This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/sliXU2u2F5b-dxDpfrgoAvWB8tc.roa File: sliXU2u2F5b-dxDpfrgoAvWB8tc.roa (raw, json) Hash identifier: shJia0FcMyfJBOItG4MpW4lD3TG/16YLivfvP64r49Q= Subject key identifier: B2:58:97:53:6B:B6:17:96:FE:77:10:E9:7E:B8:28:02:F5:81:F2:D7 Certificate issuer: /CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c Certificate serial: 019B77C75CB438C21ADC45F33B2A91EE0B73 Authority key identifier: 1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/sliXU2u2F5b-dxDpfrgoAvWB8tc.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205944 IP address blocks: 185.250.96.0/24 maxlen: 24 185.250.97.0/24 maxlen: 24 185.250.98.0/24 maxlen: 24 185.250.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.mft rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5c:b4:38:c2:1a:dc:45:f3:3b:2a:91:ee:0b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ed93084cec449bed8a6fc008bc7dd995eb3731c Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25897536bb61796fe7710e97eb82802f581f2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9c:53:f9:39:16:33:48:26:bc:a1:67:c3:bc: 51:45:22:41:31:de:d9:fd:18:6d:bb:fd:c9:9a:c9: 65:78:85:5b:5c:0e:4b:37:23:d9:0e:a5:72:2e:87: 8c:fa:67:be:a0:34:16:6e:08:3a:65:c5:7b:5f:12: 72:1c:da:55:66:7b:e7:24:1b:11:bd:21:f4:9b:eb: ff:6d:f9:98:94:6e:67:e0:a3:ac:70:92:01:4f:ef: ee:1d:a6:06:e6:a2:ea:f7:c6:68:08:47:ae:25:9d: b4:3b:75:ad:11:bf:63:2a:81:04:07:05:39:a9:5a: fe:a5:44:0d:f5:68:b2:9e:a5:f9:12:2f:67:74:ff: ed:3f:31:24:b4:fa:13:a4:62:82:fe:2f:c8:fe:ec: 4e:ce:8b:f2:07:bd:80:04:4f:d6:1e:21:04:4c:cb: 76:7f:24:d6:0b:ea:33:55:50:d9:a2:9a:42:9b:ba: db:95:50:1a:91:43:fb:7a:38:c9:4e:61:47:6d:02: 78:60:d7:ff:d0:31:a4:3f:9c:bc:26:05:ea:00:38: 05:b0:6c:d5:ed:2f:61:82:42:35:90:f3:7f:5b:45: 1b:58:ce:7b:02:c2:da:f2:3e:3f:66:3d:a4:ce:44: 78:d5:fd:d1:c1:23:9f:0e:70:dd:4f:de:72:3f:f6: 74:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:58:97:53:6B:B6:17:96:FE:77:10:E9:7E:B8:28:02:F5:81:F2:D7 X509v3 Authority Key Identifier: keyid:1E:D9:30:84:CE:C4:49:BE:D8:A6:FC:00:8B:C7:DD:99:5E:B3:73:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtkwhM7ESb7YpvwAi8fdmV6zcxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/sliXU2u2F5b-dxDpfrgoAvWB8tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f0b723-77f1-44c0-8fca-7c646795090b/1/HtkwhM7ESb7YpvwAi8fdmV6zcxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.96.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:0d:6c:bd:c5:23:f1:9d:bc:85:8e:21:33:fb:68:56:72:7d: e9:a3:f0:1a:f7:47:43:41:00:67:51:c0:2c:86:e7:05:c4:e1: 7e:15:06:f9:2c:3d:c6:b0:a6:87:f3:52:cd:e3:80:2a:be:af: 60:88:60:49:18:51:57:b9:ce:73:ec:77:b8:bd:1b:4f:ba:87: 91:0e:08:e5:43:ad:45:c0:38:7f:6d:a7:f9:f5:0d:8a:2a:5a: a7:fe:23:4d:bd:32:c2:fa:14:3e:0b:15:3c:55:66:81:4d:a0: 82:89:08:b4:bb:bd:89:b7:b4:d4:b0:c3:e0:0e:03:54:6a:61: e2:3c:80:70:d4:a1:1b:00:2d:f1:56:5b:1e:4a:fb:29:1a:72: d1:45:d8:e9:d1:45:77:92:b0:97:4a:99:22:42:72:bd:a7:75: 51:28:40:d9:f5:cb:ed:c9:ff:69:d0:3f:3c:56:2a:9b:b3:5d: 7e:11:48:80:a7:4d:ed:41:8d:33:7b:8e:13:af:8d:93:53:15: 71:a6:99:93:1e:b6:8b:15:e9:23:88:4d:52:a5:28:80:92:53: c6:ab:bf:eb:72:30:d0:44:61:5e:7d:c4:0b:1c:a9:8e:07:1c: 8d:12:66:fe:97:a3:20:1e:5c:13:38:db:76:21:dc:ba:6a:e3: 8e:e2:46:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1y0OMIa3EXzOyqR7gtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZDkzMDg0Y2VjNDQ5YmVkOGE2ZmMwMDhiYzdkZDk5NWVi MzczMWMwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjU4OTc1MzZiYjYxNzk2ZmU3NzEwZTk3ZWI4MjgwMmY1ODFmMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZxT+TkWM0gmvKFnw7xRRSJBMd7Z /Rhtu/3JmslleIVbXA5LNyPZDqVyLoeM+me+oDQWbgg6ZcV7XxJyHNpVZnvnJBsR vSH0m+v/bfmYlG5n4KOscJIBT+/uHaYG5qLq98ZoCEeuJZ20O3WtEb9jKoEEBwU5 qVr+pUQN9WiynqX5Ei9ndP/tPzEktPoTpGKC/i/I/uxOzovyB72ABE/WHiEETMt2 fyTWC+ozVVDZoppCm7rblVAakUP7ejjJTmFHbQJ4YNf/0DGkP5y8JgXqADgFsGzV 7S9hgkI1kPN/W0UbWM57AsLa8j4/Zj2kzkR41f3RwSOfDnDdT95yP/Z0SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLJYl1NrtheW/ncQ6X64KAL1gfLXMB8GA1UdIwQY MBaAFB7ZMITOxEm+2Kb8AIvH3Zles3McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2Et N2M2NDY3OTUwOTBiLzEvc2xpWFUydTJGNWItZHhEcGZyZ29BdldCOHRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9mMGI3MjMtNzdmMS00NGMwLThmY2EtN2M2NDY3OTUwOTBi LzEvSHRrd2hNN0VTYjdZcHZ3QWk4ZmRtVjZ6Y3h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufpgMA0G CSqGSIb3DQEBCwUAA4IBAQCeDWy9xSPxnbyFjiEz+2hWcn3po/Aa90dDQQBnUcAs hucFxOF+FQb5LD3GsKaH81LN44Aqvq9giGBJGFFXuc5z7He4vRtPuoeRDgjlQ61F wDh/baf59Q2KKlqn/iNNvTLC+hQ+CxU8VWaBTaCCiQi0u72Jt7TUsMPgDgNUamHi PIBw1KEbAC3xVlseSvspGnLRRdjp0UV3krCXSpkiQnK9p3VRKEDZ9cvtyf9p0D88 Viqbs11+EUiAp03tQY0ze44Tr42TUxVxppmTHraLFekjiE1SpSiAklPGq7/rcjDQ RGFefcQLHKmOBxyNEmb+l6MgHlwTONt2Idy6auOO4kbx -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:09 2026 by rpki-client