This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/A7blUAR8M2twO1WZriuysPCl_Ns.roa File: A7blUAR8M2twO1WZriuysPCl_Ns.roa (raw, json) Hash identifier: LBRnuKsEeUakJqD77ZNf+zyWsZ1gWUpfDWeWrVr+1Oc= Subject key identifier: 03:B6:E5:50:04:7C:33:6B:70:3B:55:99:AE:2B:B2:B0:F0:A5:FC:DB Certificate issuer: /CN=b5253c2552d4403f43b83c25e762238df12dae81 Certificate serial: 019B7AC7BBA981C928A8734D2919B95339F2 Authority key identifier: B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/A7blUAR8M2twO1WZriuysPCl_Ns.roa Signing time: Thu 01 Jan 2026 18:17:48 +0000 ROA not before: Thu 01 Jan 2026 18:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203419 IP address blocks: 185.135.112.0/24 maxlen: 24 185.135.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.mft rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bb:a9:81:c9:28:a8:73:4d:29:19:b9:53:39:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5253c2552d4403f43b83c25e762238df12dae81 Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03b6e550047c336b703b5599ae2bb2b0f0a5fcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0a:44:bf:a3:0b:55:0a:e7:d2:c4:f8:80:74: 01:81:9b:cd:98:8d:9f:f0:50:11:1e:a3:6a:3f:da: 1f:76:ff:5c:43:52:9f:88:1d:9f:91:9c:13:69:cf: a0:31:d1:8e:8a:80:1c:67:83:5b:1d:9e:28:4a:8d: 86:5a:3f:d4:69:dc:e1:0a:90:d4:5f:53:77:05:28: fa:fc:76:79:27:08:50:17:bd:83:5c:12:29:2c:e2: a0:72:4d:d0:4d:70:d2:8c:63:e0:c3:4e:a0:47:2c: bc:3e:67:15:83:c3:97:85:71:10:e7:7d:12:d9:cb: 1f:05:58:24:cf:f7:70:5a:68:5e:90:b0:d7:8d:29: 5a:4b:2a:76:91:f7:22:4a:c4:12:7c:f9:01:58:ae: 33:bd:d5:68:f9:f0:c4:58:27:e5:f0:59:77:74:b1: ec:86:3b:fa:e8:e7:2a:5e:4a:12:1c:01:dd:f5:5f: 95:ee:8d:5e:0c:f2:88:b4:ea:4c:2f:f3:18:eb:73: 96:0e:9c:57:d0:30:11:46:6f:75:05:c8:88:f3:48: b6:d3:d5:29:04:53:a4:8c:e0:bc:5d:43:de:da:89: 22:54:60:e4:1f:a9:3c:38:9f:18:b0:53:59:9a:42: 78:f8:b6:0d:ba:ce:0c:aa:b6:94:57:65:88:c5:b6: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B6:E5:50:04:7C:33:6B:70:3B:55:99:AE:2B:B2:B0:F0:A5:FC:DB X509v3 Authority Key Identifier: keyid:B5:25:3C:25:52:D4:40:3F:43:B8:3C:25:E7:62:23:8D:F1:2D:AE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSU8JVLUQD9DuDwl52IjjfEtroE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/A7blUAR8M2twO1WZriuysPCl_Ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/82098b-0c53-4df2-8a32-fbc1e3f7e92b/1/tSU8JVLUQD9DuDwl52IjjfEtroE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.112.0/23 Signature Algorithm: sha256WithRSAEncryption 