This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa File: ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa (raw, json) Hash identifier: rCIjDYZ1f6UcDcYU9LBZzWo2gwww940GJ0hMkyxCy88= Subject key identifier: AE:E4:7C:7F:D0:26:B5:0B:E1:D1:10:64:60:5E:C5:3C:C4:EF:E8:39 Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c Certificate serial: 019B77C760CF365B194D388ADCF315C05BF6 Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa Signing time: Thu 01 Jan 2026 04:18:33 +0000 ROA not before: Thu 01 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35280 IP address blocks: 185.142.148.0/23 maxlen: 23 185.142.148.0/24 maxlen: 24 185.142.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:60:cf:36:5b:19:4d:38:8a:dc:f3:15:c0:5b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c Validity Not Before: Jan 1 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aee47c7fd026b50be1d11064605ec53cc4efe839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:73:03:43:f4:9c:59:0d:be:02:e1:e0:68:23: 14:b0:44:69:22:6b:41:28:cd:aa:60:d0:bd:86:0c: 79:b5:1f:89:3b:87:63:d0:00:1d:c8:7e:32:b0:59: 4f:d8:34:67:bd:73:31:dd:5c:31:66:83:ec:96:ab: 6f:1f:d9:bf:01:2e:1d:da:21:6a:41:6f:da:b0:18: e0:13:78:a8:03:04:2f:98:be:03:ee:ee:f5:e6:1b: 5c:77:04:66:de:b0:df:fd:11:60:93:91:98:8f:de: 83:c4:a5:75:47:7b:a9:16:34:31:65:76:f4:43:36: 88:53:21:37:7b:3d:cc:18:7f:c0:ed:35:6d:22:70: ee:aa:a9:6f:22:f7:ef:94:25:b9:5c:fe:6c:3e:7c: 37:89:ac:d4:cb:07:3d:72:3f:37:5b:e7:9e:66:0a: 4f:3b:76:af:bd:e7:79:36:d0:1d:ec:9e:60:7d:41: 63:e5:05:e4:ac:fe:2f:b1:73:41:e0:0c:67:54:b8: 3a:b9:ec:37:3d:43:30:81:ff:75:87:b5:a1:1c:ec: d3:74:08:2c:27:3e:91:5b:75:f3:ec:92:fa:f7:73: 7f:ba:8b:c7:2f:8b:c4:85:e8:4e:44:f3:9a:77:88: fb:8f:e0:f2:d8:b3:f0:76:8d:c3:fe:c6:ed:37:c7: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E4:7C:7F:D0:26:B5:0B:E1:D1:10:64:60:5E:C5:3C:C4:EF:E8:39 X509v3 Authority Key Identifier: keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/ruR8f9AmtQvh0RBkYF7FPMTv6Dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.148.0/23 Signature Algorithm: sha256WithRSAEncryption c7:a6:db:b6:b5:d7:87:23:32:17:16:6b:bf:49:cb:75:1d:b4: e8:85:9b:40:30:8f:8f:c5:f3:89:a0:c6:ce:67:9c:c6:6a:0c: 27:bd:6e:21:4a:06:93:7b:14:7f:6c:e2:20:ce:9f:6d:b0:23: 16:14:81:2d:4f:45:d7:5e:59:40:ba:7c:dd:da:58:b1:be:de: 72:9a:65:5d:c7:a9:66:3e:70:ef:f3:92:ee:4f:a4:fa:40:d3: 5c:f0:5c:d1:98:8e:7b:27:3d:6d:0c:3f:e0:04:28:06:58:8c: 5a:a4:21:7a:c5:72:79:00:91:d2:f1:03:14:56:fe:1f:98:ea: 95:ea:ec:b3:74:d3:76:00:17:22:ce:61:cb:05:a9:63:aa:1d: b1:68:1b:00:fd:93:ee:9d:a9:25:58:c2:44:39:e4:dd:b3:85: 4b:9d:d6:df:34:5a:5c:f2:d3:10:42:37:e5:0c:4f:bd:9f:b1: fa:31:22:b0:bb:2f:5c:f9:ad:f2:15:90:0a:59:c3:93:af:8e: 98:c3:8b:ae:81:25:5a:ee:7e:65:86:b6:32:bd:ab:de:e3:bd: 20:70:fe:35:5d:ae:ac:d5:61:90:be:c4:99:ed:18:41:f6:39: e7:d1:67:19:74:02:9d:88:f3:a4:33:86:ac:cf:0c:13:c4:fc: 15:45:f9:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2DPNlsZTTiK3PMVwFv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NjFjY2IwMzc0MTA1NjcxNWE2YmU0ODA1MzIxNjYyZDg4 ZTdlN2MwHhcNMjYwMTAxMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWU0N2M3ZmQwMjZiNTBiZTFkMTEwNjQ2MDVlYzUzY2M0ZWZlODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXMDQ/ScWQ2+AuHgaCMUsERpImtB KM2qYNC9hgx5tR+JO4dj0AAdyH4ysFlP2DRnvXMx3VwxZoPslqtvH9m/AS4d2iFq QW/asBjgE3ioAwQvmL4D7u715htcdwRm3rDf/RFgk5GYj96DxKV1R3upFjQxZXb0 QzaIUyE3ez3MGH/A7TVtInDuqqlvIvfvlCW5XP5sPnw3iazUywc9cj83W+eeZgpP O3avved5NtAd7J5gfUFj5QXkrP4vsXNB4AxnVLg6uew3PUMwgf91h7WhHOzTdAgs Jz6RW3Xz7JL693N/uovHL4vEhehORPOad4j7j+Dy2LPwdo3D/sbtN8eLmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK7kfH/QJrUL4dEQZGBexTzE7+g5MB8GA1UdIwQY MBaAFKVhzLA3QQVnFaa+SAUyFmLYjn58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODkt YWU0ZTY5ODY2NGYxLzEvcnVSOGY5QW10UXZoMFJCa1lGN0ZQTVR2NkRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80YmM3ZmEtMDQ2Mi00Y2Y2LTkxODktYWU0ZTY5ODY2NGYx LzEvcFdITXNEZEJCV2NWcHI1SUJUSVdZdGlPZm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuY6UMA0G CSqGSIb3DQEBCwUAA4IBAQDHptu2tdeHIzIXFmu/Sct1HbTohZtAMI+PxfOJoMbO Z5zGagwnvW4hSgaTexR/bOIgzp9tsCMWFIEtT0XXXllAunzd2lixvt5ymmVdx6lm PnDv85LuT6T6QNNc8FzRmI57Jz1tDD/gBCgGWIxapCF6xXJ5AJHS8QMUVv4fmOqV 6uyzdNN2ABcizmHLBaljqh2xaBsA/ZPunaklWMJEOeTds4VLndbfNFpc8tMQQjfl DE+9n7H6MSKwuy9c+a3yFZAKWcOTr46Yw4uugSVa7n5lhrYyvave470gcP41Xa6s 1WGQvsSZ7RhB9jnn0WcZdAKdiPOkM4aszwwTxPwVRfkK -----END CERTIFICATE-----Generated at Tue Jan 20 08:02:40 2026 by rpki-client