This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/92r87GXcDXSzOsDHI1Ayd6WoJDc.roa File: 92r87GXcDXSzOsDHI1Ayd6WoJDc.roa (raw, json) Hash identifier: wI3XCOujeaUJDKLkgxp8yZCBgwmMYMn6E0DZdhiQtl8= Subject key identifier: F7:6A:FC:EC:65:DC:0D:74:B3:3A:C0:C7:23:50:32:77:A5:A8:24:37 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1392F961095954024FEF9C40A5E36A Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/92r87GXcDXSzOsDHI1Ayd6WoJDc.roa Signing time: Fri 02 Jan 2026 00:20:16 +0000 ROA not before: Fri 02 Jan 2026 00:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 185.223.83.0/24 maxlen: 24 185.240.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:92:f9:61:09:59:54:02:4f:ef:9c:40:a5:e3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f76afcec65dc0d74b33ac0c723503277a5a82437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:6f:e8:8d:fc:7e:81:0a:03:c8:7d:53:2f: 36:76:4b:c2:8a:50:c4:ee:e2:d8:54:b0:24:91:5c: 43:c6:f2:42:0e:42:fc:a3:8f:25:e3:79:a7:2d:f8: bf:18:26:e0:60:20:a5:fa:ac:28:03:db:66:66:0f: c2:68:4b:e7:49:08:20:6e:bc:ec:73:80:b3:b6:3d: df:77:72:69:5e:a0:1c:1a:ec:98:bc:de:f1:fc:70: c6:0b:f5:6c:34:18:00:f3:51:1f:86:ab:8f:70:e6: ae:70:e9:d1:74:3f:41:78:68:2a:05:37:6e:f4:36: 7e:98:61:2e:52:cd:ba:9f:8d:43:13:34:f3:bb:b4: d9:21:c3:ee:26:85:ad:e9:22:b3:70:94:24:43:31: d8:58:98:6a:ba:53:3d:86:97:b5:25:57:31:93:48: 73:0e:72:69:6a:7a:8c:d1:2f:53:2b:38:d3:6f:77: 6d:42:cb:d0:f6:c7:13:3f:bf:e7:c6:07:63:e1:fc: 4f:95:38:d2:ef:84:a7:8a:6a:f8:e0:ac:4b:25:52: 54:19:82:82:b9:db:71:55:3b:5d:d3:b2:34:5b:56: 75:08:d9:c1:72:74:a6:42:ea:31:e9:01:38:b6:56: c3:6c:56:3e:6f:64:a6:95:69:27:60:5c:d0:fd:91: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6A:FC:EC:65:DC:0D:74:B3:3A:C0:C7:23:50:32:77:A5:A8:24:37 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/92r87GXcDXSzOsDHI1Ayd6WoJDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.83.0/24 185.240.123.0/24 Signature Algorithm: sha256WithRSAEncryption 68:fe:e0:27:16:f3:30:d0:3c:74:30:e9:68:2a:19:57:27:49: ef:67:62:a7:0f:a8:d5:d2:c9:da:bd:5b:0c:34:f3:9a:10:54: 5e:fd:7e:97:c2:a6:5d:23:ec:09:37:65:dc:42:48:20:43:5a: 68:ba:8b:d6:04:9e:b3:78:ff:db:c5:c2:1c:cf:5f:30:95:77: 77:ac:34:7d:bd:02:45:46:5d:32:42:75:53:3d:49:88:1e:f1: 68:90:b0:c2:37:58:7d:d3:ef:73:2a:8c:d6:3b:8c:75:b2:26: 2b:7d:d5:99:d4:20:4d:20:43:62:d6:bb:c1:80:93:41:ec:6d: f2:0e:4f:89:8e:56:41:e7:b3:fb:10:65:8a:ac:30:25:a3:91: b0:d5:55:b0:05:07:f0:a6:d6:f5:b5:c2:34:22:4a:1f:9c:dc: a4:e4:dd:48:0b:b5:7f:55:e1:c3:75:66:ec:b9:07:87:76:ae: c1:69:eb:2c:15:e1:ee:68:6d:4f:f4:df:de:4b:b2:30:1f:cc: 77:81:e0:c4:df:d7:73:a6:11:3f:33:63:90:de:bd:21:4e:65: 73:2a:27:65:cd:7a:17:ea:65:f8:21:59:3e:ad:70:bc:cc:f6: e6:3f:8f:97:fc:61:9b:39:61:54:c6:c1:4d:95:67:db:13:03: 17:93:4b:ce -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E5L5YQlZVAJP75xApeNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzZhZmNlYzY1ZGMwZDc0YjMzYWMwYzcyMzUwMzI3N2E1YTgyNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx5v6I38foEKA8h9Uy82dkvCilDE 7uLYVLAkkVxDxvJCDkL8o48l43mnLfi/GCbgYCCl+qwoA9tmZg/CaEvnSQggbrzs c4Cztj3fd3JpXqAcGuyYvN7x/HDGC/VsNBgA81EfhquPcOaucOnRdD9BeGgqBTdu 9DZ+mGEuUs26n41DEzTzu7TZIcPuJoWt6SKzcJQkQzHYWJhqulM9hpe1JVcxk0hz DnJpanqM0S9TKzjTb3dtQsvQ9scTP7/nxgdj4fxPlTjS74Snimr44KxLJVJUGYKC udtxVTtd07I0W1Z1CNnBcnSmQuox6QE4tlbDbFY+b2SmlWknYFzQ/ZHqCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPdq/Oxl3A10szrAxyNQMnelqCQ3MB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvOTJyODdHWGNEWFN6T3NESEkxQXlkNldvSkRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud9TAwQA ufB7MA0GCSqGSIb3DQEBCwUAA4IBAQBo/uAnFvMw0Dx0MOloKhlXJ0nvZ2KnD6jV 0snavVsMNPOaEFRe/X6XwqZdI+wJN2XcQkggQ1pouovWBJ6zeP/bxcIcz18wlXd3 rDR9vQJFRl0yQnVTPUmIHvFokLDCN1h90+9zKozWO4x1siYrfdWZ1CBNIENi1rvB gJNB7G3yDk+JjlZB57P7EGWKrDAlo5Gw1VWwBQfwptb1tcI0IkofnNyk5N1IC7V/ VeHDdWbsuQeHdq7BaessFeHuaG1P9N/eS7IwH8x3geDE39dzphE/M2OQ3r0hTmVz KidlzXoX6mX4IVk+rXC8zPbmP4+X/GGbOWFUxsFNlWfbEwMXk0vO -----END CERTIFICATE-----Generated at Fri Jan 2 23:53:22 2026 by rpki-client