This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/1AXI6VS8x1NwH1qDWre2Y7s5Obw.roa File: 1AXI6VS8x1NwH1qDWre2Y7s5Obw.roa (raw, json) Hash identifier: PooxuLbMU5urdiMSlTyQqEI+acICcUNAG9hxeoEBuCc= Subject key identifier: D4:05:C8:E9:54:BC:C7:53:70:1F:5A:83:5A:B7:B6:63:BB:39:39:BC Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209 Certificate serial: 019B3B59A61649702EE0A3A230DA9ADF0805 Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/1AXI6VS8x1NwH1qDWre2Y7s5Obw.roa Signing time: Sat 20 Dec 2025 10:41:29 +0000 ROA not before: Sat 20 Dec 2025 10:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31898 IP address blocks: 185.134.116.0/24 maxlen: 24 185.134.117.0/24 maxlen: 24 185.134.118.0/24 maxlen: 24 185.134.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:59:a6:16:49:70:2e:e0:a3:a2:30:da:9a:df:08:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209 Validity Not Before: Dec 20 10:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d405c8e954bcc753701f5a835ab7b663bb3939bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:9e:f9:12:03:bb:0a:4d:f7:48:e0:82:29: 15:f2:a7:2e:10:24:7f:a4:ef:df:9b:90:d4:82:6f: 9c:6d:fe:02:17:02:06:f5:91:60:c1:ab:a9:c1:26: 7b:0a:b7:c5:c8:71:dc:32:9f:36:62:d9:79:70:74: 7a:45:af:b4:0f:b6:f5:61:cc:18:bf:5f:f5:58:9f: 97:0b:e6:be:fa:a7:02:ef:18:93:bb:54:77:16:48: d7:58:5f:ea:9e:8a:0e:68:1b:88:ae:3d:77:99:18: f7:36:98:17:a3:bf:55:0e:28:ea:b5:d4:a9:e0:f3: af:d3:f3:cc:ed:2e:9b:97:65:e8:5e:b7:06:87:f8: b3:76:38:72:91:89:fe:56:d4:7e:fd:de:c5:b7:e5: bd:32:da:ad:a1:77:92:aa:a0:cf:4d:51:5a:cf:96: 46:83:7a:99:d9:08:a1:3f:05:da:1f:76:f8:52:a7: 85:9d:a9:12:82:ee:5b:d1:10:e6:19:b3:b0:d3:43: 09:26:b1:ae:b6:91:b2:fa:6a:b0:fa:03:e6:3e:14: 9b:e2:36:81:7b:23:67:64:c7:9c:e3:7b:9a:72:7f: cc:92:91:b7:2d:31:e5:6a:52:42:a1:3e:21:60:00: a7:69:13:5f:dd:c0:70:26:52:a9:70:9c:0a:84:ee: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:05:C8:E9:54:BC:C7:53:70:1F:5A:83:5A:B7:B6:63:BB:39:39:BC X509v3 Authority Key Identifier: keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/1AXI6VS8x1NwH1qDWre2Y7s5Obw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.116.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:ff:ff:83:ed:2b:e9:e0:0c:f0:22:9e:bd:fb:52:a7:ef:00: c8:9b:1d:61:ca:66:3a:f8:7d:04:8a:bb:f3:58:58:74:66:26: 88:bb:22:ba:8c:09:9a:f8:4c:fe:9f:06:9f:4b:e6:92:43:7d: 36:aa:2e:af:a4:75:42:c6:13:99:9e:4e:f0:ee:2b:16:a3:04: 44:25:8c:9b:45:9c:4a:c5:67:1f:8f:28:1a:f8:06:fa:bf:4f: 36:56:81:9f:a1:6e:f3:49:cd:85:dd:fb:8c:e0:55:82:e3:d7: 3e:9e:2a:97:c1:2c:e9:a7:fc:f9:dd:e3:e1:3a:46:28:3c:2b: 91:15:5a:2b:35:64:9d:db:09:6d:34:d3:03:23:17:93:15:92: 1b:91:0c:c5:bc:c4:60:64:7f:15:0f:cc:26:9d:a4:ff:04:69: e1:43:44:3b:5c:57:6a:76:1e:e7:66:31:ef:6a:68:7b:ae:ef: 5c:58:88:b3:07:1f:16:e9:55:3d:70:be:85:70:34:30:b3:51: da:1f:bc:ac:b6:a3:72:3e:ea:ee:e4:e7:a8:7b:b3:c1:22:28: a1:f0:3a:88:c5:b9:02:04:62:44:b5:d9:57:2b:fd:38:f6:1a: a5:b3:5f:0d:76:0e:d3:9a:6b:56:b6:45:4b:dd:81:03:76:ac: 02:a7:b0:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs7WaYWSXAu4KOiMNqa3wgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzdlYWM0NWM4ZGJiNWU1ZWZkZDY1YzE4ODE0NDk4NjAz ZjAyMDkwHhcNMjUxMjIwMTA0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDA1YzhlOTU0YmNjNzUzNzAxZjVhODM1YWI3YjY2M2JiMzkzOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JKe+RIDuwpN90jggikV8qcuECR/ pO/fm5DUgm+cbf4CFwIG9ZFgwaupwSZ7CrfFyHHcMp82Ytl5cHR6Ra+0D7b1YcwY v1/1WJ+XC+a++qcC7xiTu1R3FkjXWF/qnooOaBuIrj13mRj3NpgXo79VDijqtdSp 4POv0/PM7S6bl2XoXrcGh/izdjhykYn+VtR+/d7Ft+W9MtqtoXeSqqDPTVFaz5ZG g3qZ2QihPwXaH3b4UqeFnakSgu5b0RDmGbOw00MJJrGutpGy+mqw+gPmPhSb4jaB eyNnZMec43uacn/MkpG3LTHlalJCoT4hYACnaRNf3cBwJlKpcJwKhO5WzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQFyOlUvMdTcB9ag1q3tmO7OTm8MB8GA1UdIwQY MBaAFCDH6sRcjbteXv3WXBiBRJhgPwIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUt NzA0ZWFiNmNhM2U4LzEvMUFYSTZWUzh4MU53SDFxRFdyZTJZN3M1T2J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jNWU0OTgtYzg5NS00MzU0LWJlODUtNzA0ZWFiNmNhM2U4 LzEvSU1mcXhGeU51MTVlX2RaY0dJRkVtR0FfQWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYZ0MA0G CSqGSIb3DQEBCwUAA4IBAQB9//+D7Svp4AzwIp69+1Kn7wDImx1hymY6+H0Eirvz WFh0ZiaIuyK6jAma+Ez+nwafS+aSQ302qi6vpHVCxhOZnk7w7isWowREJYybRZxK xWcfjyga+Ab6v082VoGfoW7zSc2F3fuM4FWC49c+niqXwSzpp/z53ePhOkYoPCuR FVorNWSd2wltNNMDIxeTFZIbkQzFvMRgZH8VD8wmnaT/BGnhQ0Q7XFdqdh7nZjHv amh7ru9cWIizBx8W6VU9cL6FcDQws1HaH7ystqNyPuru5Oeoe7PBIiih8DqIxbkC BGJEtdlXK/049hqls18Ndg7TmmtWtkVL3YEDdqwCp7Bs -----END CERTIFICATE-----Generated at Mon Dec 22 03:28:57 2025 by rpki-client