This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/c-RKbXtHcflehkaW7_s-cfEhYzY.roa File: c-RKbXtHcflehkaW7_s-cfEhYzY.roa (raw, json) Hash identifier: GHSgILgVbECkDEeWeGT0Z0WhcMXYxagSymWkAzUHFf0= Subject key identifier: 73:E4:4A:6D:7B:47:71:F9:5E:86:46:96:EF:FB:3E:71:F1:21:63:36 Certificate issuer: /CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b Certificate serial: 019C1EA893FFC5E0FC41D7C761040E354773 Authority key identifier: 1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/c-RKbXtHcflehkaW7_s-cfEhYzY.roa Signing time: Mon 02 Feb 2026 14:01:30 +0000 ROA not before: Mon 02 Feb 2026 14:01:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51169 IP address blocks: 185.249.116.0/22 maxlen: 24 185.249.116.0/23 maxlen: 23 185.249.116.0/24 maxlen: 24 185.249.117.0/24 maxlen: 24 185.249.118.0/24 maxlen: 24 185.249.119.0/24 maxlen: 24 2a0c:7940::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.mft rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:a8:93:ff:c5:e0:fc:41:d7:c7:61:04:0e:35:47:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a0100943a8708028be40d4fa4f29c9ad9cc568b Validity Not Before: Feb 2 14:01:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73e44a6d7b4771f95e864696effb3e71f1216336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:f9:84:0a:bc:84:8a:51:2a:1c:47:79:56: ad:6a:20:1e:fb:c6:8a:79:70:f2:d6:3f:44:62:a9: 31:b0:67:04:4c:b1:da:48:b7:0e:74:3d:a8:ac:9c: 55:7d:6d:98:36:c5:8f:9b:a1:39:16:cc:85:60:73: 68:14:22:2f:b0:95:34:b6:9b:ad:47:d3:60:f6:df: e0:27:6e:8c:e0:95:2f:3b:7b:86:0b:76:b2:8e:5d: d9:63:a1:cb:9c:76:24:ae:bd:d7:aa:ec:77:54:f5: 74:44:6e:98:88:2f:18:5e:d8:45:a8:87:0e:59:94: 7a:1c:2a:6f:42:f9:8c:93:0e:06:23:1e:df:00:71: ac:6f:a8:04:3c:3d:ee:2c:0c:c5:94:33:21:46:97: a9:58:e7:31:32:6a:fc:25:82:88:2c:b1:ab:e8:f3: fb:48:9a:cc:13:4b:95:b4:52:12:85:09:0f:bf:08: 68:9f:f6:32:e0:37:ad:4f:f1:8f:91:63:62:9a:9a: 8f:6d:e6:bb:df:fc:3f:50:34:be:84:51:42:3e:e7: 45:07:51:63:98:5d:de:88:0d:c0:6c:38:0b:14:e8: 39:73:53:96:e3:28:86:a6:17:18:74:97:6d:1d:82: 8d:99:4d:e2:d1:11:1d:56:25:47:b9:7e:6d:24:a5: 1f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E4:4A:6D:7B:47:71:F9:5E:86:46:96:EF:FB:3E:71:F1:21:63:36 X509v3 Authority Key Identifier: keyid:1A:01:00:94:3A:87:08:02:8B:E4:0D:4F:A4:F2:9C:9A:D9:CC:56:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgEAlDqHCAKL5A1PpPKcmtnMVos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/c-RKbXtHcflehkaW7_s-cfEhYzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/1201bf-e6de-483a-bc23-d6bce7c831ce/1/GgEAlDqHCAKL5A1PpPKcmtnMVos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.116.0/22 