This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa File: tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa (raw, json) Hash identifier: pkquP667+a+Kvcmf+y2tDteV7M1Wm88bqo9mUrnbncY= Subject key identifier: B4:4E:B3:AC:36:1D:8F:72:A2:61:A2:AF:65:9C:3E:9B:9C:14:50:4C Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071 Certificate serial: 019B7E389F0F39DF955A839BF00828656CE1 Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 185.52.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.mft rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:0f:39:df:95:5a:83:9b:f0:08:28:65:6c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071 Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b44eb3ac361d8f72a261a2af659c3e9b9c14504c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:c0:81:52:6a:90:0a:6a:61:0f:63:2f:1b: f9:7b:c5:52:d5:14:cb:98:04:ac:14:49:54:d9:11: bf:78:98:bb:d4:5d:aa:55:7e:86:26:0e:9e:78:0b: d5:50:80:e5:62:c9:7d:bd:cf:a3:27:1f:2d:a9:ab: 29:00:5f:74:6c:75:6b:8b:c8:3d:c2:57:8e:cc:c0: 0f:9c:b5:a5:43:0a:13:c1:bd:a5:ff:68:7e:4a:11: 88:22:fb:1d:42:68:63:a0:5f:a4:c1:6c:70:52:69: 0c:cb:57:ff:80:0a:c6:e5:b0:4a:7f:90:17:dc:d0: aa:8c:54:58:b3:1d:1a:89:49:b6:59:76:a5:e0:ea: 81:7a:e7:71:76:b7:47:07:39:25:e2:78:5c:2d:3e: db:0a:e2:19:a7:c7:f6:03:e3:90:f6:11:0c:2e:14: e3:2f:c8:67:87:be:ca:5f:7c:41:21:d7:eb:34:13: 6b:50:a9:33:f1:89:33:63:44:e0:d3:f8:9e:81:88: 06:a3:1a:e4:85:9f:a2:75:9e:15:7e:a2:5b:b1:86: f5:d1:7e:1d:c0:d1:bd:9a:21:53:e9:18:6c:9d:10: ea:eb:61:23:91:ec:56:d7:db:10:d0:74:bb:bb:84: 5f:36:0d:ed:a1:d5:38:3b:53:61:9a:84:57:c0:64: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4E:B3:AC:36:1D:8F:72:A2:61:A2:AF:65:9C:3E:9B:9C:14:50:4C X509v3 Authority Key Identifier: keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/tE6zrDYdj3KiYaKvZZw-m5wUUEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.4.0/22 Signature Algorithm: sha256WithRSAEncryption 16:43:ef:eb:b9:b5:5a:86:2f:83:b7:e0:20:55:51:25:58:53: 8c:25:38:44:7c:5f:d5:d0:fb:f5:d7:04:73:69:f5:22:31:b1: 39:26:11:75:35:1a:22:b7:e2:4b:a1:f6:4c:71:2d:1b:4b:2b: 36:ac:e4:ba:76:43:92:0b:62:00:f8:24:4e:cc:d2:14:d5:82: 6b:ba:20:55:48:73:21:aa:14:63:d2:25:fc:d5:83:aa:df:2e: 60:95:2b:ba:50:23:69:52:32:77:4c:b2:fd:3f:0b:f5:f0:de: f4:2d:19:6b:00:62:1a:1c:63:89:73:88:5e:0d:1e:43:8b:84: 6f:f1:0a:2a:aa:aa:2d:9e:cb:68:d2:75:c7:8d:16:0a:f6:47: c7:00:7d:0b:22:d0:8f:29:68:de:5e:a0:b3:d6:99:36:8f:9c: 20:5a:af:e8:d4:76:db:78:77:5f:66:be:63:44:73:4b:ca:b8: 52:04:07:d8:39:f1:b8:82:ee:5e:17:96:57:17:0b:dd:54:85: 5f:ee:76:19:9c:e4:6d:16:7b:49:2c:e1:d9:e6:9a:80:bf:1a: 03:54:58:85:f0:3f:3a:59:82:24:ba:ec:71:b7:54:90:be:8e: d3:08:2d:be:c5:8c:1e:2f:49:db:92:17:9c:43:ee:6c:2b:d8: cb:e4:5d:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ8POd+VWoOb8AgoZWzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNWQyOGQxNjYyNmJjNWRjYWJmMmU5MTU0MzU3ODJiOTZl MTQwNzEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDRlYjNhYzM2MWQ4ZjcyYTI2MWEyYWY2NTljM2U5YjljMTQ1MDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAPAgVJqkApqYQ9jLxv5e8VS1RTL mASsFElU2RG/eJi71F2qVX6GJg6eeAvVUIDlYsl9vc+jJx8tqaspAF90bHVri8g9 wleOzMAPnLWlQwoTwb2l/2h+ShGIIvsdQmhjoF+kwWxwUmkMy1f/gArG5bBKf5AX 3NCqjFRYsx0aiUm2WXal4OqBeudxdrdHBzkl4nhcLT7bCuIZp8f2A+OQ9hEMLhTj L8hnh77KX3xBIdfrNBNrUKkz8YkzY0Tg0/iegYgGoxrkhZ+idZ4VfqJbsYb10X4d wNG9miFT6RhsnRDq62EjkexW19sQ0HS7u4RfNg3todU4O1NhmoRXwGTZxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLROs6w2HY9yomGir2WcPpucFFBMMB8GA1UdIwQY MBaAFLBdKNFmJrxdyr8ukVQ1eCuW4UBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEt YWQ1NzU1MjJiMzY1LzEvdEU2enJEWWRqM0tpWWFLdlpady1tNXdVVUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYmE5NzMtN2M5Zi00YjExLWI2MTEtYWQ1NzU1MjJiMzY1 LzEvc0YwbzBXWW12RjNLdnk2UlZEVjRLNWJoUUhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTQEMA0G CSqGSIb3DQEBCwUAA4IBAQAWQ+/rubVahi+Dt+AgVVElWFOMJThEfF/V0Pv11wRz afUiMbE5JhF1NRoit+JLofZMcS0bSys2rOS6dkOSC2IA+CROzNIU1YJruiBVSHMh qhRj0iX81YOq3y5glSu6UCNpUjJ3TLL9Pwv18N70LRlrAGIaHGOJc4heDR5Di4Rv 8Qoqqqotnsto0nXHjRYK9kfHAH0LItCPKWjeXqCz1pk2j5wgWq/o1HbbeHdfZr5j RHNLyrhSBAfYOfG4gu5eF5ZXFwvdVIVf7nYZnORtFntJLOHZ5pqAvxoDVFiF8D86 WYIkuuxxt1SQvo7TCC2+xYweL0nbkhecQ+5sK9jL5F0y -----END CERTIFICATE-----Generated at Tue Jan 20 04:48:53 2026 by rpki-client