This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/REMIC3qlblupLlRlDy8YWtuHeGs.roa File: REMIC3qlblupLlRlDy8YWtuHeGs.roa (raw, json) Hash identifier: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o= Subject key identifier: 44:43:08:0B:7A:A5:6E:5B:A9:2E:54:65:0F:2F:18:5A:DB:87:78:6B Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Certificate serial: 019B76EBA054A9A1EEE360D2C7BC7E6195D9 Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/REMIC3qlblupLlRlDy8YWtuHeGs.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.214.22.0/24 maxlen: 24 185.214.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a0:54:a9:a1:ee:e3:60:d2:c7:bc:7e:61:95:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4443080b7aa56e5ba92e54650f2f185adb87786b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:17:e0:15:7a:8e:a4:78:e8:73:a7:c8:73: 45:4c:74:cd:b3:f6:81:28:09:67:92:c6:f8:e4:5e: 11:eb:63:a0:15:12:8f:f6:2a:ec:2b:c9:53:b3:38: 1d:ec:26:16:71:75:5c:e2:89:38:a9:9c:27:25:7f: 42:3f:bd:ba:67:54:69:c4:57:57:6c:c4:8c:1a:bf: 0e:72:1e:05:d7:e7:4c:b7:97:70:c9:f6:ec:77:e4: f1:d8:00:6f:61:bb:64:cf:0e:03:44:e9:fd:2b:2e: 4a:e5:79:a6:65:0c:b9:58:86:86:a8:6b:2e:f4:d1: 06:28:eb:47:0f:24:a1:c3:f3:4b:ca:9a:23:3c:e8: 98:a6:8f:fb:43:ef:aa:46:cf:55:6a:f5:fa:84:0d: 85:9f:6b:b8:32:03:bb:ee:48:fd:7e:77:88:5b:0f: e7:87:44:7e:92:84:06:49:49:7a:c1:92:bc:00:ac: 70:ee:68:d2:3e:b9:bf:f9:34:fa:e6:a1:db:29:51: 11:63:22:af:c1:14:73:62:b5:04:0d:eb:df:ff:9f: c4:1f:f8:10:7d:5b:80:4b:00:a8:67:9e:1c:78:4c: e3:23:1e:d1:70:52:c6:1f:04:da:d7:00:51:18:23: 31:89:2a:ea:94:7d:6c:08:6f:e3:41:4c:a4:8a:65: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:08:0B:7A:A5:6E:5B:A9:2E:54:65:0F:2F:18:5A:DB:87:78:6B X509v3 Authority Key Identifier: keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/REMIC3qlblupLlRlDy8YWtuHeGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.22.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:21:54:c8:3f:d3:d6:00:a1:e3:75:99:df:dd:a6:15:b5:68: 2f:89:3b:fe:5c:a8:02:aa:bb:0d:84:ec:f3:1a:9f:b2:1b:04: 17:d9:84:47:ab:88:b4:27:6a:ac:28:62:9c:be:46:84:d1:d0: 5a:65:c9:80:09:d8:91:87:76:9f:fe:95:4c:0b:a8:67:10:a6: 2a:74:61:bf:ee:76:b1:03:46:ea:20:22:d6:79:f5:58:87:ce: 58:a4:cb:5a:1c:8e:09:43:3b:17:ef:1b:34:ff:bc:c7:57:82: 00:2b:3a:6e:b2:fd:be:0a:09:90:e6:d7:94:02:8e:ce:10:7a: ad:38:13:51:a1:ac:3f:3d:38:a8:b3:16:5e:4b:38:87:52:20: 59:ce:f2:be:0f:03:6a:20:a8:c8:ac:70:dd:71:76:30:84:c7: ba:88:2c:0c:72:6e:71:0f:af:5f:e5:38:c2:02:39:b8:64:4a: cf:91:ec:26:47:81:ee:d9:1a:03:d7:d4:f5:c2:06:46:fc:0f: 0d:03:86:de:dc:85:5b:ba:f4:d3:5c:e3:48:7d:db:72:44:e2: bf:2b:26:f3:2d:7f:2c:41:f0:6b:51:6d:69:e2:fb:7b:d6:95: b7:b4:26:b4:b8:49:ba:f7:0a:d1:30:54:1d:9a:64:0d:e4:72: de:4f:4c:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266BUqaHu42DSx7x+YZXZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5OTU5NDRlODRkYzM3YmE2YTQyZDY4YmIxZTJiOWE0NDIx ZTg0YTQwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQzMDgwYjdhYTU2ZTViYTkyZTU0NjUwZjJmMTg1YWRiODc3ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIcX4BV6jqR46HOnyHNFTHTNs/aB KAlnksb45F4R62OgFRKP9irsK8lTszgd7CYWcXVc4ok4qZwnJX9CP726Z1RpxFdX bMSMGr8Och4F1+dMt5dwyfbsd+Tx2ABvYbtkzw4DROn9Ky5K5XmmZQy5WIaGqGsu 9NEGKOtHDyShw/NLypojPOiYpo/7Q++qRs9VavX6hA2Fn2u4MgO77kj9fneIWw/n h0R+koQGSUl6wZK8AKxw7mjSPrm/+TT65qHbKVERYyKvwRRzYrUEDevf/5/EH/gQ fVuASwCoZ54ceEzjIx7RcFLGHwTa1wBRGCMxiSrqlH1sCG/jQUykimVAWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFERDCAt6pW5bqS5UZQ8vGFrbh3hrMB8GA1UdIwQY MBaAFCmVlE6E3De6akLWi7HiuaRCHoSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmIt MzM4YmRkNDM5ZWUxLzEvUkVNSUMzcWxibHVwTGxSbER5OFlXdHVIZUdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMTIwNjktYTA2MS00NDJlLTliZmItMzM4YmRkNDM5ZWUx LzEvS1pXVVRvVGNON3BxUXRhTHNlSzVwRUllaEtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudYWMA0G CSqGSIb3DQEBCwUAA4IBAQAPIVTIP9PWAKHjdZnf3aYVtWgviTv+XKgCqrsNhOzz Gp+yGwQX2YRHq4i0J2qsKGKcvkaE0dBaZcmACdiRh3af/pVMC6hnEKYqdGG/7nax A0bqICLWefVYh85YpMtaHI4JQzsX7xs0/7zHV4IAKzpusv2+CgmQ5teUAo7OEHqt OBNRoaw/PTiosxZeSziHUiBZzvK+DwNqIKjIrHDdcXYwhMe6iCwMcm5xD69f5TjC Ajm4ZErPkewmR4Hu2RoD19T1wgZG/A8NA4be3IVbuvTTXONIfdtyROK/KybzLX8s QfBrUW1p4vt71pW3tCa0uEm69wrRMFQdmmQN5HLeT0yG -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:50 2026 by rpki-client