This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/crGJsaUqkVJvevG7S1aR5kRrjuk.roa File: crGJsaUqkVJvevG7S1aR5kRrjuk.roa (raw, json) Hash identifier: JplAsFQ7Xa/4SQCkj3u1taRZpnPpuKuRz//hnGEkFyc= Subject key identifier: 72:B1:89:B1:A5:2A:91:52:6F:7A:F1:BB:4B:56:91:E6:44:6B:8E:E9 Certificate issuer: /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Certificate serial: 019B77591145CEB00B4085839B73206E1F3D Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/crGJsaUqkVJvevG7S1aR5kRrjuk.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205490 IP address blocks: 185.215.152.0/22 maxlen: 22 185.215.152.0/23 maxlen: 23 185.215.152.0/24 maxlen: 24 185.215.153.0/24 maxlen: 24 185.215.154.0/23 maxlen: 23 185.215.154.0/24 maxlen: 24 185.215.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:11:45:ce:b0:0b:40:85:83:9b:73:20:6e:1f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72b189b1a52a91526f7af1bb4b5691e6446b8ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:45:b3:31:d6:20:28:49:30:76:15:1e:f9: b5:d7:ec:ab:34:83:f4:6a:20:4c:31:af:f7:61:ae: be:bc:56:71:ea:48:27:bd:44:a6:fb:2b:d2:15:85: 3a:32:c4:bf:a3:28:e7:d1:7d:54:be:db:2f:be:56: d6:2f:14:e8:5e:c2:7f:9c:da:fe:0a:62:ac:3d:57: a8:1f:89:f9:ac:ac:f9:78:24:ea:75:42:dd:4c:35: ca:47:f8:ea:b0:0e:ef:94:78:2f:b9:35:8a:c8:b0: d1:50:72:9c:f7:98:51:5a:11:22:36:0a:f6:34:93: 7b:b6:20:51:dd:7d:9b:79:75:9f:8c:6d:3c:cd:3a: 28:7a:7a:9d:da:ee:0d:4b:47:db:11:19:99:00:b8: 2d:fe:00:26:9f:4b:0e:bd:3e:d1:94:1a:c0:12:e7: 38:38:f7:10:da:c9:f2:2e:e6:b6:92:77:ba:26:55: 91:dd:0d:31:5b:f1:9d:fa:0c:9f:5e:f5:9c:1e:60: 4c:78:9a:5b:12:b9:ec:8c:4e:0e:12:68:bf:6a:5e: 9e:f0:dc:b5:ba:da:80:e9:44:19:25:ea:ef:65:e6: 5c:4d:4a:f3:45:8d:aa:6e:b4:41:07:5a:a5:7f:3d: b9:d1:ae:b8:39:67:7d:96:17:21:53:92:48:18:52: de:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B1:89:B1:A5:2A:91:52:6F:7A:F1:BB:4B:56:91:E6:44:6B:8E:E9 X509v3 Authority Key Identifier: keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/crGJsaUqkVJvevG7S1aR5kRrjuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.215.152.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:13:b4:25:71:52:dd:0d:16:0d:d9:82:11:1f:c0:d2:6c:e2: 0e:05:1d:23:03:16:3e:1c:1f:86:45:c4:a9:78:c9:dd:fc:0c: 7f:6c:18:34:e8:9a:a3:c8:21:1b:fe:a2:70:b3:60:02:8b:c0: b8:f3:60:d2:79:a6:a6:6f:7d:21:bf:14:8c:4b:9f:7b:4b:0c: 20:d5:00:65:84:8b:4c:d0:61:9b:4a:d9:ed:2c:d4:fa:69:76: be:78:39:d0:4f:29:f7:df:86:da:0f:00:9a:2f:3c:82:95:58: 87:0d:fd:e4:0b:bf:19:f6:1b:35:73:ba:59:69:3e:60:45:a6: 11:35:d2:59:e6:62:f9:e5:a2:31:2c:4b:2d:a4:d5:a3:1e:34: 42:50:c9:3f:30:7d:ee:4e:fe:16:2c:ad:a2:93:47:7c:95:47: c2:03:df:0b:3f:d3:f0:62:b7:4c:a3:c7:b1:2c:38:0d:b9:4c: 63:d0:51:8d:29:de:8f:65:51:f7:92:45:1d:96:ff:cd:c3:fc: 43:c6:c2:a8:6e:cf:5e:a5:3e:c8:41:73:37:81:f7:47:5b:62: b5:01:72:6f:6a:4d:9e:bf:ef:d0:d9:d5:b3:04:65:7c:82:b8: 84:a2:31:1f:0e:ed:12:eb:34:db:79:03:c5:f5:79:8b:d2:51: c4:0b:a4:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRFFzrALQIWDm3Mgbh89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNWEyOWNjZGExZGM4YThhMTYzYWMyNzc4MWU4ZWM1OTdl NzZkYjkwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmIxODliMWE1MmE5MTUyNmY3YWYxYmI0YjU2OTFlNjQ0NmI4ZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oRFszHWIChJMHYVHvm11+yrNIP0 aiBMMa/3Ya6+vFZx6kgnvUSm+yvSFYU6MsS/oyjn0X1UvtsvvlbWLxToXsJ/nNr+ CmKsPVeoH4n5rKz5eCTqdULdTDXKR/jqsA7vlHgvuTWKyLDRUHKc95hRWhEiNgr2 NJN7tiBR3X2beXWfjG08zTooenqd2u4NS0fbERmZALgt/gAmn0sOvT7RlBrAEuc4 OPcQ2snyLua2kne6JlWR3Q0xW/Gd+gyfXvWcHmBMeJpbErnsjE4OEmi/al6e8Ny1 utqA6UQZJervZeZcTUrzRY2qbrRBB1qlfz250a64OWd9lhchU5JIGFLemQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKxibGlKpFSb3rxu0tWkeZEa47pMB8GA1UdIwQY MBaAFP9aKczaHciooWOsJ3gejsWX5225MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQt OWJjNTVmNjJkYWJhLzEvY3JHSnNhVXFrVkp2ZXZHN1MxYVI1a1JyanVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9iZjE3YTYtZDYxYi00OTNkLTlhODQtOWJjNTVmNjJkYWJh LzEvXzFvcHpOb2R5S2loWTZ3bmVCNk94WmZuYmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudeYMA0G CSqGSIb3DQEBCwUAA4IBAQB9E7QlcVLdDRYN2YIRH8DSbOIOBR0jAxY+HB+GRcSp eMnd/Ax/bBg06JqjyCEb/qJws2ACi8C482DSeaamb30hvxSMS597Swwg1QBlhItM 0GGbStntLNT6aXa+eDnQTyn334baDwCaLzyClViHDf3kC78Z9hs1c7pZaT5gRaYR NdJZ5mL55aIxLEstpNWjHjRCUMk/MH3uTv4WLK2ik0d8lUfCA98LP9PwYrdMo8ex LDgNuUxj0FGNKd6PZVH3kkUdlv/Nw/xDxsKobs9epT7IQXM3gfdHW2K1AXJvak2e v+/Q2dWzBGV8griEojEfDu0S6zTbeQPF9XmL0lHEC6SQ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:15 2026 by rpki-client