This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/X14l7kvlYYBF3EHNWSg-svsFuOQ.roa File: X14l7kvlYYBF3EHNWSg-svsFuOQ.roa (raw, json) Hash identifier: Y9BNprLjsgal1cKXYYlZbO0fiea/j/rMdHY3dC/wqFY= Subject key identifier: 5F:5E:25:EE:4B:E5:61:80:45:DC:41:CD:59:28:3E:B2:FB:05:B8:E4 Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Certificate serial: 019B77C6C5BADB9B45F135BC159864EB9C60 Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/X14l7kvlYYBF3EHNWSg-svsFuOQ.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35583 IP address blocks: 185.191.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:ba:db:9b:45:f1:35:bc:15:98:64:eb:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1 Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f5e25ee4be5618045dc41cd59283eb2fb05b8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:6d:22:64:f2:ea:df:fb:27:8c:7b:b7:c7: 67:1c:9d:bb:c8:64:a7:dd:db:d5:b5:05:33:ca:f3: 0f:79:b0:46:8a:a8:96:5f:d9:7c:b5:b3:66:3a:db: cf:8a:19:e1:6f:d3:e3:73:b5:3d:ad:f3:a7:fe:e5: a8:ca:48:f3:e4:86:3d:07:94:ca:b4:ff:6f:b5:28: 44:1b:44:97:fb:8a:cd:24:53:20:6a:a7:4b:6b:90: 52:27:5b:48:73:a3:43:83:95:79:e5:86:69:99:fb: 32:14:10:cd:95:a2:0c:e9:cd:9f:0b:ac:e8:87:89: 1d:74:67:d8:30:91:04:fb:92:4b:52:75:e6:da:1c: d3:d7:72:a3:0c:48:fc:3f:a0:cf:08:c9:e6:9e:e9: 53:83:a1:92:56:a6:c2:00:a5:10:f4:e8:d3:78:aa: c5:64:10:20:e7:22:84:65:11:d8:55:a5:ee:40:62: 76:28:10:8b:76:2e:66:2e:58:cc:55:8a:d2:6b:a9: 0a:11:6c:e5:84:9c:53:a8:62:82:da:47:da:9c:2e: ce:5c:17:57:c4:1b:4e:df:05:92:f5:f7:8e:6f:df: 16:2e:8c:f2:22:db:3e:ef:3c:f2:56:e4:11:a5:e0: 70:17:22:c2:2b:68:67:8e:ed:90:e4:1b:14:73:b7: 3d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:25:EE:4B:E5:61:80:45:DC:41:CD:59:28:3E:B2:FB:05:B8:E4 X509v3 Authority Key Identifier: keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/X14l7kvlYYBF3EHNWSg-svsFuOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.150.0/24 Signature Algorithm: sha256WithRSAEncryption 49:1a:1c:99:00:29:df:5b:ed:24:0f:8a:be:38:3e:6e:91:8b: 7d:06:56:5f:a6:91:e8:06:f8:b4:54:2f:f3:65:67:47:c3:d2: 4b:5e:41:ce:e4:c4:7a:c7:e4:c4:85:f7:51:44:79:ad:e5:15: 1f:85:6a:cb:8d:75:b1:78:af:07:93:85:7b:43:a5:b0:10:25: ff:f2:12:a7:f7:89:8d:5c:1b:41:b8:44:ed:2c:6c:c5:40:b1: f8:8e:b9:1f:57:5d:6d:ab:dd:9c:59:56:4d:3b:4c:b4:73:b7: bb:fc:d0:63:00:ad:86:59:78:1b:d0:0e:a3:9d:a6:bf:28:9d: f7:d4:a4:48:36:16:c8:48:77:fe:75:78:48:2e:62:f7:60:0a: 27:cb:b2:4c:35:c4:21:9c:8c:14:e2:e8:a8:71:50:1e:ae:4e: 69:ff:76:f9:25:f1:1d:19:27:4f:49:d7:bc:a6:af:8b:aa:05: 4f:6f:08:1c:2b:11:df:e4:28:5d:a2:e0:c5:b3:94:b6:fd:00: 0a:41:a9:db:41:67:57:2f:b1:55:f0:ee:26:ef:a6:1b:b0:a1: ea:4e:e0:68:54:ef:19:88:eb:d3:d7:71:c7:6a:c2:6e:05:47: 78:d5:1b:3e:4e:41:67:7e:ac:49:4e:1f:5a:d1:f1:20:0e:e9: 2f:3f:92:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsW625tF8TW8FZhk65xgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2 ZDk1YTEwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjVlMjVlZTRiZTU2MTgwNDVkYzQxY2Q1OTI4M2ViMmZiMDViOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfJtImTy6t/7J4x7t8dnHJ27yGSn 3dvVtQUzyvMPebBGiqiWX9l8tbNmOtvPihnhb9Pjc7U9rfOn/uWoykjz5IY9B5TK tP9vtShEG0SX+4rNJFMgaqdLa5BSJ1tIc6NDg5V55YZpmfsyFBDNlaIM6c2fC6zo h4kddGfYMJEE+5JLUnXm2hzT13KjDEj8P6DPCMnmnulTg6GSVqbCAKUQ9OjTeKrF ZBAg5yKEZRHYVaXuQGJ2KBCLdi5mLljMVYrSa6kKEWzlhJxTqGKC2kfanC7OXBdX xBtO3wWS9feOb98WLozyIts+7zzyVuQRpeBwFyLCK2hnju2Q5BsUc7c9AwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF9eJe5L5WGARdxBzVkoPrL7BbjkMB8GA1UdIwQY MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt MWRjNTRkMWMwM2EzLzEvWDE0bDdrdmxZWUJGM0VITldTZy1zdnNGdU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAub+WMA0G CSqGSIb3DQEBCwUAA4IBAQBJGhyZACnfW+0kD4q+OD5ukYt9BlZfppHoBvi0VC/z ZWdHw9JLXkHO5MR6x+TEhfdRRHmt5RUfhWrLjXWxeK8Hk4V7Q6WwECX/8hKn94mN XBtBuETtLGzFQLH4jrkfV11tq92cWVZNO0y0c7e7/NBjAK2GWXgb0A6jnaa/KJ33 1KRINhbISHf+dXhILmL3YAony7JMNcQhnIwU4uiocVAerk5p/3b5JfEdGSdPSde8 pq+LqgVPbwgcKxHf5ChdouDFs5S2/QAKQanbQWdXL7FV8O4m76YbsKHqTuBoVO8Z iOvT13HHasJuBUd41Rs+TkFnfqxJTh9a0fEgDukvP5LU -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:18 2026 by rpki-client