This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-praD3oIRrWfUY7n_3FQXzmmGAM.roa File: 1-praD3oIRrWfUY7n_3FQXzmmGAM.roa (raw, json) Hash identifier: HzhgO/15eAb6Wfux6taYc8CfVlenzKOtgWFjYWiUPs8= Subject key identifier: FA:9A:DA:0F:7A:08:46:B5:9F:51:8E:E7:FF:71:50:5F:39:A6:18:03 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7BD21090E9C1DCEA68CDBC972EDDF Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-praD3oIRrWfUY7n_3FQXzmmGAM.roa Signing time: Thu 01 Jan 2026 18:17:48 +0000 ROA not before: Thu 01 Jan 2026 18:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 85.254.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bd:21:09:0e:9c:1d:ce:a6:8c:db:c9:72:ed:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9ada0f7a0846b59f518ee7ff71505f39a61803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:ed:6c:25:ad:31:ab:aa:a2:9d:33:c1:71: 03:ce:1e:b5:31:0b:2a:61:63:89:32:2b:e5:dd:55: ea:f9:34:6f:d8:6c:10:ce:64:b0:22:a8:18:1e:30: eb:dd:70:bc:c6:74:f3:e0:11:72:97:66:eb:60:6f: 5d:93:0c:16:1a:e7:44:6a:4e:60:7c:81:00:1c:de: 59:bb:78:02:66:27:3a:00:63:a3:66:6d:a0:65:00: b4:f8:b2:80:b7:4d:da:21:e0:2c:55:57:cd:f9:53: 9c:e3:c6:2c:25:28:47:0a:ab:15:97:4d:9c:1f:c3: 52:4e:83:6a:55:be:83:c8:3c:d3:61:1a:63:79:80: 8f:d6:d5:97:ee:7f:1d:ec:61:2a:09:8f:ee:70:0d: c8:b4:03:e7:0e:62:71:c9:8d:38:ab:e3:f0:86:6b: c7:9d:ca:98:91:b2:99:02:b6:51:e2:bd:89:13:97: eb:0e:eb:05:1d:04:8a:08:b1:bf:0c:28:1e:74:bc: 52:4e:54:e6:01:c2:91:56:42:88:d9:88:78:c9:c5: 52:05:31:4f:ee:ef:05:ba:4b:f0:06:99:f9:41:4c: 00:ba:bb:ca:c2:41:98:28:93:01:9d:e8:69:26:35: bc:3b:85:e2:a4:22:e2:17:2d:e1:de:cd:54:15:00: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:DA:0F:7A:08:46:B5:9F:51:8E:E7:FF:71:50:5F:39:A6:18:03 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-praD3oIRrWfUY7n_3FQXzmmGAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.254.64.0/23 Signature Algorithm: sha256WithRSAEncryption 83:6b:1e:c7:97:d0:ca:0d:0f:f0:ac:e3:41:ab:4b:9a:44:13: e1:11:0b:f8:33:9f:61:f2:8a:52:78:de:00:5a:73:df:3a:45: 97:70:23:f4:8f:0a:62:45:e4:38:5e:4a:fc:1c:bd:ac:18:fb: d8:72:00:37:f4:bd:4f:e7:b7:dd:43:13:93:cc:0d:3f:d1:1d: e1:b5:49:4d:1e:c4:53:c7:08:a8:59:27:97:24:3c:6d:ed:6f: 1a:8b:dc:df:63:9a:44:5f:66:eb:f8:b9:7b:9d:9d:2f:38:67: 8a:c6:b8:f9:d0:91:75:46:db:35:29:91:7d:5c:9c:a0:ad:4c: cc:de:8d:a1:62:13:c8:cb:1c:c4:11:5c:bc:7d:ef:d8:83:d5: 64:d1:27:22:23:2c:40:e5:bf:ec:bc:d9:37:f2:bd:cb:55:9a: b5:ee:98:3a:e4:df:97:3e:af:bb:b1:f4:19:33:3d:94:61:37: 7b:c6:c4:e4:68:15:cc:eb:87:9c:b0:77:34:46:b0:ef:39:b8: c1:b6:9d:b5:dc:f4:c1:05:96:f0:83:8b:1a:1b:5a:4b:f9:44: 95:c9:de:db:0b:24:0e:e0:ee:16:9a:c9:98:98:70:11:df:d9: f2:da:a4:c7:ee:5e:7e:42:2d:95:91:ca:24:5c:8d:c0:67:ec: f9:bd:6d:f0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6x70hCQ6cHc6mjNvJcu3fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTlhZGEwZjdhMDg0NmI1OWY1MThlZTdmZjcxNTA1ZjM5YTYxODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ztbCWtMauqop0zwXEDzh61MQsq YWOJMivl3VXq+TRv2GwQzmSwIqgYHjDr3XC8xnTz4BFyl2brYG9dkwwWGudEak5g fIEAHN5Zu3gCZic6AGOjZm2gZQC0+LKAt03aIeAsVVfN+VOc48YsJShHCqsVl02c H8NSToNqVb6DyDzTYRpjeYCP1tWX7n8d7GEqCY/ucA3ItAPnDmJxyY04q+PwhmvH ncqYkbKZArZR4r2JE5frDusFHQSKCLG/DCgedLxSTlTmAcKRVkKI2Yh4ycVSBTFP 7u8FukvwBpn5QUwAurvKwkGYKJMBnehpJjW8O4XipCLiFy3h3s1UFQBuvQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqa2g96CEa1n1GO5/9xUF85phgDMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvMS1wcmFEM29JUnJXZlVZN25fM0ZRWHptbUdBTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2 Zi8xL3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVX+QDAN BgkqhkiG9w0BAQsFAAOCAQEAg2sex5fQyg0P8KzjQatLmkQT4REL+DOfYfKKUnje AFpz3zpFl3Aj9I8KYkXkOF5K/By9rBj72HIAN/S9T+e33UMTk8wNP9Ed4bVJTR7E U8cIqFknlyQ8be1vGovc32OaRF9m6/i5e52dLzhnisa4+dCRdUbbNSmRfVycoK1M zN6NoWITyMscxBFcvH3v2IPVZNEnIiMsQOW/7LzZN/K9y1Wate6YOuTflz6vu7H0 GTM9lGE3e8bE5GgVzOuHnLB3NEaw7zm4wbadtdz0wQWW8IOLGhtaS/lElcne2wsk DuDuFprJmJhwEd/Z8tqkx+5efkItlZHKJFyNwGfs+b1t8A== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:44 2026 by rpki-client