This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1SBvhYKlrd_0qMz2QTcW5pclfY0.roa File: 1SBvhYKlrd_0qMz2QTcW5pclfY0.roa (raw, json) Hash identifier: nDvRI2IX72X6caSK6yMTnl6Oyb9l9IZ5q2rTpfC65Cc= Subject key identifier: D5:20:6F:85:82:A5:AD:DF:F4:A8:CC:F6:41:37:16:E6:97:25:7D:8D Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797ED20436345A6E9142F7FDAB783ABB Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1SBvhYKlrd_0qMz2QTcW5pclfY0.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201642 IP address blocks: 85.196.128.0/23 maxlen: 23 85.196.130.0/23 maxlen: 23 2a01:288:4005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d2:04:36:34:5a:6e:91:42:f7:fd:ab:78:3a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5206f8582a5addff4a8ccf6413716e697257d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:2c:56:d2:58:db:80:02:3e:3d:d8:d4:28: 59:ee:c0:ad:b3:4e:e5:7f:bd:2e:52:4b:6f:e1:0e: a4:f7:65:93:6d:b0:0c:41:0c:cf:eb:a8:97:0e:fd: 01:49:17:1a:30:30:47:b4:0d:f4:c0:eb:21:4b:78: ae:75:bc:66:dc:f2:92:a0:e9:62:6b:65:80:ed:65: 09:8a:e8:23:21:7b:39:34:01:5d:a0:c6:d1:9f:79: e4:af:bb:6d:69:d5:9d:57:67:12:5f:f3:9d:99:2b: b8:71:dc:97:eb:57:24:14:75:a0:9d:7b:41:af:4d: 9d:94:5d:f4:c6:7a:e1:c7:35:8d:ad:ad:4d:3c:d8: 01:0f:43:ad:2d:20:66:ae:91:b2:a0:5b:59:99:0a: 8c:28:13:42:fb:38:3b:d2:6e:8f:e8:06:bb:a4:1d: d5:6c:19:fc:ac:1e:1b:44:ee:6a:8a:00:92:77:e3: f6:f8:16:83:55:49:2b:15:1a:82:fa:20:73:9f:4f: ce:b7:31:22:04:42:8b:e3:ed:7b:29:5f:e4:2d:61: 22:a4:ee:21:27:2c:a2:ab:6a:c3:63:23:b4:13:35: bb:4f:10:26:6f:54:c5:f3:eb:41:f7:e0:7d:71:3b: 18:28:4b:25:9b:0d:4d:b2:7c:65:05:db:00:cd:62: ea:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:20:6F:85:82:A5:AD:DF:F4:A8:CC:F6:41:37:16:E6:97:25:7D:8D X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1SBvhYKlrd_0qMz2QTcW5pclfY0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.196.128.0/22 IPv6: 2a01:288:4005::/48 Signature Algorithm: sha256WithRSAEncryption 0e:a5:6a:27:03:64:d0:a2:1c:7a:10:f2:db:df:e8:b8:60:7d: 8d:bb:63:fd:14:5f:a4:58:1a:a6:c2:74:91:5c:24:a6:e4:75: 23:09:c6:51:18:52:ff:e7:42:7c:2d:05:07:ff:6d:5c:f7:88: be:bf:3f:be:12:b1:dc:1e:56:f7:b8:b9:4c:28:fa:df:48:b2: 78:52:33:91:a1:6d:27:7d:ec:e1:0d:fe:45:3a:16:ef:c4:c1: 7d:9d:6d:71:8d:89:04:0c:98:ad:4b:bb:fb:90:df:2d:ad:46: 21:06:fd:56:12:fa:ee:cd:e2:db:ab:9a:cc:6a:11:b5:aa:06: 3d:45:b8:f8:70:78:f8:a0:98:c8:0b:ea:b1:6b:93:20:77:df: 9d:2f:08:bc:a0:3a:eb:bc:5f:18:ea:b2:14:22:80:52:19:d6: f2:2f:49:e4:0b:85:5d:b8:de:e8:fc:5d:05:46:ca:ff:f9:5e: c0:2f:82:00:d0:41:da:6e:c1:32:d2:2b:db:0b:89:f1:5b:90: ec:c2:e7:c4:cd:62:8e:8b:9f:59:ce:84:95:c0:0b:4a:21:f1: 0c:d9:7a:c0:01:ef:e0:d5:32:79:76:d1:99:c3:6f:84:c5:8c: 97:0d:23:63:08:7d:11:34:f5:b8:2a:2d:0a:27:f5:15:c0:bc: a6:3c:45:9f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ftIENjRabpFC9/2reDq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTIwNmY4NTgyYTVhZGRmZjRhOGNjZjY0MTM3MTZlNjk3MjU3ZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/UsVtJY24ACPj3Y1ChZ7sCts07l f70uUktv4Q6k92WTbbAMQQzP66iXDv0BSRcaMDBHtA30wOshS3iudbxm3PKSoOli a2WA7WUJiugjIXs5NAFdoMbRn3nkr7ttadWdV2cSX/OdmSu4cdyX61ckFHWgnXtB r02dlF30xnrhxzWNra1NPNgBD0OtLSBmrpGyoFtZmQqMKBNC+zg70m6P6Aa7pB3V bBn8rB4bRO5qigCSd+P2+BaDVUkrFRqC+iBzn0/OtzEiBEKL4+17KV/kLWEipO4h Jyyiq2rDYyO0EzW7TxAmb1TF8+tB9+B9cTsYKEslmw1NsnxlBdsAzWLqAwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNUgb4WCpa3f9KjM9kE3FuaXJX2NMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvMVNCdmhZS2xyZF8wcU16MlFUY1c1cGNsZlkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCVcSAMA8E AgACMAkDBwAqAQKIQAUwDQYJKoZIhvcNAQELBQADggEBAA6laicDZNCiHHoQ8tvf 6LhgfY27Y/0UX6RYGqbCdJFcJKbkdSMJxlEYUv/nQnwtBQf/bVz3iL6/P74Ssdwe Vve4uUwo+t9IsnhSM5GhbSd97OEN/kU6Fu/EwX2dbXGNiQQMmK1Lu/uQ3y2tRiEG /VYS+u7N4turmsxqEbWqBj1FuPhwePigmMgL6rFrkyB3350vCLygOuu8XxjqshQi gFIZ1vIvSeQLhV243uj8XQVGyv/5XsAvggDQQdpuwTLSK9sLifFbkOzC58TNYo6L n1nOhJXAC0oh8QzZesAB7+DVMnl20ZnDb4TFjJcNI2MIfRE09bgqLQon9RXAvKY8 RZ8= -----END CERTIFICATE-----Generated at Mon Jan 26 17:25:25 2026 by rpki-client