This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/rTrNf2BtsL1vlw_R__r7UKcCZJk.roa File: rTrNf2BtsL1vlw_R__r7UKcCZJk.roa (raw, json) Hash identifier: lQAxfhbBIAhm99xgTizcCxmFSvD0y0yK3pththJkeEg= Subject key identifier: AD:3A:CD:7F:60:6D:B0:BD:6F:97:0F:D1:FF:FA:FB:50:A7:02:64:99 Certificate issuer: /CN=8b03dca76319903152f246e05c069fd1a1db5c59 Certificate serial: 019B7F811BD999D4EBDE68E3C1C59DFBAB88 Authority key identifier: 8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/rTrNf2BtsL1vlw_R__r7UKcCZJk.roa Signing time: Fri 02 Jan 2026 16:18:46 +0000 ROA not before: Fri 02 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211368 IP address blocks: 185.45.253.0/24 maxlen: 24 2a13:e6c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.mft rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:1b:d9:99:d4:eb:de:68:e3:c1:c5:9d:fb:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b03dca76319903152f246e05c069fd1a1db5c59 Validity Not Before: Jan 2 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad3acd7f606db0bd6f970fd1fffafb50a7026499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:e1:19:fe:b9:7b:16:6b:32:6d:65:7a:15: b6:65:c7:d9:22:e7:c8:63:21:71:f3:8c:4b:04:67: e4:07:77:4b:4e:70:c8:6e:53:02:0a:b5:d4:59:67: ad:d3:71:9d:71:35:bf:71:22:8d:6c:32:45:a9:e3: 89:89:f3:63:d2:cb:7a:dc:3d:5c:63:91:c5:7f:4a: 93:0b:b0:53:fd:e8:20:f0:f4:53:f8:5d:b0:fe:16: c9:b5:58:20:37:f5:71:8a:f4:2e:14:61:33:b4:0a: 59:ec:6a:81:a5:3d:20:67:a3:75:36:91:88:4d:27: 40:ec:98:f0:97:05:2b:93:5a:e4:7c:fa:d6:cc:f9: 2e:4c:a4:0f:93:81:2a:03:d7:3a:ac:df:60:38:bb: 43:7c:45:42:7c:21:96:23:10:d0:07:39:58:56:78: dc:01:d2:51:64:04:68:1d:d4:fd:33:2f:e2:b0:db: 95:00:9b:0a:5b:61:df:87:d2:21:44:d2:4b:f5:75: 91:f2:17:ad:f8:ec:45:41:be:0f:2b:75:da:b6:05: 82:a8:3f:8c:62:a0:01:4a:68:af:19:73:4d:35:a6: b7:97:98:26:87:9f:c0:f7:97:0d:0c:bf:28:05:b1: 10:c2:3e:90:83:18:0a:b7:dd:19:52:f2:8b:84:ee: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3A:CD:7F:60:6D:B0:BD:6F:97:0F:D1:FF:FA:FB:50:A7:02:64:99 X509v3 Authority Key Identifier: keyid:8B:03:DC:A7:63:19:90:31:52:F2:46:E0:5C:06:9F:D1:A1:DB:5C:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwPcp2MZkDFS8kbgXAaf0aHbXFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/rTrNf2BtsL1vlw_R__r7UKcCZJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/30cdbe-11e1-44ca-b654-029e63f0889a/1/iwPcp2MZkDFS8kbgXAaf0aHbXFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.253.0/24 IPv6: 