This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/F1IZXSaM0EUoVJYeBekbQHeIDzM.roa File: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (raw, json) Hash identifier: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc= Subject key identifier: 17:52:19:5D:26:8C:D0:45:28:54:96:1E:05:E9:1B:40:77:88:0F:33 Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Certificate serial: 019B7758C52C33F83A3A7FD88EA6E9F0E6FE Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/F1IZXSaM0EUoVJYeBekbQHeIDzM.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.38.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c5:2c:33:f8:3a:3a:7f:d8:8e:a6:e9:f0:e6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1752195d268cd0452854961e05e91b4077880f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:62:70:f6:c2:d2:ba:c3:02:61:53:0f:f6:16: 2c:25:aa:8c:bb:d2:73:91:bc:e9:4a:c8:c5:72:0b: d1:51:65:04:54:0a:51:6d:f9:d2:aa:fe:f5:9e:ce: 91:ed:63:ff:8b:7d:4c:71:cb:de:dd:2d:32:1e:fc: a4:66:27:de:11:d3:48:f9:f1:60:e5:04:13:f6:10: 4e:c5:3d:ae:cf:be:60:f0:fd:75:71:7d:1b:d1:66: 82:50:3f:d4:80:95:57:13:10:43:e9:8f:d8:c3:89: 55:24:fd:e1:87:48:da:6d:a6:4b:4c:bb:54:7f:90: fc:40:91:92:48:30:c0:99:8d:9f:e7:64:e5:6d:e7: 4c:82:14:a9:77:c1:d3:d7:ba:59:01:b0:4f:99:48: f6:58:ad:6e:0f:cb:f1:ff:f3:0c:fa:c2:38:2a:24: cb:4d:53:99:44:82:3d:03:04:8d:9a:1f:1e:4a:8c: a4:66:ec:ae:3f:9f:7b:0d:77:9b:2f:8c:fc:d6:8a: 06:69:ab:8f:49:69:35:48:93:47:55:30:2d:51:bb: 6e:d1:44:e4:10:e6:58:ad:8f:d8:6a:18:99:1d:2d: 5e:e6:11:4c:36:54:b1:fe:ba:61:1a:70:92:72:e2: f4:02:a8:4a:ba:37:6b:69:c5:11:67:fe:ab:a8:a7: a9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:52:19:5D:26:8C:D0:45:28:54:96:1E:05:E9:1B:40:77:88:0F:33 X509v3 Authority Key Identifier: keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/F1IZXSaM0EUoVJYeBekbQHeIDzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.134.0/24 Signature Algorithm: sha256WithRSAEncryption 27:e5:7c:81:a4:7d:0a:c2:82:ce:cb:d6:9f:ac:af:ef:77:1b: 6b:4d:48:15:8e:3a:46:e6:38:e2:f6:4f:57:87:bf:26:b5:af: 2a:0c:c2:1d:19:54:57:2d:b0:6d:09:8d:8c:8a:3f:c8:28:73: 70:25:9f:2c:79:24:fd:0c:39:f7:c4:63:46:a1:d6:1f:f8:52: 2d:8b:fb:bc:be:e3:e1:ed:ea:6e:65:3d:7c:47:88:d8:05:ca: 61:ef:02:b7:71:2e:23:db:14:2d:79:e9:77:62:a5:be:b1:d9: bf:66:d7:bb:1a:2f:54:48:96:a3:23:e5:13:a8:ca:9b:17:63: f8:d8:4b:e7:93:9b:ec:c3:4b:ad:36:fd:db:ae:40:2e:fb:75: 91:60:8e:75:e6:07:33:5f:86:bf:88:63:48:25:bc:92:ff:41: e6:e8:c8:0a:05:76:50:50:75:99:e0:ff:0e:0c:42:32:42:6d: 32:a6:3b:c1:a0:92:b6:97:45:39:17:0f:e4:3f:15:87:e1:9f: 9a:51:5c:bc:c6:c7:b2:73:65:c0:45:8f:0d:21:a8:cd:93:1a: fd:db:77:06:be:b3:b8:78:17:23:0b:c5:b8:4e:98:b3:34:e3: f2:50:9f:ba:55:c4:05:9a:af:ab:81:df:24:c6:f2:ad:b9:c3: d4:ab:bc:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMUsM/g6On/Yjqbp8Ob+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi ZGI2NDAwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzUyMTk1ZDI2OGNkMDQ1Mjg1NDk2MWUwNWU5MWI0MDc3ODgwZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGJw9sLSusMCYVMP9hYsJaqMu9Jz kbzpSsjFcgvRUWUEVApRbfnSqv71ns6R7WP/i31Mccve3S0yHvykZifeEdNI+fFg 5QQT9hBOxT2uz75g8P11cX0b0WaCUD/UgJVXExBD6Y/Yw4lVJP3hh0jabaZLTLtU f5D8QJGSSDDAmY2f52TlbedMghSpd8HT17pZAbBPmUj2WK1uD8vx//MM+sI4KiTL TVOZRII9AwSNmh8eSoykZuyuP597DXebL4z81ooGaauPSWk1SJNHVTAtUbtu0UTk EOZYrY/YahiZHS1e5hFMNlSx/rphGnCScuL0AqhKujdracURZ/6rqKep1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBdSGV0mjNBFKFSWHgXpG0B3iA8zMB8GA1UdIwQY MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt NjZjYTU3Zjc0ZTBkLzEvRjFJWlhTYU0wRVVvVkpZZUJla2JRSGVJRHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSaGMA0G CSqGSIb3DQEBCwUAA4IBAQAn5XyBpH0KwoLOy9afrK/vdxtrTUgVjjpG5jji9k9X h78mta8qDMIdGVRXLbBtCY2Mij/IKHNwJZ8seST9DDn3xGNGodYf+FIti/u8vuPh 7epuZT18R4jYBcph7wK3cS4j2xQteel3YqW+sdm/Zte7Gi9USJajI+UTqMqbF2P4 2Evnk5vsw0utNv3brkAu+3WRYI515gczX4a/iGNIJbyS/0Hm6MgKBXZQUHWZ4P8O DEIyQm0ypjvBoJK2l0U5Fw/kPxWH4Z+aUVy8xseyc2XARY8NIajNkxr923cGvrO4 eBcjC8W4TpizNOPyUJ+6VcQFmq+rgd8kxvKtucPUq7wI -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:56 2026 by rpki-client