This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/c0s191T9M-PjiRKEaUw3Sv51WuI.roa File: c0s191T9M-PjiRKEaUw3Sv51WuI.roa (raw, json) Hash identifier: HMekVBw+h+CR9Vb7bu+DywUuyLHvbFqFC7IFjxkwPss= Subject key identifier: 73:4B:35:F7:54:FD:33:E3:E3:89:12:84:69:4C:37:4A:FE:75:5A:E2 Certificate issuer: /CN=1713129ef4fa454e0f0ac407e008e957a1b795a0 Certificate serial: 019B7F15B5BB98BF4D39DD7062B795D968E1 Authority key identifier: 17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/c0s191T9M-PjiRKEaUw3Sv51WuI.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13058 IP address blocks: 185.240.52.0/22 maxlen: 24 2a0c:7280::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.mft rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b5:bb:98:bf:4d:39:dd:70:62:b7:95:d9:68:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1713129ef4fa454e0f0ac407e008e957a1b795a0 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734b35f754fd33e3e3891284694c374afe755ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:be:cd:11:c7:e5:26:4d:27:d6:4e:b4:6d:b8: 0c:59:63:a7:76:4e:a4:a1:79:4a:5b:55:87:cb:49: d3:82:cd:5b:f9:c8:35:f3:aa:7f:72:27:fd:4d:cc: 50:b4:3c:d0:41:46:7e:6d:79:4a:b9:15:08:1e:33: be:29:37:87:a3:0a:41:5b:4d:8f:76:b8:f8:fe:51: 2e:e5:e5:88:a2:14:fb:d3:b0:ff:28:00:a1:e5:53: 92:7b:75:2c:4d:56:e5:4f:d0:e7:7e:e5:9a:84:97: 66:ac:89:7b:f5:66:02:5c:19:9e:6e:1c:11:7e:bf: c6:e2:c6:fe:8e:1b:cc:90:da:8a:3e:8c:80:96:b9: 93:23:f1:82:f2:8b:bd:af:8d:51:b9:17:6d:ec:97: 38:75:b0:a9:0d:09:cc:7a:40:2a:03:dc:4a:4b:80: bc:95:87:e0:3b:e8:14:84:4d:f4:e4:7d:1e:c1:b2: 3e:0e:50:7f:5b:b9:c9:1c:64:8c:01:4a:0a:bb:87: 69:d0:39:34:80:13:79:98:15:17:0a:a0:c9:5a:0e: ac:81:08:2d:6b:35:cc:24:4c:a1:a4:95:a6:fe:8f: da:77:4a:c8:6f:7d:1a:d9:04:f2:a1:37:93:50:42: ac:5c:06:b5:20:9f:1b:c1:8e:95:61:71:dd:85:ee: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4B:35:F7:54:FD:33:E3:E3:89:12:84:69:4C:37:4A:FE:75:5A:E2 X509v3 Authority Key Identifier: keyid:17:13:12:9E:F4:FA:45:4E:0F:0A:C4:07:E0:08:E9:57:A1:B7:95:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxMSnvT6RU4PCsQH4AjpV6G3laA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/c0s191T9M-PjiRKEaUw3Sv51WuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/157299-9d1c-4c5b-9a41-c25fdc4ca2f6/1/FxMSnvT6RU4PCsQH4AjpV6G3laA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.52.0/22 IPv6: 2a0c:7280::/29 Signature Algorithm: