This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/1mKr2BYewzXDecj0nNw7rfiYO80.roa File: 1mKr2BYewzXDecj0nNw7rfiYO80.roa (raw, json) Hash identifier: 6ynFOsQcc4+COoSJWkYKLEzNdnYU6AWGSoX2YiGPF3I= Subject key identifier: D6:62:AB:D8:16:1E:C3:35:C3:79:C8:F4:9C:DC:3B:AD:F8:98:3B:CD Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748 Certificate serial: 019B7F814E85FFD43223AF5C89EF6C6B3D1D Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/1mKr2BYewzXDecj0nNw7rfiYO80.roa Signing time: Fri 02 Jan 2026 16:18:59 +0000 ROA not before: Fri 02 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204396 IP address blocks: 185.141.220.0/22 maxlen: 22 194.48.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:4e:85:ff:d4:32:23:af:5c:89:ef:6c:6b:3d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748 Validity Not Before: Jan 2 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d662abd8161ec335c379c8f49cdc3badf8983bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:ff:d3:14:db:cf:ac:2c:61:63:9c:9c:bc: ad:13:04:b2:db:1f:4f:9b:53:b5:9f:64:0f:89:0a: b7:22:30:6e:9f:6a:26:aa:79:56:55:fb:1b:45:48: 1b:98:70:1b:fd:be:42:fd:e9:0f:27:6b:5e:77:df: 5b:15:70:82:3d:7d:36:f8:6b:e2:b4:a0:93:91:7f: 55:bf:fd:54:34:ba:db:8c:be:bf:4e:c7:56:e0:e1: 86:4b:bc:26:89:46:dc:31:de:9d:89:d5:36:c5:5b: d6:e3:96:c5:0f:ed:ab:3f:fd:4f:a6:21:dc:86:ac: 7e:c8:8f:2c:98:bd:98:88:ef:60:a0:80:91:47:c2: b3:58:8c:56:7b:5b:d8:48:41:23:20:a6:71:00:19: ff:fa:f1:f2:a6:3d:6b:ab:dc:c0:71:43:5d:c3:1b: 9a:2b:7f:6a:60:e0:20:7a:82:10:cf:23:d1:c5:9c: 2f:77:24:ae:d1:58:19:92:2c:93:b2:de:c2:5d:c5: 77:e1:9d:25:b2:02:58:34:b3:81:47:ee:09:81:d9: a1:58:e3:5d:c7:3e:c6:c2:d7:c8:2a:47:c6:ee:76: e6:4f:0b:c9:d3:68:3c:2a:66:b9:93:7e:39:f2:26: 30:73:d8:a1:35:45:76:67:62:30:a7:d9:90:a5:65: b1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:62:AB:D8:16:1E:C3:35:C3:79:C8:F4:9C:DC:3B:AD:F8:98:3B:CD X509v3 Authority Key Identifier: keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/1mKr2BYewzXDecj0nNw7rfiYO80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.220.0/22 194.48.148.0/22 Signature Algorithm: sha256WithRSAEncryption 30:6d:06:68:37:60:b1:d0:3a:36:97:d2:9a:76:76:66:ab:f4: 9f:0f:6e:af:94:4d:3d:b2:8c:5e:5f:e7:95:5b:cd:ca:fe:9c: d3:c5:b1:68:7d:55:78:80:83:69:c1:3f:21:3a:ff:37:29:53: 88:20:27:aa:07:7b:ba:ec:d0:08:38:dd:5f:3d:89:25:81:55: da:88:3e:8a:ff:d5:4e:4d:08:d5:43:56:fe:e6:02:05:ac:69: dc:ea:51:03:17:b6:aa:36:88:d9:a3:44:1c:5c:89:99:69:a0: 90:e7:bd:10:0d:7d:59:d6:cd:06:6f:a3:de:9d:56:85:a6:ee: 1c:e5:cf:db:f9:29:ce:32:a5:98:17:ca:d8:34:32:95:98:68: 6e:ed:c0:d9:c4:25:82:d7:36:a4:7b:49:7b:3b:8e:cd:15:64: 75:f6:01:d3:8c:48:ec:bc:7f:aa:56:16:ff:d4:07:43:11:99: b6:21:32:f1:dd:1d:18:d7:ed:01:72:4c:a3:7a:38:11:dc:03: 12:8b:a8:f3:71:23:40:61:43:3f:1c:19:89:a7:be:fc:f9:2b: cf:b8:64:7a:a8:87:0c:ac:d6:c3:e9:81:d1:cb:8c:85:75:98: ba:89:36:27:6f:1e:8d:98:08:1a:b7:b3:23:7a:73:5e:40:cc: 74:ec:1b:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gU6F/9QyI69cie9saz0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk MjU3NDgwHhcNMjYwMTAyMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjYyYWJkODE2MWVjMzM1YzM3OWM4ZjQ5Y2RjM2JhZGY4OTgzYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIT/0xTbz6wsYWOcnLytEwSy2x9P m1O1n2QPiQq3IjBun2omqnlWVfsbRUgbmHAb/b5C/ekPJ2ted99bFXCCPX02+Gvi tKCTkX9Vv/1UNLrbjL6/TsdW4OGGS7wmiUbcMd6didU2xVvW45bFD+2rP/1PpiHc hqx+yI8smL2YiO9goICRR8KzWIxWe1vYSEEjIKZxABn/+vHypj1rq9zAcUNdwxua K39qYOAgeoIQzyPRxZwvdySu0VgZkiyTst7CXcV34Z0lsgJYNLOBR+4JgdmhWONd xz7GwtfIKkfG7nbmTwvJ02g8Kma5k3458iYwc9ihNUV2Z2Iwp9mQpWWxPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNZiq9gWHsM1w3nI9JzcO634mDvNMB8GA1UdIwQY MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It MWYwYmYwZDhjYjM2LzEvMW1LcjJCWWV3elhEZWNqMG5OdzdyZmlZTzgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2 LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuY3cAwQC wjCUMA0GCSqGSIb3DQEBCwUAA4IBAQAwbQZoN2Cx0Do2l9KadnZmq/SfD26vlE09 soxeX+eVW83K/pzTxbFofVV4gINpwT8hOv83KVOIICeqB3u67NAION1fPYklgVXa iD6K/9VOTQjVQ1b+5gIFrGnc6lEDF7aqNojZo0QcXImZaaCQ570QDX1Z1s0Gb6Pe nVaFpu4c5c/b+SnOMqWYF8rYNDKVmGhu7cDZxCWC1zake0l7O47NFWR19gHTjEjs vH+qVhb/1AdDEZm2ITLx3R0Y1+0BckyjejgR3AMSi6jzcSNAYUM/HBmJp778+SvP uGR6qIcMrNbD6YHRy4yFdZi6iTYnbx6NmAgat7MjenNeQMx07BtA -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:20 2026 by rpki-client