This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/1-95gw9KACRY59GXkCu6E44De0Qk.roa File: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (raw, json) Hash identifier: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c= Subject key identifier: FB:DE:60:C3:D2:80:09:16:39:F4:65:E4:0A:EE:84:E3:80:DE:D1:09 Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Certificate serial: 019B7CED6B6FFC60AF8C648CF79BD3043668 Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/1-95gw9KACRY59GXkCu6E44De0Qk.roa Signing time: Fri 02 Jan 2026 04:18:12 +0000 ROA not before: Fri 02 Jan 2026 04:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203827 IP address blocks: 185.255.220.0/24 maxlen: 24 185.255.221.0/24 maxlen: 24 185.255.222.0/24 maxlen: 24 185.255.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:6b:6f:fc:60:af:8c:64:8c:f7:9b:d3:04:36:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9 Validity Not Before: Jan 2 04:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbde60c3d280091639f465e40aee84e380ded109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:49:47:ea:8c:a1:8f:a7:73:8c:aa:95:73:81: e8:51:b4:0e:19:0f:8d:7b:7e:aa:08:eb:91:88:41: 68:d2:a1:60:d5:14:0f:24:f9:e5:0f:19:11:6e:21: 46:c7:42:e7:52:41:dd:cc:16:fa:c8:4c:d7:5a:01: b9:e6:4c:ad:a7:8a:45:aa:8e:44:9d:72:0f:22:d9: e9:d2:6c:b5:b0:38:73:2d:2b:07:21:ad:b7:d8:d7: 11:64:d8:ed:6c:7a:5b:1e:45:e5:36:b6:e0:d3:ba: 29:7c:ff:31:66:5e:00:90:da:ab:2c:44:0f:3b:0f: b4:d8:ac:5c:f7:1a:75:35:5d:9d:f9:f7:bf:39:ec: 6a:59:4f:29:c4:d3:76:30:15:20:40:e4:bb:46:47: 1b:6e:b4:39:0b:c3:8b:42:4e:c7:56:2c:9c:06:32: 8f:e5:e8:00:11:9b:1b:92:41:c7:ce:1d:56:b7:a3: b3:12:c7:0e:fe:3f:6e:a5:82:56:3d:2c:07:a9:96: 7b:3e:20:4f:61:0e:2c:6a:cb:c9:4c:00:44:d8:09: 8b:30:02:af:23:f8:46:18:2a:9e:88:e5:89:7a:86: 7c:11:a8:d8:39:23:d8:6e:96:38:b2:e4:13:8f:86: eb:f0:5d:12:62:34:05:2f:e0:83:0c:f8:77:61:fd: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DE:60:C3:D2:80:09:16:39:F4:65:E4:0A:EE:84:E3:80:DE:D1:09 X509v3 Authority Key Identifier: keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/1-95gw9KACRY59GXkCu6E44De0Qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.220.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:e3:a1:ac:bb:2d:0a:7f:9c:8a:c4:67:2e:4a:e2:58:bf:25: 5e:e5:35:fd:03:bf:85:f9:da:1f:77:c8:d7:59:6a:48:3e:39: 65:46:9f:8e:64:4a:f3:60:b8:48:e6:26:90:dd:49:f7:7c:10: 14:46:93:00:fc:55:bb:83:ed:16:2e:42:2d:c6:10:99:5f:83: e3:1d:ef:c8:b9:a0:d7:4c:5a:71:b6:d1:6d:b4:e4:1d:3c:25: e0:1a:cf:e5:f4:2d:58:af:1c:84:11:5e:e5:4c:ef:c2:18:e0: 5b:cb:c5:ad:8f:ea:8e:50:72:bc:ce:f5:ee:d3:3b:f8:1b:fe: 78:0e:cb:4f:60:17:2e:3a:43:7e:b8:0a:52:1a:f8:0f:81:02: 60:45:78:1c:cf:1d:6e:e9:4e:97:1d:38:dc:82:e2:79:c1:b9: 78:2e:ee:c1:42:e7:f4:f8:4e:a5:36:dd:1c:20:72:ff:55:e7: 49:ef:e8:cc:dd:4b:61:8e:b3:84:4a:02:21:81:6a:51:23:34: 53:af:d4:3b:93:c8:54:9a:c7:aa:47:d5:d5:25:da:d0:df:21: e4:c6:b6:02:34:a8:e0:70:17:db:b6:3e:43:ff:07:d2:51:18: 91:54:16:b8:bf:25:61:0c:08:39:4c:e6:77:34:8e:2e:a1:79: 32:15:4d:e3 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87Wtv/GCvjGSM95vTBDZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw YThlZTkwHhcNMjYwMTAyMDQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmRlNjBjM2QyODAwOTE2MzlmNDY1ZTQwYWVlODRlMzgwZGVkMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUlH6oyhj6dzjKqVc4HoUbQOGQ+N e36qCOuRiEFo0qFg1RQPJPnlDxkRbiFGx0LnUkHdzBb6yEzXWgG55kytp4pFqo5E nXIPItnp0my1sDhzLSsHIa232NcRZNjtbHpbHkXlNrbg07opfP8xZl4AkNqrLEQP Ow+02Kxc9xp1NV2d+fe/OexqWU8pxNN2MBUgQOS7RkcbbrQ5C8OLQk7HViycBjKP 5egAEZsbkkHHzh1Wt6OzEscO/j9upYJWPSwHqZZ7PiBPYQ4sasvJTABE2AmLMAKv I/hGGCqeiOWJeoZ8EajYOSPYbpY4suQTj4br8F0SYjQFL+CDDPh3Yf1WtwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPveYMPSgAkWOfRl5AruhOOA3tEJMB8GA1UdIwQY MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt NjQyY2U2NzRmOTc0LzEvMS05NWd3OUtBQ1JZNTlHWGtDdTZFNDREZTBRay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDIvZGVlNjZmLTQ1Y2MtNGNiNC05ZmJiLTY0MmNlNjc0Zjk3 NC8xLzI2NzF3eXZxUzFUUmZpUWJYTXl2Qjd3S2p1ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArn/3DAN BgkqhkiG9w0BAQsFAAOCAQEAjOOhrLstCn+cisRnLkriWL8lXuU1/QO/hfnaH3fI 11lqSD45ZUafjmRK82C4SOYmkN1J93wQFEaTAPxVu4PtFi5CLcYQmV+D4x3vyLmg 10xacbbRbbTkHTwl4BrP5fQtWK8chBFe5UzvwhjgW8vFrY/qjlByvM717tM7+Bv+ eA7LT2AXLjpDfrgKUhr4D4ECYEV4HM8dbulOlx043ILiecG5eC7uwULn9PhOpTbd HCBy/1XnSe/ozN1LYY6zhEoCIYFqUSM0U6/UO5PIVJrHqkfV1SXa0N8h5Ma2AjSo 4HAX27Y+Q/8H0lEYkVQWuL8lYQwIOUzmdzSOLqF5MhVN4w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:22 2026 by rpki-client