This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/b1tEVuM57ah52OvUq3Fvdd-4XkA.roa File: b1tEVuM57ah52OvUq3Fvdd-4XkA.roa (raw, json) Hash identifier: Odyf//1QBuLxW+qHnAmLWghjISD9y11hRldd+HjGtOA= Subject key identifier: 6F:5B:44:56:E3:39:ED:A8:79:D8:EB:D4:AB:71:6F:75:DF:B8:5E:40 Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Certificate serial: 019B7E38CD1167C477581BBE90EF42594F9C Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/b1tEVuM57ah52OvUq3Fvdd-4XkA.roa Signing time: Fri 02 Jan 2026 10:20:10 +0000 ROA not before: Fri 02 Jan 2026 10:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204100 IP address blocks: 185.114.112.0/22 maxlen: 22 185.114.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:cd:11:67:c4:77:58:1b:be:90:ef:42:59:4f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Validity Not Before: Jan 2 10:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5b4456e339eda879d8ebd4ab716f75dfb85e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:5c:de:38:ad:6a:b4:cb:7c:f4:58:45:cf: 13:68:a2:f0:c7:9f:0a:46:02:cf:02:81:fc:09:0e: 0d:6a:39:d6:41:5f:62:3d:52:a7:0c:fe:66:54:f3: f1:29:06:d2:58:af:a3:fd:5c:91:ba:48:da:f8:77: 8b:ec:33:96:8d:83:42:08:f4:e3:aa:fe:1d:bb:be: 5b:b6:af:97:6e:72:47:29:f6:db:26:af:f0:bd:4e: b6:8c:74:d3:29:c6:44:80:be:b5:1e:e4:51:cc:ec: e4:ed:41:37:26:81:3e:dc:fd:cd:19:7d:2f:3b:b3: 8b:1e:11:07:5e:d2:58:a0:89:8b:ce:df:1e:a2:14: 5d:2a:66:c9:ad:99:a7:0f:11:3e:5e:f4:51:d4:fe: b7:49:be:20:20:ac:9c:77:2a:ae:63:f3:6c:d3:0a: 13:64:b2:5c:2b:00:f5:9d:f3:f7:0d:26:16:05:63: 39:d9:30:b5:8d:b4:b9:4f:6f:3f:4d:a5:f0:9d:60: 92:43:c5:27:4e:56:c6:65:7b:b8:ba:28:c7:56:db: 28:97:fc:09:71:db:2a:38:2e:5c:f2:2a:c4:c4:f2: cd:79:4d:d7:34:af:5a:04:5b:d8:51:93:79:69:db: f8:9e:b2:68:b8:da:07:26:94:84:1a:e0:c9:c8:01: b7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5B:44:56:E3:39:ED:A8:79:D8:EB:D4:AB:71:6F:75:DF:B8:5E:40 X509v3 Authority Key Identifier: keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/b1tEVuM57ah52OvUq3Fvdd-4XkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.114.112.0/22 Signature Algorithm: sha256WithRSAEncryption b0:c7:b4:79:c6:3f:18:f6:b9:bc:32:18:9e:f4:c2:f0:e0:5f: bf:0c:75:ad:32:f9:5b:e1:e8:6c:58:e4:0d:4a:73:fe:5a:72: a4:11:2d:db:b6:8e:65:0a:37:7b:9f:b0:d0:6f:0b:a1:bd:f3: b9:15:36:08:cc:b6:cf:d1:84:34:2b:a0:d7:ac:a4:1f:36:73: 09:42:6d:11:af:45:38:67:d3:8e:dd:04:33:7e:c0:74:d2:9b: c2:38:b8:12:7c:b5:62:42:f6:2d:1c:39:3a:4b:17:22:27:08: d8:26:0a:53:6f:7a:fe:68:90:86:f6:6b:cd:0e:83:46:26:5c: 1e:6b:b4:6c:1c:1a:d5:f2:d1:a3:1a:00:24:07:57:b6:8f:36: 83:69:f6:25:b2:19:7e:2c:2e:af:64:a0:1d:ff:77:51:1f:b6: 1e:23:c0:ba:f4:72:3b:05:dd:db:7d:6c:9e:8b:f9:0b:2c:6b: c8:ad:63:1c:85:db:2d:7e:77:57:1d:da:02:5a:e8:f6:1c:78: 67:c7:91:39:5c:2d:3e:c0:0b:f1:f9:11:13:15:79:fa:3d:65: 4c:67:af:d7:da:c5:2f:8d:ed:64:48:e1:bd:b6:7b:fb:41:05: 7f:e4:a3:b7:31:e0:5e:f9:f3:80:e4:5e:9f:4b:d5:61:d2:c6: a2:00:09:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OM0RZ8R3WBu+kO9CWU+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGZmOGIxYmQwNzI0YmExMzBmODZiODQ4ZTMzY2FlYThl OWYxMWQwHhcNMjYwMTAyMTAyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjViNDQ1NmUzMzllZGE4NzlkOGViZDRhYjcxNmY3NWRmYjg1ZTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnRc3jitarTLfPRYRc8TaKLwx58K RgLPAoH8CQ4NajnWQV9iPVKnDP5mVPPxKQbSWK+j/VyRukja+HeL7DOWjYNCCPTj qv4du75btq+XbnJHKfbbJq/wvU62jHTTKcZEgL61HuRRzOzk7UE3JoE+3P3NGX0v O7OLHhEHXtJYoImLzt8eohRdKmbJrZmnDxE+XvRR1P63Sb4gIKycdyquY/Ns0woT ZLJcKwD1nfP3DSYWBWM52TC1jbS5T28/TaXwnWCSQ8UnTlbGZXu4uijHVtsol/wJ cdsqOC5c8irExPLNeU3XNK9aBFvYUZN5adv4nrJouNoHJpSEGuDJyAG3sQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9bRFbjOe2oedjr1Ktxb3XfuF5AMB8GA1UdIwQY MBaAFPTf+LG9ByS6Ew+GuEjjPK6o6fEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWIt NzRmNmEyZWFlMTc1LzEvYjF0RVZ1TTU3YWg1Mk92VXEzRnZkZC00WGtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWItNzRmNmEyZWFlMTc1 LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXJwMA0G CSqGSIb3DQEBCwUAA4IBAQCwx7R5xj8Y9rm8Mhie9MLw4F+/DHWtMvlb4ehsWOQN SnP+WnKkES3bto5lCjd7n7DQbwuhvfO5FTYIzLbP0YQ0K6DXrKQfNnMJQm0Rr0U4 Z9OO3QQzfsB00pvCOLgSfLViQvYtHDk6SxciJwjYJgpTb3r+aJCG9mvNDoNGJlwe a7RsHBrV8tGjGgAkB1e2jzaDafYlshl+LC6vZKAd/3dRH7YeI8C69HI7Bd3bfWye i/kLLGvIrWMchdstfndXHdoCWuj2HHhnx5E5XC0+wAvx+RETFXn6PWVMZ6/X2sUv je1kSOG9tnv7QQV/5KO3MeBe+fOA5F6fS9Vh0saiAAkL -----END CERTIFICATE-----Generated at Mon Jan 12 01:21:41 2026 by rpki-client