This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-SjR5Bb79-yJRiaZ9VJlKSClkEA.roa File: 1-SjR5Bb79-yJRiaZ9VJlKSClkEA.roa (raw, json) Hash identifier: yC1mHx6LHZXX0bbpW+SjzgHqj0oxlaaTWIaf8k8zsBs= Subject key identifier: F9:28:D1:E4:16:FB:F7:EC:89:46:26:99:F5:52:65:29:20:A5:90:40 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7BFFDC3B0CFEFDE402B0A0FDB58AC Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-SjR5Bb79-yJRiaZ9VJlKSClkEA.roa Signing time: Thu 01 Jan 2026 18:17:49 +0000 ROA not before: Thu 01 Jan 2026 18:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 85.254.29.0/24 maxlen: 24 85.254.178.0/23 maxlen: 23 159.148.131.0/24 maxlen: 24 159.148.169.0/24 maxlen: 24 159.148.177.0/24 maxlen: 24 185.27.92.0/24 maxlen: 24 185.27.93.0/24 maxlen: 24 185.27.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bf:fd:c3:b0:cf:ef:de:40:2b:0a:0f:db:58:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f928d1e416fbf7ec89462699f552652920a59040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:e5:91:1e:77:73:30:37:6f:81:b7:95:ca: 65:5c:a4:52:2e:19:01:79:64:c6:c5:03:02:74:05: 6e:7d:c7:38:e8:d5:e1:ae:03:56:6f:50:13:a9:e6: 86:d6:8d:1b:b5:ca:ca:4d:cd:ee:dc:fb:d6:a7:f5: a8:8d:15:e8:b4:41:73:28:93:7a:a3:40:76:29:fb: 6d:df:89:23:83:5c:d1:b9:e8:9d:12:75:03:a3:21: 7d:03:6b:6d:d4:e8:f7:88:33:2e:a2:86:a8:79:6f: 10:4e:4f:43:2c:80:42:6a:ff:18:1c:53:ad:2e:d4: 85:fd:28:36:04:5d:6b:1f:55:ea:a4:41:eb:3b:45: 11:90:ca:31:70:03:79:5a:83:ff:f4:0c:85:58:f1: 07:c9:e9:0b:eb:52:ee:c7:78:8f:c1:32:3a:fa:59: 0a:d5:fe:32:ea:85:0e:30:17:b5:6e:a0:fc:f4:ab: a8:47:90:78:c3:bb:bf:28:fe:65:a6:ca:94:72:9a: e7:a2:ae:d7:10:94:97:83:19:39:0d:58:0a:13:62: 59:10:1d:f7:73:aa:b0:58:4c:32:34:2f:62:d7:95: 2f:23:ea:80:fb:c0:1d:73:f4:fe:c5:31:ca:e7:84: 84:e3:fd:8a:02:2f:d6:0c:4d:17:9d:5c:d0:a4:00: e9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:28:D1:E4:16:FB:F7:EC:89:46:26:99:F5:52:65:29:20:A5:90:40 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-SjR5Bb79-yJRiaZ9VJlKSClkEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.29.0/24 85.254.178.0/23 159.148.131.0/24 159.148.169.0/24 159.148.177.0/24 185.27.92.0/23 185.27.95.0/24 Signature Algorithm: sha256WithRSAEncryption 78:57:c3:04:d4:cf:19:78:6b:2a:8d:47:b7:48:f6:b1:18:62: 9d:1d:24:f9:9e:c7:5b:74:3a:ad:03:06:0a:f7:68:52:81:7a: 2b:64:36:d4:22:d1:80:56:01:99:e6:49:b4:73:53:3c:39:f1: f4:78:08:54:45:cb:89:82:c4:f9:ac:a8:c7:a7:3a:a7:94:9b: e2:35:66:11:da:f6:54:23:bb:1b:0f:f3:9d:de:92:79:c2:dd: 4b:50:b6:37:0b:2c:c6:2e:ee:ac:f4:65:6a:2c:61:f6:cc:b6: df:28:c7:67:8e:b3:f6:9a:62:58:6c:e5:e4:d9:83:3d:8b:72: 90:59:21:ee:60:7f:99:65:bd:ae:8c:4c:1c:6b:1b:a0:7f:c4: 42:8e:c5:ab:b0:03:67:ed:c4:56:ae:df:b6:cf:8c:de:fd:0a: 9c:16:a8:2d:46:de:9f:7b:60:ed:3e:5c:84:0b:82:ed:42:6b: 8d:5c:a9:a6:b8:d7:34:e2:01:5c:84:67:97:c6:f5:1a:c8:5b: f8:ff:ab:2d:01:6a:3c:4d:c7:cd:14:21:b5:ae:d8:01:2d:aa: 98:a4:6a:82:e2:76:6c:c8:cf:37:73:fc:62:02:eb:a6:94:23: b4:2b:97:e6:7d:6d:57:ef:dc:fe:de:33:57:5c:f2:7d:41:79: 6d:a2:aa:4a -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt6x7/9w7DP795AKwoP21isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTI4ZDFlNDE2ZmJmN2VjODk0NjI2OTlmNTUyNjUyOTIwYTU5MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAzlkR53czA3b4G3lcplXKRSLhkB eWTGxQMCdAVufcc46NXhrgNWb1ATqeaG1o0btcrKTc3u3PvWp/WojRXotEFzKJN6 o0B2Kftt34kjg1zRueidEnUDoyF9A2tt1Oj3iDMuooaoeW8QTk9DLIBCav8YHFOt LtSF/Sg2BF1rH1XqpEHrO0URkMoxcAN5WoP/9AyFWPEHyekL61Lux3iPwTI6+lkK 1f4y6oUOMBe1bqD89KuoR5B4w7u/KP5lpsqUcprnoq7XEJSXgxk5DVgKE2JZEB33 c6qwWEwyNC9i15UvI+qA+8Adc/T+xTHK54SE4/2KAi/WDE0XnVzQpADpAwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFPko0eQW+/fsiUYmmfVSZSkgpZBAMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMS1TalI1QmI3OS15SlJpYVo5VkpsS1NDbGtFQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2 Zi8xL3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBDBggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAFX+HQME AVX+sgMEAJ+UgwMEAJ+UqQMEAJ+UsQMEAbkbXAMEALkbXzANBgkqhkiG9w0BAQsF AAOCAQEAeFfDBNTPGXhrKo1Ht0j2sRhinR0k+Z7HW3Q6rQMGCvdoUoF6K2Q21CLR gFYBmeZJtHNTPDnx9HgIVEXLiYLE+ayox6c6p5Sb4jVmEdr2VCO7Gw/znd6SecLd S1C2Nwssxi7urPRlaixh9sy23yjHZ46z9ppiWGzl5NmDPYtykFkh7mB/mWW9roxM HGsboH/EQo7Fq7ADZ+3EVq7fts+M3v0KnBaoLUben3tg7T5chAuC7UJrjVypprjX NOIBXIRnl8b1Gshb+P+rLQFqPE3HzRQhta7YAS2qmKRqguJ2bMjPN3P8YgLrppQj tCuX5n1tV+/c/t4zV1zyfUF5baKqSg== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:22 2026 by rpki-client