This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa File: 1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa (raw, json) Hash identifier: mA5SaPX5hOKD8NX3Hv1/uNqyTzg2PYZjKEyCT2Stnms= Subject key identifier: F9:63:A5:14:A8:09:E5:FC:AE:27:49:8A:FD:65:F3:C5:94:A3:25:9F Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Certificate serial: 019B7A5AF8FADDF9432A534E16903D49994A Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa Signing time: Thu 01 Jan 2026 16:19:00 +0000 ROA not before: Thu 01 Jan 2026 16:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 92.118.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f8:fa:dd:f9:43:2a:53:4e:16:90:3d:49:99:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f963a514a809e5fcae27498afd65f3c594a3259f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:8d:52:cb:ea:af:5d:a9:10:91:05:f0:27: f9:a4:ff:ba:10:ce:dc:19:3e:70:ad:c9:98:c8:3c: 88:3a:9a:a7:43:9a:7c:a1:cc:75:fb:23:d0:a7:91: 17:e8:aa:df:05:2f:76:e2:61:c7:da:08:a5:2d:65: 99:9f:8b:27:8c:6a:74:bc:e4:41:b6:9f:4a:78:7e: 1d:04:62:bb:ca:6c:65:d6:d0:67:64:89:7d:db:19: 55:ed:80:cf:91:c6:79:d6:9b:ca:18:b8:91:e7:4d: df:8e:e0:8f:87:2c:dc:cf:ed:b0:c7:6f:d1:3b:da: 64:ea:a5:82:99:2d:be:06:d7:65:72:65:e0:6f:0b: 0d:ed:00:7c:ee:e3:bc:98:ce:44:7d:55:1b:2d:ff: b5:1b:8b:a9:09:bd:da:0e:7c:27:bd:3a:77:94:8f: e2:e6:e6:fa:b9:50:f2:e5:5f:95:ab:aa:a8:bc:dd: ad:20:30:4c:31:92:b9:02:1d:7c:dc:36:d7:fa:ff: 87:0c:77:8f:75:4a:62:8c:9d:37:01:21:13:49:c8: f9:3f:dc:93:d2:0e:e6:c9:1b:ee:d3:98:e4:a8:95: 08:24:30:93:d5:c7:c5:82:c3:7a:75:f3:80:09:9e: df:4d:2a:53:d3:af:73:fb:ed:37:bc:5a:80:ea:e2: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:A5:14:A8:09:E5:FC:AE:27:49:8A:FD:65:F3:C5:94:A3:25:9F X509v3 Authority Key Identifier: keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/1-WOlFKgJ5fyuJ0mK_WXzxZSjJZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.19.0/24 Signature Algorithm: sha256WithRSAEncryption 13:4f:ae:89:8f:94:81:3c:9c:fa:6f:cd:31:03:a1:75:40:15: c6:43:e8:e5:50:fe:65:43:a3:c7:2d:76:ef:9b:45:ac:48:c2: e6:33:b9:ab:a8:ff:04:72:0f:23:4f:af:1c:64:cf:ef:ed:16: 1e:d6:3c:ae:cc:07:6d:2d:e1:37:44:21:d9:04:a5:f7:01:ec: e4:fc:c5:b9:0d:97:29:6b:9c:21:84:6e:dc:b1:6b:55:23:fe: c0:71:25:d1:99:ab:c0:2b:34:d0:a8:38:c3:e3:45:aa:bd:e1: 53:f3:9e:aa:fd:38:a5:79:04:12:a9:bc:64:00:ed:a3:0e:e7: ee:cc:e7:85:ab:1a:a5:c0:28:d7:a4:28:01:67:14:5e:91:f3: f1:21:f3:c4:bb:90:48:c8:59:b3:a6:bb:63:93:39:b6:5a:76: ff:e8:2a:9b:d3:54:c5:e2:46:0b:1c:db:6c:72:90:5b:1b:cc: 71:98:ec:86:e5:9f:a8:77:3d:d8:85:50:5e:5d:26:d7:c5:34: e6:49:17:bc:ce:5c:c6:d9:cd:1a:d8:03:bc:8c:ea:de:9d:96: de:d0:b1:57:80:6b:a9:3a:48:20:40:5a:7e:6b:e5:28:33:cf: 47:ea:2c:e2:5e:0b:00:ba:a2:04:16:36:40:7d:3e:56:ac:05: 05:06:4f:91 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6Wvj63flDKlNOFpA9SZlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNTM4Y2RjYWY5ZjkyNDY0OTdkYzdhZTQ1ODQ1Mzc5ZmU2 YTcxNzQwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTYzYTUxNGE4MDllNWZjYWUyNzQ5OGFmZDY1ZjNjNTk0YTMyNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XKNUsvqr12pEJEF8Cf5pP+6EM7c GT5wrcmYyDyIOpqnQ5p8ocx1+yPQp5EX6KrfBS924mHH2gilLWWZn4snjGp0vORB tp9KeH4dBGK7ymxl1tBnZIl92xlV7YDPkcZ51pvKGLiR503fjuCPhyzcz+2wx2/R O9pk6qWCmS2+BtdlcmXgbwsN7QB87uO8mM5EfVUbLf+1G4upCb3aDnwnvTp3lI/i 5ub6uVDy5V+Vq6qovN2tIDBMMZK5Ah183DbX+v+HDHePdUpijJ03ASETScj5P9yT 0g7myRvu05jkqJUIJDCT1cfFgsN6dfOACZ7fTSpT069z++03vFqA6uJMhwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPljpRSoCeX8ridJiv1l88WUoyWfMB8GA1UdIwQY MBaAFOxTjNyvn5JGSX3HrkWEU3n+anF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0ZPTTNLLWZra1pKZmNldVJZUlRlZjVxY1hRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS83ZDY0ZjgtZGRlMi00YTdmLTk1MWEt YzA2YzYyYWY5ZGE1LzEvMS1XT2xGS2dKNWZ5dUowbUtfV1h6eFpTakpaOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvN2Q2NGY4LWRkZTItNGE3Zi05NTFhLWMwNmM2MmFmOWRh NS8xLzdGT00zSy1ma2taSmZjZXVSWVJUZWY1cWNYUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFx2EzAN BgkqhkiG9w0BAQsFAAOCAQEAE0+uiY+UgTyc+m/NMQOhdUAVxkPo5VD+ZUOjxy12 75tFrEjC5jO5q6j/BHIPI0+vHGTP7+0WHtY8rswHbS3hN0Qh2QSl9wHs5PzFuQ2X KWucIYRu3LFrVSP+wHEl0ZmrwCs00Kg4w+NFqr3hU/Oeqv04pXkEEqm8ZADtow7n 7sznhasapcAo16QoAWcUXpHz8SHzxLuQSMhZs6a7Y5M5tlp2/+gqm9NUxeJGCxzb bHKQWxvMcZjshuWfqHc92IVQXl0m18U05kkXvM5cxtnNGtgDvIzq3p2W3tCxV4Br qTpIIEBafmvlKDPPR+os4l4LALqiBBY2QH0+VqwFBQZPkQ== -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:20 2026 by rpki-client