This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa File: CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa (raw, json) Hash identifier: tQFv2xzZePQDySWn8V6OIcXlKLekKjdaEAGUmEMYLQo= Subject key identifier: 08:95:11:72:AC:01:ED:81:E4:C4:5A:49:FD:F2:1F:38:08:F8:AD:BE Certificate issuer: /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f Certificate serial: 019B7BA3318A1E873D72EA95653E088CA82B Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa Signing time: Thu 01 Jan 2026 22:17:31 +0000 ROA not before: Thu 01 Jan 2026 22:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2631 IP address blocks: 185.150.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:31:8a:1e:87:3d:72:ea:95:65:3e:08:8c:a8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08951172ac01ed81e4c45a49fdf21f3808f8adbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:7b:43:d6:f5:10:db:f2:55:34:9e:f5:35: bd:96:cc:68:b7:fc:c8:42:98:85:f4:a0:d7:0d:72: bd:94:7b:0b:a0:ba:32:15:dd:3f:77:80:ad:e4:76: f5:13:4b:85:aa:73:96:c2:3c:32:9b:bf:c6:45:84: 1d:1d:0b:c7:f8:36:e0:27:39:9b:72:c5:8f:b9:f9: d1:2c:7f:0b:3d:68:78:a6:9a:f4:e3:33:ed:8c:0f: ba:50:c1:21:b2:a8:bb:f1:9f:0a:b7:03:81:be:53: 6b:77:ec:37:5d:7a:61:35:fd:ab:b2:40:11:31:23: 4d:08:29:55:16:b8:2a:50:3c:8e:2c:ea:8c:27:3a: 72:a6:4a:12:6a:4e:20:e2:c1:ba:0b:d4:35:a8:13: f5:fb:e3:6e:80:cc:4b:b1:15:d7:64:c3:88:5f:9b: b8:29:8f:05:4b:d1:c3:d1:f7:7d:3c:8f:d8:25:ba: 82:5f:dc:cf:37:09:98:3c:27:ed:36:ba:02:31:40: 6e:63:65:09:4f:d5:fd:69:80:81:16:5b:36:c5:b6: b6:68:8b:26:d0:38:12:c0:c5:fd:f5:91:22:8c:6b: 7f:69:f2:03:e9:ef:34:04:1d:e9:23:32:2c:9d:32: 39:7b:59:87:e5:a2:8e:79:16:c6:13:79:9e:81:e2: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:11:72:AC:01:ED:81:E4:C4:5A:49:FD:F2:1F:38:08:F8:AD:BE X509v3 Authority Key Identifier: keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/CJURcqwB7YHkxFpJ_fIfOAj4rb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.20.0/24 Signature Algorithm: sha256WithRSAEncryption ab:66:fc:b8:09:07:e1:1e:d9:38:b5:df:54:dd:5f:f0:d3:0c: b7:6c:78:48:35:8e:ff:66:6e:a8:36:19:47:95:63:d6:35:fc: c7:fd:a6:70:23:62:f8:4c:e5:78:fc:6c:99:02:a0:31:17:be: 36:71:cf:56:d6:c5:d5:92:c1:b5:91:3b:2f:41:a2:02:97:64: 8a:15:43:48:36:a5:bd:c6:19:51:c8:1b:dd:c5:99:60:dd:96: be:06:cc:90:56:e2:b3:8b:6e:df:94:4c:69:13:7d:cd:90:06: 5f:5e:9f:ce:ca:38:50:07:69:98:03:85:bd:48:23:c5:37:76: 18:08:0f:cd:68:cb:eb:3e:d5:33:12:a8:3c:36:8b:8e:42:21: 65:17:fa:1e:28:a0:78:52:59:85:04:f1:50:db:c4:de:40:f1: c2:4f:b8:ff:05:f2:28:43:a0:84:19:da:00:c5:35:b3:38:40: 11:33:58:d8:2f:42:81:5f:d1:f0:58:c4:66:cc:b5:0c:f3:93: 7c:ae:59:17:7f:55:b2:6e:db:17:7a:fe:73:3f:ce:95:2c:19: 9e:de:f9:b8:b7:a3:c2:e5:73:f8:57:a0:92:9b:44:fe:35:b5: ae:de:30:eb:ce:36:e6:d9:e6:f4:84:47:b2:ed:5d:4a:bb:b0: 34:95:ae:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozGKHoc9cuqVZT4IjKgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2VmN2JiNmE0NmJhZjRkYjFiYWViN2RmMjRhNDBjMWQ0 YzE1NGYwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODk1MTE3MmFjMDFlZDgxZTRjNDVhNDlmZGYyMWYzODA4ZjhhZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3p7Q9b1ENvyVTSe9TW9lsxot/zI QpiF9KDXDXK9lHsLoLoyFd0/d4Ct5Hb1E0uFqnOWwjwym7/GRYQdHQvH+DbgJzmb csWPufnRLH8LPWh4ppr04zPtjA+6UMEhsqi78Z8KtwOBvlNrd+w3XXphNf2rskAR MSNNCClVFrgqUDyOLOqMJzpypkoSak4g4sG6C9Q1qBP1++NugMxLsRXXZMOIX5u4 KY8FS9HD0fd9PI/YJbqCX9zPNwmYPCftNroCMUBuY2UJT9X9aYCBFls2xba2aIsm 0DgSwMX99ZEijGt/afID6e80BB3pIzIsnTI5e1mH5aKOeRbGE3megeKAFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiVEXKsAe2B5MRaSf3yHzgI+K2+MB8GA1UdIwQY MBaAFP8+97tqRrr02xuut98kpAwdTBVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUt NjJiZTFmMDJhYjBjLzEvQ0pVUmNxd0I3WUhreEZwSl9mSWZPQWo0cmI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUtNjJiZTFmMDJhYjBj LzEvX3o3M3UycEd1dlRiRzY2MzN5U2tEQjFNRlU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZYUMA0G CSqGSIb3DQEBCwUAA4IBAQCrZvy4CQfhHtk4td9U3V/w0wy3bHhINY7/Zm6oNhlH lWPWNfzH/aZwI2L4TOV4/GyZAqAxF742cc9W1sXVksG1kTsvQaICl2SKFUNINqW9 xhlRyBvdxZlg3Za+BsyQVuKzi27flExpE33NkAZfXp/OyjhQB2mYA4W9SCPFN3YY CA/NaMvrPtUzEqg8NouOQiFlF/oeKKB4UlmFBPFQ28TeQPHCT7j/BfIoQ6CEGdoA xTWzOEARM1jYL0KBX9HwWMRmzLUM85N8rlkXf1WybtsXev5zP86VLBme3vm4t6PC 5XP4V6CSm0T+NbWu3jDrzjbm2eb0hEey7V1Ku7A0la4+ -----END CERTIFICATE-----Generated at Fri Jan 2 18:05:04 2026 by rpki-client