2a13:e6c0::/29 Signature Algorithm: sha256WithRSAEncryption 5b:68:b2:98:48:27:8a:b1:9c:c2:c5:77:5b:92:72:aa:a5:e2: 79:ee:43:4d:b7:ff:58:1d:65:ff:55:f6:dd:e4:2a:de:4f:95: 5a:dc:cf:c3:92:5d:4c:76:d3:f2:22:38:27:7d:84:cd:a6:82: 7c:ce:e7:d4:cf:6b:c3:1e:f3:44:3c:d3:23:a8:19:0d:73:ae: 30:8b:93:ce:98:d1:5e:24:31:0f:d4:6c:94:83:1a:c6:62:ca: 79:11:f8:ea:1b:cd:0a:c1:99:59:96:29:1f:4d:f5:cf:7d:81: 3a:4e:47:dd:51:d7:e9:0c:19:90:04:1f:8f:24:ef:99:37:47: 51:86:12:7b:3b:17:87:5e:d8:4c:90:fe:8b:b7:86:9c:1d:13: 53:d3:de:5b:b5:ec:af:98:24:c6:ce:2e:91:01:da:d5:94:65: 52:48:11:d3:12:12:61:a7:57:74:5c:28:06:cc:d7:e4:d9:6c: 92:ea:9c:4c:dd:0d:24:f0:0b:67:b7:a5:42:c7:72:0e:05:b5: 40:6d:1e:0d:d4:b8:70:fe:a3:93:e1:54:ce:67:6a:54:5b:cc: ea:38:d1:bb:d6:90:48:2e:3e:db:de:02:64:b5:79:42:bc:04: 57:a7:3d:09:63:51:00:a6:1b:9b:a2:40:3d:83:01:19:b3:72: c4:22:51:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gRvZmdTr3mjjwcWd+6uIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMDNkY2E3NjMxOTkwMzE1MmYyNDZlMDVjMDY5ZmQxYTFk YjVjNTkwHhcNMjYwMTAyMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDNhY2Q3ZjYwNmRiMGJkNmY5NzBmZDFmZmZhZmI1MGE3MDI2NDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonThGf65exZrMm1lehW2ZcfZIufI YyFx84xLBGfkB3dLTnDIblMCCrXUWWet03GdcTW/cSKNbDJFqeOJifNj0st63D1c Y5HFf0qTC7BT/egg8PRT+F2w/hbJtVggN/VxivQuFGEztApZ7GqBpT0gZ6N1NpGI TSdA7JjwlwUrk1rkfPrWzPkuTKQPk4EqA9c6rN9gOLtDfEVCfCGWIxDQBzlYVnjc AdJRZARoHdT9My/isNuVAJsKW2Hfh9IhRNJL9XWR8het+OxFQb4PK3XatgWCqD+M YqABSmivGXNNNaa3l5gmh5/A95cNDL8oBbEQwj6QgxgKt90ZUvKLhO78IwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK06zX9gbbC9b5cP0f/6+1CnAmSZMB8GA1UdIwQY MBaAFIsD3KdjGZAxUvJG4FwGn9Gh21xZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQt MDI5ZTYzZjA4ODlhLzEvclRyTmYyQnRzTDF2bHdfUl9fcjdVS2NDWkprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8zMGNkYmUtMTFlMS00NGNhLWI2NTQtMDI5ZTYzZjA4ODlh LzEvaXdQY3AyTVprREZTOGtiZ1hBYWYwYUhiWEZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuS39MA0E AgACMAcDBQMqE+bAMA0GCSqGSIb3DQEBCwUAA4IBAQBbaLKYSCeKsZzCxXdbknKq peJ57kNNt/9YHWX/Vfbd5CreT5Va3M/Dkl1MdtPyIjgnfYTNpoJ8zufUz2vDHvNE PNMjqBkNc64wi5POmNFeJDEP1GyUgxrGYsp5EfjqG80KwZlZlikfTfXPfYE6Tkfd UdfpDBmQBB+PJO+ZN0dRhhJ7OxeHXthMkP6Lt4acHRNT095bteyvmCTGzi6RAdrV lGVSSBHTEhJhp1d0XCgGzNfk2WyS6pxM3Q0k8Atnt6VCx3IOBbVAbR4N1Lhw/qOT 4VTOZ2pUW8zqONG71pBILj7b3gJktXlCvARXpz0JY1EAphubokA9gwEZs3LEIlGY -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:29 2026 by rpki-client