This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa File: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (raw, json) Hash identifier: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ= Subject key identifier: F9:37:47:37:DF:05:19:51:44:A2:50:AD:27:3E:43:E1:09:FC:A1:45 Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Certificate serial: 019B7D5CB5D89989D32AEC27CEEEC3FC72B5 Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa Signing time: Fri 02 Jan 2026 06:19:46 +0000 ROA not before: Fri 02 Jan 2026 06:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60056 IP address blocks: 185.57.244.0/24 maxlen: 24 185.57.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b5:d8:99:89:d3:2a:ec:27:ce:ee:c3:fc:72:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9374737df05195144a250ad273e43e109fca145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:6b:5a:45:a9:2d:c5:13:b1:cd:51:30:55: a1:0d:ba:75:89:74:d6:d9:06:62:66:33:99:cc:74: e6:4b:b3:5c:fa:73:0d:55:47:a7:3b:b0:2f:8b:80: bb:82:7f:8c:38:18:63:69:e4:6f:9f:d0:8b:81:b2: 31:65:c2:22:15:4a:0a:41:57:63:77:7e:6a:70:6b: cb:02:86:ef:8f:f4:aa:ac:c6:a4:35:74:74:dc:91: 6a:a9:5c:98:d6:a4:57:29:48:b2:8e:aa:b9:ef:e7: 20:7d:7a:e4:c6:bf:a5:35:2a:ea:48:f1:c1:96:ce: 21:c2:61:6d:5e:c7:c9:49:47:3e:e2:5b:3d:8d:78: 3f:80:5c:ff:3b:a3:f3:cd:d6:41:98:64:da:a6:fb: c5:21:25:04:61:81:41:e2:bf:c1:d0:de:0f:7c:45: 73:4c:67:d7:43:34:d6:60:28:c0:69:bc:c7:25:0a: 2b:a4:44:3c:2e:3e:f9:fc:d9:12:0a:c4:65:e2:0c: b8:79:c5:08:9a:fe:04:ea:bb:a0:96:bf:2e:a4:6d: d1:b5:09:f7:84:f9:71:e6:85:27:6a:72:4b:e6:0b: 84:69:a1:f3:dd:ff:e3:16:08:60:49:01:68:2c:23: f7:8f:ea:33:03:6b:5d:79:40:02:2d:7b:a7:75:1f: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:37:47:37:DF:05:19:51:44:A2:50:AD:27:3E:43:E1:09:FC:A1:45 X509v3 Authority Key Identifier: keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.244.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:94:df:a4:bc:e0:7e:5d:ce:da:b0:8c:9a:0d:ff:b8:87:a1: 91:c1:f6:c8:6a:29:68:e1:13:5b:35:89:0b:b4:9a:d7:f5:da: 8c:54:b6:45:e9:9d:93:c2:24:67:ef:ea:42:45:bb:eb:a2:23: 09:7d:17:b0:bc:e6:2d:e8:90:fc:da:ff:7f:53:c1:e3:98:91: e1:da:81:1c:0e:3f:b5:f3:3a:70:6c:4f:48:36:86:14:95:2f: 77:11:7f:69:73:53:6e:b1:8c:01:6f:55:2b:4d:44:d8:51:ea: 3c:2f:86:15:97:ae:32:40:47:85:b4:c9:f8:d5:0e:72:c0:c4: 0e:2a:8a:9e:e8:f9:ca:f6:98:cc:56:14:a9:c6:d2:00:57:76: 8d:eb:05:45:1a:db:56:19:fe:de:63:51:04:ac:d1:dd:10:f5: e2:14:b1:35:80:0f:d4:11:3b:3e:8a:91:f5:d9:5b:35:7e:54: a3:39:1d:4c:4a:ed:54:51:cc:a7:fe:c7:cd:7c:cf:b4:68:18: 06:89:53:4a:5d:7f:4f:70:36:df:ba:f9:e4:23:19:93:1e:40: 5b:60:4b:d2:1b:79:d6:2b:28:c4:f4:48:5b:54:4d:3d:8b:97: 57:3f:aa:af:b5:96:39:ca:ab:75:ce:7e:0e:17:e8:eb:7f:5d: cc:75:b9:ec -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9XLXYmYnTKuwnzu7D/HK1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZTRhYzYyMjRmZTE5NDQ0MjBkYzNhOThkZDYzYWJhZTRh ZjdlMDAwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTM3NDczN2RmMDUxOTUxNDRhMjUwYWQyNzNlNDNlMTA5ZmNhMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+drWkWpLcUTsc1RMFWhDbp1iXTW 2QZiZjOZzHTmS7Nc+nMNVUenO7Avi4C7gn+MOBhjaeRvn9CLgbIxZcIiFUoKQVdj d35qcGvLAobvj/SqrMakNXR03JFqqVyY1qRXKUiyjqq57+cgfXrkxr+lNSrqSPHB ls4hwmFtXsfJSUc+4ls9jXg/gFz/O6PzzdZBmGTapvvFISUEYYFB4r/B0N4PfEVz TGfXQzTWYCjAabzHJQorpEQ8Lj75/NkSCsRl4gy4ecUImv4E6ruglr8upG3RtQn3 hPlx5oUnanJL5guEaaHz3f/jFghgSQFoLCP3j+ozA2tdeUACLXundR/C+QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPk3RzffBRlRRKJQrSc+Q+EJ/KFFMB8GA1UdIwQY MBaAFOLkrGIk/hlEQg3DqY3WOrrkr34AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVTc1lpVC1HVVJDRGNPcGpkWTZ1dVN2ZmdBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mNmJlMDMtNGY0NC00MzU0LWI5ZWIt YmE0ZDA2ZGYwYmU1LzEvMS1UZEhOOThGR1ZGRW9sQ3RKejVENFFuOG9VVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvZjZiZTAzLTRmNDQtNDM1NC1iOWViLWJhNGQwNmRmMGJl NS8xLzR1U3NZaVQtR1VSQ0RjT3BqZFk2dXVTdmZnQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbk59DAN BgkqhkiG9w0BAQsFAAOCAQEAPpTfpLzgfl3O2rCMmg3/uIehkcH2yGopaOETWzWJ C7Sa1/XajFS2Remdk8IkZ+/qQkW766IjCX0XsLzmLeiQ/Nr/f1PB45iR4dqBHA4/ tfM6cGxPSDaGFJUvdxF/aXNTbrGMAW9VK01E2FHqPC+GFZeuMkBHhbTJ+NUOcsDE DiqKnuj5yvaYzFYUqcbSAFd2jesFRRrbVhn+3mNRBKzR3RD14hSxNYAP1BE7PoqR 9dlbNX5UozkdTErtVFHMp/7HzXzPtGgYBolTSl1/T3A237r55CMZkx5AW2BL0ht5 1isoxPRIW1RNPYuXVz+qr7WWOcqrdc5+Dhfo639dzHW57A== -----END CERTIFICATE-----Generated at Wed Jan 21 15:54:26 2026 by rpki-client