This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/p0ufMcpYNwVQWNab88QT5yQavFU.roa File: p0ufMcpYNwVQWNab88QT5yQavFU.roa (raw, json) Hash identifier: mL3XJ5t6SmhWhL4iXobgkQwIefMZwzLnCnAYR2ZqxCQ= Subject key identifier: A7:4B:9F:31:CA:58:37:05:50:58:D6:9B:F3:C4:13:E7:24:1A:BC:55 Certificate issuer: /CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2 Certificate serial: 019B7BA33A3EFEBC1E0C6295DD17ACC7D196 Authority key identifier: 1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/p0ufMcpYNwVQWNab88QT5yQavFU.roa Signing time: Thu 01 Jan 2026 22:17:33 +0000 ROA not before: Thu 01 Jan 2026 22:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199540 IP address blocks: 185.144.98.0/24 maxlen: 24 2a13:ae80::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.mft rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:3a:3e:fe:bc:1e:0c:62:95:dd:17:ac:c7:d1:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff1ce9ae2563102bf8ea72a89e06152ef7058b2 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a74b9f31ca5837055058d69bf3c413e7241abc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:f2:09:1f:5c:63:75:a9:4e:74:d0:7a:c8: 64:85:d7:49:a7:6e:45:a8:79:b0:7b:d0:52:e9:d4: 7f:6b:d7:3e:40:88:74:e5:1e:39:13:2c:2d:bd:a2: 7e:37:da:81:0d:ee:42:4f:f0:cb:0c:26:3f:81:f9: 6c:18:9e:d0:91:ee:7b:31:ad:ac:20:02:3e:e9:9f: b2:cf:3d:85:d4:7d:ad:1f:6d:c8:0a:ec:6c:65:ae: 96:4d:35:52:a6:1d:a6:c0:4d:52:df:8d:6e:e5:5f: ac:07:2a:7c:08:9d:01:fa:02:11:dd:64:96:72:70: 10:1f:38:db:c3:d2:17:71:27:19:84:fc:46:7a:47: b4:4c:f0:5e:55:92:d5:63:0c:b0:69:e2:67:8a:f1: 57:93:db:2f:cf:f3:76:c9:0f:53:52:90:48:de:bd: f7:b5:20:a6:ff:6c:06:3c:62:47:57:97:dc:08:ff: b2:de:b9:6d:47:ca:2e:db:50:82:ee:80:80:4c:5b: 92:77:14:f7:36:34:e7:a7:ad:68:b8:59:41:bc:70: 49:2f:b3:46:89:5c:08:b8:97:6b:2f:22:59:f0:fa: f5:a6:ed:ec:d6:37:da:27:28:69:90:30:1b:d2:26: 38:5d:5b:7e:c8:86:72:e5:2c:8b:79:98:2a:07:f3: 37:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:9F:31:CA:58:37:05:50:58:D6:9B:F3:C4:13:E7:24:1A:BC:55 X509v3 Authority Key Identifier: keyid:1F:F1:CE:9A:E2:56:31:02:BF:8E:A7:2A:89:E0:61:52:EF:70:58:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_HOmuJWMQK_jqcqieBhUu9wWLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/p0ufMcpYNwVQWNab88QT5yQavFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/ab112d-40e1-41d4-a724-a76299e8559f/1/H_HOmuJWMQK_jqcqieBhUu9wWLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.98.0/24 IPv6: 2a13:ae80::/32 Signature Algorithm: