This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/2oiBg97yJfcku7AZ1xtBGexIP9I.roa File: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (raw, json) Hash identifier: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g= Subject key identifier: DA:88:81:83:DE:F2:25:F7:24:BB:B0:19:D7:1B:41:19:EC:48:3F:D2 Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Certificate serial: 019B77C747A1231E0C1F10C8B9851F3958FC Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/2oiBg97yJfcku7AZ1xtBGexIP9I.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 185.100.240.0/24 maxlen: 24 185.100.241.0/24 maxlen: 24 185.100.242.0/24 maxlen: 24 185.100.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:47:a1:23:1e:0c:1f:10:c8:b9:85:1f:39:58:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da888183def225f724bbb019d71b4119ec483fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:7b:40:b5:1f:b7:40:30:86:cb:f1:17:91: e0:be:dd:5f:5b:07:df:13:f1:fb:d7:84:32:df:02: d8:39:9c:40:fe:aa:2e:a9:88:34:11:9c:da:1b:44: a0:6c:33:47:16:61:20:80:6a:ab:fd:af:d2:46:f8: 57:5f:d7:46:5c:0e:4d:be:84:95:ae:31:17:00:aa: 40:09:6f:f2:f6:29:06:d6:fe:c7:0a:6f:5f:8c:52: 79:12:a5:1b:c0:3d:b6:7b:bc:9d:af:d2:88:16:59: 37:2d:65:d2:28:3d:8b:33:dc:59:3f:b4:86:bc:fd: 2f:f3:0a:42:d4:ae:38:9d:5c:b9:5c:8b:dc:7c:43: c6:34:10:f1:53:9f:76:e3:f5:44:17:c9:1f:94:32: c0:c0:2d:18:73:ec:6c:cd:7c:28:7b:82:82:d5:e9: 54:a7:6e:61:71:99:16:c5:59:a4:c2:c8:eb:26:51: ed:4f:a9:ea:14:d0:47:fc:9a:aa:80:85:68:37:d0: dc:4d:80:3a:4f:6d:03:c5:d5:c2:cb:7a:7b:07:0b: 7e:4a:d6:9d:6f:7c:d0:09:25:52:c5:1f:27:c5:67: c6:24:d9:a9:59:82:04:d8:13:15:cd:43:ce:ea:1f: af:30:16:9b:55:7a:96:6f:ca:87:6f:be:88:5d:f9: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:88:81:83:DE:F2:25:F7:24:BB:B0:19:D7:1B:41:19:EC:48:3F:D2 X509v3 Authority Key Identifier: keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/2oiBg97yJfcku7AZ1xtBGexIP9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.240.0/22 Signature Algorithm: sha256WithRSAEncryption bf:23:48:d6:dc:a7:ce:ff:7c:30:e4:50:f3:b9:1e:1a:ce:d3: e4:41:f6:ec:63:bd:ff:3e:81:9c:9a:90:43:43:fd:1f:15:21: 85:df:13:0c:83:5d:c4:ba:52:80:85:e9:55:de:87:d9:2b:ed: 2a:a8:ce:c9:d5:3d:19:2b:f3:25:f8:85:a3:99:d8:a9:8a:a0: b1:6a:57:f1:2c:f6:a8:08:cf:93:c2:3b:17:16:a1:cb:03:34: 2f:eb:c0:1e:6e:76:bb:65:1b:53:37:c7:bd:41:a8:f2:0d:5d: 2c:2e:96:b0:9b:a0:8d:de:c5:35:cb:bc:fc:ff:cc:a3:37:d9: 03:17:d2:f9:7e:2f:82:10:27:54:f3:ca:62:0e:f6:a6:b2:63: e5:7d:1e:94:3b:4a:a4:8a:15:15:96:24:34:7e:0b:da:d4:1c: 8e:e9:07:5e:73:b0:c6:c8:96:d7:ac:e9:48:aa:52:03:7e:d7: c1:1c:0a:c6:ca:0d:bf:c9:0b:bc:97:77:0c:c4:af:fd:6c:5e: 11:cc:cc:51:7c:3e:ee:63:bd:16:23:6c:9d:8e:da:93:c6:b0: dc:a9:9b:d4:0d:ca:29:18:10:2b:32:7b:81:58:1f:30:bf:65: ce:93:ad:9b:a4:19:0b:f3:13:7e:34:1c:5e:88:9d:38:c2:67: c4:4b:fe:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0ehIx4MHxDIuYUfOVj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWRkNmY1M2JjYjQ5ZTRiOWIwNzA2ZGZkMDc0MjU5Yzli OGE0MDgwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTg4ODE4M2RlZjIyNWY3MjRiYmIwMTlkNzFiNDExOWVjNDgzZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHZ7QLUft0AwhsvxF5Hgvt1fWwff E/H714Qy3wLYOZxA/qouqYg0EZzaG0SgbDNHFmEggGqr/a/SRvhXX9dGXA5NvoSV rjEXAKpACW/y9ikG1v7HCm9fjFJ5EqUbwD22e7ydr9KIFlk3LWXSKD2LM9xZP7SG vP0v8wpC1K44nVy5XIvcfEPGNBDxU5924/VEF8kflDLAwC0Yc+xszXwoe4KC1elU p25hcZkWxVmkwsjrJlHtT6nqFNBH/JqqgIVoN9DcTYA6T20DxdXCy3p7Bwt+Stad b3zQCSVSxR8nxWfGJNmpWYIE2BMVzUPO6h+vMBabVXqWb8qHb76IXfn4hQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqIgYPe8iX3JLuwGdcbQRnsSD/SMB8GA1UdIwQY MBaAFF7t1vU7y0nkubBwbf0HQlnJuKQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODIt MjE1ZGJjODljMmI5LzEvMm9pQmc5N3lKZmNrdTdBWjF4dEJHZXhJUDlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83M2Q1YWQtYTNmMi00NmNiLTg1ODItMjE1ZGJjODljMmI5 LzEvWHUzVzlUdkxTZVM1c0hCdF9RZENXY200cEFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWTwMA0G CSqGSIb3DQEBCwUAA4IBAQC/I0jW3KfO/3ww5FDzuR4aztPkQfbsY73/PoGcmpBD Q/0fFSGF3xMMg13EulKAhelV3ofZK+0qqM7J1T0ZK/Ml+IWjmdipiqCxalfxLPao CM+TwjsXFqHLAzQv68Aebna7ZRtTN8e9QajyDV0sLpawm6CN3sU1y7z8/8yjN9kD F9L5fi+CECdU88piDvamsmPlfR6UO0qkihUVliQ0fgva1ByO6Qdec7DGyJbXrOlI qlIDftfBHArGyg2/yQu8l3cMxK/9bF4RzMxRfD7uY70WI2ydjtqTxrDcqZvUDcop GBArMnuBWB8wv2XOk62bpBkL8xN+NBxeiJ04wmfES/4D -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:09 2026 by rpki-client