:6b:32:37:61:69:2d:7d:c5:4a:dd: ab:9f:b3:75:1b:f5:ae:5d:40:bb:c7:46:94:2f:61: 12:df:58:e1:c3:f2:14:9e:83:1e:e8:d5:f3:ea:c6: bc:88:77:88:ad:6b:6a:fe:d5:76:ea:65:e0:37:4d: ea:cf:f0:13:03:c3:02:2e:e9:c1:65:b1:8b:f5:e5: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D0:2E:10:AF:2E:A6:4E:A6:C7:68:1D:87:30:EF:02:20:63:92:90 X509v3 Authority Key Identifier: keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/rdAuEK8upk6mx2gdhzDvAiBjkpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.150.0/23 Signature Algorithm: sha256WithRSAEncryption 03:8f:1f:7a:2c:c6:d7:aa:55:2e:90:37:83:6b:a4:8e:ad:bf: b9:36:21:f9:a9:2f:1b:0d:06:67:f0:73:0f:b2:91:46:8f:15: 59:48:b8:4c:60:b2:7a:a8:a5:6b:a0:21:2f:ed:34:0d:e3:b1: 28:61:1c:f4:dc:48:63:97:46:f0:2e:db:b9:87:92:de:0b:b6: db:f4:21:f7:c3:b6:ce:a4:b7:db:8f:57:79:62:76:af:e0:09: ec:41:63:40:79:cf:9b:fb:fb:a1:8b:39:6d:8c:e4:f6:09:c1: fe:39:4b:15:88:bd:84:ef:45:a9:4e:cf:8e:9b:f1:c5:91:66: a2:7f:04:9a:90:63:5e:b9:55:1a:56:17:8a:6c:ce:8d:b5:3b: 0b:0c:b5:96:d0:c3:5c:93:cd:6b:4b:c9:03:ef:d5:33:6f:15: 90:91:57:4a:74:65:ca:72:92:d7:40:18:83:bf:a4:20:bb:8c: c2:aa:5a:72:b3:a8:de:17:cd:75:06:e9:d6:25:29:ce:8e:fc: bd:d8:d3:c5:00:91:2d:74:35:45:44:62:bf:16:0c:11:d7:bb: 65:80:eb:2f:e8:76:d8:16:92:0d:e2:90:5e:7f:e0:08:9c:92: 18:07:84:12:7a:4d:29:70:4d:7a:ca:e3:65:8a:e5:20:09:e6: d3:bf:ec:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2D/UF7Ux9MqWouP35EpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4 ZTdlN2MwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQwMmUxMGFmMmVhNjRlYTZjNzY4MWQ4NzMwZWYwMjIwNjM5MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzjbRuVBDP0YB5mLwkalnLIFRP+B ZRk8xb4cXtz+WwsqCYV/tqUEgvyDZdV4gLJQlW2lQooKVIqKkTB3GWnUHSku1N+h 09FmiqJ86mvfS8XB38H0BB54h2k5Ob3CpIvnT3dbmdlREGWwhkDBcZhjq+0DExU1 Cd6X9ySgEOG8L8Sg9aiFeuoq9T2Him8J3W4ivv10uk9lk1/6BK7IzEzbvKGpS1bV 6n4pr+o4d+9uiAZjWjHKRT7He2syN2FpLX3FSt2rn7N1G/WuXUC7x0aUL2ES31jh w/IUnoMe6NXz6sa8iHeIrWtq/tV26mXgN03qz/ATA8MCLunBZbGL9eVl+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK3QLhCvLqZOpsdoHYcw7wIgY5KQMB8GA1UdIwQY MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt YWU0ZTY5ODY2NGYxLzEvcmRBdUVLOHVwazZteDJnZGh6RHZBaUJqa3BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuY6WMA0G CSqGSIb3DQEBCwUAA4IBAQADjx96LMbXqlUukDeDa6SOrb+5NiH5qS8bDQZn8HMP spFGjxVZSLhMYLJ6qKVroCEv7TQN47EoYRz03Ehjl0bwLtu5h5LeC7bb9CH3w7bO pLfbj1d5Ynav4AnsQWNAec+b+/uhizltjOT2CcH+OUsViL2E70WpTs+Om/HFkWai fwSakGNeuVUaVheKbM6NtTsLDLWW0MNck81rS8kD79UzbxWQkVdKdGXKcpLXQBiD v6Qgu4zCqlpys6jeF811BunWJSnOjvy92NPFAJEtdDVFRGK/FgwR17tlgOsv6HbY FpIN4pBef+AInJIYB4QSek0pcE16yuNliuUgCebTv+wz -----END CERTIFICATE-----Generated at Tue Jan 20 14:51:16 2026 by rpki-client