sha256WithRSAEncryption 6e:21:c7:df:da:29:8c:0d:c0:7b:03:32:23:3a:19:c3:7d:86: ec:c6:c0:5a:35:df:4c:86:57:ba:9d:6f:3f:a9:95:15:a1:04: 44:71:72:1c:d8:ff:b8:d4:f8:97:09:49:cf:33:fd:76:42:a2: 62:29:9e:14:d9:89:16:7a:67:4b:63:3e:db:8c:28:c0:d3:f1: 9d:38:7b:8e:5e:a8:1f:e2:11:ed:36:1e:ce:ce:25:2e:f2:03: 65:d8:5a:2d:ab:8c:f9:09:56:ed:8f:16:14:fe:59:be:89:92: 19:c6:0f:b3:0e:ed:2c:9f:86:65:67:0f:88:98:9f:89:97:66: 2e:30:26:03:84:f7:83:e9:1c:30:de:aa:07:ef:65:c3:55:a0: c4:76:4b:8f:c0:d5:bd:1c:ad:f3:8f:6a:6e:1e:6d:92:74:fe: 22:58:05:81:83:08:16:e4:11:27:18:5a:55:97:86:c2:03:c1: 32:a9:7d:44:9e:eb:f0:78:ad:0f:8b:d8:1f:3e:04:79:42:bd: a9:f1:9e:37:a8:24:33:c9:e1:d1:6e:74:30:4c:70:88:80:98: ec:b5:ab:11:89:59:b9:d5:03:a2:8a:a1:c6:df:51:a8:28:14: e9:05:4f:f5:3a:e6:95:b5:85:41:22:a8:07:f5:87:11:b9:87: 77:2d:4b:48 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7ozo+/rweDGKV3Resx9GWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZjFjZTlhZTI1NjMxMDJiZjhlYTcyYTg5ZTA2MTUyZWY3 MDU4YjIwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzRiOWYzMWNhNTgzNzA1NTA1OGQ2OWJmM2M0MTNlNzI0MWFiYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZvyCR9cY3WpTnTQeshkhddJp25F qHmwe9BS6dR/a9c+QIh05R45EywtvaJ+N9qBDe5CT/DLDCY/gflsGJ7Qke57Ma2s IAI+6Z+yzz2F1H2tH23ICuxsZa6WTTVSph2mwE1S341u5V+sByp8CJ0B+gIR3WSW cnAQHzjbw9IXcScZhPxGeke0TPBeVZLVYwywaeJnivFXk9svz/N2yQ9TUpBI3r33 tSCm/2wGPGJHV5fcCP+y3rltR8ou21CC7oCATFuSdxT3NjTnp61ouFlBvHBJL7NG iVwIuJdrLyJZ8Pr1pu3s1jfaJyhpkDAb0iY4XVt+yIZy5SyLeZgqB/M3dwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKdLnzHKWDcFUFjWm/PEE+ckGrxVMB8GA1UdIwQY MBaAFB/xzpriVjECv46nKongYVLvcFiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSF9IT211SldNUUtfanFjcWllQmhVdTl3V0xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hYjExMmQtNDBlMS00MWQ0LWE3MjQt YTc2Mjk5ZTg1NTlmLzEvcDB1Zk1jcFlOd1ZRV05hYjg4UVQ1eVFhdkZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hYjExMmQtNDBlMS00MWQ0LWE3MjQtYTc2Mjk5ZTg1NTlm LzEvSF9IT211SldNUUtfanFjcWllQmhVdTl3V0xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZBiMA0E AgACMAcDBQAqE66AMA0GCSqGSIb3DQEBCwUAA4IBAQBuIcff2imMDcB7AzIjOhnD fYbsxsBaNd9Mhle6nW8/qZUVoQREcXIc2P+41PiXCUnPM/12QqJiKZ4U2YkWemdL Yz7bjCjA0/GdOHuOXqgf4hHtNh7OziUu8gNl2Fotq4z5CVbtjxYU/lm+iZIZxg+z Du0sn4ZlZw+ImJ+Jl2YuMCYDhPeD6Rww3qoH72XDVaDEdkuPwNW9HK3zj2puHm2S dP4iWAWBgwgW5BEnGFpVl4bCA8EyqX1EnuvweK0Pi9gfPgR5Qr2p8Z43qCQzyeHR bnQwTHCIgJjstasRiVm51QOiiqHG31GoKBTpBU/1OuaVtYVBIqgH9YcRuYd3LUtI -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:23 2026 by rpki-client