This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa File: rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa (raw, json) Hash identifier: GMqoDXQ3wU8Deq0i39xZJUggMEqmsY8s+770f8FFSeU= Subject key identifier: AC:BB:3E:FD:0F:34:2E:F3:7A:B4:4E:CF:CD:29:14:03:6A:22:22:1F Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Certificate serial: 019B7F15621C866F37DCFE17A510786D9258 Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa Signing time: Fri 02 Jan 2026 14:21:06 +0000 ROA not before: Fri 02 Jan 2026 14:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25264 IP address blocks: 185.105.184.0/22 maxlen: 22 185.105.184.0/24 maxlen: 24 185.105.185.0/24 maxlen: 24 185.105.186.0/24 maxlen: 24 185.105.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:62:1c:86:6f:37:dc:fe:17:a5:10:78:6d:92:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acbb3efd0f342ef37ab44ecfcd2914036a22221f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:53:50:6c:ba:07:ab:52:78:43:49:4f:77:fa: 98:80:29:49:64:00:f0:ee:1d:11:56:a3:5a:ed:f4: 21:29:5e:46:16:ca:d9:29:0e:85:ff:80:96:da:bb: bb:e6:1b:29:c9:e2:b5:9c:3c:c9:00:66:77:a7:86: f1:89:65:de:fc:2a:6a:6e:c4:08:da:e3:99:66:0f: cc:98:38:0a:39:db:b3:a4:34:1f:62:7e:54:54:c7: b1:ba:6b:1e:0b:bc:7e:50:17:30:ce:de:1d:4c:18: 1a:61:63:1b:75:df:28:6b:96:8e:d8:ea:b7:fa:5e: ec:a5:b2:46:7a:74:0d:e1:65:82:91:2f:65:1a:1e: a1:fc:b2:b0:30:61:21:a9:a3:d9:b5:3b:d1:79:1a: 3f:40:84:80:82:1d:33:ec:8d:ac:8e:61:96:18:a5: 1e:18:f1:e0:e9:08:86:28:49:c4:03:79:6d:fc:68: a2:91:0f:4f:e7:40:d9:2f:b1:c1:d9:3f:9a:86:0a: c6:c6:6e:89:e3:d4:6f:1c:0c:e4:3e:25:18:46:66: 29:8f:24:68:73:17:36:80:8e:34:b8:26:72:f9:b2: 3a:7f:9a:08:0c:44:23:91:bf:a2:c1:e6:95:42:83: 52:24:8b:5f:8d:3c:fe:ef:0b:fa:51:79:e0:8e:74: 03:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:3E:FD:0F:34:2E:F3:7A:B4:4E:CF:CD:29:14:03:6A:22:22:1F X509v3 Authority Key Identifier: keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.184.0/22 Signature Algorithm: sha256WithRSAEncryption 45:77:10:93:a6:50:76:fd:f9:1a:4f:d5:a5:d2:59:32:51:f7: d4:f2:d9:20:29:7b:e8:9a:3f:c9:71:ff:b7:6b:ff:4e:be:26: 37:79:08:26:c5:2b:45:45:38:9a:c4:23:31:ea:cb:19:1c:8f: 43:28:ab:73:30:7d:f3:02:f3:54:02:81:3d:dc:7a:f2:e6:27: 4f:e3:03:dc:b7:80:7e:cc:02:c4:7a:a0:68:eb:04:72:47:53: 3d:e6:4c:c3:82:7c:6b:fd:5f:a8:5f:0e:e8:64:f9:8a:d1:c3: 29:8c:85:14:21:fd:4f:89:e7:99:1e:c6:f3:7f:39:65:8c:0d: 90:67:63:49:84:22:62:d6:bd:ae:3c:15:26:86:c7:52:dc:9f: 5e:90:4e:ec:87:85:42:9c:8e:64:96:08:e2:ca:13:f7:06:90: 7d:40:1e:43:c2:66:95:8e:6c:b7:4e:ee:1b:5c:58:5c:3e:4e: 2e:aa:4d:87:b4:b6:fa:a6:75:69:e7:4c:36:ca:bb:96:4d:ac: cc:82:87:4d:89:10:cc:d0:c6:63:96:21:bb:4f:75:ee:6a:79: 0e:d8:50:6a:a2:b5:92:5a:c7:ba:81:52:52:b8:9d:1f:f0:89: 01:e8:69:b0:0f:c2:66:37:7f:5b:69:15:e8:96:da:98:b7:6f: be:15:95:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWIchm833P4XpRB4bZJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl MGUzZTQwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2JiM2VmZDBmMzQyZWYzN2FiNDRlY2ZjZDI5MTQwMzZhMjIyMjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFNQbLoHq1J4Q0lPd/qYgClJZADw 7h0RVqNa7fQhKV5GFsrZKQ6F/4CW2ru75hspyeK1nDzJAGZ3p4bxiWXe/CpqbsQI 2uOZZg/MmDgKOduzpDQfYn5UVMexumseC7x+UBcwzt4dTBgaYWMbdd8oa5aO2Oq3 +l7spbJGenQN4WWCkS9lGh6h/LKwMGEhqaPZtTvReRo/QISAgh0z7I2sjmGWGKUe GPHg6QiGKEnEA3lt/GiikQ9P50DZL7HB2T+ahgrGxm6J49RvHAzkPiUYRmYpjyRo cxc2gI40uCZy+bI6f5oIDEQjkb+iweaVQoNSJItfjTz+7wv6UXngjnQDDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKy7Pv0PNC7zerROz80pFANqIiIfMB8GA1UdIwQY MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt OWNlYWExYjdhMTE2LzEvckxzLV9RODBMdk42dEU3UHpTa1VBMm9pSWg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2 LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWm4MA0G CSqGSIb3DQEBCwUAA4IBAQBFdxCTplB2/fkaT9Wl0lkyUffU8tkgKXvomj/Jcf+3 a/9OviY3eQgmxStFRTiaxCMx6ssZHI9DKKtzMH3zAvNUAoE93Hry5idP4wPct4B+ zALEeqBo6wRyR1M95kzDgnxr/V+oXw7oZPmK0cMpjIUUIf1PieeZHsbzfzlljA2Q Z2NJhCJi1r2uPBUmhsdS3J9ekE7sh4VCnI5klgjiyhP3BpB9QB5DwmaVjmy3Tu4b XFhcPk4uqk2HtLb6pnVp50w2yruWTazMgodNiRDM0MZjliG7T3XuankO2FBqorWS Wse6gVJSuJ0f8IkB6GmwD8JmN39baRXoltqYt2++FZUf -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:21 2026 by rpki-client