This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/61G1xNRDvH1XYvJBYKDXMWttruI.roa File: 61G1xNRDvH1XYvJBYKDXMWttruI.roa (raw, json) Hash identifier: c0Pq8BpZyzyUlkI2f8VEllZFV6S5xxWWsguU+52QGmo= Subject key identifier: EB:51:B5:C4:D4:43:BC:7D:57:62:F2:41:60:A0:D7:31:6B:6D:AE:E2 Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a Certificate serial: 019B7E3811C408BFFD93FAF3F28FF0EA1023 Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/61G1xNRDvH1XYvJBYKDXMWttruI.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203102 IP address blocks: 185.144.64.0/22 maxlen: 22 185.144.64.0/24 maxlen: 24 185.144.65.0/24 maxlen: 24 185.144.66.0/24 maxlen: 24 185.144.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:11:c4:08:bf:fd:93:fa:f3:f2:8f:f0:ea:10:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb51b5c4d443bc7d5762f24160a0d7316b6daee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:89:e5:1a:3f:8c:1b:a6:3c:ad:9b:a5:50: 7d:8c:70:2f:ba:c8:a4:d9:88:c2:4e:e5:d9:24:d6: d5:2d:d9:7e:c9:f6:df:68:7f:60:37:00:54:04:d5: 26:b6:c5:34:da:e1:f9:c4:ac:80:fd:6b:55:ea:76: f0:3a:d6:b9:94:c8:b6:ed:be:55:a1:72:ff:7a:7b: fc:99:d0:33:71:3b:5d:bb:ea:e3:8c:fd:ca:82:ab: fd:75:9f:6e:01:f9:09:bf:f4:7c:9a:a6:91:a3:ac: 55:e4:9c:e6:34:32:37:39:2d:6c:f5:c5:6a:31:4e: e9:ec:c3:67:a1:99:2e:59:0a:fe:59:e4:f7:86:14: 47:b7:b8:bb:27:ac:49:74:0c:56:bd:fd:33:ec:22: b8:3e:58:7a:97:f1:d6:87:c4:e3:b4:e9:f6:3e:26: e5:6a:a4:75:7e:71:4d:3c:99:31:56:ce:f1:85:fe: 4d:bf:fd:2b:42:9b:6e:8d:23:64:74:d2:e1:98:f0: f3:d4:c0:e5:59:47:79:a0:97:00:6e:3a:0c:5e:74: 8d:18:24:b8:df:2d:6b:df:c6:0d:e1:6e:f5:58:20: 32:47:82:f8:6b:8e:84:52:19:8f:43:10:63:03:70: 3e:4c:e7:dd:03:3d:55:87:26:6f:05:93:54:24:94: 9c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:51:B5:C4:D4:43:BC:7D:57:62:F2:41:60:A0:D7:31:6B:6D:AE:E2 X509v3 Authority Key Identifier: keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/61G1xNRDvH1XYvJBYKDXMWttruI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.64.0/22 Signature Algorithm: sha256WithRSAEncryption 82:86:1d:ab:12:3c:a1:4a:f7:fb:1c:38:af:2a:35:3b:e5:9b: 40:78:b9:0d:0c:3c:9b:e2:e4:b3:60:83:77:31:48:85:59:f7: 1b:6b:6c:db:01:c5:d9:a7:43:0e:a4:ba:69:87:88:88:bf:a5: 6f:38:48:c8:53:fb:81:84:74:0f:05:a8:fe:38:fb:64:94:ff: 72:26:e8:18:3d:4a:f7:a4:e2:5d:84:55:fc:b5:99:7f:99:05: cb:db:d7:3f:55:72:95:30:a1:e2:fd:df:18:db:60:b3:bd:a2: a5:76:fe:29:01:5f:5a:1e:c2:78:1b:62:a7:31:57:05:26:15: a3:3c:85:65:3e:fb:a7:af:83:12:b5:1a:e5:88:94:1e:14:dd: 26:60:d5:80:f7:ba:28:6c:f5:e5:0c:44:dd:14:0b:e3:f5:f7: 02:7a:c0:8a:bf:11:74:cb:4c:5f:bb:4a:ea:ef:4f:ca:53:07: 82:d5:98:14:7c:c5:31:6b:2b:89:02:b1:f3:41:fa:cf:eb:d6: 39:55:31:ac:f1:d9:46:ea:d3:1c:97:99:11:49:4d:bc:94:76: a8:40:06:d8:71:0b:59:c5:3b:04:4d:3a:af:cc:b2:30:9b:63: 17:dc:ae:0f:68:e8:5c:29:3d:ed:31:cd:c4:b4:6b:5f:5b:c6: 4c:3c:96:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBHECL/9k/rz8o/w6hAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlM2VjZmIzNTk5MzIxN2MzNjc0M2JjYWZhYTdiMDI1OWQy ZTQ3NmEwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjUxYjVjNGQ0NDNiYzdkNTc2MmYyNDE2MGEwZDczMTZiNmRhZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu2J5Ro/jBumPK2bpVB9jHAvusik 2YjCTuXZJNbVLdl+yfbfaH9gNwBUBNUmtsU02uH5xKyA/WtV6nbwOta5lMi27b5V oXL/env8mdAzcTtdu+rjjP3Kgqv9dZ9uAfkJv/R8mqaRo6xV5JzmNDI3OS1s9cVq MU7p7MNnoZkuWQr+WeT3hhRHt7i7J6xJdAxWvf0z7CK4Plh6l/HWh8TjtOn2Pibl aqR1fnFNPJkxVs7xhf5Nv/0rQptujSNkdNLhmPDz1MDlWUd5oJcAbjoMXnSNGCS4 3y1r38YN4W71WCAyR4L4a46EUhmPQxBjA3A+TOfdAz1VhyZvBZNUJJScGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtRtcTUQ7x9V2LyQWCg1zFrba7iMB8GA1UdIwQY MBaAFP4+z7NZkyF8NnQ7yvqnsCWdLkdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iMmIyMjEtMmFlOS00NWNjLWFkMWUt ZmNkM2RlODY4NDMxLzEvNjFHMXhOUkR2SDFYWXZKQllLRFhNV3R0cnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iMmIyMjEtMmFlOS00NWNjLWFkMWUtZmNkM2RlODY4NDMx LzEvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZBAMA0G CSqGSIb3DQEBCwUAA4IBAQCChh2rEjyhSvf7HDivKjU75ZtAeLkNDDyb4uSzYIN3 MUiFWfcba2zbAcXZp0MOpLpph4iIv6VvOEjIU/uBhHQPBaj+OPtklP9yJugYPUr3 pOJdhFX8tZl/mQXL29c/VXKVMKHi/d8Y22CzvaKldv4pAV9aHsJ4G2KnMVcFJhWj PIVlPvunr4MStRrliJQeFN0mYNWA97oobPXlDETdFAvj9fcCesCKvxF0y0xfu0rq 70/KUweC1ZgUfMUxayuJArHzQfrP69Y5VTGs8dlG6tMcl5kRSU28lHaoQAbYcQtZ xTsETTqvzLIwm2MX3K4PaOhcKT3tMc3EtGtfW8ZMPJbL -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:07 2026 by rpki-client