This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/exHlZbA9ecU2iVgiMPKKZPhmcSg.roa File: exHlZbA9ecU2iVgiMPKKZPhmcSg.roa (raw, json) Hash identifier: DmuG2rd/8rphG/dmqlj3swfEdleaGRNUh2TlWVB35X0= Subject key identifier: 7B:11:E5:65:B0:3D:79:C5:36:89:58:22:30:F2:8A:64:F8:66:71:28 Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac Certificate serial: 019B7834B85DE04F5B831FB6C06DE49804BE Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/exHlZbA9ecU2iVgiMPKKZPhmcSg.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 146943 IP address blocks: 185.131.53.0/24 maxlen: 24 185.131.54.0/24 maxlen: 24 185.131.55.0/24 maxlen: 24 188.241.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b8:5d:e0:4f:5b:83:1f:b6:c0:6d:e4:98:04:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b11e565b03d79c53689582230f28a64f8667128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6f:66:46:91:12:1b:bb:32:3a:61:38:0a:10: 40:bf:b8:e2:f7:f0:1d:1b:8e:00:77:e3:3f:e2:33: 1d:d5:b7:c8:f7:61:93:e7:ac:0c:21:4a:0b:6b:dd: d9:65:b8:09:92:e9:85:11:98:01:31:54:d7:2e:a1: a6:51:45:bf:1b:ae:08:5c:38:7f:54:6f:44:00:43: d8:c6:aa:2a:fe:f1:96:d4:b0:da:ad:4d:64:c3:c4: b8:bb:8e:6f:8d:04:89:f0:2b:74:14:66:4e:31:bd: 97:1e:86:50:71:7e:29:57:aa:cc:ab:01:26:92:96: 72:fd:73:f6:a5:76:1e:ba:09:df:80:eb:6c:1a:c8: ed:b8:e8:23:0a:68:d7:54:70:de:81:db:2a:61:d5: 83:36:8c:8b:9b:ef:3a:12:ac:46:98:ab:a8:ff:3a: da:3e:58:40:c2:ff:11:ca:3c:77:dc:1b:35:c5:48: e7:a0:59:e4:72:64:d0:40:60:03:db:75:e8:e5:7a: 8a:3d:34:c1:f7:7c:56:89:86:a7:01:3c:bb:e9:8b: e6:97:06:47:1b:4c:fe:70:00:48:54:a5:8b:45:cd: 30:3c:08:35:99:8e:80:60:0b:51:c2:2b:e5:d4:05: 93:12:54:28:ab:f2:e1:eb:17:b3:8f:55:b5:33:12: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:11:E5:65:B0:3D:79:C5:36:89:58:22:30:F2:8A:64:F8:66:71:28 X509v3 Authority Key Identifier: keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/exHlZbA9ecU2iVgiMPKKZPhmcSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.53.0-185.131.55.255 188.241.187.0/24 Signature Algorithm: sha256WithRSAEncryption 10:82:62:b3:6a:01:6d:09:c3:73:3e:ac:bc:7d:b8:49:85:71: b8:0a:5f:1b:23:4a:4a:49:fe:36:f3:2d:95:0d:cf:6d:f8:cc: 2d:05:97:94:04:9c:c3:07:25:4d:07:cf:b9:3b:7c:c5:46:fc: 48:cd:fe:11:48:dc:a4:1a:84:d7:5c:9c:39:21:3a:67:d2:0c: c5:fd:f2:5d:22:87:2c:50:64:a4:3e:0b:96:45:bc:37:d1:7a: 87:8b:6b:ec:41:c0:fc:7d:81:bc:27:57:07:6f:20:a5:8d:db: 42:ee:6b:b4:93:fe:b3:24:f0:34:a9:7b:c8:76:90:31:86:a3: 1f:3f:0e:0d:4e:4a:3a:b5:4d:78:60:2f:16:28:ed:79:15:3f: 7a:fc:ea:ff:60:f2:77:b4:f8:ed:7e:05:ca:6f:0c:dd:60:ad: a8:46:64:2d:71:6e:e9:9a:6b:33:39:71:4a:8b:c9:73:0a:21: c3:bc:56:b9:2c:91:2b:0a:49:5a:cf:24:6b:79:35:65:f2:38: d1:e3:a0:fc:91:40:27:45:33:2e:d9:ba:ce:41:e1:5a:8f:4f: 2e:1d:a5:98:80:43:68:34:52:b5:0f:e2:89:79:da:a1:0c:a6: 1c:3f:54:f6:9c:4d:69:77:03:a9:1c:60:28:5f:7a:1f:96:8d: 76:82:80:2a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NLhd4E9bgx+2wG3kmAS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk MTdiYWMwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjExZTU2NWIwM2Q3OWM1MzY4OTU4MjIzMGYyOGE2NGY4NjY3MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW9mRpESG7syOmE4ChBAv7ji9/Ad G44Ad+M/4jMd1bfI92GT56wMIUoLa93ZZbgJkumFEZgBMVTXLqGmUUW/G64IXDh/ VG9EAEPYxqoq/vGW1LDarU1kw8S4u45vjQSJ8Ct0FGZOMb2XHoZQcX4pV6rMqwEm kpZy/XP2pXYeugnfgOtsGsjtuOgjCmjXVHDegdsqYdWDNoyLm+86EqxGmKuo/zra PlhAwv8Ryjx33Bs1xUjnoFnkcmTQQGAD23Xo5XqKPTTB93xWiYanATy76YvmlwZH G0z+cABIVKWLRc0wPAg1mY6AYAtRwivl1AWTElQoq/Lh6xezj1W1MxKtFwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHsR5WWwPXnFNolYIjDyimT4ZnEoMB8GA1UdIwQY MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt N2Y0MzViZjU1MDFjLzEvZXhIbFpiQTllY1UyaVZnaU1QS0taUGhtY1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAC5gzUD BAO5gzADBAC88bswDQYJKoZIhvcNAQELBQADggEBABCCYrNqAW0Jw3M+rLx9uEmF cbgKXxsjSkpJ/jbzLZUNz234zC0Fl5QEnMMHJU0Hz7k7fMVG/EjN/hFI3KQahNdc nDkhOmfSDMX98l0ihyxQZKQ+C5ZFvDfReoeLa+xBwPx9gbwnVwdvIKWN20Lua7ST /rMk8DSpe8h2kDGGox8/Dg1OSjq1TXhgLxYo7XkVP3r86v9g8ne0+O1+BcpvDN1g rahGZC1xbumaazM5cUqLyXMKIcO8VrkskSsKSVrPJGt5NWXyONHjoPyRQCdFMy7Z us5B4VqPTy4dpZiAQ2g0UrUP4ol52qEMphw/VPacTWl3A6kcYChfeh+WjXaCgCo= -----END CERTIFICATE-----Generated at Thu Jan 22 23:34:15 2026 by rpki-client