This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/D7D_loV99KzoBrA79hPAtRanPvk.roa File: D7D_loV99KzoBrA79hPAtRanPvk.roa (raw, json) Hash identifier: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk= Subject key identifier: 0F:B0:FF:96:85:7D:F4:AC:E8:06:B0:3B:F6:13:C0:B5:16:A7:3E:F9 Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019B76EB2A9F9A1BB288D05B38402B71950F Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/D7D_loV99KzoBrA79hPAtRanPvk.roa Signing time: Thu 01 Jan 2026 00:18:01 +0000 ROA not before: Thu 01 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 185.255.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:2a:9f:9a:1b:b2:88:d0:5b:38:40:2b:71:95:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fb0ff96857df4ace806b03bf613c0b516a73ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:14:fe:53:44:e9:8d:0c:e0:fb:96:66:23:62: d1:f4:bc:dc:46:8b:df:9f:65:b5:b7:48:93:f6:dd: 40:09:48:26:e0:91:86:09:4d:1d:5c:88:e7:ce:40: 38:1a:8a:1b:c9:21:78:d5:e6:c8:3b:96:69:3c:fc: 78:c5:a8:a3:85:e6:2f:ee:a5:1e:d5:b2:72:2e:12: 22:41:8b:8a:ae:4e:73:78:f1:18:01:da:f6:a7:f9: 91:e3:0a:c6:94:4b:4d:78:06:83:be:ec:63:1b:0a: ed:9e:dd:86:f7:54:73:cb:bd:1a:c5:96:5d:78:2a: d4:9f:5e:11:ac:e8:08:d5:64:33:b1:df:11:71:26: 62:90:e8:ac:2f:82:07:83:7c:87:ea:55:35:5d:3b: 4a:f2:97:0d:f2:b8:d3:1f:8f:26:1e:a5:33:28:e3: f7:f9:40:89:45:6c:9b:9e:30:ad:17:1c:72:b5:3e: 57:d5:fe:d9:23:00:46:f6:72:7e:ea:c2:d0:26:55: 49:df:be:88:f1:7d:45:fb:07:43:ad:0d:2f:ff:13: 38:be:09:8c:f6:3b:12:ce:12:35:35:ed:9b:26:5c: dc:16:39:53:1b:49:07:df:3a:46:27:86:12:3c:a1: f8:42:86:8c:16:0c:31:8b:dd:46:44:d8:65:7b:09: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B0:FF:96:85:7D:F4:AC:E8:06:B0:3B:F6:13:C0:B5:16:A7:3E:F9 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/D7D_loV99KzoBrA79hPAtRanPvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.197.0/24 Signature Algorithm: sha256WithRSAEncryption ae:6a:98:b9:f7:29:fa:86:12:ea:f3:38:7a:24:61:7d:2f:51: ca:42:10:6e:38:75:71:ab:ea:02:73:bb:2d:7e:1a:cf:26:da: cb:df:78:b3:1a:15:43:f2:f7:b0:e7:f7:a8:a1:cd:77:13:a0: 89:2a:de:05:92:dc:5b:b6:fe:c6:50:40:a6:e8:f7:15:4a:e9: 3f:8c:77:b2:8a:e5:7b:bc:8d:27:48:1b:e5:d0:21:7c:5c:c8: e2:c8:0b:3b:8b:8d:37:f6:c7:11:bf:cc:e5:42:be:70:61:52: a0:cc:13:98:e4:fe:50:0f:b1:34:55:66:d0:65:e4:5d:eb:9c: 62:d9:fa:4b:42:a2:4b:7d:01:a5:9e:50:30:9b:1f:6b:5f:e4: 4d:35:e1:35:81:ea:be:17:86:d3:5a:8e:6f:6f:15:a2:98:10: 27:0e:83:10:64:5f:c4:8b:b8:a7:e4:47:d2:f4:4d:6c:84:13: 41:6c:88:ee:65:9e:51:67:9d:5e:36:e4:7c:1a:e7:32:fa:a4: a1:2f:76:e4:96:5b:76:4e:ef:7c:95:82:7f:59:84:72:16:3e: 2a:e7:5b:9b:96:42:40:39:b3:fe:8c:d1:6f:d1:b5:0c:6e:73: c7:10:5c:39:ac:93:b2:fa:a6:fd:f2:46:23:b4:a9:96:4e:b0: 03:4e:12:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yqfmhuyiNBbOEArcZUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmIwZmY5Njg1N2RmNGFjZTgwNmIwM2JmNjEzYzBiNTE2YTczZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhT+U0TpjQzg+5ZmI2LR9LzcRovf n2W1t0iT9t1ACUgm4JGGCU0dXIjnzkA4GoobySF41ebIO5ZpPPx4xaijheYv7qUe 1bJyLhIiQYuKrk5zePEYAdr2p/mR4wrGlEtNeAaDvuxjGwrtnt2G91Rzy70axZZd eCrUn14RrOgI1WQzsd8RcSZikOisL4IHg3yH6lU1XTtK8pcN8rjTH48mHqUzKOP3 +UCJRWybnjCtFxxytT5X1f7ZIwBG9nJ+6sLQJlVJ376I8X1F+wdDrQ0v/xM4vgmM 9jsSzhI1Ne2bJlzcFjlTG0kH3zpGJ4YSPKH4QoaMFgwxi91GRNhlewk3tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+w/5aFffSs6AawO/YTwLUWpz75MB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvRDdEX2xvVjk5S3pvQnJBNzloUEF0UmFuUHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf/FMA0G CSqGSIb3DQEBCwUAA4IBAQCuapi59yn6hhLq8zh6JGF9L1HKQhBuOHVxq+oCc7st fhrPJtrL33izGhVD8vew5/eooc13E6CJKt4Fktxbtv7GUECm6PcVSuk/jHeyiuV7 vI0nSBvl0CF8XMjiyAs7i4039scRv8zlQr5wYVKgzBOY5P5QD7E0VWbQZeRd65xi 2fpLQqJLfQGlnlAwmx9rX+RNNeE1geq+F4bTWo5vbxWimBAnDoMQZF/Ei7in5EfS 9E1shBNBbIjuZZ5RZ51eNuR8Gucy+qShL3bkllt2Tu98lYJ/WYRyFj4q51ublkJA ObP+jNFv0bUMbnPHEFw5rJOy+qb98kYjtKmWTrADThJC -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:36 2026 by rpki-client