IPv6: 2a0c:7940::/29 Signature Algorithm: sha256WithRSAEncryption bd:34:1b:3d:1e:c4:e5:1b:64:5f:71:57:c0:e0:31:10:78:f0: 59:20:ea:71:7d:9e:0c:92:58:88:e2:c2:bb:96:c2:db:36:96: f2:1b:46:e3:dc:63:7e:23:f5:1b:92:81:9e:bf:9a:26:b2:82: 99:bc:f0:63:6d:d0:cd:b6:15:72:4d:7c:cf:b4:88:e0:ef:f2: 4f:a4:ef:90:14:ed:5e:3b:70:12:49:75:31:96:1a:f1:54:64: 88:b4:f5:c2:ba:ab:ac:fe:76:ea:3c:0e:9a:a8:3a:aa:41:56: 80:1e:e3:a6:02:b8:73:c7:da:2e:b6:7d:8b:b2:12:22:f9:4f: 89:8d:6a:c5:37:1b:a5:4f:7c:ab:67:0b:34:0d:33:97:70:35: 45:90:2a:4b:9c:39:3f:e3:4d:34:fc:7b:1c:61:aa:2d:47:cc: 82:df:3d:0a:47:01:3b:72:e4:05:41:7f:cf:a5:2d:9a:7b:c4: ed:e4:14:dc:cf:52:be:b6:86:b8:1b:60:df:46:7f:cb:fa:8c: a7:ab:20:47:72:0a:3d:18:5f:56:1a:cf:3f:22:ed:97:3f:42: 65:6c:5d:6f:0b:d0:81:9c:ab:7d:ba:cc:eb:8c:ff:ad:4a:c9: e1:03:36:a6:41:cf:51:d8:9b:f3:92:27:61:18:62:14:98:c2: 37:05:28:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZweqJP/xeD8QdfHYQQONUdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhMDEwMDk0M2E4NzA4MDI4YmU0MGQ0ZmE0ZjI5YzlhZDlj YzU2OGIwHhcNMjYwMjAyMTQwMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2U0NGE2ZDdiNDc3MWY5NWU4NjQ2OTZlZmZiM2U3MWYxMjE2MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobv5hAq8hIpRKhxHeVataiAe+8aK eXDy1j9EYqkxsGcETLHaSLcOdD2orJxVfW2YNsWPm6E5FsyFYHNoFCIvsJU0tput R9Ng9t/gJ26M4JUvO3uGC3ayjl3ZY6HLnHYkrr3Xqux3VPV0RG6YiC8YXthFqIcO WZR6HCpvQvmMkw4GIx7fAHGsb6gEPD3uLAzFlDMhRpepWOcxMmr8JYKILLGr6PP7 SJrME0uVtFIShQkPvwhon/Yy4DetT/GPkWNimpqPbea73/w/UDS+hFFCPudFB1Fj mF3eiA3AbDgLFOg5c1OW4yiGphcYdJdtHYKNmU3i0REdViVHuX5tJKUfqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHPkSm17R3H5XoZGlu/7PnHxIWM2MB8GA1UdIwQY MBaAFBoBAJQ6hwgCi+QNT6TynJrZzFaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMt ZDZiY2U3YzgzMWNlLzEvYy1SS2JYdEhjZmxlaGthVzdfcy1jZkVoWXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8xMjAxYmYtZTZkZS00ODNhLWJjMjMtZDZiY2U3YzgzMWNl LzEvR2dFQWxEcUhDQUtMNUExUHBQS2NtdG5NVm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufl0MA0E AgACMAcDBQMqDHlAMA0GCSqGSIb3DQEBCwUAA4IBAQC9NBs9HsTlG2RfcVfA4DEQ ePBZIOpxfZ4MkliI4sK7lsLbNpbyG0bj3GN+I/UbkoGev5omsoKZvPBjbdDNthVy TXzPtIjg7/JPpO+QFO1eO3ASSXUxlhrxVGSItPXCuqus/nbqPA6aqDqqQVaAHuOm Arhzx9outn2LshIi+U+JjWrFNxulT3yrZws0DTOXcDVFkCpLnDk/4000/HscYaot R8yC3z0KRwE7cuQFQX/PpS2ae8Tt5BTcz1K+toa4G2DfRn/L+oynqyBHcgo9GF9W Gs8/Iu2XP0JlbF1vC9CBnKt9uszrjP+tSsnhAzamQc9R2JvzkidhGGIUmMI3BSh5 -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:19 2026 by rpki-client