This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa File: dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa (raw, json) Hash identifier: XA2BKRi+vZUDWHVOFOmonXScJAeWAXfB8edX9nP75+Y= Subject key identifier: 74:8D:9B:EC:B7:AA:53:67:8C:C0:9F:78:0D:74:36:B9:60:53:73:8D Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Certificate serial: 019B7F15DB6E66065C6E36EEFC67D44315EF Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa Signing time: Fri 02 Jan 2026 14:21:37 +0000 ROA not before: Fri 02 Jan 2026 14:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198257 IP address blocks: 185.153.0.0/22 maxlen: 22 185.153.0.0/24 maxlen: 24 185.153.1.0/24 maxlen: 24 185.153.2.0/24 maxlen: 24 185.153.3.0/24 maxlen: 24 2a03:aee0::/29 maxlen: 29 2a03:aee0::/32 maxlen: 32 2a03:aee1::/32 maxlen: 32 2a03:aee2::/32 maxlen: 32 2a03:aee3::/32 maxlen: 32 2a03:aee4::/32 maxlen: 32 2a03:aee5::/32 maxlen: 32 2a03:aee6::/32 maxlen: 32 2a03:aee7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 23:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:db:6e:66:06:5c:6e:36:ee:fc:67:d4:43:15:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=748d9becb7aa53678cc09f780d7436b96053738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:a6:d2:92:80:5d:c1:a4:8b:8d:62:c0:c1: 1f:99:14:47:64:01:c5:60:ca:37:d3:32:d5:7b:af: 93:fa:8a:4a:20:41:c9:55:d6:74:e5:43:3d:8c:98: f0:f8:fc:ec:ea:68:76:74:85:01:61:28:0e:ea:28: 03:36:b7:98:ab:51:c7:61:59:58:46:5a:8f:01:ee: c6:9c:7e:36:e4:62:84:8a:c6:53:14:b9:a9:75:ce: 0c:ef:75:ef:68:13:a9:d6:03:53:e6:e3:bb:7b:d8: 76:08:de:94:91:8d:d3:11:06:7d:04:a6:1b:1c:b6: 28:a9:89:7c:31:3f:ab:d4:de:b7:6c:06:2a:05:25: 61:88:fe:64:2e:3e:04:74:aa:33:9c:c1:9e:be:a0: 05:9c:64:ef:a8:50:27:58:ef:88:89:83:c6:56:55: 75:9b:f3:80:11:a5:d7:f9:da:db:5a:b6:df:0d:27: 5d:a8:a9:50:c2:29:3a:e1:b6:0f:cb:e0:a1:cf:48: 99:d3:a3:77:fe:ad:53:21:0a:f4:01:d5:cc:21:33: 92:86:ce:bd:e3:b2:2f:bd:9b:fc:16:07:4f:27:bb: 35:70:de:6e:b8:6e:d4:19:e6:0d:c9:be:06:73:ee: 95:fa:71:e3:be:86:20:82:28:c9:35:0b:b1:cc:6f: 3e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8D:9B:EC:B7:AA:53:67:8C:C0:9F:78:0D:74:36:B9:60:53:73:8D X509v3 Authority Key Identifier: keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/dI2b7LeqU2eMwJ94DXQ2uWBTc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.0.0/22 IPv6: 2a03:aee0::/29 Signature Algorithm: sha256WithRSAEncryption 08:d9:63:3e:24:6d:e5:9e:03:91:ee:87:05:98:07:0e:93:2d: a7:8e:af:dd:50:43:7e:30:8d:3e:ef:bd:12:f0:d3:95:d0:93: a1:c2:69:f8:80:5f:52:3a:7d:ea:0f:77:ac:69:f1:13:f3:bd: 32:23:e7:0c:e8:74:33:4f:a7:4d:66:1a:f2:e0:8e:76:a1:b6: 2f:85:6c:17:5e:6f:78:9e:3f:04:a2:d0:1a:01:cb:77:43:cc: 16:88:8c:50:7e:44:87:1b:f8:3b:e1:9c:54:f5:f7:00:39:eb: 77:8e:a6:40:8d:4a:1d:9f:ea:1d:2e:91:79:b3:27:58:e5:8e: 3e:27:af:9f:c4:f7:36:79:e0:3b:c5:35:c5:f7:23:b4:76:4e: 7f:0f:e6:57:4f:8c:a5:2e:74:74:68:70:be:db:c6:32:4d:9b: 46:0a:65:ef:fb:d1:7f:46:4a:e7:a2:0f:98:c8:1e:e8:b2:66: bc:f9:19:1d:b7:ce:96:b8:07:d9:90:be:74:de:fa:02:72:04: 05:a2:50:33:1c:cb:58:d2:bc:06:a1:59:63:f7:79:e7:7c:3d: f0:31:43:b4:1a:8b:1a:3b:e1:4e:9c:08:12:c9:73:01:7f:fe: 87:60:88:40:02:ff:2d:15:c3:f1:ca:35:db:7f:d0:98:65:7a: 1e:45:85:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FdtuZgZcbjbu/GfUQxXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZTM1ODFhZGRkNmI5OWRkODc0NGI5ZTI4ODZmYmIwMmFl OTE4ZTMwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDhkOWJlY2I3YWE1MzY3OGNjMDlmNzgwZDc0MzZiOTYwNTM3MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKGm0pKAXcGki41iwMEfmRRHZAHF YMo30zLVe6+T+opKIEHJVdZ05UM9jJjw+Pzs6mh2dIUBYSgO6igDNreYq1HHYVlY RlqPAe7GnH425GKEisZTFLmpdc4M73XvaBOp1gNT5uO7e9h2CN6UkY3TEQZ9BKYb HLYoqYl8MT+r1N63bAYqBSVhiP5kLj4EdKoznMGevqAFnGTvqFAnWO+IiYPGVlV1 m/OAEaXX+drbWrbfDSddqKlQwik64bYPy+Chz0iZ06N3/q1TIQr0AdXMITOShs69 47IvvZv8FgdPJ7s1cN5uuG7UGeYNyb4Gc+6V+nHjvoYggijJNQuxzG8+UQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHSNm+y3qlNnjMCfeA10NrlgU3ONMB8GA1UdIwQY MBaAFEDjWBrd1rmd2HRLniiG+7Aq6RjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYt ZmM1OWRlZGIxZDJiLzEvZEkyYjdMZXFVMmVNd0o5NERYUTJ1V0JUYzQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYtZmM1OWRlZGIxZDJi LzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZkAMA0E AgACMAcDBQMqA67gMA0GCSqGSIb3DQEBCwUAA4IBAQAI2WM+JG3lngOR7ocFmAcO ky2njq/dUEN+MI0+770S8NOV0JOhwmn4gF9SOn3qD3esafET870yI+cM6HQzT6dN Zhry4I52obYvhWwXXm94nj8EotAaAct3Q8wWiIxQfkSHG/g74ZxU9fcAOet3jqZA jUodn+odLpF5sydY5Y4+J6+fxPc2eeA7xTXF9yO0dk5/D+ZXT4ylLnR0aHC+28Yy TZtGCmXv+9F/Rkrnog+YyB7osma8+Rkdt86WuAfZkL503voCcgQFolAzHMtY0rwG oVlj93nnfD3wMUO0GosaO+FOnAgSyXMBf/6HYIhAAv8tFcPxyjXbf9CYZXoeRYWx -----END CERTIFICATE-----Generated at Mon Jan 12 04:57:27 2026 by rpki-client