This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa File: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (raw, json) Hash identifier: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU= Subject key identifier: 69:C5:07:7D:50:B2:E6:3F:16:7E:15:C1:90:AA:EF:B4:82:19:EA:EE Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943 Certificate serial: 019B7A5AD2871E33CAF868AD731C387409DC Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51324 IP address blocks: 185.37.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d2:87:1e:33:ca:f8:68:ad:73:1c:38:74:09:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69c5077d50b2e63f167e15c190aaefb48219eaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:5e:11:da:0e:90:d6:b7:87:4e:e5:c5:d1: 2b:98:8c:17:45:77:a6:8f:33:02:76:7d:c5:eb:84: da:0d:4b:3a:ae:61:70:5c:d1:ef:2a:68:a8:1f:c1: ab:4f:28:16:a1:80:81:7c:26:e1:9f:46:af:b3:e3: 17:e5:af:06:57:6c:a0:19:8f:01:87:bc:1b:74:92: 5a:54:d6:45:e0:12:5a:fc:b2:27:5a:21:2f:c6:87: b2:66:37:bf:1f:b7:ff:cb:51:a1:34:8f:be:2a:3e: b0:22:a9:12:04:7f:bb:4e:aa:9f:fa:f1:ad:67:36: b7:a9:f2:84:f0:3a:b7:a7:b5:07:f9:61:23:fe:7d: 69:3a:94:ae:c5:c4:f2:33:66:a0:b4:21:be:3b:ac: f4:3a:af:30:3a:df:1e:e7:b5:43:09:d3:ec:81:90: 1c:b5:97:e6:5a:23:75:f0:08:51:91:78:45:5f:6c: 22:c0:c9:fd:ee:9d:09:43:49:d5:51:e0:4f:29:49: 1a:87:3f:d3:9a:ee:3e:51:64:7e:38:b9:56:7b:cb: e7:5e:81:40:c3:5b:89:75:5c:ed:7e:20:36:ae:4e: c4:35:fc:58:e0:c2:f1:50:9d:fb:43:90:b4:cb:ed: 43:e8:32:9c:01:1d:7d:5f:ca:78:09:3b:81:f7:f8: 46:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C5:07:7D:50:B2:E6:3F:16:7E:15:C1:90:AA:EF:B4:82:19:EA:EE X509v3 Authority Key Identifier: keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.152.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:63:fe:f0:07:61:9b:0f:1c:8d:7e:0d:53:70:28:89:a4:f0: 76:f5:53:ac:5e:55:49:c4:12:86:e7:e8:e0:64:6c:75:64:37: fb:4b:0e:e3:07:0e:d1:f5:fd:57:13:61:6b:58:45:06:e6:f7: 26:52:57:d4:eb:e0:8f:fd:48:9a:df:5c:11:ae:1d:07:ac:78: 66:61:8f:95:1e:8c:48:95:c8:52:cd:87:c4:b9:84:a5:1b:84: ba:37:01:19:c3:44:db:c8:a2:1d:4b:ed:55:6e:1c:17:3c:98: a4:3e:3f:df:62:94:b1:2c:ab:65:c3:0d:b2:9c:f0:44:c6:71: b3:96:f3:47:d4:65:84:76:18:e4:b5:61:89:0f:50:b4:86:c5: 49:fa:21:25:1d:e4:02:27:f2:15:f0:f0:bf:a3:fa:95:bb:3b: 4d:f4:87:0a:0f:34:1a:da:a4:55:fd:17:15:db:83:df:ea:c0: 0f:2a:ab:8e:23:2b:d5:84:f4:b6:2a:ff:a6:66:6f:13:9e:9f: eb:20:42:aa:ff:57:cd:d1:33:b7:e4:2e:84:c9:4e:b2:83:b0: c8:5b:bd:fa:3b:7d:2b:a1:15:45:8e:5e:9d:7d:e8:b7:20:6b: f9:89:b9:a9:59:4a:73:bf:3c:7d:73:f0:68:c1:27:f2:fa:11: 70:f0:5f:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtKHHjPK+Gitcxw4dAncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTBmMmVlMGE3MGJjYWVmZTAxOTVhM2Q4YjM3N2QzNDI5 N2E5NDMwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWM1MDc3ZDUwYjJlNjNmMTY3ZTE1YzE5MGFhZWZiNDgyMTllYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nVeEdoOkNa3h07lxdErmIwXRXem jzMCdn3F64TaDUs6rmFwXNHvKmioH8GrTygWoYCBfCbhn0avs+MX5a8GV2ygGY8B h7wbdJJaVNZF4BJa/LInWiEvxoeyZje/H7f/y1GhNI++Kj6wIqkSBH+7Tqqf+vGt Zza3qfKE8Dq3p7UH+WEj/n1pOpSuxcTyM2agtCG+O6z0Oq8wOt8e57VDCdPsgZAc tZfmWiN18AhRkXhFX2wiwMn97p0JQ0nVUeBPKUkahz/Tmu4+UWR+OLlWe8vnXoFA w1uJdVztfiA2rk7ENfxY4MLxUJ37Q5C0y+1D6DKcAR19X8p4CTuB9/hGFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGnFB31QsuY/Fn4VwZCq77SCGeruMB8GA1UdIwQY MBaAFOOQ8u4KcLyu/gGVo9izd9NCl6lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmIt M2ViOTEzNGVjNzlkLzEvYWNVSGZWQ3k1ajhXZmhYQmtLcnZ0SUlaNnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmItM2ViOTEzNGVjNzlk LzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSWYMA0G CSqGSIb3DQEBCwUAA4IBAQA6Y/7wB2GbDxyNfg1TcCiJpPB29VOsXlVJxBKG5+jg ZGx1ZDf7Sw7jBw7R9f1XE2FrWEUG5vcmUlfU6+CP/Uia31wRrh0HrHhmYY+VHoxI lchSzYfEuYSlG4S6NwEZw0TbyKIdS+1VbhwXPJikPj/fYpSxLKtlww2ynPBExnGz lvNH1GWEdhjktWGJD1C0hsVJ+iElHeQCJ/IV8PC/o/qVuztN9IcKDzQa2qRV/RcV 24Pf6sAPKquOIyvVhPS2Kv+mZm8Tnp/rIEKq/1fN0TO35C6EyU6yg7DIW736O30r oRVFjl6dfei3IGv5ibmpWUpzvzx9c/BowSfy+hFw8F/s -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:30 2026 by rpki-client