This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/prQ66WR-2hX9fe4qngBkX-oQAis.roa File: prQ66WR-2hX9fe4qngBkX-oQAis.roa (raw, json) Hash identifier: qCnV7ilduwTB9MzFqgP4zRzlhz0MnbggECjM60aFcrs= Subject key identifier: A6:B4:3A:E9:64:7E:DA:15:FD:7D:EE:2A:9E:00:64:5F:EA:10:02:2B Certificate issuer: /CN=fcb8983e529fc949b89fab3703b795b78b1a875c Certificate serial: 019B76EB8E7141AD768CB2E77DD37BD89E66 Authority key identifier: FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/prQ66WR-2hX9fe4qngBkX-oQAis.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206376 IP address blocks: 185.188.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.mft rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8e:71:41:ad:76:8c:b2:e7:7d:d3:7b:d8:9e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcb8983e529fc949b89fab3703b795b78b1a875c Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6b43ae9647eda15fd7dee2a9e00645fea10022b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:f3:5f:dc:0c:9b:12:e7:01:8c:17:7f:f5: 5d:07:1a:ca:ff:2a:24:5e:61:0a:75:cb:57:20:b7: de:22:7d:57:8b:58:df:ef:b8:09:93:21:71:67:05: 16:c9:da:3e:b2:c5:5c:ac:9b:c4:e0:73:9a:04:d0: 36:0d:43:af:f5:a3:40:88:42:06:83:38:2f:85:56: 08:03:77:8c:50:54:79:cc:54:6f:05:67:ac:e2:59: 75:8c:d8:a8:f6:67:1b:65:b3:24:61:1c:3b:2f:c6: 09:ea:f9:28:89:e3:c1:46:ee:aa:39:18:79:fc:b2: 7e:27:c4:9d:42:7e:80:0e:c1:3b:97:a1:a0:fa:92: 73:e4:a5:75:d7:bf:cb:35:72:2a:33:bf:02:6c:9c: 20:f8:5c:e0:0e:b4:c1:2b:c6:3b:01:75:03:e0:7c: d0:c5:d7:20:09:c1:8a:70:48:b8:e7:68:98:b3:e9: 04:18:a8:c0:a5:85:2b:09:24:a3:e6:8d:35:15:5a: fc:34:24:eb:b4:c9:e0:17:c2:bf:a5:5a:f6:4a:ed: 30:cf:7c:66:09:18:65:a7:50:a9:d3:aa:fa:3e:0e: 40:8e:0a:75:12:89:6f:f9:20:49:bf:14:8e:20:44: 8b:12:68:77:7c:ec:a6:71:4d:0c:a7:b5:a5:7e:c5: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B4:3A:E9:64:7E:DA:15:FD:7D:EE:2A:9E:00:64:5F:EA:10:02:2B X509v3 Authority Key Identifier: keyid:FC:B8:98:3E:52:9F:C9:49:B8:9F:AB:37:03:B7:95:B7:8B:1A:87:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LiYPlKfyUm4n6s3A7eVt4sah1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/prQ66WR-2hX9fe4qngBkX-oQAis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f10a3-6b21-4805-8e03-931ff3d9df41/1/_LiYPlKfyUm4n6s3A7eVt4sah1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.124.0/22 Signature Algorithm: sha256WithRSAEncryption 83:8b:cc:13:2e:9d:af:4c:61:8e:c3:e2:a3:82:d5:9d:74:3b: 26:bc:0a:dc:e9:a6:cc:46:43:df:88:6d:61:23:db:96:a3:81: a4:fa:12:cc:83:45:bd:a1:bf:7c:49:7f:b5:18:0e:3d:3a:7d: f6:6e:b9:ab:66:2f:62:e1:06:8a:95:d2:a8:c1:5f:a2:3d:26: de:38:d0:e6:28:3e:48:49:cb:76:2a:15:61:3c:9e:06:76:4c: d7:d0:e8:2e:39:11:83:a0:e1:0f:de:02:96:2b:5d:f9:1d:2b: 5d:72:a3:63:db:31:8a:93:03:7a:a2:f5:de:70:cd:53:6e:5a: c4:69:67:c2:ba:a0:60:df:59:3c:c6:2a:8a:e0:ed:cd:8c:61: 35:77:24:3b:39:bc:6f:7f:1e:09:f8:6f:34:9b:a1:bd:87:0b: 45:34:a1:ee:90:c3:17:50:a8:aa:f5:5c:d1:c1:80:82:24:eb: 55:8c:4f:3d:00:93:0a:07:ac:cb:61:65:74:47:7a:5d:6f:a6: d1:51:62:38:36:6b:14:90:ea:a0:43:9e:da:c5:ec:61:ee:07: 1f:52:ac:1b:61:23:93:2d:cb:79:c6:37:4f:4f:48:81:0a:8f: 67:b8:68:60:d8:20:f5:29:53:7a:73:1d:7c:e8:a7:df:5c:41: e5:e4:3d:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2645xQa12jLLnfdN72J5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYjg5ODNlNTI5ZmM5NDliODlmYWIzNzAzYjc5NWI3OGIx YTg3NWMwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmI0M2FlOTY0N2VkYTE1ZmQ3ZGVlMmE5ZTAwNjQ1ZmVhMTAwMjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1vzX9wMmxLnAYwXf/VdBxrK/yok XmEKdctXILfeIn1Xi1jf77gJkyFxZwUWydo+ssVcrJvE4HOaBNA2DUOv9aNAiEIG gzgvhVYIA3eMUFR5zFRvBWes4ll1jNio9mcbZbMkYRw7L8YJ6vkoiePBRu6qORh5 /LJ+J8SdQn6ADsE7l6Gg+pJz5KV117/LNXIqM78CbJwg+FzgDrTBK8Y7AXUD4HzQ xdcgCcGKcEi452iYs+kEGKjApYUrCSSj5o01FVr8NCTrtMngF8K/pVr2Su0wz3xm CRhlp1Cp06r6Pg5Ajgp1Eolv+SBJvxSOIESLEmh3fOymcU0Mp7WlfsW++QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKa0OulkftoV/X3uKp4AZF/qEAIrMB8GA1UdIwQY MBaAFPy4mD5Sn8lJuJ+rNwO3lbeLGodcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMt OTMxZmYzZDlkZjQxLzEvcHJRNjZXUi0yaFg5ZmU0cW5nQmtYLW9RQWlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjEwYTMtNmIyMS00ODA1LThlMDMtOTMxZmYzZDlkZjQx LzEvX0xpWVBsS2Z5VW00bjZzM0E3ZVZ0NHNhaDF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubx8MA0G CSqGSIb3DQEBCwUAA4IBAQCDi8wTLp2vTGGOw+KjgtWddDsmvArc6abMRkPfiG1h I9uWo4Gk+hLMg0W9ob98SX+1GA49On32brmrZi9i4QaKldKowV+iPSbeONDmKD5I Sct2KhVhPJ4GdkzX0OguORGDoOEP3gKWK135HStdcqNj2zGKkwN6ovXecM1TblrE aWfCuqBg31k8xiqK4O3NjGE1dyQ7Obxvfx4J+G80m6G9hwtFNKHukMMXUKiq9VzR wYCCJOtVjE89AJMKB6zLYWV0R3pdb6bRUWI4NmsUkOqgQ57axexh7gcfUqwbYSOT Lct5xjdPT0iBCo9nuGhg2CD1KVN6cx186KffXEHl5D0s -----END CERTIFICATE-----Generated at Wed Jan 7 16:45:55 2026 by rpki-client