This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/PRf1LS_LP0qS88N_ayNpAAcnkow.roa File: PRf1LS_LP0qS88N_ayNpAAcnkow.roa (raw, json) Hash identifier: 8w2iytIBhAZgJ6MfqYVy5FcnMvWSHpnknQ6QMhqDObg= Subject key identifier: 3D:17:F5:2D:2F:CB:3F:4A:92:F3:C3:7F:6B:23:69:00:07:27:92:8C Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Certificate serial: 019B7C80A7C83D70E968B764B0D8AE773CF9 Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/PRf1LS_LP0qS88N_ayNpAAcnkow.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206549 IP address blocks: 185.181.224.0/22 maxlen: 22 2a0a:d480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a7:c8:3d:70:e9:68:b7:64:b0:d8:ae:77:3c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d17f52d2fcb3f4a92f3c37f6b2369000727928c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:c5:5e:a8:df:5f:b7:ae:06:fe:f6:e1:e3: 13:6a:fb:d8:95:31:77:ae:8d:07:1f:e1:a1:82:b2: 91:91:c0:42:33:fb:ea:db:17:f2:56:09:bd:2f:f4: 19:5d:78:f1:13:52:52:fa:a7:88:44:8a:4f:fd:67: cc:10:8e:41:b4:f9:d9:19:3d:c7:18:9d:b4:07:ce: 24:58:86:ab:aa:b8:3e:3e:a2:5a:c0:59:a8:c7:46: 7f:d2:7b:85:1e:a9:c2:5e:fb:24:1f:df:5a:28:46: 76:26:b1:a5:78:18:97:3c:0b:9f:b4:4e:48:5a:a2: 24:68:a5:3d:92:94:93:94:3d:4e:f9:6c:c3:de:e0: 5d:ed:ec:2f:1d:ea:7a:3c:e0:a3:e4:2b:7b:b0:99: fa:d5:70:e6:fe:73:6a:5d:e2:67:22:24:97:51:7b: f5:3f:43:be:ed:61:36:6e:dc:f2:ce:8e:79:17:ff: 85:8c:da:09:8d:be:d0:b7:54:66:33:cd:5c:06:b4: 68:fb:a2:62:48:0d:5a:47:d8:28:af:6e:24:9e:91: e6:57:b0:25:87:1e:17:ff:05:71:70:07:24:d2:ec: 96:2d:1e:dd:12:0f:90:49:bf:a7:f3:7a:50:54:3c: 23:b1:60:83:67:cb:30:ab:73:62:d3:b9:d6:db:dd: 3f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:F5:2D:2F:CB:3F:4A:92:F3:C3:7F:6B:23:69:00:07:27:92:8C X509v3 Authority Key Identifier: keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/PRf1LS_LP0qS88N_ayNpAAcnkow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.181.224.0/22 IPv6: 2a0a:d480::/29 Signature Algorithm: sha256WithRSAEncryption 29:c9:fe:1d:d2:8e:a0:36:04:47:af:6a:e5:db:37:71:91:28: 4b:e0:41:ba:5f:4a:a0:49:e5:58:81:94:1f:8b:49:62:78:b8: 7d:3f:98:c6:bc:b4:f7:a8:93:aa:52:eb:28:93:bc:8b:ce:63: 2b:bf:97:55:24:3b:5a:4c:8b:36:20:12:28:6d:3c:93:be:8e: 84:7c:eb:52:33:2f:7c:93:4a:52:33:7c:ba:df:89:92:0d:b6: 22:05:db:fb:e5:fc:36:c5:bb:22:ff:c3:c2:bd:fb:0b:52:50: 42:2b:d8:4e:8a:c8:62:4a:84:b4:6a:2b:04:a5:43:a8:d7:4e: 7b:92:61:65:48:20:41:9d:4b:fd:31:04:fa:81:f9:f1:4b:1d: 43:40:32:66:ed:ca:6c:5d:93:30:54:28:2b:da:5b:f6:bd:fc: 78:d2:5c:63:d1:3e:bd:13:fa:5d:95:2f:02:08:b9:83:b6:65: 87:8f:05:57:15:1d:2b:2a:90:4b:de:5b:91:48:e1:16:5b:48: 96:f5:1d:33:62:8d:63:ce:7a:7c:44:4b:4b:4b:6a:e2:42:1a: 2e:32:bd:53:3b:b4:05:97:a3:5d:24:17:d8:0b:22:ea:33:35: 7d:0a:98:7d:97:94:31:d3:6b:3b:2e:9d:a7:88:62:52:9e:20: 48:aa:24:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gKfIPXDpaLdksNiudzz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0YTMwYjYwZDIzZDc0ZTgyMjZiY2Q1ZTE1ZGM1YmY3NzBh ZDMwN2UwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDE3ZjUyZDJmY2IzZjRhOTJmM2MzN2Y2YjIzNjkwMDA3Mjc5MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuLFXqjfX7euBv724eMTavvYlTF3 ro0HH+GhgrKRkcBCM/vq2xfyVgm9L/QZXXjxE1JS+qeIRIpP/WfMEI5BtPnZGT3H GJ20B84kWIarqrg+PqJawFmox0Z/0nuFHqnCXvskH99aKEZ2JrGleBiXPAuftE5I WqIkaKU9kpSTlD1O+WzD3uBd7ewvHep6POCj5Ct7sJn61XDm/nNqXeJnIiSXUXv1 P0O+7WE2btzyzo55F/+FjNoJjb7Qt1RmM81cBrRo+6JiSA1aR9gor24knpHmV7Al hx4X/wVxcAck0uyWLR7dEg+QSb+n83pQVDwjsWCDZ8swq3Ni07nW290/RQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD0X9S0vyz9KkvPDf2sjaQAHJ5KMMB8GA1UdIwQY MBaAFCSjC2DSPXToImvNXhXcW/dwrTB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmIt OGIzYmY4YmY5OGViLzEvUFJmMUxTX0xQMHFTODhOX2F5TnBBQWNua293LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82YTNkM2UtMjVmZC00MmZmLWE1ZmItOGIzYmY4YmY5OGVi LzEvSktNTFlOSTlkT2dpYTgxZUZkeGI5M0N0TUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubXgMA0E AgACMAcDBQMqCtSAMA0GCSqGSIb3DQEBCwUAA4IBAQApyf4d0o6gNgRHr2rl2zdx kShL4EG6X0qgSeVYgZQfi0lieLh9P5jGvLT3qJOqUusok7yLzmMrv5dVJDtaTIs2 IBIobTyTvo6EfOtSMy98k0pSM3y634mSDbYiBdv75fw2xbsi/8PCvfsLUlBCK9hO ishiSoS0aisEpUOo1057kmFlSCBBnUv9MQT6gfnxSx1DQDJm7cpsXZMwVCgr2lv2 vfx40lxj0T69E/pdlS8CCLmDtmWHjwVXFR0rKpBL3luRSOEWW0iW9R0zYo1jznp8 REtLS2riQhouMr1TO7QFl6NdJBfYCyLqMzV9Cph9l5Qx02s7Lp2niGJSniBIqiSo -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:38 2026 by rpki-client