This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/JI6F6sKwmFDB-S9XODKhAA660AM.roa File: JI6F6sKwmFDB-S9XODKhAA660AM.roa (raw, json) Hash identifier: /b/qNAizl4V5sFYHPlaPbBReehGSPPstai3HlyE9iGo= Subject key identifier: 24:8E:85:EA:C2:B0:98:50:C1:F9:2F:57:38:32:A1:00:0E:BA:D0:03 Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Certificate serial: 019B77C6C6ECF5934BB0FEE858C1640D3785 Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/JI6F6sKwmFDB-S9XODKhAA660AM.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47280 IP address blocks: 185.191.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c6:ec:f5:93:4b:b0:fe:e8:58:c1:64:0d:37:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=248e85eac2b09850c1f92f573832a1000ebad003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:08:8b:93:8f:69:c8:fd:9a:25:d0:3a:43: 84:dd:79:a3:73:5d:73:9a:ea:04:3c:40:13:b8:a8: 01:e3:6c:a1:48:40:7d:15:8a:b1:69:b2:c6:ab:c1: bc:5a:37:7e:96:e8:45:6f:5a:43:bf:0f:99:a6:b3: d2:cd:4d:72:e8:03:d4:11:b6:6c:7f:9a:d4:b9:b8: 9e:29:25:04:11:90:61:29:96:09:79:3c:92:b3:f0: 64:d0:27:fe:33:33:d5:9c:fd:03:dc:f7:1d:2f:88: f3:a0:d4:08:8f:27:68:25:4b:17:fc:ee:05:83:ba: dc:12:22:fa:d2:55:b6:d1:4c:c7:98:42:6e:f9:9b: 41:62:97:14:97:5d:61:f4:5e:f4:93:b8:30:e2:67: 4d:97:9c:30:c7:bb:c6:4a:14:c7:37:15:57:a2:3a: d8:e9:f3:72:73:84:da:b9:20:a9:9c:59:35:a9:69: 67:7c:77:53:77:d1:fa:3a:b5:d4:2e:4f:30:d3:1b: ea:dd:cf:98:a8:b7:38:36:48:39:fc:da:1b:d5:93: ac:de:e3:f2:c1:2e:93:bb:b3:0e:62:07:68:c3:81: 30:f8:57:b0:3a:f5:dd:f7:ed:9d:cc:e6:a2:8b:85: 51:3f:3a:ff:57:37:6d:a7:0d:99:de:cb:4d:66:22: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:85:EA:C2:B0:98:50:C1:F9:2F:57:38:32:A1:00:0E:BA:D0:03 X509v3 Authority Key Identifier: keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/JI6F6sKwmFDB-S9XODKhAA660AM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.151.0/24 Signature Algorithm: sha256WithRSAEncryption 11:3f:a1:08:42:2a:c3:e3:3b:89:60:40:ae:f2:f0:2f:40:a2: fe:af:f0:fe:9a:9c:bf:a6:7c:f2:7f:79:f1:f0:72:56:1e:d2: 4d:e4:95:be:e9:84:b4:d4:f8:0e:e9:40:9c:75:5d:5f:a8:0f: 6a:97:14:dc:17:43:b9:65:0e:7c:d0:af:35:69:a0:8a:a4:58: ca:be:9d:33:32:4a:28:23:49:00:5b:6f:6a:ce:37:b0:7d:b1: 88:0c:70:54:57:fe:a9:b4:d5:85:b1:82:e9:f5:1e:2c:e6:41: d3:71:15:8c:dd:3a:89:60:ea:88:41:1f:37:b6:ee:e2:33:fb: 96:59:7b:b6:69:94:7e:2e:26:88:b4:9a:82:14:64:b1:d8:81: d4:e1:69:d6:22:bf:c4:92:65:a7:b2:52:7b:2e:61:59:e2:53: a9:60:03:e3:e6:b5:1b:7a:86:f0:21:60:20:b6:7c:ee:3d:f6: 94:f9:68:77:f2:c3:16:b5:38:17:c6:20:1f:57:49:81:f9:53: b1:31:83:7e:06:23:e3:1b:40:9b:37:a0:6b:c6:60:ff:7e:6b: ff:07:16:d3:40:57:7c:f9:61:d4:14:57:8c:5d:38:5e:3d:9a: f4:10:99:42:6e:f4:84:91:72:36:53:60:e5:f8:e6:ee:3e:5b: 10:9b:d6:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsbs9ZNLsP7oWMFkDTeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2 ZDk1YTEwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDhlODVlYWMyYjA5ODUwYzFmOTJmNTczODMyYTEwMDBlYmFkMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkAIi5OPacj9miXQOkOE3Xmjc11z muoEPEATuKgB42yhSEB9FYqxabLGq8G8Wjd+luhFb1pDvw+ZprPSzU1y6APUEbZs f5rUubieKSUEEZBhKZYJeTySs/Bk0Cf+MzPVnP0D3PcdL4jzoNQIjydoJUsX/O4F g7rcEiL60lW20UzHmEJu+ZtBYpcUl11h9F70k7gw4mdNl5wwx7vGShTHNxVXojrY 6fNyc4TauSCpnFk1qWlnfHdTd9H6OrXULk8w0xvq3c+YqLc4Nkg5/Nob1ZOs3uPy wS6Tu7MOYgdow4Ew+FewOvXd9+2dzOaii4VRPzr/Vzdtpw2Z3stNZiLd8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSOherCsJhQwfkvVzgyoQAOutADMB8GA1UdIwQY MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt MWRjNTRkMWMwM2EzLzEvSkk2RjZzS3dtRkRCLVM5WE9ES2hBQTY2MEFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub+XMA0G CSqGSIb3DQEBCwUAA4IBAQARP6EIQirD4zuJYECu8vAvQKL+r/D+mpy/pnzyf3nx 8HJWHtJN5JW+6YS01PgO6UCcdV1fqA9qlxTcF0O5ZQ580K81aaCKpFjKvp0zMkoo I0kAW29qzjewfbGIDHBUV/6ptNWFsYLp9R4s5kHTcRWM3TqJYOqIQR83tu7iM/uW WXu2aZR+LiaItJqCFGSx2IHU4WnWIr/EkmWnslJ7LmFZ4lOpYAPj5rUbeobwIWAg tnzuPfaU+Wh38sMWtTgXxiAfV0mB+VOxMYN+BiPjG0CbN6BrxmD/fmv/BxbTQFd8 +WHUFFeMXThePZr0EJlCbvSEkXI2U2Dl+ObuPlsQm9Yk -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:18 2026 by rpki-client