This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa File: co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa (raw, json) Hash identifier: kD/drcWwBr6x5xqwMF16Xc4LXWddRLyNIKIsPwoN+78= Subject key identifier: 72:8D:4F:23:75:86:AA:DF:D0:D9:61:79:C5:93:E2:A8:D3:A9:C9:2E Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a Certificate serial: 019B7D5C03CCC26CB446EF153ACFDCF75508 Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa Signing time: Fri 02 Jan 2026 06:19:00 +0000 ROA not before: Fri 02 Jan 2026 06:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204784 IP address blocks: 185.184.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:03:cc:c2:6c:b4:46:ef:15:3a:cf:dc:f7:55:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=728d4f237586aadfd0d96179c593e2a8d3a9c92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:69:11:d5:7b:95:13:e5:ae:99:64:91:c2: fe:9a:4e:0b:d9:9a:23:79:ac:de:e4:ae:c8:5f:7e: 38:98:65:b2:1a:33:85:58:da:a3:7e:9a:75:79:33: 60:dc:cd:47:27:99:10:d1:33:e3:d7:23:af:f9:ab: c7:18:cb:a0:ac:3c:5a:fa:bb:7b:5d:9a:5d:6c:54: 46:3c:26:8f:cc:7a:40:db:01:e0:ae:7f:25:d5:93: 37:75:4c:e0:62:a5:e6:e2:78:62:99:12:7d:51:26: 87:8b:a8:d7:36:5d:20:e6:a4:8c:80:9a:41:06:86: 2f:c8:5b:25:76:59:a1:cd:69:12:d1:93:bc:52:19: 8f:6c:5e:41:4c:10:d2:46:09:4d:3c:be:0a:ab:7c: 2f:df:4d:ac:90:79:98:17:68:52:0d:47:13:f7:46: db:26:b2:16:5f:56:f1:81:7a:ed:0f:21:54:e8:5c: 35:d3:da:e4:8d:35:fe:63:e8:4f:10:0c:59:55:17: 15:a2:f8:1d:36:81:20:bd:f1:b9:fb:00:e4:7e:4b: 0c:d5:8c:3e:ed:22:e6:09:50:0e:e0:64:62:44:5d: d5:16:bd:05:94:34:a3:1a:95:74:5c:e7:dd:80:23: 03:ec:0d:a0:05:2d:65:d1:86:a5:5e:62:05:97:50: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:4F:23:75:86:AA:DF:D0:D9:61:79:C5:93:E2:A8:D3:A9:C9:2E X509v3 Authority Key Identifier: keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/co1PI3WGqt_Q2WF5xZPiqNOpyS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.61.0/24 Signature Algorithm: sha256WithRSAEncryption 85:eb:ad:a5:57:93:0b:11:15:9f:bc:95:ec:37:27:26:e5:04: 35:a9:05:1b:07:2c:8c:6b:cb:76:f3:1a:9c:9f:2c:61:77:73: 20:e7:38:20:ca:cf:61:1d:1e:e4:27:9e:c7:f3:da:86:f7:e3: 69:12:d8:dd:26:58:ba:98:c8:6d:3d:ae:28:41:74:e6:77:34: e0:61:ba:6f:fa:f6:33:5b:43:bf:d9:f6:23:46:ab:b5:7d:51: 82:97:ca:d8:7c:da:2e:02:ea:07:9f:f6:bc:ec:02:97:b9:ca: 5f:84:76:ca:a0:fd:51:a5:2b:9e:03:40:e0:66:ad:3f:40:b9: 60:d1:f2:ef:b2:8f:7c:45:8f:23:7b:8e:76:db:31:60:f4:19: cc:02:ca:42:49:df:76:62:4a:3d:aa:8b:38:cb:a9:19:ff:26: 35:e5:fc:5c:04:09:bd:22:02:f6:39:18:f8:bd:f5:e8:29:d4: 03:df:de:2d:52:63:63:2c:bf:be:3b:5e:f8:57:88:59:57:53: 50:36:a3:3a:1b:e5:fb:90:44:df:2f:43:c5:22:41:29:92:f1: 6d:14:3f:af:50:0c:2c:4a:c8:cc:61:02:f5:3c:5e:59:07:34: 86:0e:2c:f1:a2:a7:94:81:bc:2d:d9:a2:76:cc:ed:d7:08:a1: 54:73:a7:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XAPMwmy0Ru8VOs/c91UIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTJkYjgyMDkwYjM0M2Y4OWY3YzYzN2NmNDFhOTRiY2Zk NDM0NmEwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjhkNGYyMzc1ODZhYWRmZDBkOTYxNzljNTkzZTJhOGQzYTljOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrBpEdV7lRPlrplkkcL+mk4L2Zoj eaze5K7IX344mGWyGjOFWNqjfpp1eTNg3M1HJ5kQ0TPj1yOv+avHGMugrDxa+rt7 XZpdbFRGPCaPzHpA2wHgrn8l1ZM3dUzgYqXm4nhimRJ9USaHi6jXNl0g5qSMgJpB BoYvyFsldlmhzWkS0ZO8UhmPbF5BTBDSRglNPL4Kq3wv302skHmYF2hSDUcT90bb JrIWX1bxgXrtDyFU6Fw109rkjTX+Y+hPEAxZVRcVovgdNoEgvfG5+wDkfksM1Yw+ 7SLmCVAO4GRiRF3VFr0FlDSjGpV0XOfdgCMD7A2gBS1l0YalXmIFl1DMzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKNTyN1hqrf0NlhecWT4qjTqckuMB8GA1UdIwQY MBaAFK5S24IJCzQ/iffGN89BqUvP1DRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUt ZDdiNjA2M2RjYTM3LzEvY28xUEkzV0dxdF9RMldGNXhaUGlxTk9weVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUtZDdiNjA2M2RjYTM3 LzEvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubg9MA0G CSqGSIb3DQEBCwUAA4IBAQCF662lV5MLERWfvJXsNycm5QQ1qQUbByyMa8t28xqc nyxhd3Mg5zggys9hHR7kJ57H89qG9+NpEtjdJli6mMhtPa4oQXTmdzTgYbpv+vYz W0O/2fYjRqu1fVGCl8rYfNouAuoHn/a87AKXucpfhHbKoP1RpSueA0DgZq0/QLlg 0fLvso98RY8je4522zFg9BnMAspCSd92Yko9qos4y6kZ/yY15fxcBAm9IgL2ORj4 vfXoKdQD394tUmNjLL++O174V4hZV1NQNqM6G+X7kETfL0PFIkEpkvFtFD+vUAws SsjMYQL1PF5ZBzSGDizxoqeUgbwt2aJ2zO3XCKFUc6ce -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:20 2026 by rpki-client