This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CDxW8RysqQ_MrhCA0bDBkXilZ5I.roa File: CDxW8RysqQ_MrhCA0bDBkXilZ5I.roa (raw, json) Hash identifier: gZ/VocFuC5SSQeuAi+sDyOSQwA4kymNo/scW/qRLup0= Subject key identifier: 08:3C:56:F1:1C:AC:A9:0F:CC:AE:10:80:D1:B0:C1:91:78:A5:67:92 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1398C58D89035CFBF7BEDBC91661FF Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CDxW8RysqQ_MrhCA0bDBkXilZ5I.roa Signing time: Fri 02 Jan 2026 00:20:17 +0000 ROA not before: Fri 02 Jan 2026 00:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212633 IP address blocks: 185.246.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:98:c5:8d:89:03:5c:fb:f7:be:db:c9:16:61:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=083c56f11caca90fccae1080d1b0c19178a56792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:eb:f5:42:a0:84:e6:ff:57:30:bc:e4:49: 41:e9:a1:39:fd:b2:c5:6a:2b:fc:97:0e:bd:da:69: 50:3d:86:ad:97:54:a9:38:06:8d:84:5a:a9:5e:45: 4e:8a:10:1a:9c:c9:b9:43:bb:47:fc:db:75:9e:a8: 2a:49:33:85:ca:6c:1a:9f:e7:57:aa:b0:77:5c:7f: c8:a5:22:cc:8f:d3:c5:05:5a:75:46:35:fa:1c:38: 76:ce:2b:77:b4:0f:31:7a:96:66:4b:75:99:4a:d1: 57:1e:2c:79:c7:ce:a4:0a:fe:3a:44:fc:81:27:ea: 75:a3:40:24:5a:e4:e3:2a:92:1c:82:95:8c:e9:b1: 0f:b4:a2:26:a3:7c:f1:7f:8d:af:23:9a:39:9b:75: 76:bb:81:6e:ce:e3:72:25:5a:8d:c6:0b:4b:aa:88: a4:2f:66:31:c9:13:cf:73:3a:30:aa:42:55:df:e3: 54:61:59:00:3c:71:48:9f:7b:9c:0b:d4:e9:68:02: 3f:e1:76:32:32:47:31:0a:74:43:5d:f3:8e:c4:df: ff:59:fe:e5:8f:c9:d6:53:8b:c0:8d:52:45:07:e7: 8c:4f:3e:eb:fc:9b:74:d1:3e:1f:c1:c6:d0:ab:15: be:d0:ff:3c:d0:e0:a2:ca:3d:51:58:5e:4b:64:71: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3C:56:F1:1C:AC:A9:0F:CC:AE:10:80:D1:B0:C1:91:78:A5:67:92 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/CDxW8RysqQ_MrhCA0bDBkXilZ5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.246.114.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5e:be:73:ce:7d:b1:20:b2:fd:2d:f0:5d:5a:0b:55:38:32: 22:1c:e6:fa:1f:39:76:62:ac:bd:24:c3:06:85:e2:1f:2b:c2: 12:f5:50:97:98:92:d2:c3:5f:d9:78:e3:73:b7:1e:53:f3:f8: ed:66:81:53:e4:d4:85:4d:0a:c1:c3:b7:70:a5:fd:5c:d1:6a: ba:11:91:4d:e0:43:e2:32:7d:b2:9b:6f:34:ad:a8:8f:87:ad: 8d:b8:4d:a0:4c:06:c0:ee:25:3c:a6:97:1b:e9:08:eb:ad:d8: 3b:ba:c3:15:e5:0d:bd:92:07:79:ff:7f:30:d2:46:9b:8f:f7: bf:2d:0f:62:23:57:fd:63:5d:c0:9a:97:05:d6:ae:18:6e:e1: f8:06:4f:ff:53:c2:e1:52:79:d7:58:01:6a:d8:e1:08:e5:54: bf:32:7c:38:64:dc:8e:49:21:bc:a1:ea:a7:15:dd:cb:67:7e: 90:17:8e:2f:3d:38:e8:74:56:07:64:1a:29:4f:ae:18:d2:3f: 3e:4b:3a:9a:2e:79:e7:9b:fd:e7:48:79:27:99:68:11:ae:4d: 11:3e:50:e1:a8:4e:8c:7f:ed:be:c3:be:ae:5d:a1:f5:48:6a: f4:57:0f:7b:d1:3c:ff:b8:a0:1a:79:8c:8a:7b:09:9e:02:36: 4a:db:27:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E5jFjYkDXPv3vtvJFmH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODNjNTZmMTFjYWNhOTBmY2NhZTEwODBkMWIwYzE5MTc4YTU2NzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8V3r9UKghOb/VzC85ElB6aE5/bLF aiv8lw692mlQPYatl1SpOAaNhFqpXkVOihAanMm5Q7tH/Nt1nqgqSTOFymwan+dX qrB3XH/IpSLMj9PFBVp1RjX6HDh2zit3tA8xepZmS3WZStFXHix5x86kCv46RPyB J+p1o0AkWuTjKpIcgpWM6bEPtKImo3zxf42vI5o5m3V2u4FuzuNyJVqNxgtLqoik L2YxyRPPczowqkJV3+NUYVkAPHFIn3ucC9TpaAI/4XYyMkcxCnRDXfOOxN//Wf7l j8nWU4vAjVJFB+eMTz7r/Jt00T4fwcbQqxW+0P880OCiyj1RWF5LZHHNvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg8VvEcrKkPzK4QgNGwwZF4pWeSMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQ0R4VzhSeXNxUV9NcmhDQTBiREJrWGlsWjVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufZyMA0G CSqGSIb3DQEBCwUAA4IBAQBrXr5zzn2xILL9LfBdWgtVODIiHOb6Hzl2Yqy9JMMG heIfK8IS9VCXmJLSw1/ZeONztx5T8/jtZoFT5NSFTQrBw7dwpf1c0Wq6EZFN4EPi Mn2ym280raiPh62NuE2gTAbA7iU8ppcb6Qjrrdg7usMV5Q29kgd5/38w0kabj/e/ LQ9iI1f9Y13AmpcF1q4YbuH4Bk//U8LhUnnXWAFq2OEI5VS/Mnw4ZNyOSSG8oeqn Fd3LZ36QF44vPTjodFYHZBopT64Y0j8+SzqaLnnnm/3nSHknmWgRrk0RPlDhqE6M f+2+w76uXaH1SGr0Vw970Tz/uKAaeYyKewmeAjZK2ycm -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:19 2026 by rpki-client