This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ItVbhwKdiTTgtR-bUNDK_kVBtrw.roa File: ItVbhwKdiTTgtR-bUNDK_kVBtrw.roa (raw, json) Hash identifier: QdhGb72XBlm95jXqVMmUcpSL3mblrC+j5oHves3lQRA= Subject key identifier: 22:D5:5B:87:02:9D:89:34:E0:B5:1F:9B:50:D0:CA:FE:45:41:B6:BC Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E2462C9D0A5B30641CBCB39F9DFCD Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ItVbhwKdiTTgtR-bUNDK_kVBtrw.roa Signing time: Thu 01 Jan 2026 12:17:48 +0000 ROA not before: Thu 01 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 185.141.206.0/23 maxlen: 23 2a06:8ec4::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:24:62:c9:d0:a5:b3:06:41:cb:cb:39:f9:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22d55b87029d8934e0b51f9b50d0cafe4541b6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:f8:55:da:98:5d:62:9b:fe:84:45:da:27: 7a:3c:ab:9e:63:8e:0c:a8:99:72:ab:68:ef:db:c6: 82:87:30:fb:31:81:63:51:47:f8:0e:5c:db:6b:07: a1:53:09:0a:3e:1b:9f:6f:59:3b:27:f2:24:7d:ef: 65:cd:1a:54:76:5f:93:63:b6:66:97:09:15:9b:29: 2c:a4:df:41:18:85:04:dc:80:98:79:c3:e1:51:85: c2:e8:74:5e:35:62:22:a1:26:7f:c0:1a:8c:35:ed: 6c:e4:db:de:31:28:f8:99:64:ce:ec:8d:b9:3e:c3: 70:5a:9d:08:e5:ef:f6:6e:32:0d:00:2d:ec:0d:46: 2b:4e:6d:ee:58:9c:41:77:9e:22:53:7f:0c:f0:f5: 63:07:91:06:0f:2c:3b:ae:92:bd:d4:87:c5:34:e1: a4:39:46:b8:a0:c9:13:15:7c:9d:86:5e:d9:70:a1: f4:b2:c3:28:8e:81:1e:5e:74:95:6b:23:7d:2c:3e: 41:32:26:3a:77:39:bb:e0:ad:91:d6:35:fe:d8:80: 1b:9c:a5:8d:e7:7e:f3:d7:c9:4f:33:c2:1b:ef:9b: 79:29:3a:8a:db:9d:83:f3:c8:e4:00:e7:da:ed:08: 9f:7d:49:01:ae:2a:6a:48:f4:59:d5:4b:63:20:eb: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D5:5B:87:02:9D:89:34:E0:B5:1F:9B:50:D0:CA:FE:45:41:B6:BC X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ItVbhwKdiTTgtR-bUNDK_kVBtrw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.206.0/23 IPv6: 2a06:8ec4::/43 Signature Algorithm: sha256WithRSAEncryption 6d:06:d1:be:25:78:41:62:34:ad:66:15:14:6a:fa:22:07:fd: 2a:a8:eb:dd:f7:d5:b4:66:a7:e7:38:c1:27:d6:f6:2e:7e:82: fc:1f:27:13:59:be:1a:97:62:05:57:c3:ab:2e:d2:87:25:8c: ae:bb:69:9b:ee:a4:8a:78:30:b3:85:32:34:12:6f:99:5e:d1: 15:a1:80:88:7c:ca:16:10:3f:d2:13:d2:f8:3c:23:fa:47:a4: 5f:81:85:3e:4b:ab:36:08:e8:ca:38:dd:5a:88:2c:08:11:7e: 28:12:e5:3c:68:dc:03:f7:8e:2d:82:25:46:65:54:73:e3:2f: 6f:cc:ab:b4:8b:2c:08:4f:5f:93:79:86:a9:00:e9:11:4f:c3: de:af:b7:22:77:66:61:ef:ee:17:f8:05:c2:aa:f4:50:54:f8: 83:1d:ab:a5:13:99:5b:53:be:1e:15:8a:45:f0:15:a7:a5:72: 23:55:9f:c3:3d:ae:27:3b:d7:b6:cf:75:76:63:88:94:87:f7: 9d:c9:35:4d:23:60:84:5a:cd:ea:c5:35:d0:fd:08:38:0c:fe: c0:3a:34:1a:a0:92:19:44:db:76:51:02:b8:e4:44:f4:76:af: 5a:55:b9:2b:3a:19:4b:7a:29:17:2e:79:30:6f:33:05:28:f9: 8d:75:ea:4b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fiRiydClswZBy8s5+d/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmQ1NWI4NzAyOWQ4OTM0ZTBiNTFmOWI1MGQwY2FmZTQ1NDFiNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5j4VdqYXWKb/oRF2id6PKueY44M qJlyq2jv28aChzD7MYFjUUf4DlzbawehUwkKPhufb1k7J/Ikfe9lzRpUdl+TY7Zm lwkVmykspN9BGIUE3ICYecPhUYXC6HReNWIioSZ/wBqMNe1s5NveMSj4mWTO7I25 PsNwWp0I5e/2bjINAC3sDUYrTm3uWJxBd54iU38M8PVjB5EGDyw7rpK91IfFNOGk OUa4oMkTFXydhl7ZcKH0ssMojoEeXnSVayN9LD5BMiY6dzm74K2R1jX+2IAbnKWN 537z18lPM8Ib75t5KTqK252D88jkAOfa7QiffUkBripqSPRZ1UtjIOtRFQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCLVW4cCnYk04LUfm1DQyv5FQba8MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvSXRWYmh3S2RpVFRndFItYlVOREtfa1ZCdHJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuY3OMA8E AgACMAkDBwUqBo7EAAAwDQYJKoZIhvcNAQELBQADggEBAG0G0b4leEFiNK1mFRRq +iIH/Sqo69331bRmp+c4wSfW9i5+gvwfJxNZvhqXYgVXw6su0ocljK67aZvupIp4 MLOFMjQSb5le0RWhgIh8yhYQP9IT0vg8I/pHpF+BhT5LqzYI6Mo43VqILAgRfigS 5Txo3AP3ji2CJUZlVHPjL2/Mq7SLLAhPX5N5hqkA6RFPw96vtyJ3ZmHv7hf4BcKq 9FBU+IMdq6UTmVtTvh4VikXwFaelciNVn8M9ric717bPdXZjiJSH953JNU0jYIRa zerFNdD9CDgM/sA6NBqgkhlE23ZRArjkRPR2r1pVuSs6GUt6KRcueTBvMwUo+Y11 6ks= -----END CERTIFICATE-----Generated at Mon Jan 19 17:04:01 2026 by rpki-client