This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa File: dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa (raw, json) Hash identifier: pKoUZvmEW4liSwgxySiejWpEorumEVEvbMzgYr8Wr84= Subject key identifier: 74:49:52:D8:B1:E6:BF:33:89:2F:78:EF:27:CB:75:15:63:4E:5D:14 Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f Certificate serial: 019B7A5B16FDDF27801C1E311FA72844F847 Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8666 IP address blocks: 185.121.52.0/24 maxlen: 24 185.121.53.0/24 maxlen: 32 2a06:9cc0::/29 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:16:fd:df:27:80:1c:1e:31:1f:a7:28:44:f8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=744952d8b1e6bf33892f78ef27cb7515634e5d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:9c:18:37:08:a4:e9:2d:1c:44:b3:5b:19: 6e:22:94:89:34:5f:ba:ae:b5:be:9a:5b:05:1a:fe: f6:b9:89:57:d9:a5:79:f8:ea:82:c3:3a:dd:10:f9: 7f:3e:bc:74:e0:58:49:b4:1b:d0:2b:b2:5b:c4:23: 13:bf:01:fc:89:a3:c0:5c:ed:f9:32:7a:b4:41:58: 6c:c6:b2:08:90:a5:96:35:6f:fa:5b:60:4e:25:65: ca:6d:26:16:fb:00:eb:30:98:0e:05:73:7f:d6:6b: 6f:8a:84:66:2f:62:cc:75:56:a8:c4:aa:e7:9b:5d: 9f:a0:57:e0:39:9c:b0:aa:0f:0d:a0:e8:f9:a4:32: a8:ba:9c:3d:10:b8:28:3e:56:86:88:ec:45:99:d8: 0f:e6:d8:49:ad:23:17:3c:f2:5d:97:da:5a:ad:8d: 7e:77:f8:65:2d:10:37:d4:2e:2c:a4:4f:ad:84:62: 1e:d6:08:48:80:6c:67:01:14:f6:f1:28:49:3d:e5: 52:0a:10:fa:74:ca:93:65:17:63:e0:d0:e8:cd:70: 30:64:b7:24:17:82:57:7d:83:8d:67:c4:9b:90:8f: bc:0b:9f:f0:fa:62:cf:ed:91:7c:49:8a:8b:6a:b8: a1:db:fd:bd:70:0f:b4:e5:b7:03:51:b1:24:01:3a: 6c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:52:D8:B1:E6:BF:33:89:2F:78:EF:27:CB:75:15:63:4E:5D:14 X509v3 Authority Key Identifier: keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/dElS2LHmvzOJL3jvJ8t1FWNOXRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.52.0/23 IPv6: 2a06:9cc0::/29 Signature Algorithm: sha256WithRSAEncryption 38:77:fd:fa:49:92:00:43:77:29:0a:83:51:19:0f:2e:69:20: 58:62:60:99:c6:37:16:2c:c4:a8:32:a3:7a:2b:4b:47:83:df: a4:8e:29:cc:ea:5d:98:c6:ac:92:85:81:d4:48:5e:72:ef:2e: f1:c2:77:fb:69:bd:c2:4d:50:5d:9e:c4:17:39:56:40:40:f4: 41:11:1d:09:d9:d2:e1:e4:06:e8:9c:7a:3c:94:20:1b:95:89: 6d:f4:0f:0f:76:fd:42:b1:7f:84:7d:e5:fe:9d:cb:4a:24:f2: f2:2d:2d:f7:8f:24:e9:9a:9e:1d:9a:62:4f:e7:3e:32:36:de: b6:d6:94:8c:12:58:18:7c:87:62:43:97:06:a7:fa:03:74:26: 35:4f:32:5e:49:5f:84:b5:5f:a0:1f:2b:d2:ef:7a:cf:73:8a: 82:02:bc:14:95:6e:f8:16:56:48:10:17:81:13:42:c3:b5:c0: 98:8c:fc:2a:4c:33:1a:1c:d1:fb:91:20:86:d9:4e:6f:90:16: f6:34:a8:8b:11:7c:c7:03:f2:66:8c:56:5e:b2:3c:63:5d:bd: df:6a:e6:33:07:66:6b:c1:5e:d8:fc:4f:6d:f5:13:12:45:dc: 45:7b:fd:b5:c9:23:28:7a:c9:42:8d:33:4d:fe:68:e7:fa:81: 0e:da:51:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Wxb93yeAHB4xH6coRPhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODc0MDc5OWM5MWMyNjMwYTgwOTIxNzhkYjgyNGYzYTg4 OWE3NWYwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQ5NTJkOGIxZTZiZjMzODkyZjc4ZWYyN2NiNzUxNTYzNGU1ZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LmcGDcIpOktHESzWxluIpSJNF+6 rrW+mlsFGv72uYlX2aV5+OqCwzrdEPl/Prx04FhJtBvQK7JbxCMTvwH8iaPAXO35 Mnq0QVhsxrIIkKWWNW/6W2BOJWXKbSYW+wDrMJgOBXN/1mtvioRmL2LMdVaoxKrn m12foFfgOZywqg8NoOj5pDKoupw9ELgoPlaGiOxFmdgP5thJrSMXPPJdl9parY1+ d/hlLRA31C4spE+thGIe1ghIgGxnART28ShJPeVSChD6dMqTZRdj4NDozXAwZLck F4JXfYONZ8SbkI+8C5/w+mLP7ZF8SYqLarih2/29cA+05bcDUbEkATpsXQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHRJUtix5r8ziS947yfLdRVjTl0UMB8GA1UdIwQY MBaAFI2HQHmckcJjCoCSF424JPOoiadfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4Mjkt NTJiODE2NjgyOWQ3LzEvZEVsUzJMSG12ek9KTDNqdko4dDFGV05PWFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjdjOTQtYTYwZC00Mzk5LTk4MjktNTJiODE2NjgyOWQ3 LzEvallkQWVaeVJ3bU1LZ0pJWGpiZ2s4NmlKcDE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuXk0MA0E AgACMAcDBQMqBpzAMA0GCSqGSIb3DQEBCwUAA4IBAQA4d/36SZIAQ3cpCoNRGQ8u aSBYYmCZxjcWLMSoMqN6K0tHg9+kjinM6l2YxqyShYHUSF5y7y7xwnf7ab3CTVBd nsQXOVZAQPRBER0J2dLh5AbonHo8lCAblYlt9A8Pdv1CsX+EfeX+nctKJPLyLS33 jyTpmp4dmmJP5z4yNt621pSMElgYfIdiQ5cGp/oDdCY1TzJeSV+EtV+gHyvS73rP c4qCArwUlW74FlZIEBeBE0LDtcCYjPwqTDMaHNH7kSCG2U5vkBb2NKiLEXzHA/Jm jFZesjxjXb3fauYzB2ZrwV7Y/E9t9RMSRdxFe/21ySMoeslCjTNN/mjn+oEO2lHm -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:43 2026 by rpki-client