This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/x1uPGMrYnISpD0QmPBO-tTbLGlM.roa File: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (raw, json) Hash identifier: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk= Subject key identifier: C7:5B:8F:18:CA:D8:9C:84:A9:0F:44:26:3C:13:BE:B5:36:CB:1A:53 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019B7F849F40C5A3B14DF7C6220D1B017297 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/x1uPGMrYnISpD0QmPBO-tTbLGlM.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201500 IP address blocks: 185.72.212.0/22 maxlen: 22 185.72.212.0/24 maxlen: 24 185.72.213.0/24 maxlen: 24 185.72.214.0/24 maxlen: 24 185.72.215.0/24 maxlen: 24 185.137.69.0/24 maxlen: 24 185.174.213.0/24 maxlen: 24 185.174.214.0/23 maxlen: 23 185.174.214.0/24 maxlen: 24 185.174.215.0/24 maxlen: 24 185.236.12.0/22 maxlen: 22 185.236.12.0/24 maxlen: 24 185.236.13.0/24 maxlen: 24 185.236.14.0/24 maxlen: 24 185.236.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9f:40:c5:a3:b1:4d:f7:c6:22:0d:1b:01:72:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c75b8f18cad89c84a90f44263c13beb536cb1a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:d8:97:9a:80:3b:dd:76:de:8b:7f:ee:32: 2d:d0:14:a7:7c:8d:8a:66:67:4d:13:f2:67:8f:eb: ed:fe:84:a0:33:11:8b:c3:d2:e3:cf:03:7d:cd:56: f1:8e:0d:21:8b:b7:4d:ce:fe:4f:59:e9:45:a2:ef: d9:59:15:b0:f7:4f:0c:28:6b:75:f6:81:fe:72:3f: 87:1e:1b:56:31:67:50:b6:f2:b5:c9:c4:77:56:8d: a7:1b:7c:20:3d:ac:54:45:54:73:d4:12:29:78:4b: 4d:34:9e:04:4f:62:e4:ea:9a:a7:aa:4c:53:94:00: d5:52:b5:94:e4:64:06:dc:5d:f5:64:83:d2:4a:62: dc:76:ea:d2:18:b7:d7:69:4c:36:1b:5b:65:0e:e2: 99:4c:75:e7:ad:e8:d6:bc:eb:bb:f9:08:37:1c:1c: c9:ed:e5:79:35:7d:48:99:80:48:3d:b4:70:71:51: 07:55:7e:1c:e0:d7:32:b4:2b:f9:68:a7:2b:c8:96: 49:7a:c4:81:44:ad:d2:2d:b3:f4:05:a0:25:33:40: 69:b9:7d:32:f7:41:88:9c:62:54:7c:af:7d:dc:4a: 64:57:31:63:e8:75:0d:fa:23:e3:bb:3e:43:32:a4: 04:48:96:78:b2:6b:9e:00:21:8b:1f:ee:ce:dd:f8: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5B:8F:18:CA:D8:9C:84:A9:0F:44:26:3C:13:BE:B5:36:CB:1A:53 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/x1uPGMrYnISpD0QmPBO-tTbLGlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.212.0/22 185.137.69.0/24 185.174.213.0-185.174.215.255 185.236.12.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:de:2f:3e:c8:5b:04:a3:d7:37:3c:0a:3a:e5:75:98:e9:e4: 4a:02:a8:58:f5:6c:b2:07:a1:fd:03:4a:2c:b6:48:c3:d7:18: 96:44:3d:16:ff:87:62:c9:1b:94:1b:ad:a9:a9:8e:cf:da:4d: 8c:0c:3e:b1:7e:1d:77:a2:ea:eb:a9:95:60:d7:8f:12:bf:6f: 8a:9d:5e:95:6e:6b:81:74:31:04:af:76:17:a1:8e:e5:33:bf: f9:71:a8:3d:65:45:0b:1b:01:ba:c9:5a:80:3f:e4:21:93:e9: 15:c1:97:c1:d4:53:b3:b4:40:59:a3:8f:dc:27:db:9d:f2:1c: 99:09:12:63:22:d9:1e:03:b0:c8:82:09:2f:4f:a3:ed:65:8a: 25:bb:a4:b9:be:f5:40:38:ef:da:be:e4:25:ad:f7:57:a9:9f: 03:87:79:b5:57:07:75:c7:2f:2f:54:2f:0d:ca:fb:ba:06:f1: f0:b1:40:3b:ac:d8:f9:19:16:54:4e:0e:02:34:b1:7d:a1:7e: 2e:a1:74:a0:d6:8f:35:8f:86:6a:3b:18:83:9e:38:ae:87:6c: 1e:10:e9:65:a7:e1:0d:39:08:f7:7f:1d:6c:69:38:0b:e7:5e: 0f:00:5e:cb:c0:b0:c2:1f:bb:14:18:86:1d:f2:64:d9:ab:39: 71:40:46:7b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/hJ9AxaOxTffGIg0bAXKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzViOGYxOGNhZDg5Yzg0YTkwZjQ0MjYzYzEzYmViNTM2Y2IxYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B3Yl5qAO9123ot/7jIt0BSnfI2K ZmdNE/Jnj+vt/oSgMxGLw9LjzwN9zVbxjg0hi7dNzv5PWelFou/ZWRWw908MKGt1 9oH+cj+HHhtWMWdQtvK1ycR3Vo2nG3wgPaxURVRz1BIpeEtNNJ4ET2Lk6pqnqkxT lADVUrWU5GQG3F31ZIPSSmLcdurSGLfXaUw2G1tlDuKZTHXnrejWvOu7+Qg3HBzJ 7eV5NX1ImYBIPbRwcVEHVX4c4NcytCv5aKcryJZJesSBRK3SLbP0BaAlM0BpuX0y 90GInGJUfK993EpkVzFj6HUN+iPjuz5DMqQESJZ4smueACGLH+7O3fgCrQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMdbjxjK2JyEqQ9EJjwTvrU2yxpTMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEveDF1UEdNclluSVNwRDBRbVBCTy10VGJMR2xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCuUjUAwQA uYlFMAwDBAC5rtUDBAO5rtADBAK57AwwDQYJKoZIhvcNAQELBQADggEBAC3eLz7I WwSj1zc8CjrldZjp5EoCqFj1bLIHof0DSiy2SMPXGJZEPRb/h2LJG5Qbrampjs/a TYwMPrF+HXei6uuplWDXjxK/b4qdXpVua4F0MQSvdhehjuUzv/lxqD1lRQsbAbrJ WoA/5CGT6RXBl8HUU7O0QFmjj9wn253yHJkJEmMi2R4DsMiCCS9Po+1liiW7pLm+ 9UA479q+5CWt91epnwOHebVXB3XHLy9ULw3K+7oG8fCxQDus2PkZFlRODgI0sX2h fi6hdKDWjzWPhmo7GIOeOK6HbB4Q6WWn4Q05CPd/HWxpOAvnXg8AXsvAsMIfuxQY hh3yZNmrOXFARns= -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:59 2026 by rpki-client