This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/21dEdElNkV3wCunznBThEBlJcX4.roa File: 21dEdElNkV3wCunznBThEBlJcX4.roa (raw, json) Hash identifier: 5wxxdJq/NDV1f9XwNpVa9dOVitTrL0/8VPX3yplDJdQ= Subject key identifier: DB:57:44:74:49:4D:91:5D:F0:0A:E9:F3:9C:14:E1:10:19:49:71:7E Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49 Certificate serial: 019B79ECDE5E4402417E923299A911CB2108 Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/21dEdElNkV3wCunznBThEBlJcX4.roa Signing time: Thu 01 Jan 2026 14:18:45 +0000 ROA not before: Thu 01 Jan 2026 14:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203111 IP address blocks: 185.144.104.0/22 maxlen: 22 2a07:3e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:de:5e:44:02:41:7e:92:32:99:a9:11:cb:21:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49 Validity Not Before: Jan 1 14:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db574474494d915df00ae9f39c14e1101949717e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1c:02:85:91:ac:56:d3:0e:c9:d1:b3:a4:53: 8c:1b:a2:36:f2:fb:41:ac:8e:71:80:1d:ac:9b:39: 71:fa:d0:22:c3:2e:01:38:50:b1:7d:3b:c5:ac:c5: 13:54:7f:58:62:62:d7:c5:58:49:9a:dd:51:dd:d4: 3e:59:28:5c:f8:37:21:41:75:63:72:6d:13:4e:97: ee:00:ce:45:78:10:a9:cd:40:62:ce:16:e4:b0:ce: 97:28:6c:50:6f:20:ec:f4:b9:77:97:68:cd:f4:86: 54:d8:bd:c4:6d:73:6f:d5:62:64:ee:45:ba:98:e7: 24:23:23:3b:47:6b:b8:9c:a7:62:0e:09:3d:6b:08: 3f:df:93:57:b7:30:23:62:53:8b:c4:74:b6:b1:fc: b0:23:09:2c:d4:23:06:7b:3d:99:7d:3e:d2:ea:0f: d5:c1:6f:5d:48:1c:a0:50:8b:e2:b2:a8:c2:33:a7: 22:f4:b8:e6:92:0e:ba:be:f4:cc:db:75:cd:e9:46: 74:da:db:21:ab:f7:27:87:6c:ce:45:f4:28:06:ac: 96:a4:de:06:e8:fc:47:6f:c1:02:45:ae:48:aa:e3: 02:05:62:d6:4e:3c:1b:31:b4:31:18:a8:00:e9:12: 79:49:76:cc:c0:66:9c:19:c7:5c:6e:ac:87:3f:96: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:57:44:74:49:4D:91:5D:F0:0A:E9:F3:9C:14:E1:10:19:49:71:7E X509v3 Authority Key Identifier: keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/21dEdElNkV3wCunznBThEBlJcX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.104.0/22 IPv6: 2a07:3e80::/29 Signature Algorithm: sha256WithRSAEncryption 09:75:ba:68:38:58:f7:d4:30:2c:8b:ac:28:83:95:ee:bf:c0: 0d:56:18:9b:55:31:82:47:84:1e:29:8c:94:0e:ca:34:ea:f1: a1:aa:96:81:5f:12:29:9d:88:a7:41:d1:8e:86:0c:b1:73:b2: 86:ed:9e:ec:62:73:af:77:d5:c4:15:f6:fa:cb:ae:07:6e:9b: 09:27:1b:4f:2e:c0:01:44:91:3d:c9:36:a4:6d:2c:56:cb:79: dc:00:28:1f:16:6b:99:fb:a3:45:79:6d:15:fb:37:c6:11:f0: d1:f6:78:c8:95:b8:f0:18:23:0c:a4:e7:3b:c5:35:91:11:b0: ce:4b:49:e7:a5:a0:c3:ab:d4:e4:76:17:08:36:5a:9f:2b:01: 97:95:8f:e2:31:c2:a8:d9:c5:ba:ce:83:7d:8d:f5:26:a0:a1: 0b:10:b3:e7:4a:3e:0e:f3:0a:e4:2d:2d:60:af:a4:c4:5a:be: 4b:c9:28:8b:ca:6b:51:8b:b3:8c:04:c6:9f:86:36:cd:29:f0: 82:13:fd:61:3c:85:ce:e7:3d:39:4e:3d:f6:85:6b:3d:4d:af: f4:79:8d:13:2f:3c:5f:6d:f7:d5:cd:96:9f:14:a0:79:71:fe: aa:e6:75:b5:7f:1f:f9:46:e2:a5:a4:69:dd:18:df:c3:47:e3: 1f:70:ae:c8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57N5eRAJBfpIymakRyyEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yjk4MmVhYmE0NDA4Y2Q5NDE4OTlmNWNlZWMxZGE2YTY3 YzVjNDkwHhcNMjYwMTAxMTQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjU3NDQ3NDQ5NGQ5MTVkZjAwYWU5ZjM5YzE0ZTExMDE5NDk3MTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhwChZGsVtMOydGzpFOMG6I28vtB rI5xgB2smzlx+tAiwy4BOFCxfTvFrMUTVH9YYmLXxVhJmt1R3dQ+WShc+DchQXVj cm0TTpfuAM5FeBCpzUBizhbksM6XKGxQbyDs9Ll3l2jN9IZU2L3EbXNv1WJk7kW6 mOckIyM7R2u4nKdiDgk9awg/35NXtzAjYlOLxHS2sfywIwks1CMGez2ZfT7S6g/V wW9dSBygUIvisqjCM6ci9Ljmkg66vvTM23XN6UZ02tshq/cnh2zORfQoBqyWpN4G 6PxHb8ECRa5IquMCBWLWTjwbMbQxGKgA6RJ5SXbMwGacGcdcbqyHP5ZjzQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNtXRHRJTZFd8Arp85wU4RAZSXF+MB8GA1UdIwQY MBaAFHW5guq6RAjNlBiZ9c7sHaamfFxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2Et ZDcxY2ExOWY5ODllLzEvMjFkRWRFbE5rVjN3Q3Vuem5CVGhFQmxKY1g0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC82OWYzZjMtMGZhYS00NjVmLWFhN2EtZDcxY2ExOWY5ODll LzEvZGJtQzZycEVDTTJVR0puMXp1d2RwcVo4WEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZBoMA0E AgACMAcDBQMqBz6AMA0GCSqGSIb3DQEBCwUAA4IBAQAJdbpoOFj31DAsi6wog5Xu v8ANVhibVTGCR4QeKYyUDso06vGhqpaBXxIpnYinQdGOhgyxc7KG7Z7sYnOvd9XE Ffb6y64HbpsJJxtPLsABRJE9yTakbSxWy3ncACgfFmuZ+6NFeW0V+zfGEfDR9njI lbjwGCMMpOc7xTWREbDOS0nnpaDDq9TkdhcINlqfKwGXlY/iMcKo2cW6zoN9jfUm oKELELPnSj4O8wrkLS1gr6TEWr5LySiLymtRi7OMBMafhjbNKfCCE/1hPIXO5z05 Tj32hWs9Ta/0eY0TLzxfbffVzZafFKB5cf6q5nW1fx/5RuKlpGndGN/DR+MfcK7I -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:58 2026 by rpki-client