This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa File: atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa (raw, json) Hash identifier: jkDG3raOa2YgMVxrQwlxDz2jPOeQPczc27crizlM5xM= Subject key identifier: 6A:D1:D6:AA:F1:3F:65:A1:C9:3E:8E:6A:0B:05:B5:3C:6C:54:C3:BB Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Certificate serial: 019B78A2F6CF26F97FEA4E2BAA0892892C8F Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34471 IP address blocks: 5.182.160.0/22 maxlen: 24 185.107.160.0/22 maxlen: 24 185.218.252.0/22 maxlen: 24 193.111.171.0/24 maxlen: 24 193.111.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f6:cf:26:f9:7f:ea:4e:2b:aa:08:92:89:2c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ad1d6aaf13f65a1c93e8e6a0b05b53c6c54c3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:23:27:3d:a8:c1:8d:8a:bc:36:02:65:18:c1: 94:01:21:16:b9:8d:e6:9d:d4:c4:cc:cc:18:5e:bb: c7:3d:03:1a:ec:c8:64:2c:c9:92:10:70:25:97:f8: 75:f3:e0:f7:8e:ba:ff:6c:02:4c:84:97:ab:8a:81: c0:e7:37:15:1c:d1:99:5b:35:7e:d4:f6:21:87:99: bf:79:8c:6b:1a:ac:be:c4:47:d2:28:0e:8b:e8:f5: 40:d5:b4:c2:a9:82:9e:91:65:c0:30:91:c6:e3:12: e4:a3:84:f0:fc:0e:ee:89:f1:c3:7d:97:6c:56:02: 78:fe:d9:fa:92:b7:ce:65:e2:22:68:cd:3e:aa:f2: 65:74:f2:bb:c2:20:f6:97:42:fc:b8:d5:2a:19:73: d1:ce:38:43:11:f0:29:8c:c9:3b:21:10:b2:f3:0a: 59:22:9b:c5:9b:6c:0e:33:39:fb:d9:6a:e0:23:b6: 91:1a:3c:c8:22:72:7a:7c:4d:f4:fd:5c:39:12:70: dd:ad:f4:bb:aa:1c:d6:50:5e:cf:9b:0d:cc:7f:85: 46:5c:49:5e:f5:65:34:f8:f0:bf:10:75:86:e8:27: 9b:03:ae:cf:13:91:8a:c2:85:77:2b:46:fa:72:9f: 5e:39:59:97:9c:14:2f:e4:21:e4:f5:a1:59:2e:2d: 1a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D1:D6:AA:F1:3F:65:A1:C9:3E:8E:6A:0B:05:B5:3C:6C:54:C3:BB X509v3 Authority Key Identifier: keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/atHWqvE_ZaHJPo5qCwW1PGxUw7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.160.0/22 185.107.160.0/22 185.218.252.0/22 193.111.171.0/24 193.111.196.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:09:3f:b0:53:5c:c7:47:f7:7d:c0:2b:41:39:6c:8f:a6:cc: ce:c8:62:a4:a2:84:56:b9:aa:d1:59:0d:a9:ff:74:ce:67:a8: 39:93:68:e3:e6:0d:cd:0f:73:f5:1f:b9:3e:7c:9a:6a:65:22: 22:31:b9:c7:d0:59:5a:05:9a:4a:7f:35:c9:6c:55:06:61:fd: 65:d5:ce:3a:9a:66:79:a5:9c:7e:32:c3:16:49:d2:ef:42:0f: 2d:1d:05:f2:7f:ce:b4:1e:cd:7c:86:45:20:5b:4c:20:7f:c7: 7b:a1:3a:9c:2c:a2:a3:cf:b9:4c:61:e2:75:5b:95:8e:61:27: b8:b9:da:d5:19:05:3f:c9:6a:28:34:51:b0:fb:2c:07:2c:21: c8:0b:28:04:94:a5:49:83:b7:e7:e9:c1:54:e3:a7:bf:c1:a6: d6:0c:9a:cb:a5:ad:8e:b2:df:5a:c1:80:f1:b2:9a:12:f6:6e: 9d:d3:81:a0:df:b7:48:6c:7a:2e:a4:f6:dd:b7:d8:d1:10:1d: 6c:18:6c:24:8c:a8:2e:fd:bc:72:8e:13:71:fd:4f:16:1b:f1: ee:ff:00:61:be:2a:68:cc:b8:38:35:0b:15:ac:b6:a1:fd:e2: a3:1c:ea:b4:e3:7c:19:3f:52:cb:b6:bd:e5:f0:50:05:f0:db: 60:da:24:7e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ovbPJvl/6k4rqgiSiSyPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2 NzcyYjAwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWQxZDZhYWYxM2Y2NWExYzkzZThlNmEwYjA1YjUzYzZjNTRjM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryMnPajBjYq8NgJlGMGUASEWuY3m ndTEzMwYXrvHPQMa7MhkLMmSEHAll/h18+D3jrr/bAJMhJerioHA5zcVHNGZWzV+ 1PYhh5m/eYxrGqy+xEfSKA6L6PVA1bTCqYKekWXAMJHG4xLko4Tw/A7uifHDfZds VgJ4/tn6krfOZeIiaM0+qvJldPK7wiD2l0L8uNUqGXPRzjhDEfApjMk7IRCy8wpZ IpvFm2wOMzn72WrgI7aRGjzIInJ6fE30/Vw5EnDdrfS7qhzWUF7Pmw3Mf4VGXEle 9WU0+PC/EHWG6CebA67PE5GKwoV3K0b6cp9eOVmXnBQv5CHk9aFZLi0a/QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGrR1qrxP2WhyT6OagsFtTxsVMO7MB8GA1UdIwQY MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt MjZjZGM1NTY0NGQ0LzEvYXRIV3F2RV9aYUhKUG81cUN3VzFQR3hVdzdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEtMjZjZGM1NTY0NGQ0 LzEvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBbagAwQC uWugAwQCudr8AwQAwW+rAwQBwW/EMA0GCSqGSIb3DQEBCwUAA4IBAQAqCT+wU1zH R/d9wCtBOWyPpszOyGKkooRWuarRWQ2p/3TOZ6g5k2jj5g3ND3P1H7k+fJpqZSIi MbnH0FlaBZpKfzXJbFUGYf1l1c46mmZ5pZx+MsMWSdLvQg8tHQXyf860Hs18hkUg W0wgf8d7oTqcLKKjz7lMYeJ1W5WOYSe4udrVGQU/yWooNFGw+ywHLCHICygElKVJ g7fn6cFU46e/wabWDJrLpa2Ost9awYDxspoS9m6d04Gg37dIbHoupPbdt9jREB1s GGwkjKgu/bxyjhNx/U8WG/Hu/wBhvipozLg4NQsVrLah/eKjHOq043wZP1LLtr3l 8FAF8Ntg2iR+ -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client