This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/adYAw1QARYUATfxCFb6i8Q_fm-o.roa File: adYAw1QARYUATfxCFb6i8Q_fm-o.roa (raw, json) Hash identifier: QPoF7S4xS1/LhTKBOqbjrxIWUWpnI5hm5nl1XAjSOeg= Subject key identifier: 69:D6:00:C3:54:00:45:85:00:4D:FC:42:15:BE:A2:F1:0F:DF:9B:EA Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Certificate serial: 019B7AC8A79E3ACC6BB1FD993849CF07F62D Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/adYAw1QARYUATfxCFb6i8Q_fm-o.roa Signing time: Thu 01 Jan 2026 18:18:49 +0000 ROA not before: Thu 01 Jan 2026 18:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.109.0.0/16 maxlen: 16 192.108.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a7:9e:3a:cc:6b:b1:fd:99:38:49:cf:07:f6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d600c354004585004dfc4215bea2f10fdf9bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:06:0c:56:85:d2:4e:e4:5c:54:63:7e:4c:86: 79:fe:50:81:04:23:f4:15:b7:ef:c6:c8:fe:31:22: b7:cc:ab:52:08:64:0f:bf:1e:10:54:d3:3e:cb:8d: 0a:c1:46:52:2d:0d:a3:33:e3:ac:38:15:0d:56:5f: d4:24:e9:46:8c:e4:ed:f9:7d:2c:4c:fe:52:6b:e3: ef:b3:4a:56:a5:88:68:e2:cd:0e:ce:b8:cf:be:95: a1:36:0e:e2:b3:fb:4d:f7:84:9b:ac:36:ae:b4:5c: c5:b6:2a:f0:84:d0:93:ef:c3:e3:59:83:e4:0e:73: f3:83:2b:0d:11:7f:40:6a:77:c2:da:3d:4b:ea:39: 73:54:48:77:93:e5:bd:02:55:54:e9:02:75:a5:a9: 60:2b:c8:13:70:70:70:72:eb:ff:43:c1:e2:f3:a5: 5b:ca:a3:ae:fc:b7:1b:a4:7f:0e:ab:c5:78:62:91: 8e:4e:f1:cb:f0:c5:35:03:fb:de:8f:00:14:bf:4b: bd:b9:4d:fd:1f:f2:c7:f6:d1:04:03:27:e5:0d:d3: 7d:23:fe:86:40:42:61:70:19:29:d0:ad:5e:5a:5f: 14:43:a3:e5:bf:f0:17:3d:2b:e9:ba:29:a8:77:7f: 03:87:a4:ea:28:8d:6c:1f:30:5e:40:f5:51:39:b7: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D6:00:C3:54:00:45:85:00:4D:FC:42:15:BE:A2:F1:0F:DF:9B:EA X509v3 Authority Key Identifier: keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/adYAw1QARYUATfxCFb6i8Q_fm-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.109.0.0/16 192.108.33.0/24 Signature Algorithm: sha256WithRSAEncryption a1:3c:5d:18:1e:18:f5:75:2b:23:5d:79:da:03:ec:b2:a7:6f: 47:1f:51:33:d8:0e:62:c6:48:48:a0:2f:bf:1e:c3:e3:35:36: 52:0d:db:3b:23:a0:94:04:fb:05:a2:34:c5:12:98:00:be:8b: 8c:c6:cd:35:06:ac:58:b6:24:37:14:10:3e:e4:cd:27:09:aa: 46:b2:f5:48:0f:fb:ef:36:d3:e0:d3:c2:16:59:77:e4:29:ae: db:f1:8a:63:ef:bf:53:32:55:9e:76:03:02:cc:fc:1e:a1:d6: 27:d9:3b:cb:6a:3b:31:90:6d:5d:3f:b7:04:a4:21:a7:85:44: a5:3c:18:96:30:26:2f:bb:db:a0:36:2e:9a:44:96:9d:41:d3: 12:4a:5d:2e:6e:b6:ab:41:df:cb:0e:0c:20:81:eb:b0:e9:71: ca:f1:7d:55:a4:dc:2c:32:0d:d5:9b:9d:ab:3d:6d:8c:c6:5b: e2:4b:fb:42:a4:55:ca:d9:a6:96:3f:b5:89:96:6a:42:e8:c0: 45:76:5f:aa:0c:a0:dc:57:98:4f:ad:86:cd:17:23:8a:4d:a7: 2f:a6:2f:d4:f0:1d:8f:1e:34:8e:97:49:42:ef:f4:bf:8f:26: 35:b3:dc:b9:48:c1:7b:ee:6f:69:ca:cf:98:76:b6:a7:ff:e2: 8a:38:b9:bc -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt6yKeeOsxrsf2ZOEnPB/YtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmU0NjFlYjlmNzAwNGYyOWExN2ZkZGRmZWYyZTJlYTA1 ZWI5YWYwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWQ2MDBjMzU0MDA0NTg1MDA0ZGZjNDIxNWJlYTJmMTBmZGY5YmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gYMVoXSTuRcVGN+TIZ5/lCBBCP0 Fbfvxsj+MSK3zKtSCGQPvx4QVNM+y40KwUZSLQ2jM+OsOBUNVl/UJOlGjOTt+X0s TP5Sa+Pvs0pWpYho4s0OzrjPvpWhNg7is/tN94SbrDautFzFtirwhNCT78PjWYPk DnPzgysNEX9AanfC2j1L6jlzVEh3k+W9AlVU6QJ1palgK8gTcHBwcuv/Q8Hi86Vb yqOu/LcbpH8Oq8V4YpGOTvHL8MU1A/vejwAUv0u9uU39H/LH9tEEAyflDdN9I/6G QEJhcBkp0K1eWl8UQ6Plv/AXPSvpuimod38Dh6TqKI1sHzBeQPVRObdj5QIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFGnWAMNUAEWFAE38QhW+ovEP35vqMB8GA1UdIwQY MBaAFHa+Rh659wBPKaF/3d/vLi6gXrmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2Yt ODhjZmEzZGNhNmRlLzEvYWRZQXcxUUFSWVVBVGZ4Q0ZiNmk4UV9mbS1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNjgwYmYtOWI2Yy00NGQzLTgzN2YtODhjZmEzZGNhNmRl LzEvZHI1R0hybjNBRThwb1hfZDMtOHVMcUJldWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAhm0DBADA bCEwDQYJKoZIhvcNAQELBQADggEBAKE8XRgeGPV1KyNdedoD7LKnb0cfUTPYDmLG SEigL78ew+M1NlIN2zsjoJQE+wWiNMUSmAC+i4zGzTUGrFi2JDcUED7kzScJqkay 9UgP++820+DTwhZZd+QprtvximPvv1MyVZ52AwLM/B6h1ifZO8tqOzGQbV0/twSk IaeFRKU8GJYwJi+726A2LppElp1B0xJKXS5utqtB38sODCCB67DpccrxfVWk3Cwy DdWbnas9bYzGW+JL+0KkVcrZppY/tYmWakLowEV2X6oMoNxXmE+ths0XI4pNpy+m L9TwHY8eNI6XSULv9L+PJjWz3LlIwXvub2nKz5h2tqf/4oo4ubw= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:14 2026 by rpki-client