This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/61PQ_JpX-qU_gQlNFG58IrVAlfM.roa File: 61PQ_JpX-qU_gQlNFG58IrVAlfM.roa (raw, json) Hash identifier: ZSvx1+7XfcxXQufDZ49Oa2VBeVZ70jQiVuucBd45E3k= Subject key identifier: EB:53:D0:FC:9A:57:FA:A5:3F:81:09:4D:14:6E:7C:22:B5:40:95:F3 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E4176FE03E2709034BFFCF3D31B0D Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/61PQ_JpX-qU_gQlNFG58IrVAlfM.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212351 IP address blocks: 185.120.34.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:41:76:fe:03:e2:70:90:34:bf:fc:f3:d3:1b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb53d0fc9a57faa53f81094d146e7c22b54095f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:01:95:bd:26:af:4f:7b:b4:df:42:1e:cf:1b: 7a:2a:8c:4f:95:51:8b:a9:db:da:eb:73:40:e7:b0: f2:3b:3e:0c:ef:e8:84:7e:2a:f4:ef:a8:cc:ef:2b: ed:e3:c3:03:10:4d:cc:49:f7:38:4d:0e:6f:94:9e: cc:84:1b:ba:82:f7:bb:07:2f:38:bb:ec:78:99:81: 08:7c:aa:a7:8f:82:1c:ce:5c:38:4e:cf:ff:59:a3: 54:b8:ec:29:bf:0a:ae:85:5e:c3:b6:2b:8a:f7:ba: 9a:97:4a:96:8b:3e:94:a0:92:f3:a7:91:6c:b5:5e: 12:76:f2:6f:66:e6:6d:b6:db:e4:d2:7c:96:8b:21: 9d:93:5b:d6:1d:dd:82:7e:0a:f1:fc:e3:6a:03:65: 4b:07:99:9f:01:ee:59:9b:59:8f:5f:0c:ef:ec:ba: 35:d0:fc:1e:3c:3d:a1:50:73:c0:53:38:43:f1:1b: 59:9e:da:fd:f0:0c:53:ca:da:88:8f:0e:75:44:cd: 40:28:2e:2f:5a:d5:28:62:c8:da:af:f3:17:41:5d: 93:0a:33:05:32:4b:0f:c0:7c:78:b5:b2:13:e5:a8: 91:a9:b8:a1:6a:78:8d:23:e2:39:76:41:30:b7:7f: 1f:98:1d:4c:d0:cc:2d:7b:c2:d0:b7:81:8a:6d:b2: 33:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:53:D0:FC:9A:57:FA:A5:3F:81:09:4D:14:6E:7C:22:B5:40:95:F3 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/61PQ_JpX-qU_gQlNFG58IrVAlfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.34.0/24 Signature Algorithm: sha256WithRSAEncryption ab:9b:bb:a6:bf:0b:e6:fd:14:2c:41:63:b6:45:8e:53:39:23: 21:c6:50:d8:22:02:7b:c4:3d:32:08:ca:1e:7f:0a:db:56:f7: 88:86:04:a3:19:eb:6b:c5:2d:c7:c3:28:54:06:93:6e:09:5c: 56:39:5f:6f:85:32:c7:d0:35:e3:69:44:89:12:91:ea:17:de: 75:c2:6a:f6:2d:66:1c:7e:3e:42:f4:3e:6b:58:47:b5:de:56: fa:db:e4:97:70:ad:32:31:61:41:65:85:02:1b:64:b5:f1:c1: 68:60:d7:b2:43:6a:e3:52:b9:ba:2c:8a:90:9d:82:73:22:98: 82:b6:6f:8c:15:a3:ae:e3:73:df:c3:e5:94:a3:79:69:b9:58: d9:44:e3:e3:49:8b:9a:e9:61:57:5a:aa:c9:1e:74:d5:d5:6e: 7e:d5:c5:49:73:34:11:8a:28:8e:46:f0:a0:22:73:99:87:ef: 1e:33:59:6a:a6:12:6c:12:b3:72:06:f9:fc:2a:9e:11:bf:f0: c0:02:37:30:46:07:22:8d:3f:18:e3:a1:ca:a5:80:a3:ab:e0: 7f:5e:d7:94:08:65:69:dd:41:a5:2a:f7:75:8c:6c:cf:4a:b4: 4b:ea:bc:81:79:1e:2e:2e:f5:6c:bd:fc:00:d7:1b:bd:66:72: 07:67:08:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkF2/gPicJA0v/zz0xsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjUzZDBmYzlhNTdmYWE1M2Y4MTA5NGQxNDZlN2MyMmI1NDA5NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AGVvSavT3u030Iezxt6KoxPlVGL qdva63NA57DyOz4M7+iEfir076jM7yvt48MDEE3MSfc4TQ5vlJ7MhBu6gve7By84 u+x4mYEIfKqnj4Iczlw4Ts//WaNUuOwpvwquhV7DtiuK97qal0qWiz6UoJLzp5Fs tV4SdvJvZuZtttvk0nyWiyGdk1vWHd2Cfgrx/ONqA2VLB5mfAe5Zm1mPXwzv7Lo1 0PwePD2hUHPAUzhD8RtZntr98AxTytqIjw51RM1AKC4vWtUoYsjar/MXQV2TCjMF MksPwHx4tbIT5aiRqbihaniNI+I5dkEwt38fmB1M0Mwte8LQt4GKbbIzMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtT0PyaV/qlP4EJTRRufCK1QJXzMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvNjFQUV9KcFgtcVVfZ1FsTkZHNThJclZBbGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXgiMA0G CSqGSIb3DQEBCwUAA4IBAQCrm7umvwvm/RQsQWO2RY5TOSMhxlDYIgJ7xD0yCMoe fwrbVveIhgSjGetrxS3HwyhUBpNuCVxWOV9vhTLH0DXjaUSJEpHqF951wmr2LWYc fj5C9D5rWEe13lb62+SXcK0yMWFBZYUCG2S18cFoYNeyQ2rjUrm6LIqQnYJzIpiC tm+MFaOu43Pfw+WUo3lpuVjZROPjSYua6WFXWqrJHnTV1W5+1cVJczQRiiiORvCg InOZh+8eM1lqphJsErNyBvn8Kp4Rv/DAAjcwRgcijT8Y46HKpYCjq+B/XteUCGVp 3UGlKvd1jGzPSrRL6ryBeR4uLvVsvfwA1xu9ZnIHZwhM -----END CERTIFICATE-----Generated at Mon Jan 19 20:23:00 2026 by rpki-client