sha256WithRSAEncryption 55:14:6c:37:99:b3:84:51:54:c4:9d:b8:38:1a:08:79:70:9d: 5e:96:06:8c:15:e3:38:70:39:34:a6:85:65:d2:18:1c:d4:11: 41:e2:77:2d:64:19:08:fd:3d:1a:8c:c3:7c:f2:18:0f:4a:ea: 8a:d1:b7:83:ae:ad:80:4a:2e:df:f9:40:de:63:b2:ad:4e:6b: 6e:1e:6d:be:30:f3:9a:a8:44:17:4a:f3:4f:a0:09:62:0b:04: 4f:53:9b:f4:31:c0:05:61:97:79:ec:96:ef:a8:3f:cd:6c:05: b9:28:4c:26:16:e6:c9:1b:73:d0:7e:ce:8d:f2:7d:4c:5a:31: 42:fc:82:e8:2c:f5:c4:73:34:4a:8a:27:6f:3f:1f:6e:74:df: 85:93:cf:cc:a3:60:30:4c:67:17:8d:d0:0e:8d:60:6e:92:a5: a5:1e:91:56:b0:29:85:2b:19:c1:90:e4:18:b0:5e:4f:c2:f7: 22:64:38:84:7d:a0:4d:68:49:4c:b7:0e:92:c9:c6:fe:6d:93: 2c:33:61:4b:00:51:e8:01:f4:1a:25:69:c9:b9:3f:ab:25:26: 39:3b:7d:9b:da:4d:cf:42:a5:ea:04:1c:5f:03:b5:bf:b0:da: 0d:ac:85:9e:cb:ac:b8:1a:b8:91:a8:2b:bb:71:f8:2b:17:eb: e1:85:ca:51 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FbW7mL9NOd1wYreV2WjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTMxMjllZjRmYTQ1NGUwZjBhYzQwN2UwMDhlOTU3YTFi Nzk1YTAwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRiMzVmNzU0ZmQzM2UzZTM4OTEyODQ2OTRjMzc0YWZlNzU1YWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r7NEcflJk0n1k60bbgMWWOndk6k oXlKW1WHy0nTgs1b+cg186p/cif9TcxQtDzQQUZ+bXlKuRUIHjO+KTeHowpBW02P drj4/lEu5eWIohT707D/KACh5VOSe3UsTVblT9DnfuWahJdmrIl79WYCXBmebhwR fr/G4sb+jhvMkNqKPoyAlrmTI/GC8ou9r41RuRdt7Jc4dbCpDQnMekAqA9xKS4C8 lYfgO+gUhE305H0ewbI+DlB/W7nJHGSMAUoKu4dp0Dk0gBN5mBUXCqDJWg6sgQgt azXMJEyhpJWm/o/ad0rIb30a2QTyoTeTUEKsXAa1IJ8bwY6VYXHdhe6xlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHNLNfdU/TPj44kShGlMN0r+dVriMB8GA1UdIwQY MBaAFBcTEp70+kVODwrEB+AI6Veht5WgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEt YzI1ZmRjNGNhMmY2LzEvYzBzMTkxVDlNLVBqaVJLRWFVdzNTdjUxV3VJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8xNTcyOTktOWQxYy00YzViLTlhNDEtYzI1ZmRjNGNhMmY2 LzEvRnhNU252VDZSVTRQQ3NRSDRBanBWNkczbGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufA0MA0E AgACMAcDBQMqDHKAMA0GCSqGSIb3DQEBCwUAA4IBAQBVFGw3mbOEUVTEnbg4Ggh5 cJ1elgaMFeM4cDk0poVl0hgc1BFB4nctZBkI/T0ajMN88hgPSuqK0beDrq2ASi7f +UDeY7KtTmtuHm2+MPOaqEQXSvNPoAliCwRPU5v0McAFYZd57JbvqD/NbAW5KEwm FubJG3PQfs6N8n1MWjFC/ILoLPXEczRKiidvPx9udN+Fk8/Mo2AwTGcXjdAOjWBu kqWlHpFWsCmFKxnBkOQYsF5PwvciZDiEfaBNaElMtw6Sycb+bZMsM2FLAFHoAfQa JWnJuT+rJSY5O32b2k3PQqXqBBxfA7W/sNoNrIWey6y4GriRqCu7cfgrF+vhhcpR -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:49 2026 by rpki-client