This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa File: cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa (raw, json) Hash identifier: 8S34S+6olNesEjRXQB7m9lNGl0nTPvWZwfDko3leMVc= Subject key identifier: 70:50:73:D9:5C:11:B4:01:3B:13:07:33:EB:86:43:69:C5:DF:07:94 Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238 Certificate serial: 019B7B36283C97D6F68EE56F5DFB85D3B8E9 Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202766 IP address blocks: 185.83.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:28:3c:97:d6:f6:8e:e5:6f:5d:fb:85:d3:b8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238 Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705073d95c11b4013b130733eb864369c5df0794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:22:be:e7:de:b9:db:26:c8:ff:5d:78:a3: 20:3c:c2:5e:26:91:ab:20:bb:de:6b:24:4b:ea:26: d9:2e:83:54:0d:63:81:9c:1b:9a:f2:2f:bc:df:d4: 19:6d:4c:43:f5:dc:df:f9:91:0a:53:6e:79:4a:13: e5:ac:42:bc:a6:86:08:0a:e3:a2:f8:31:8a:84:3e: 82:1d:ba:47:e6:e8:f2:66:c7:f1:ac:4a:62:c7:20: 28:2e:ac:88:1c:dd:0e:90:c8:1f:f2:6b:6d:f6:d3: ff:32:59:d1:ca:82:13:54:2f:29:54:a1:12:22:73: 77:f5:09:0f:63:a3:bf:74:79:d3:54:bc:f1:9b:1c: 3b:c0:52:ac:e2:1b:59:6a:de:e2:71:a2:44:5e:68: 66:42:93:89:13:37:27:33:47:3f:30:9a:2b:94:7d: 87:0d:22:7a:44:37:c4:74:7c:f6:d5:a8:56:85:95: 4a:6d:2b:c9:45:ae:10:98:76:3c:98:5d:ea:b2:81: 38:86:c4:5b:90:eb:fa:f4:c0:80:01:9a:f5:8e:5b: c2:40:bd:1e:77:ca:30:1c:3e:ae:d2:ed:76:f6:64: a3:e3:ac:06:5b:e7:e8:4d:ee:b2:86:8f:06:56:77: c5:6e:30:ee:65:88:26:83:9a:30:ae:2b:68:0c:d5: 4b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:73:D9:5C:11:B4:01:3B:13:07:33:EB:86:43:69:C5:DF:07:94 X509v3 Authority Key Identifier: keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/cFBz2VwRtAE7Ewcz64ZDacXfB5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.83.160.0/22 Signature Algorithm: sha256WithRSAEncryption ae:20:4c:a1:f7:8f:cd:05:4c:2e:8b:4f:e2:0c:c6:4a:0d:f5: 81:b6:68:8c:db:48:14:b3:d2:14:6d:16:63:03:67:2b:fe:10: 99:38:59:d8:3f:c5:81:4d:04:84:f2:aa:9b:dd:f9:ec:aa:d5: ed:63:70:e8:bd:4c:3c:b8:93:28:d0:58:c8:fa:08:58:72:22: d1:75:60:e4:bf:c5:82:8c:53:23:71:f0:5a:7c:36:15:c9:9b: 38:ed:e9:e8:e3:93:74:ff:97:5d:2b:35:a2:62:94:1a:03:7a: 3c:ce:50:af:18:ed:95:35:ec:cb:58:c3:a8:d1:dd:18:a6:dd: 90:6d:7d:61:09:9a:d5:e6:ee:45:e4:a5:aa:b4:52:05:7b:32: ff:14:81:d3:47:ab:f5:8e:07:10:13:af:03:a9:ef:b3:e7:83: 4d:cd:c1:80:1f:20:4f:67:14:55:36:7b:d6:f2:1c:8b:61:a8: bd:5c:61:f0:10:0a:6a:22:24:b8:6f:ce:d4:fe:12:63:b3:80: 53:c2:ca:c5:92:84:e7:f2:85:a8:0d:04:20:97:b4:fe:a7:ff: b1:b7:e4:df:47:71:a6:34:50:59:3f:d4:e7:12:22:77:40:48: e8:12:f8:b0:db:a5:5c:0b:e3:cf:23:13:13:03:6f:ec:82:2c: d8:c3:44:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nig8l9b2juVvXfuF07jpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjgwYWQ3NDFlNzIzMjgwODVkNWZhNTc5N2E4NDUxZjVm YjAyMzgwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDUwNzNkOTVjMTFiNDAxM2IxMzA3MzNlYjg2NDM2OWM1ZGYwNzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydUivufeudsmyP9deKMgPMJeJpGr ILveayRL6ibZLoNUDWOBnBua8i+839QZbUxD9dzf+ZEKU255ShPlrEK8poYICuOi +DGKhD6CHbpH5ujyZsfxrEpixyAoLqyIHN0OkMgf8mtt9tP/MlnRyoITVC8pVKES InN39QkPY6O/dHnTVLzxmxw7wFKs4htZat7icaJEXmhmQpOJEzcnM0c/MJorlH2H DSJ6RDfEdHz21ahWhZVKbSvJRa4QmHY8mF3qsoE4hsRbkOv69MCAAZr1jlvCQL0e d8owHD6u0u129mSj46wGW+foTe6yho8GVnfFbjDuZYgmg5owritoDNVLWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBQc9lcEbQBOxMHM+uGQ2nF3weUMB8GA1UdIwQY MBaAFBAoCtdB5yMoCF1fpXl6hFH1+wI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hYmJiOWYtNGYxMC00ZTQ0LWFjYTMt MDQyNzVhMjkxOWE3LzEvY0ZCejJWd1J0QUU3RXdjejY0WkRhY1hmQjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hYmJiOWYtNGYxMC00ZTQ0LWFjYTMtMDQyNzVhMjkxOWE3 LzEvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVOgMA0G CSqGSIb3DQEBCwUAA4IBAQCuIEyh94/NBUwui0/iDMZKDfWBtmiM20gUs9IUbRZj A2cr/hCZOFnYP8WBTQSE8qqb3fnsqtXtY3DovUw8uJMo0FjI+ghYciLRdWDkv8WC jFMjcfBafDYVyZs47eno45N0/5ddKzWiYpQaA3o8zlCvGO2VNezLWMOo0d0Ypt2Q bX1hCZrV5u5F5KWqtFIFezL/FIHTR6v1jgcQE68Dqe+z54NNzcGAHyBPZxRVNnvW 8hyLYai9XGHwEApqIiS4b87U/hJjs4BTwsrFkoTn8oWoDQQgl7T+p/+xt+TfR3Gm NFBZP9TnEiJ3QEjoEviw26VcC+PPIxMTA2/sgizYw0Tj -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:25 2026 by rpki-client