This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa File: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (raw, json) Hash identifier: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis= Subject key identifier: FB:4E:D9:8C:76:50:E0:90:12:FD:33:67:30:C2:2E:8A:E1:87:52:ED Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Certificate serial: 019B7B3620819022534045C0A9B8552B60D3 Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa Signing time: Thu 01 Jan 2026 20:18:23 +0000 ROA not before: Thu 01 Jan 2026 20:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216408 IP address blocks: 185.87.216.0/24 maxlen: 24 2a13:85c0:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:20:81:90:22:53:40:45:c0:a9:b8:55:2b:60:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd Validity Not Before: Jan 1 20:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb4ed98c7650e09012fd336730c22e8ae18752ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:c1:b8:2f:8f:17:13:c9:5d:c0:95:0a:3b: e0:f9:12:ad:c2:fd:7a:b8:80:3c:1f:d0:84:fe:0f: 9d:cb:11:93:21:c8:bc:c6:27:03:d1:72:93:47:0f: 48:1b:37:f0:f8:3b:9a:ee:ec:f4:81:ab:cd:86:86: 01:32:42:87:6e:26:9a:5b:22:7c:69:a8:66:dd:d8: ae:18:15:54:1c:3d:73:d6:60:7e:79:57:09:77:0d: c0:07:2b:88:9b:73:46:26:2f:0b:f0:55:25:70:7c: 7e:8f:7a:10:f2:5c:78:6c:44:f1:76:45:87:5d:3c: 2a:4c:78:17:8d:3d:d2:55:82:b6:26:e2:af:99:19: ef:eb:a1:e7:b4:4a:70:e9:9b:fd:1d:db:b2:73:84: ab:7a:8a:a0:2e:2e:54:e0:b7:4b:10:01:27:d1:91: 7e:17:0a:f3:94:24:bf:b7:9d:ec:40:71:14:64:ac: 29:17:ed:b4:4f:4b:54:a1:cd:8e:7a:5a:f7:07:e7: bd:4c:f9:06:54:eb:b5:f2:59:8a:c9:d7:38:56:ae: f2:41:9c:7a:43:d3:5a:e6:b1:58:d2:bf:ec:e2:0c: ff:0f:06:30:42:86:e7:50:f5:1a:8f:21:83:b2:b3: 6d:b6:0f:73:da:c9:8b:79:98:5c:0f:98:57:7d:a0: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:D9:8C:76:50:E0:90:12:FD:33:67:30:C2:2E:8A:E1:87:52:ED X509v3 Authority Key Identifier: keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.216.0/24 IPv6: 2a13:85c0:100::/40 Signature Algorithm: sha256WithRSAEncryption 24:9c:6b:75:6b:44:cd:e2:ad:20:95:86:7d:2e:30:40:2f:75: b7:fa:6c:54:e3:17:f0:25:e5:cb:2e:da:e0:f3:d2:24:21:db: 32:36:ab:94:09:0a:4f:a4:35:52:8b:f1:f9:fd:a2:28:1d:0e: a1:1d:66:04:87:29:6d:f7:e8:b7:8a:ee:03:3c:8d:69:97:7a: f7:d3:93:98:06:60:39:9c:e7:42:5e:45:dd:fc:f6:90:75:24: d2:da:ef:ac:7f:08:29:2f:7c:c9:da:b4:28:48:48:06:59:04: 0c:c4:b4:ef:a1:17:11:55:53:8c:ba:bd:0b:fd:ea:72:74:b1: 12:51:1a:74:f4:b2:c9:1e:f0:b6:7e:25:87:67:57:de:91:4b: 84:34:3d:a5:0f:4f:66:9e:33:af:a3:e9:bf:74:94:65:50:b1: 4f:5e:18:1f:58:2f:53:64:65:0a:66:fe:8d:74:8b:50:a6:62: b7:47:4d:73:ea:19:6c:14:57:d8:36:71:ab:dc:82:96:ae:11: 04:28:e5:10:ce:9d:1d:7a:d6:52:cb:99:b4:fc:76:3a:90:85: 86:d2:79:fb:da:c9:8a:b0:70:d4:e8:53:2a:09:87:c6:2c:dc: a2:3c:27:25:9e:49:1d:9e:df:f7:36:79:87:e0:64:e3:33:04: 70:4f:e1:b1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7NiCBkCJTQEXAqbhVK2DTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODEyNzNkY2IwM2MzNDU3Yjc5MjUwYmUxMDllMTlhNWU3 NGYwZmQwHhcNMjYwMTAxMjAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjRlZDk4Yzc2NTBlMDkwMTJmZDMzNjczMGMyMmU4YWUxODc1MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMvBuC+PFxPJXcCVCjvg+RKtwv16 uIA8H9CE/g+dyxGTIci8xicD0XKTRw9IGzfw+Dua7uz0gavNhoYBMkKHbiaaWyJ8 aahm3diuGBVUHD1z1mB+eVcJdw3AByuIm3NGJi8L8FUlcHx+j3oQ8lx4bETxdkWH XTwqTHgXjT3SVYK2JuKvmRnv66HntEpw6Zv9Hduyc4SreoqgLi5U4LdLEAEn0ZF+ FwrzlCS/t53sQHEUZKwpF+20T0tUoc2Oelr3B+e9TPkGVOu18lmKydc4Vq7yQZx6 Q9Na5rFY0r/s4gz/DwYwQobnUPUajyGDsrNttg9z2smLeZhcD5hXfaCk2QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPtO2Yx2UOCQEv0zZzDCLorhh1LtMB8GA1UdIwQY MBaAFEyBJz3LA8NFe3klC+EJ4ZpedPD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElFblBjc0R3MFY3ZVNVTDRRbmhtbDUwOFAwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xOGM3ZGQtMjQxYi00YjkyLThlYmYt Nzc3OTRmYmZkMmU0LzEvMS0wN1pqSFpRNEpBU19UTm5NTUl1aXVHSFV1MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGMvMThjN2RkLTI0MWItNGI5Mi04ZWJmLTc3Nzk0ZmJmZDJl NC8xL1RJRW5QY3NEdzBWN2VTVUw0UW5obWw1MDhQMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEALlX2DAO BAIAAjAIAwYAKhOFwAEwDQYJKoZIhvcNAQELBQADggEBACSca3VrRM3irSCVhn0u MEAvdbf6bFTjF/Al5csu2uDz0iQh2zI2q5QJCk+kNVKL8fn9oigdDqEdZgSHKW33 6LeK7gM8jWmXevfTk5gGYDmc50JeRd389pB1JNLa76x/CCkvfMnatChISAZZBAzE tO+hFxFVU4y6vQv96nJ0sRJRGnT0sske8LZ+JYdnV96RS4Q0PaUPT2aeM6+j6b90 lGVQsU9eGB9YL1NkZQpm/o10i1CmYrdHTXPqGWwUV9g2cavcgpauEQQo5RDOnR16 1lLLmbT8djqQhYbSefvayYqwcNToUyoJh8Ys3KI8JyWeSR2e3/c2eYfgZOMzBHBP 4bE= -----END CERTIFICATE-----Generated at Sat Jan 10 04:35:55 2026 by rpki-client