This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa File: fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa (raw, json) Hash identifier: +Q1EnV2TJw70P8F3SyId8vDlQiAvs3dvJ0FDJPliX6o= Subject key identifier: 7D:1D:4E:22:34:3E:81:A1:20:81:6E:41:BB:A5:A8:09:2C:37:FB:FF Certificate issuer: /CN=2c754ae473d9c154b804b70ed31881e025d926aa Certificate serial: 019B7CECF63062D2971CC2CB81A42EFE1A34 Authority key identifier: 2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa Signing time: Fri 02 Jan 2026 04:17:42 +0000 ROA not before: Fri 02 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8312 IP address blocks: 185.213.0.0/24 maxlen: 24 185.213.1.0/24 maxlen: 24 185.213.2.0/24 maxlen: 24 185.213.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.mft rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f6:30:62:d2:97:1c:c2:cb:81:a4:2e:fe:1a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c754ae473d9c154b804b70ed31881e025d926aa Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d1d4e22343e81a120816e41bba5a8092c37fbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:22:4e:ad:2c:dd:1a:4e:c2:3c:d9:86:de: 2e:8f:c5:a6:dd:83:01:39:bc:00:1c:4e:26:bd:7a: 93:b8:1a:1c:42:2f:c2:15:55:cf:db:92:df:4b:ef: f8:4c:27:36:5f:24:6b:67:0a:2c:78:6a:a9:e7:1d: 80:06:ad:40:66:ab:d7:0d:5f:aa:da:64:65:34:21: 8a:40:28:b1:28:56:4b:6c:be:65:45:43:0e:a3:f8: 7e:26:4a:f2:d7:81:13:80:30:17:56:99:60:d7:c7: ce:6b:d8:dc:f2:5e:52:7a:d7:fe:43:e3:7d:f6:34: 7e:39:da:e8:42:f0:00:d0:b6:ec:7f:ca:bd:d7:a6: 10:fd:a6:ad:10:9a:30:90:8b:91:c6:52:4b:6f:3e: 7a:7b:a5:f2:bc:f2:38:dc:4a:2f:bb:c1:16:ae:5b: 64:a2:a9:69:f3:ea:12:8e:4b:3f:11:8d:58:3e:86: 0e:0f:8e:a2:53:a9:1e:4a:b8:55:98:e2:6a:c5:19: c6:63:6b:f6:bd:07:06:75:bf:ef:8e:b8:54:cf:3a: 7b:51:ce:7f:6a:e6:0b:49:b9:97:65:18:41:cd:7e: 00:c8:3d:04:c2:c8:02:b9:e7:bc:75:02:31:77:47: 84:eb:61:55:49:f8:bb:39:c5:96:13:15:4f:6c:0e: 92:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1D:4E:22:34:3E:81:A1:20:81:6E:41:BB:A5:A8:09:2C:37:FB:FF X509v3 Authority Key Identifier: keyid:2C:75:4A:E4:73:D9:C1:54:B8:04:B7:0E:D3:18:81:E0:25:D9:26:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHVK5HPZwVS4BLcO0xiB4CXZJqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/fR1OIjQ-gaEggW5Bu6WoCSw3-_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/4a0949-df58-4005-9768-fc5393c57887/1/LHVK5HPZwVS4BLcO0xiB4CXZJqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.0.0/22 Signature Algorithm: sha256WithRSAEncryption 33:3a:65:9e:b4:85:f9:6b:b4:b2:74:00:af:d8:ba:76:4c:cc: 53:d6:7e:71:af:5d:2d:24:9f:34:6c:01:1d:0a:09:13:17:02: d2:04:df:c2:d3:84:25:30:85:a0:ee:0b:61:f1:63:34:87:21: 60:cd:44:bc:ad:71:e7:2a:40:42:f9:6c:bc:61:f7:f0:c3:c3: 24:60:cc:90:35:90:8a:6a:dd:26:a1:48:59:7f:73:8f:54:b3: bd:54:53:52:c2:96:6e:f8:07:04:e3:46:16:39:74:14:b6:e5: 56:ce:ee:37:fc:36:6f:2a:72:16:97:8c:df:51:03:6e:54:c5: fb:0d:67:82:fb:b3:b4:e0:af:60:69:2f:9f:ce:9b:96:5d:4d: b3:bd:11:50:49:92:01:83:3f:41:d7:5c:4f:b0:a1:62:21:37: 26:9c:fe:be:0b:d2:9d:ff:2c:47:08:ad:80:86:1b:13:8a:f9: 4a:ad:ec:bd:76:bc:e9:fb:b3:42:eb:a8:12:37:0b:97:cf:f2: 66:00:6b:bd:db:32:2d:4a:81:96:4e:e2:e6:5b:3c:85:a4:fd: 86:5c:2e:ad:a0:2c:6f:06:15:31:20:4c:f6:02:2f:5c:ff:06: ca:79:ff:e4:5e:ed:e8:b9:ba:26:6b:03:60:11:93:74:81:a4: 73:05:34:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87PYwYtKXHMLLgaQu/ho0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzU0YWU0NzNkOWMxNTRiODA0YjcwZWQzMTg4MWUwMjVk OTI2YWEwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDFkNGUyMjM0M2U4MWExMjA4MTZlNDFiYmE1YTgwOTJjMzdmYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQoiTq0s3RpOwjzZht4uj8Wm3YMB ObwAHE4mvXqTuBocQi/CFVXP25LfS+/4TCc2XyRrZwoseGqp5x2ABq1AZqvXDV+q 2mRlNCGKQCixKFZLbL5lRUMOo/h+Jkry14ETgDAXVplg18fOa9jc8l5Setf+Q+N9 9jR+OdroQvAA0Lbsf8q916YQ/aatEJowkIuRxlJLbz56e6XyvPI43Eovu8EWrltk oqlp8+oSjks/EY1YPoYOD46iU6keSrhVmOJqxRnGY2v2vQcGdb/vjrhUzzp7Uc5/ auYLSbmXZRhBzX4AyD0EwsgCuee8dQIxd0eE62FVSfi7OcWWExVPbA6STwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0dTiI0PoGhIIFuQbulqAksN/v/MB8GA1UdIwQY MBaAFCx1SuRz2cFUuAS3DtMYgeAl2SaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3Njgt ZmM1MzkzYzU3ODg3LzEvZlIxT0lqUS1nYUVnZ1c1QnU2V29DU3czLV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC80YTA5NDktZGY1OC00MDA1LTk3NjgtZmM1MzkzYzU3ODg3 LzEvTEhWSzVIUFp3VlM0QkxjTzB4aUI0Q1haSnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudUAMA0G CSqGSIb3DQEBCwUAA4IBAQAzOmWetIX5a7SydACv2Lp2TMxT1n5xr10tJJ80bAEd CgkTFwLSBN/C04QlMIWg7gth8WM0hyFgzUS8rXHnKkBC+Wy8Yffww8MkYMyQNZCK at0moUhZf3OPVLO9VFNSwpZu+AcE40YWOXQUtuVWzu43/DZvKnIWl4zfUQNuVMX7 DWeC+7O04K9gaS+fzpuWXU2zvRFQSZIBgz9B11xPsKFiITcmnP6+C9Kd/yxHCK2A hhsTivlKrey9drzp+7NC66gSNwuXz/JmAGu92zItSoGWTuLmWzyFpP2GXC6toCxv BhUxIEz2Ai9c/wbKef/kXu3oubomawNgEZN0gaRzBTSf -----END CERTIFICATE-----Generated at Fri Jan 9 16:33:06 2026 by rpki-client