22:45:98:3b:1c:1a:72:86:87:ae:c0:b7:56:a8:85:db:b2:06: 72:c1:73:59:7d:05:e3:c4:f3:36:d2:8e:33:2b:e0:b6:8c:31: 96:ab:c5:72:f1:83:3f:19:97:ba:a1:1e:bf:2b:ff:3f:8c:a8: 26:e8:dd:36:fc:59:d9:cc:30:da:d9:d3:b1:88:a7:9a:77:c3: da:63:60:e5:4d:70:ae:eb:40:23:b6:05:09:85:d9:85:30:cf: 15:65:23:0a:ae:43:62:ed:d0:ab:c9:f0:7e:3b:c1:e7:9a:a6: b5:19:17:62:60:e5:42:3a:06:5d:64:d9:be:43:5e:13:a9:59: 66:cf:a0:26:1e:cd:81:0f:3e:3c:fd:a7:65:a5:28:19:ff:7c: c0:65:99:58:55:87:0c:3f:2d:bd:19:2e:ca:e5:56:ed:89:19: 0b:8e:bc:10:ff:6e:3b:aa:11:bb:4c:53:e1:e1:b1:04:b0:2e: 41:1e:7e:4e:28:88:e3:28:62:3c:71:dc:b6:00:05:71:5c:d9: 02:35:4f:bb:aa:fa:e1:d7:56:99:84:74:08:76:af:55:fc:01: 55:bf:a2:9f:df:33:2a:f2:e5:af:b4:85:e5:e1:77:3f:e1:21: db:d7:24:6b:47:93:55:43:11:91:0c:65:1d:97:6c:a7:19:46: a7:25:41:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x7upgckoqHNNKRm5UznyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MjUzYzI1NTJkNDQwM2Y0M2I4M2MyNWU3NjIyMzhkZjEy ZGFlODEwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2I2ZTU1MDA0N2MzMzZiNzAzYjU1OTlhZTJiYjJiMGYwYTVmY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQpEv6MLVQrn0sT4gHQBgZvNmI2f 8FARHqNqP9ofdv9cQ1KfiB2fkZwTac+gMdGOioAcZ4NbHZ4oSo2GWj/UadzhCpDU X1N3BSj6/HZ5JwhQF72DXBIpLOKgck3QTXDSjGPgw06gRyy8PmcVg8OXhXEQ530S 2csfBVgkz/dwWmhekLDXjSlaSyp2kfciSsQSfPkBWK4zvdVo+fDEWCfl8Fl3dLHs hjv66OcqXkoSHAHd9V+V7o1eDPKItOpML/MY63OWDpxX0DARRm91BciI80i209Up BFOkjOC8XUPe2okiVGDkH6k8OJ8YsFNZmkJ4+LYNus4MqraUV2WIxbZKkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAO25VAEfDNrcDtVma4rsrDwpfzbMB8GA1UdIwQY MBaAFLUlPCVS1EA/Q7g8JediI43xLa6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFNVOEpWTFVRRDlEdUR3bDUySWpqZkV0cm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84MjA5OGItMGM1My00ZGYyLThhMzIt ZmJjMWUzZjdlOTJiLzEvQTdibFVBUjhNMnR3TzFXWnJpdXlzUENsX05zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84MjA5OGItMGM1My00ZGYyLThhMzItZmJjMWUzZjdlOTJi LzEvdFNVOEpWTFVRRDlEdUR3bDUySWpqZkV0cm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYdwMA0G CSqGSIb3DQEBCwUAA4IBAQAiRZg7HBpyhoeuwLdWqIXbsgZywXNZfQXjxPM20o4z K+C2jDGWq8Vy8YM/GZe6oR6/K/8/jKgm6N02/FnZzDDa2dOxiKead8PaY2DlTXCu 60AjtgUJhdmFMM8VZSMKrkNi7dCryfB+O8Hnmqa1GRdiYOVCOgZdZNm+Q14TqVlm z6AmHs2BDz48/adlpSgZ/3zAZZlYVYcMPy29GS7K5VbtiRkLjrwQ/247qhG7TFPh 4bEEsC5BHn5OKIjjKGI8cdy2AAVxXNkCNU+7qvrh11aZhHQIdq9V/AFVv6Kf3zMq 8uWvtIXl4Xc/4SHb1yRrR5NVQxGRDGUdl2ynGUanJUG9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:41 2026 by rpki-client