This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/RM6TUZSUSaasZ-dBQ85053ksR-0.roa File: RM6TUZSUSaasZ-dBQ85053ksR-0.roa (raw, json) Hash identifier: v5GrLhG4mT6P4v3eZCOBY4Q0WYXL2CD9LeoqtKdCqz0= Subject key identifier: 44:CE:93:51:94:94:49:A6:AC:67:E7:41:43:CE:74:E7:79:2C:47:ED Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a Certificate serial: 019B7A598FC600A4AEAEC66B0176325988E6 Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/RM6TUZSUSaasZ-dBQ85053ksR-0.roa Signing time: Thu 01 Jan 2026 16:17:28 +0000 ROA not before: Thu 01 Jan 2026 16:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205279 IP address blocks: 185.223.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:8f:c6:00:a4:ae:ae:c6:6b:01:76:32:59:88:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a Validity Not Before: Jan 1 16:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ce9351949449a6ac67e74143ce74e7792c47ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:91:25:42:ce:d1:e1:1f:f3:39:57:f3:cc:54: 27:93:fd:f8:f7:ae:4f:18:03:4e:ac:59:f6:4a:bc: de:39:8a:9b:4d:c6:d8:91:8e:df:14:b8:c8:df:19: 34:a7:b2:95:37:01:6c:d3:8c:4c:f0:c0:6e:5b:55: d3:ca:ca:f0:2d:b2:7f:39:24:c3:82:27:93:71:7b: c4:44:42:c8:d8:13:4e:65:24:92:15:8b:e4:1d:e8: 44:ed:a0:d0:34:4e:af:c4:51:c2:d6:3d:f0:15:ce: 55:fc:fc:1c:5b:7d:8e:68:17:26:21:bc:9f:be:7e: 50:8e:5d:52:ae:0c:ed:44:7f:e9:4c:25:b7:16:91: a7:00:f1:a5:5d:3e:96:60:a5:23:cf:e1:fe:04:8c: 77:44:aa:9c:53:93:f7:be:b8:69:aa:3f:83:65:f2: 11:67:20:ec:30:64:d0:90:7e:f4:06:56:d1:d5:0c: 28:59:94:54:95:b0:03:26:50:61:10:56:81:05:ee: 6e:71:63:88:de:6d:38:a8:86:bc:be:d4:99:c6:8b: 24:a1:54:15:84:24:ba:03:6b:fe:f6:0a:f9:7e:10: 58:e5:e6:9d:54:5b:29:fd:15:b6:ec:44:65:f7:2d: 9e:04:6b:8c:26:89:f7:03:8a:5c:91:b0:bb:4f:06: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CE:93:51:94:94:49:A6:AC:67:E7:41:43:CE:74:E7:79:2C:47:ED X509v3 Authority Key Identifier: keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/RM6TUZSUSaasZ-dBQ85053ksR-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.120.0/22 Signature Algorithm: sha256WithRSAEncryption 03:cd:54:b4:4d:46:87:7a:24:3a:48:ac:1c:83:c5:2f:4b:24: a5:be:55:a5:15:db:55:69:9f:19:83:69:5c:e0:6d:3c:c9:3d: 8d:34:55:00:1c:e5:67:2e:40:ad:f2:1c:53:30:8a:b9:08:f5: ab:9c:89:92:3e:b4:a4:b5:c5:a7:44:77:c7:4a:c9:d3:97:d6: ae:c4:da:ab:30:30:e9:57:be:ca:e0:ed:39:68:da:66:d7:43: 95:21:e7:d3:4c:52:ae:17:b4:1a:b9:28:c3:23:82:31:c1:d1: 41:15:05:09:56:d1:4b:41:37:fc:18:da:66:93:37:2e:5c:95: 64:e0:ef:3a:66:54:16:77:9e:a6:6f:ac:51:1c:2c:c6:67:85: c5:73:76:37:75:b8:5e:36:ea:53:40:31:dc:35:c2:7c:c3:2c: ff:85:34:ed:06:25:d5:2c:d5:f2:ef:56:26:db:62:6a:e7:23: cc:fa:06:6f:a5:ed:5d:4d:da:c3:64:a0:65:dc:2f:38:b3:d9: 34:b8:53:5a:31:09:96:14:15:ad:99:df:a8:9b:cf:ed:57:6f: 88:12:c4:f3:96:cf:3e:4f:7f:8e:c8:53:b7:53:ac:da:40:19: 1b:97:35:93:54:11:61:3c:71:a4:6e:48:2b:0f:14:67:b3:73: 62:bd:51:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WY/GAKSursZrAXYyWYjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw OTAzMWEwHhcNMjYwMTAxMTYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGNlOTM1MTk0OTQ0OWE2YWM2N2U3NDE0M2NlNzRlNzc5MmM0N2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8pElQs7R4R/zOVfzzFQnk/34965P GANOrFn2SrzeOYqbTcbYkY7fFLjI3xk0p7KVNwFs04xM8MBuW1XTysrwLbJ/OSTD gieTcXvERELI2BNOZSSSFYvkHehE7aDQNE6vxFHC1j3wFc5V/PwcW32OaBcmIbyf vn5Qjl1SrgztRH/pTCW3FpGnAPGlXT6WYKUjz+H+BIx3RKqcU5P3vrhpqj+DZfIR ZyDsMGTQkH70BlbR1QwoWZRUlbADJlBhEFaBBe5ucWOI3m04qIa8vtSZxoskoVQV hCS6A2v+9gr5fhBY5eadVFsp/RW27ERl9y2eBGuMJon3A4pckbC7TwbjSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETOk1GUlEmmrGfnQUPOdOd5LEftMB8GA1UdIwQY MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt YjZmN2FlZDg1NmMwLzEvUk02VFVaU1VTYWFzWi1kQlE4NTA1M2tzUi0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud94MA0G CSqGSIb3DQEBCwUAA4IBAQADzVS0TUaHeiQ6SKwcg8UvSySlvlWlFdtVaZ8Zg2lc 4G08yT2NNFUAHOVnLkCt8hxTMIq5CPWrnImSPrSktcWnRHfHSsnTl9auxNqrMDDp V77K4O05aNpm10OVIefTTFKuF7QauSjDI4IxwdFBFQUJVtFLQTf8GNpmkzcuXJVk 4O86ZlQWd56mb6xRHCzGZ4XFc3Y3dbheNupTQDHcNcJ8wyz/hTTtBiXVLNXy71Ym 22Jq5yPM+gZvpe1dTdrDZKBl3C84s9k0uFNaMQmWFBWtmd+om8/tV2+IEsTzls8+ T3+OyFO3U6zaQBkblzWTVBFhPHGkbkgrDxRns3NivVEQ -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:36 2026 by rpki-client