This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p_lMxx8cX8pbIJFrFqrG8c3S5hg.roa File: p_lMxx8cX8pbIJFrFqrG8c3S5hg.roa (raw, json) Hash identifier: zfvUbDNtjaK1rzPrPIz1dIR5AMomqvNVB6CJ5YdOa84= Subject key identifier: A7:F9:4C:C7:1F:1C:5F:CA:5B:20:91:6B:16:AA:C6:F1:CD:D2:E6:18 Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210 Certificate serial: 019B7FF23D4A2ED25C015FD6AADC3F738A1F Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p_lMxx8cX8pbIJFrFqrG8c3S5hg.roa Signing time: Fri 02 Jan 2026 18:22:20 +0000 ROA not before: Fri 02 Jan 2026 18:22:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204586 IP address blocks: 185.218.72.0/22 maxlen: 22 185.218.72.0/24 maxlen: 24 185.218.73.0/24 maxlen: 24 185.218.74.0/24 maxlen: 24 185.218.75.0/24 maxlen: 24 2a0b:d440::/29 maxlen: 29 2a0b:d440:72::/48 maxlen: 48 2a0b:d440:73::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:3d:4a:2e:d2:5c:01:5f:d6:aa:dc:3f:73:8a:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210 Validity Not Before: Jan 2 18:22:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7f94cc71f1c5fca5b20916b16aac6f1cdd2e618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b6:a8:d6:e7:e1:db:e1:07:9a:f1:85:2a:a3: ba:80:35:7c:cb:87:1a:18:4d:3a:e9:8e:79:53:d5: b8:c2:d2:c3:aa:cd:24:76:c4:58:3b:04:ad:6c:d3: 57:4c:20:44:dd:a1:b7:7d:5b:9f:4d:3a:db:7b:d1: af:ae:8b:7c:52:56:61:86:44:b1:31:28:fa:8a:b7: ce:3d:89:97:3f:09:5e:63:a5:a8:32:2a:27:33:62: 2d:44:6a:da:87:2a:fc:3c:b9:14:82:04:53:1e:3b: 81:a2:14:64:3e:f7:b4:c9:ce:9d:90:b9:2a:d5:ab: 7c:63:81:78:69:0f:0c:70:63:e6:01:e2:98:c8:f3: aa:84:b9:80:c7:48:41:2d:f2:40:ac:5a:4f:ac:ad: 0c:3b:23:e0:e6:7e:9e:c6:f3:01:fc:e6:40:94:6b: 8b:5d:92:fc:ad:84:0a:84:4a:2b:ae:b1:70:36:b4: 0f:ea:9f:a6:c1:d3:96:c9:e0:d2:72:dc:04:7c:ed: 21:67:7e:3d:2d:77:8d:65:cd:99:7c:39:d7:55:ca: e7:09:d1:7f:1d:aa:7a:f1:37:1f:0d:d2:81:16:9e: a1:c5:5e:b0:c2:86:de:73:c9:11:0d:bf:04:d2:08: 03:c0:3f:a2:dc:f0:19:c7:04:aa:fc:83:fa:39:4b: 10:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F9:4C:C7:1F:1C:5F:CA:5B:20:91:6B:16:AA:C6:F1:CD:D2:E6:18 X509v3 Authority Key Identifier: keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p_lMxx8cX8pbIJFrFqrG8c3S5hg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.72.0/22 IPv6: 2a0b:d440::/29 Signature Algorithm: sha256WithRSAEncryption 51:c0:b7:3e:1d:5c:4a:a6:87:3e:d7:3d:d4:b6:e0:6e:69:f3: c1:1d:94:94:ec:f8:9d:49:f9:a5:99:b3:83:2f:f8:f7:51:28: 36:d6:f7:b2:7e:0e:3f:5f:cb:f2:68:34:d7:6c:cc:64:94:03: aa:7e:10:3f:f1:00:ec:6e:3d:48:09:1e:4f:29:1a:f1:ae:c6: e4:21:a9:0f:85:0c:df:34:5e:85:c3:9f:87:07:17:b1:4e:60: b7:c5:c0:7c:ad:a0:71:4c:49:6d:eb:ae:18:5a:37:19:1e:72: 24:e2:6b:13:98:2f:61:a0:9d:a9:ff:2b:27:e0:c0:dd:d7:d3: d9:71:e2:3f:a5:70:c5:91:7b:d0:a7:61:91:5f:d3:fb:33:fb: 63:94:5f:2a:d9:19:49:55:a2:a7:b1:b7:93:10:4b:90:f0:de: 4b:66:49:59:ca:48:0a:0c:d7:f1:a7:90:a2:e1:ae:c9:6d:b1: 53:73:64:12:2c:4a:b3:57:90:4f:00:80:d4:d9:7f:9d:dd:c9: d3:80:83:ee:3b:8c:97:ce:f6:3f:8b:3d:1c:27:92:35:66:09: 53:bf:01:ed:e1:7f:ad:7c:0b:6d:21:3c:f1:2e:f6:b4:7d:4c: d1:09:de:40:50:20:fc:59:3d:e0:57:f8:53:22:c5:57:9b:d2: 36:63:60:55 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8j1KLtJcAV/Wqtw/c4ofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmE5MGU3MTY1MzBmMTVmNzM5OWI3YWMzZTBkMjkzOWEy MWEyMTAwHhcNMjYwMTAyMTgyMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Y5NGNjNzFmMWM1ZmNhNWIyMDkxNmIxNmFhYzZmMWNkZDJlNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Lao1ufh2+EHmvGFKqO6gDV8y4ca GE066Y55U9W4wtLDqs0kdsRYOwStbNNXTCBE3aG3fVufTTrbe9Gvrot8UlZhhkSx MSj6irfOPYmXPwleY6WoMionM2ItRGrahyr8PLkUggRTHjuBohRkPve0yc6dkLkq 1at8Y4F4aQ8McGPmAeKYyPOqhLmAx0hBLfJArFpPrK0MOyPg5n6exvMB/OZAlGuL XZL8rYQKhEorrrFwNrQP6p+mwdOWyeDSctwEfO0hZ349LXeNZc2ZfDnXVcrnCdF/ Hap68TcfDdKBFp6hxV6wwobec8kRDb8E0ggDwD+i3PAZxwSq/IP6OUsQqwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKf5TMcfHF/KWyCRaxaqxvHN0uYYMB8GA1UdIwQY MBaAFKdqkOcWUw8V9zmbesPg0pOaIaIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEt ODViNjViYWNkNGZiLzEvcF9sTXh4OGNYOHBiSUpGckZxckc4YzNTNWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEtODViNjViYWNkNGZi LzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudpIMA0E AgACMAcDBQMqC9RAMA0GCSqGSIb3DQEBCwUAA4IBAQBRwLc+HVxKpoc+1z3UtuBu afPBHZSU7PidSfmlmbODL/j3USg21veyfg4/X8vyaDTXbMxklAOqfhA/8QDsbj1I CR5PKRrxrsbkIakPhQzfNF6Fw5+HBxexTmC3xcB8raBxTElt664YWjcZHnIk4msT mC9hoJ2p/ysn4MDd19PZceI/pXDFkXvQp2GRX9P7M/tjlF8q2RlJVaKnsbeTEEuQ 8N5LZklZykgKDNfxp5Ci4a7JbbFTc2QSLEqzV5BPAIDU2X+d3cnTgIPuO4yXzvY/ iz0cJ5I1ZglTvwHt4X+tfAttITzxLva0fUzRCd5AUCD8WT3gV/hTIsVXm9I2Y2BV -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:23 2026 by rpki-client