This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/rEkkspT-t1acu0Gj9pI1cB5NvQM.roa File: rEkkspT-t1acu0Gj9pI1cB5NvQM.roa (raw, json) Hash identifier: 90e8BKkH1L1Ce8jWwpqnzgICGLSdnM4iehMTZrxu/+M= Subject key identifier: AC:49:24:B2:94:FE:B7:56:9C:BB:41:A3:F6:92:35:70:1E:4D:BD:03 Certificate issuer: /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1 Certificate serial: 019B79ED10D7ABFF02E041498A1DB2E78CA1 Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/rEkkspT-t1acu0Gj9pI1cB5NvQM.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207365 IP address blocks: 185.73.225.0/24 maxlen: 24 2a10:1080::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.mft rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:10:d7:ab:ff:02:e0:41:49:8a:1d:b2:e7:8c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4924b294feb7569cbb41a3f69235701e4dbd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:e8:c8:10:a8:4a:bd:c6:5a:73:fc:90:11: 4c:e1:28:4e:63:67:dc:9d:fb:3f:83:76:bf:af:e8: ae:30:88:d3:9c:4c:4e:16:3b:fe:bd:a8:43:f1:11: 69:24:b9:38:94:3b:6d:ed:4a:c8:52:bb:fa:3a:c9: 0a:43:76:6e:d4:19:c9:45:cd:49:3c:50:71:77:1a: 8f:c1:e5:fe:95:68:f0:4b:d8:a6:5b:b0:ef:79:2f: ad:e6:dd:ca:f9:70:68:14:af:5f:e7:ff:91:30:a4: 27:0d:82:d1:b9:63:fe:43:60:7e:a4:37:88:ea:28: 0e:30:5d:c3:e0:3b:94:89:d9:31:fe:c0:b8:1d:48: 6a:21:c8:6a:4c:e5:84:37:fa:a8:67:b0:9a:87:da: c3:ff:ec:7a:0b:43:7a:c3:c4:84:b4:1e:cd:67:25: fe:7c:ad:92:61:55:4e:21:b5:ac:3a:9e:cc:04:2d: 1f:e4:e4:81:94:0d:70:68:1d:79:12:db:41:63:1b: bf:21:8b:71:cb:b6:85:cf:b9:2f:f5:2f:54:ae:19: 41:b0:6a:bd:6a:97:87:d5:3f:db:16:54:44:bd:af: 2e:0d:a9:27:4e:79:86:43:b2:82:68:aa:dd:7b:f3: 6e:32:5c:9d:c1:4c:9e:e7:8d:f7:38:c6:1d:7d:c5: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:49:24:B2:94:FE:B7:56:9C:BB:41:A3:F6:92:35:70:1E:4D:BD:03 X509v3 Authority Key Identifier: keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/rEkkspT-t1acu0Gj9pI1cB5NvQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.225.0/24 IPv6: 2a10:1080::/29 Signature Algorithm: sha256WithRSAEncryption 76:eb:15:de:2b:48:ce:7d:69:ae:17:81:c5:00:72:76:ce:ce: 98:8d:1a:d2:60:b5:50:a5:ca:f3:68:ce:26:2d:b4:3e:06:f4: 0e:90:f5:9f:9c:9d:3e:0d:0b:74:7b:db:ec:65:2c:05:a4:4d: ff:c0:2d:3b:7b:34:e6:22:72:c2:31:91:b7:b7:8d:3c:ad:19: 42:95:22:f8:52:d9:6b:24:b9:89:5c:1d:5e:52:9c:a3:a3:e0: 36:03:c9:4c:61:8e:72:86:36:2f:e9:16:ab:d5:8d:00:39:dd: e3:d0:5c:72:c1:61:95:ea:c4:33:13:96:80:5a:9b:bc:f1:4b: 1e:c8:59:a8:19:9d:00:da:67:3a:64:bd:8b:f8:bc:f2:b1:02: f4:96:47:63:b7:75:31:53:67:ae:a4:02:1e:b5:31:42:37:9e: 29:50:14:48:d1:4d:a7:c5:ad:7f:d1:97:d6:bb:10:bf:2b:bc: 38:e6:f3:49:b6:02:3d:b3:35:28:a8:9c:ca:28:11:0a:5d:b3: 1b:40:b9:00:f6:fa:66:c7:f5:ba:4d:30:8f:30:9b:19:f8:64: 16:18:a4:fd:49:a8:73:24:f5:c9:87:ed:34:08:f1:d0:da:17: b0:98:d0:06:3a:c9:53:c5:90:89:cd:32:2e:61:ec:e6:92:3b: aa:1a:bd:63 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57RDXq/8C4EFJih2y54yhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGEyZjdlMjZjYjdkN2E1NmFjNjQwNWU5MGM2YTYxYTky YWQyZDEwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQ5MjRiMjk0ZmViNzU2OWNiYjQxYTNmNjkyMzU3MDFlNGRiZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfjoyBCoSr3GWnP8kBFM4ShOY2fc nfs/g3a/r+iuMIjTnExOFjv+vahD8RFpJLk4lDtt7UrIUrv6OskKQ3Zu1BnJRc1J PFBxdxqPweX+lWjwS9imW7DveS+t5t3K+XBoFK9f5/+RMKQnDYLRuWP+Q2B+pDeI 6igOMF3D4DuUidkx/sC4HUhqIchqTOWEN/qoZ7Cah9rD/+x6C0N6w8SEtB7NZyX+ fK2SYVVOIbWsOp7MBC0f5OSBlA1waB15EttBYxu/IYtxy7aFz7kv9S9UrhlBsGq9 apeH1T/bFlREva8uDaknTnmGQ7KCaKrde/NuMlydwUye5433OMYdfcXOeQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKxJJLKU/rdWnLtBo/aSNXAeTb0DMB8GA1UdIwQY MBaAFB3aL34my316VqxkBekMamGpKtLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yOGIxNWYtZTdlOC00ZGE0LWJmYzct NzQ4MGI1YTBkOTczLzEvckVra3NwVC10MWFjdTBHajlwSTFjQjVOdlFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yOGIxNWYtZTdlOC00ZGE0LWJmYzctNzQ4MGI1YTBkOTcz LzEvSGRvdmZpYkxmWHBXckdRRjZReHFZYWtxMHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUnhMA0E AgACMAcDBQMqEBCAMA0GCSqGSIb3DQEBCwUAA4IBAQB26xXeK0jOfWmuF4HFAHJ2 zs6YjRrSYLVQpcrzaM4mLbQ+BvQOkPWfnJ0+DQt0e9vsZSwFpE3/wC07ezTmInLC MZG3t408rRlClSL4UtlrJLmJXB1eUpyjo+A2A8lMYY5yhjYv6Rar1Y0AOd3j0Fxy wWGV6sQzE5aAWpu88UseyFmoGZ0A2mc6ZL2L+LzysQL0lkdjt3UxU2eupAIetTFC N54pUBRI0U2nxa1/0ZfWuxC/K7w45vNJtgI9szUoqJzKKBEKXbMbQLkA9vpmx/W6 TTCPMJsZ+GQWGKT9SahzJPXJh+00CPHQ2hewmNAGOslTxZCJzTIuYezmkjuqGr1j -----END CERTIFICATE-----Generated at Tue Feb 10 06:24:22 2026 by rpki-client