This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa File: pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa (raw, json) Hash identifier: mjU4rN675I29PCArgE7+CXVHSqCNbnxHUO94CNLXbrk= Subject key identifier: A4:B2:EA:44:3C:5B:A6:75:C8:3E:20:71:F2:33:39:AE:D6:26:4F:40 Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93 Certificate serial: 019B7CECE70C9751458FA765695F5BC4962F Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa Signing time: Fri 02 Jan 2026 04:17:38 +0000 ROA not before: Fri 02 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42697 IP address blocks: 185.27.0.0/22 maxlen: 22 185.27.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e7:0c:97:51:45:8f:a7:65:69:5f:5b:c4:96:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4b2ea443c5ba675c83e2071f23339aed6264f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:c1:0b:91:af:c4:76:3a:de:f2:b2:b4:76: 15:1c:a2:6b:61:f2:2c:9c:16:b8:8e:55:aa:e9:15: 8d:3e:d4:4e:05:5c:a3:6e:14:53:55:94:d5:fb:c1: 8d:89:51:f3:be:e8:3f:f4:44:af:f3:8c:c4:b6:91: 3e:80:17:7c:11:8f:c5:3b:c7:d1:42:0e:61:b5:d1: a0:c8:89:a8:e0:85:a4:ec:cc:04:7d:cb:bc:de:b4: f4:47:86:15:ba:67:a0:09:86:d8:6c:2b:ba:60:01: 28:e6:b5:e2:56:21:fe:c9:f0:55:76:20:a3:1b:56: d6:7c:99:9b:f5:d2:45:79:7e:0b:1a:2c:ca:e9:c6: b1:48:2d:80:ea:e4:7b:45:75:0d:13:55:63:7e:56: 1b:72:0a:0b:6c:7e:4c:fa:46:e1:b9:a4:f6:2f:53: 3d:34:65:f3:b2:6c:19:bc:dc:a4:27:ca:4a:bc:c0: dd:d2:4e:ce:63:60:08:0e:d9:09:06:7c:69:03:f0: 80:5c:64:96:bb:dc:ec:7e:de:a3:d4:be:49:81:ac: db:d0:83:9d:3c:52:87:24:13:46:76:5a:55:32:fa: 9a:72:74:2c:2c:2e:4b:cd:06:57:a2:45:7f:89:b9: 22:55:3e:f5:f2:87:1c:3c:38:63:e8:2e:e2:20:48: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B2:EA:44:3C:5B:A6:75:C8:3E:20:71:F2:33:39:AE:D6:26:4F:40 X509v3 Authority Key Identifier: keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/pLLqRDxbpnXIPiBx8jM5rtYmT0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.0.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:21:37:0b:81:b9:2b:55:ef:03:37:a1:68:d9:db:29:49:50: 29:79:5f:6c:aa:e9:ae:2a:e7:f6:c2:c0:22:1e:b0:30:ba:f4: 30:3a:f5:8b:65:12:fe:03:fa:49:66:3e:fd:53:66:c1:6e:95: d3:a5:ea:5c:2c:d5:6f:10:f5:9d:3c:ff:79:01:7a:d2:35:24: dc:bf:fd:6d:fa:5f:7a:8c:f2:86:d7:34:61:0d:7f:50:f3:a4: 71:90:15:0f:5e:0c:5c:5c:a8:c5:48:8c:70:d1:5d:80:f3:75: df:6a:76:92:f2:d3:90:f3:45:0b:80:0c:04:14:7c:0f:f5:dc: 00:d5:a9:be:d1:58:c2:84:2a:26:13:88:0e:0b:7c:21:1a:67: a1:63:3d:61:54:a5:06:09:c0:67:13:21:43:53:15:6b:8b:bf: 3d:9c:99:5a:03:ae:7e:5b:fd:c6:73:88:57:f0:cd:77:68:92: 7e:3c:eb:91:18:92:0a:8d:10:6c:56:9e:0e:b8:84:01:01:39: a3:06:c6:26:30:f3:54:7d:07:90:19:a9:97:2d:fa:6b:88:c8: d9:1c:e3:7e:74:a3:c9:aa:7d:91:77:4e:f7:3a:e2:9b:fd:eb: dc:3d:cc:6c:ec:c7:85:73:ee:90:cf:38:27:55:06:07:8b:15: 20:b6:f3:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87OcMl1FFj6dlaV9bxJYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMDkzNTE4NWM2ODAzNmEwZmFlZGVlYWFhNmJmZWY0ZTYy YTBjOTMwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGIyZWE0NDNjNWJhNjc1YzgzZTIwNzFmMjMzMzlhZWQ2MjY0ZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZTBC5GvxHY63vKytHYVHKJrYfIs nBa4jlWq6RWNPtROBVyjbhRTVZTV+8GNiVHzvug/9ESv84zEtpE+gBd8EY/FO8fR Qg5htdGgyImo4IWk7MwEfcu83rT0R4YVumegCYbYbCu6YAEo5rXiViH+yfBVdiCj G1bWfJmb9dJFeX4LGizK6caxSC2A6uR7RXUNE1VjflYbcgoLbH5M+kbhuaT2L1M9 NGXzsmwZvNykJ8pKvMDd0k7OY2AIDtkJBnxpA/CAXGSWu9zsft6j1L5Jgazb0IOd PFKHJBNGdlpVMvqacnQsLC5LzQZXokV/ibkiVT718occPDhj6C7iIEgRtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSy6kQ8W6Z1yD4gcfIzOa7WJk9AMB8GA1UdIwQY MBaAFMAJNRhcaANqD67e6qpr/vTmKgyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FrMUdGeG9BMm9QcnQ3cXFtdi05T1lxREpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iZTMwNmYtMGY4Yy00Njc0LTkzZmYt MmE5NzEyYmY2MDNjLzEvcExMcVJEeGJwblhJUGlCeDhqTTVydFltVDBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iZTMwNmYtMGY4Yy00Njc0LTkzZmYtMmE5NzEyYmY2MDNj LzEvd0FrMUdGeG9BMm9QcnQ3cXFtdi05T1lxREpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRsAMA0G CSqGSIb3DQEBCwUAA4IBAQA7ITcLgbkrVe8DN6Fo2dspSVApeV9squmuKuf2wsAi HrAwuvQwOvWLZRL+A/pJZj79U2bBbpXTpepcLNVvEPWdPP95AXrSNSTcv/1t+l96 jPKG1zRhDX9Q86RxkBUPXgxcXKjFSIxw0V2A83XfanaS8tOQ80ULgAwEFHwP9dwA 1am+0VjChComE4gOC3whGmehYz1hVKUGCcBnEyFDUxVri789nJlaA65+W/3Gc4hX 8M13aJJ+POuRGJIKjRBsVp4OuIQBATmjBsYmMPNUfQeQGamXLfpriMjZHON+dKPJ qn2Rd073OuKb/evcPcxs7MeFc+6QzzgnVQYHixUgtvP2 -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:35 2026 by rpki-client