This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/RmwUJ0oGcPWbFkHvIvFl1Ufrwi8.roa File: RmwUJ0oGcPWbFkHvIvFl1Ufrwi8.roa (raw, json) Hash identifier: 7BejTzx0PSatkdz8hw0lzFkYHFJg7yBHsm95CN8BtZY= Subject key identifier: 46:6C:14:27:4A:06:70:F5:9B:16:41:EF:22:F1:65:D5:47:EB:C2:2F Certificate issuer: /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635 Certificate serial: 019B7C11A87D0E83F1B1726A44E7D4C9F8D9 Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/RmwUJ0oGcPWbFkHvIvFl1Ufrwi8.roa Signing time: Fri 02 Jan 2026 00:18:10 +0000 ROA not before: Fri 02 Jan 2026 00:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202093 IP address blocks: 185.53.64.0/22 maxlen: 22 185.53.64.0/24 maxlen: 24 185.53.65.0/24 maxlen: 24 185.53.66.0/24 maxlen: 24 185.53.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a8:7d:0e:83:f1:b1:72:6a:44:e7:d4:c9:f8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635 Validity Not Before: Jan 2 00:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=466c14274a0670f59b1641ef22f165d547ebc22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:70:f6:da:20:08:92:42:6c:a3:85:d1:98: 1e:3c:63:9b:e3:89:36:5b:b8:9d:a4:37:45:03:ac: b1:9c:23:9a:1c:aa:04:44:2d:8b:c8:c2:c6:65:f1: 90:88:c1:3d:c8:0c:1a:9a:f9:62:8a:7c:7e:82:3d: a7:08:88:77:e3:9c:57:39:43:02:2e:0c:81:92:0e: 39:dc:c2:72:fe:68:5c:cc:ac:7d:a9:54:85:b4:95: 72:90:75:dd:06:8f:62:42:ed:55:94:63:a4:92:98: 06:30:a8:ad:b2:56:68:e7:cc:ab:d1:ca:24:7b:96: f1:77:25:60:39:ee:9a:d3:e7:b9:32:90:84:f1:19: a9:a2:b5:86:6e:48:ff:0f:ce:56:72:ea:41:bc:43: 4f:36:8b:8d:c8:be:c5:86:b7:c4:04:0f:b2:79:4e: 62:05:87:a8:21:a7:50:6a:70:f2:4e:98:23:47:32: 35:03:5c:f4:8e:13:81:71:0f:16:c5:80:40:7b:43: 9c:55:d3:cc:ce:1c:64:b6:20:56:30:7e:f2:37:e4: 8c:c9:86:e4:f4:b8:44:22:43:d4:18:88:34:d8:d5: 46:b8:3a:fc:97:8f:6e:8e:b4:56:91:4c:4b:da:eb: 65:bf:4f:60:a6:6f:14:b5:b5:35:89:dc:e1:56:a0: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6C:14:27:4A:06:70:F5:9B:16:41:EF:22:F1:65:D5:47:EB:C2:2F X509v3 Authority Key Identifier: keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/RmwUJ0oGcPWbFkHvIvFl1Ufrwi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.53.64.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:85:e6:dd:28:c0:26:67:58:13:33:4f:e7:9e:c9:20:b8:dc: d2:20:df:9a:63:07:5a:1c:17:db:a4:07:2f:e5:37:94:c7:0c: bf:8d:94:e8:7d:b1:45:8b:70:85:86:4a:70:7b:22:9e:2b:be: 15:b5:b7:8e:a8:05:39:c6:0c:aa:4e:f6:40:dc:81:6c:2a:ff: 99:87:53:6a:1a:a7:52:92:22:e9:18:6d:98:02:2d:51:24:b6: 4b:cf:f2:ea:9e:2c:37:b5:e4:f5:04:70:67:2e:c7:66:28:39: ea:f2:5e:67:e3:3b:b4:19:01:fd:47:22:94:ad:ab:f5:8a:4a: 3c:29:42:00:ed:e3:4f:c0:16:ce:b0:f7:f9:2e:e4:69:dc:25: 95:85:6c:8c:cb:75:1a:68:4c:ed:05:01:b6:05:11:e0:d8:0c: 84:8d:69:42:1c:e6:d7:df:35:e6:bf:4a:eb:75:ec:97:01:db: 41:2c:92:37:d6:6b:05:9f:05:33:7a:1f:89:82:1f:f6:49:0f: cc:5f:08:93:18:c6:ab:dd:13:5d:9c:7b:81:f4:37:cf:5e:e1: 56:a8:f7:b5:8f:b3:78:55:70:3d:05:67:ef:79:0d:c9:ee:ff: 69:f5:c9:0e:97:80:fe:d2:47:ba:71:3f:eb:a7:04:f6:07:ef: 05:39:90:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Eah9DoPxsXJqROfUyfjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmYyZTE1MzMxNjRlYmI4ZDg3MWNmNmYyYzQ5YTU2N2Vh MjY2MzUwHhcNMjYwMTAyMDAxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjZjMTQyNzRhMDY3MGY1OWIxNjQxZWYyMmYxNjVkNTQ3ZWJjMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Bw9togCJJCbKOF0ZgePGOb44k2 W7idpDdFA6yxnCOaHKoERC2LyMLGZfGQiME9yAwamvliinx+gj2nCIh345xXOUMC LgyBkg453MJy/mhczKx9qVSFtJVykHXdBo9iQu1VlGOkkpgGMKitslZo58yr0cok e5bxdyVgOe6a0+e5MpCE8RmporWGbkj/D85WcupBvENPNouNyL7FhrfEBA+yeU5i BYeoIadQanDyTpgjRzI1A1z0jhOBcQ8WxYBAe0OcVdPMzhxktiBWMH7yN+SMyYbk 9LhEIkPUGIg02NVGuDr8l49ujrRWkUxL2utlv09gpm8UtbU1idzhVqAIzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZsFCdKBnD1mxZB7yLxZdVH68IvMB8GA1UdIwQY MBaAFFgvLhUzFk67jYcc9vLEmlZ+omY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEt MDE5Y2Y3N2U0Nzg4LzEvUm13VUowb0djUFdiRmtIdkl2RmwxVWZyd2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEtMDE5Y2Y3N2U0Nzg4 LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTVAMA0G CSqGSIb3DQEBCwUAA4IBAQCehebdKMAmZ1gTM0/nnskguNzSIN+aYwdaHBfbpAcv 5TeUxwy/jZTofbFFi3CFhkpweyKeK74VtbeOqAU5xgyqTvZA3IFsKv+Zh1NqGqdS kiLpGG2YAi1RJLZLz/Lqniw3teT1BHBnLsdmKDnq8l5n4zu0GQH9RyKUrav1iko8 KUIA7eNPwBbOsPf5LuRp3CWVhWyMy3UaaEztBQG2BRHg2AyEjWlCHObX3zXmv0rr deyXAdtBLJI31msFnwUzeh+Jgh/2SQ/MXwiTGMar3RNdnHuB9DfPXuFWqPe1j7N4 VXA9BWfveQ3J7v9p9ckOl4D+0ke6cT/rpwT2B+8FOZBf -----END CERTIFICATE-----Generated at Tue Jan 13 00:09:42 2026 by rpki-client