This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/Ts1c5R1pfarxRE69RZTUbL8j2wI.roa File: Ts1c5R1pfarxRE69RZTUbL8j2wI.roa (raw, json) Hash identifier: ZcQpB70U2YO+2we7XC8myVB/BAIh03F9aXKEn9a2hG4= Subject key identifier: 4E:CD:5C:E5:1D:69:7D:AA:F1:44:4E:BD:45:94:D4:6C:BF:23:DB:02 Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Certificate serial: 019B7AC85728EE985624B79CBB6E0C1F5D70 Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/Ts1c5R1pfarxRE69RZTUbL8j2wI.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.207.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:57:28:ee:98:56:24:b7:9c:bb:6e:0c:1f:5d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ecd5ce51d697daaf1444ebd4594d46cbf23db02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:f8:0f:2b:ef:b7:51:9d:53:63:94:30:83: cf:56:28:30:10:53:3c:b4:c0:c7:fd:c2:d5:e4:f5: 4e:75:2b:06:d8:61:7f:7f:06:ef:87:4b:c2:08:d1: 68:9d:22:ef:26:4a:d5:b0:5b:f3:35:b5:82:e4:99: c8:e8:49:b2:ee:c0:f2:10:a8:4e:ae:07:47:23:e7: dc:ff:76:69:09:70:d3:43:31:63:75:ad:b6:83:c3: ea:70:d5:9c:87:a9:e1:22:3c:79:ab:5c:3c:ab:5f: 04:66:0c:83:9d:f9:44:21:38:d3:f5:2f:12:ff:ed: 94:5a:37:dd:24:ed:87:7b:b6:53:2b:91:3e:f1:6c: b2:cd:14:84:41:b8:b6:c0:5e:05:af:35:04:d9:86: 14:36:c4:22:f5:86:aa:65:de:8f:a9:0a:6e:63:b9: db:90:d1:f0:ad:c3:0c:a8:a5:ab:84:60:7b:09:7e: c9:38:35:2e:cc:f9:22:c8:75:13:39:76:bb:0d:ef: e8:9e:43:8a:1f:7c:58:ea:8a:1e:45:57:d8:e7:bc: 31:fe:62:23:f5:c3:d0:80:bd:e0:2f:e1:b8:d5:0e: 3b:7b:6e:34:fc:e0:40:9b:bd:08:5d:d3:38:86:cf: f9:c4:b5:f4:89:8a:62:8d:e8:19:bf:51:2a:e7:71: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:5C:E5:1D:69:7D:AA:F1:44:4E:BD:45:94:D4:6C:BF:23:DB:02 X509v3 Authority Key Identifier: keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/Ts1c5R1pfarxRE69RZTUbL8j2wI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.237.0/24 Signature Algorithm: sha256WithRSAEncryption 81:b5:e5:9f:ff:0d:1e:be:65:a6:12:75:05:70:f7:90:70:66: 9e:68:dc:2c:51:07:5d:e9:e5:a8:20:70:0a:e0:dc:2f:d8:a9: da:77:c7:55:fd:54:42:41:8a:70:16:72:d7:76:36:7b:98:83: 11:63:f0:a4:b8:91:cd:01:a8:ef:56:4b:f6:9e:91:6b:23:87: de:2c:2d:d5:4e:ca:f3:26:41:6e:75:20:9d:f7:21:a1:58:23: 09:1d:24:72:57:0b:91:72:53:6b:ab:df:01:48:51:2c:7d:d0: 2f:c1:cf:17:a6:44:67:c2:d5:9c:47:be:b8:ca:44:b9:92:6d: d6:fd:c4:e9:dd:d7:a2:2f:32:0a:4c:f8:e8:9f:16:ae:e1:74: 7e:d4:3f:ee:f0:37:fa:8b:2b:b6:cf:0b:e4:a5:59:57:c1:38: de:3b:e7:55:0f:6e:39:b1:4f:af:fa:7e:b2:f6:df:02:1f:b6: 9c:3b:7c:d1:f6:3a:9e:d3:d1:11:48:d6:7c:96:ce:1a:70:4f: 67:da:41:d8:e9:6b:61:ba:ea:93:f0:42:74:ea:88:2a:fa:7c: 22:8d:6c:ec:45:ae:b6:f0:39:06:b6:48:52:83:e5:21:f6:26: 19:24:68:93:9f:68:75:85:29:f9:2f:72:78:73:b0:9f:8d:a2: 21:f2:11:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFco7phWJLecu24MH11wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NDhkNjI2YTkyMGU0MmRhY2QwZTk0OGU5NjZhNWU0YmNj M2MxMWMwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZWNkNWNlNTFkNjk3ZGFhZjE0NDRlYmQ0NTk0ZDQ2Y2JmMjNkYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hz4Dyvvt1GdU2OUMIPPVigwEFM8 tMDH/cLV5PVOdSsG2GF/fwbvh0vCCNFonSLvJkrVsFvzNbWC5JnI6Emy7sDyEKhO rgdHI+fc/3ZpCXDTQzFjda22g8PqcNWch6nhIjx5q1w8q18EZgyDnflEITjT9S8S /+2UWjfdJO2He7ZTK5E+8WyyzRSEQbi2wF4FrzUE2YYUNsQi9YaqZd6PqQpuY7nb kNHwrcMMqKWrhGB7CX7JODUuzPkiyHUTOXa7De/onkOKH3xY6ooeRVfY57wx/mIj 9cPQgL3gL+G41Q47e240/OBAm70IXdM4hs/5xLX0iYpijegZv1Eq53EGNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE7NXOUdaX2q8UROvUWU1Gy/I9sCMB8GA1UdIwQY MBaAFLRI1iapIOQtrNDpSOlmpeS8w8EcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYt YmM4ZTBiNjlhYzEyLzEvVHMxYzVSMXBmYXJ4UkU2OVJaVFViTDhqMndJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81NWQ1ODQtMTlhMS00N2MwLTk1YTYtYmM4ZTBiNjlhYzEy LzEvdEVqV0pxa2c1QzJzME9sSTZXYWw1THpEd1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc/tMA0G CSqGSIb3DQEBCwUAA4IBAQCBteWf/w0evmWmEnUFcPeQcGaeaNwsUQdd6eWoIHAK 4Nwv2Knad8dV/VRCQYpwFnLXdjZ7mIMRY/CkuJHNAajvVkv2npFrI4feLC3VTsrz JkFudSCd9yGhWCMJHSRyVwuRclNrq98BSFEsfdAvwc8XpkRnwtWcR764ykS5km3W /cTp3deiLzIKTPjonxau4XR+1D/u8Df6iyu2zwvkpVlXwTjeO+dVD245sU+v+n6y 9t8CH7acO3zR9jqe09ERSNZ8ls4acE9n2kHY6WthuuqT8EJ06ogq+nwijWzsRa62 8DkGtkhSg+Uh9iYZJGiTn2h1hSn5L3J4c7CfjaIh8hHx -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:36 2026 by rpki-client