This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa File: tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa (raw, json) Hash identifier: gRJclz6t9y/Q1g8bocXmUp9M+K0hzT5o06prGgkqzrY= Subject key identifier: B5:2E:0C:6B:85:BA:E6:FF:59:BC:D9:9E:C2:0A:CE:8B:6A:18:09:F4 Certificate issuer: /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Certificate serial: 019B77C690742BED2BF706E53736D195DD73 Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 185.233.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:90:74:2b:ed:2b:f7:06:e5:37:36:d1:95:dd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b52e0c6b85bae6ff59bcd99ec20ace8b6a1809f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:fa:c4:e8:04:b3:6f:ba:02:e1:70:ad:c7: c3:57:49:79:44:38:44:27:8b:ae:db:c6:1e:b2:66: 5f:98:00:d3:67:6a:8a:f2:00:a7:1a:f7:02:c8:66: 3b:8a:37:6c:f7:e8:52:95:fe:4f:3f:c5:c1:51:43: 7a:2d:16:22:ee:54:31:61:f1:3b:d6:e6:ac:95:df: d8:e2:72:38:8a:50:f9:5b:c6:d7:03:55:18:2e:ae: aa:40:2e:66:8c:d4:40:ee:8e:86:d1:27:1c:d8:17: f7:97:1b:28:2d:76:4b:3c:c6:7a:b3:32:94:17:93: c6:1a:a9:52:02:3a:ec:5c:c6:97:bb:bc:02:62:63: 03:72:7a:2d:f9:b6:1b:b8:06:50:37:4d:46:64:52: 7c:5a:92:1c:82:1d:aa:a2:cf:9e:53:d4:f2:a7:a9: 8e:f3:4b:fa:8c:4f:07:4e:41:a4:15:fd:c5:b8:2c: 6c:8c:8b:35:a2:5b:a7:b7:b9:ce:4c:ee:33:82:c4: 4f:a7:93:6d:60:43:13:89:97:a3:3d:7e:7d:36:e5: a5:d1:39:22:e6:c9:16:af:38:66:1b:bb:85:5d:35: 2a:b9:b9:dd:58:ba:83:c7:19:bd:d5:06:63:7a:3e: 99:a6:22:cf:29:b5:8c:c2:cb:7b:04:94:24:73:17: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2E:0C:6B:85:BA:E6:FF:59:BC:D9:9E:C2:0A:CE:8B:6A:18:09:F4 X509v3 Authority Key Identifier: keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.167.0/24 Signature Algorithm: sha256WithRSAEncryption 95:27:b5:11:49:8b:75:f8:c8:57:3d:8a:8f:d2:5d:e7:24:1b: 63:eb:bc:10:6e:23:7b:4b:b2:06:69:ea:19:3e:91:23:38:2b: 45:5b:a9:10:b1:f6:ff:63:a9:76:f6:f4:4b:27:2e:07:5e:f5: 74:21:eb:55:ca:e8:82:82:18:70:4c:3a:e4:c5:06:f6:38:c5: 72:f4:0f:fe:c2:1d:c4:c4:09:7f:12:49:9c:da:c4:1d:59:b0: d2:9b:19:9a:b9:97:50:0a:3c:45:66:b0:e0:c0:5a:c1:30:f5: 8f:07:92:39:a9:a3:3e:a2:83:a0:ea:7b:c8:36:ca:53:d6:49: 2c:77:01:16:8a:0c:50:29:c9:99:e2:f3:ca:b0:8d:5e:d7:f9: a4:6c:cb:26:5e:94:ab:40:4b:7f:f4:cd:a4:7d:b8:2d:53:31: 6b:fa:7a:06:16:67:0e:07:b0:20:e7:70:34:9e:b3:8f:97:21: 09:c5:a3:26:c7:3c:a2:5c:80:97:8e:07:8c:19:08:23:4c:e9: 67:e8:e3:e5:46:02:23:1a:aa:7b:8a:45:0a:09:1f:f1:ac:85: 49:05:fe:fc:93:63:7d:77:94:57:12:3d:a6:ea:c4:36:c1:e2: a4:2d:c2:bd:0c:ff:fe:19:6b:73:e5:be:59:6a:8f:9f:4b:56: 1d:bf:68:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpB0K+0r9wblNzbRld1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YjYyM2JiYzU0ZTk4NDY3NDhjZDc3YjJiOGIzNDM4Mjdl NWFlYWEwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTJlMGM2Yjg1YmFlNmZmNTliY2Q5OWVjMjBhY2U4YjZhMTgwOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5L6xOgEs2+6AuFwrcfDV0l5RDhE J4uu28YesmZfmADTZ2qK8gCnGvcCyGY7ijds9+hSlf5PP8XBUUN6LRYi7lQxYfE7 1uasld/Y4nI4ilD5W8bXA1UYLq6qQC5mjNRA7o6G0Scc2Bf3lxsoLXZLPMZ6szKU F5PGGqlSAjrsXMaXu7wCYmMDcnot+bYbuAZQN01GZFJ8WpIcgh2qos+eU9Typ6mO 80v6jE8HTkGkFf3FuCxsjIs1olunt7nOTO4zgsRPp5NtYEMTiZejPX59NuWl0Tki 5skWrzhmG7uFXTUqubndWLqDxxm91QZjej6ZpiLPKbWMwst7BJQkcxeOowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLUuDGuFuub/WbzZnsIKzotqGAn0MB8GA1UdIwQY MBaAFMe2I7vFTphGdIzXeyuLNDgn5a6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMt MzRlNGUwNjc5MzMzLzEvdFM0TWE0VzY1djladk5tZXdnck9pMm9ZQ2ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lZDg3OWItZTNjNC00YjdhLWJkMGMtMzRlNGUwNjc5MzMz LzEveDdZanU4Vk9tRVowak5kN0s0czBPQ2ZscnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuemnMA0G CSqGSIb3DQEBCwUAA4IBAQCVJ7URSYt1+MhXPYqP0l3nJBtj67wQbiN7S7IGaeoZ PpEjOCtFW6kQsfb/Y6l29vRLJy4HXvV0IetVyuiCghhwTDrkxQb2OMVy9A/+wh3E xAl/Ekmc2sQdWbDSmxmauZdQCjxFZrDgwFrBMPWPB5I5qaM+ooOg6nvINspT1kks dwEWigxQKcmZ4vPKsI1e1/mkbMsmXpSrQEt/9M2kfbgtUzFr+noGFmcOB7Ag53A0 nrOPlyEJxaMmxzyiXICXjgeMGQgjTOln6OPlRgIjGqp7ikUKCR/xrIVJBf78k2N9 d5RXEj2m6sQ2weKkLcK9DP/+GWtz5b5Zao+fS1Ydv2jY -----END CERTIFICATE-----Generated at Mon Jan 19 11:23:49 2026 by rpki-client