This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-F_4XEBgc5bYLMwqerX55UgeLkc.roa File: 1-F_4XEBgc5bYLMwqerX55UgeLkc.roa (raw, json) Hash identifier: ln4wxdt1G2Y9O0NkonRn6Preroq147dknMiXwPLjTgw= Subject key identifier: F8:5F:F8:5C:40:60:73:96:D8:2C:CC:2A:7A:B5:F9:E5:48:1E:2E:47 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E9445D9920C9A56ADB89F90B1CB2 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-F_4XEBgc5bYLMwqerX55UgeLkc.roa Signing time: Fri 02 Jan 2026 00:19:32 +0000 ROA not before: Fri 02 Jan 2026 00:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201878 IP address blocks: 185.121.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e9:44:5d:99:20:c9:a5:6a:db:89:f9:0b:1c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f85ff85c40607396d82ccc2a7ab5f9e5481e2e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:02:a9:2c:df:a9:0f:64:21:b1:e8:5c:d5:90: a4:d4:8e:92:4e:d9:18:fa:b1:8e:60:ad:30:96:61: 50:d5:a9:88:75:2a:b3:e2:16:85:4e:43:cb:2d:77: 17:4b:4e:ef:05:a4:d9:b0:12:c7:36:c6:0c:2c:13: 47:8f:e9:56:30:50:0c:38:ca:18:16:8b:76:14:c1: 96:5d:5c:2a:6a:75:59:20:b6:b3:da:fd:21:6d:41: fa:19:47:ef:c4:4a:7c:b5:22:8a:1e:4e:fa:54:62: 16:0d:7b:76:af:0f:8a:5a:a1:ff:b1:0c:3e:81:1e: b4:01:1a:ff:ad:2b:26:a7:aa:4e:bc:22:18:fc:29: 79:03:16:35:1a:f8:40:ac:3e:53:6f:91:55:40:82: 52:6f:5b:a4:cb:2f:2c:1a:8d:de:de:f6:94:07:57: f0:31:e9:d9:8d:54:4d:04:03:dc:71:89:6a:4b:89: 74:a9:ec:b5:d0:5c:94:dd:8f:02:3a:2d:5e:1f:22: fb:5b:a1:a8:97:a6:52:89:f3:94:56:aa:59:fb:83: 5f:17:bc:f5:ac:38:15:7e:1c:1b:41:8e:36:60:72: 28:6c:39:6d:fb:d0:9f:4e:96:d9:a5:40:f1:80:ff: 01:ee:fe:cf:f8:ba:92:c4:11:50:1b:e7:4d:f8:f1: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5F:F8:5C:40:60:73:96:D8:2C:CC:2A:7A:B5:F9:E5:48:1E:2E:47 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1-F_4XEBgc5bYLMwqerX55UgeLkc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.70.0/24 Signature Algorithm: sha256WithRSAEncryption 46:d2:59:b7:98:31:ed:6c:09:82:18:98:eb:84:cb:e7:71:c6: 45:40:ac:34:b9:19:db:61:bb:76:f6:3e:fd:78:51:af:26:07: f8:ed:7c:04:8f:47:d9:8f:9c:86:b0:6c:9e:f0:d1:1f:dd:c8: 82:0f:3b:19:ff:16:96:c2:8e:92:d6:9c:60:75:61:6d:05:6e: 89:c8:92:16:3e:db:5c:88:2c:1c:e8:51:c5:5f:20:87:23:73: cc:a5:64:2b:c4:68:5a:cf:99:1e:31:19:92:90:0a:56:22:1f: 30:3e:82:cf:97:8f:b2:cc:ef:4b:0c:18:f4:88:57:6d:67:79: ae:1b:b4:e0:10:8c:10:5b:e7:69:88:b5:75:f3:49:31:92:e6: fe:0d:a4:a0:56:51:3f:97:3c:fc:a7:6c:44:4b:58:03:f4:18: a3:0b:9e:53:1b:a4:08:ad:ee:a5:06:58:2a:11:de:55:2c:27: d9:5f:0a:44:02:1b:1c:6b:7c:ac:06:a1:86:f6:a1:5e:52:5b: 8f:8a:f3:64:f2:1d:08:60:69:b9:d0:dc:5a:e2:73:b7:19:36: 60:7f:87:e6:7b:d9:3f:09:e1:bb:26:63:52:b1:d0:9a:07:62: 37:b1:03:66:ad:de:25:6e:52:95:dc:90:1c:12:c3:35:81:bd: 8c:6d:1d:04 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EulEXZkgyaVq24n5CxyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODVmZjg1YzQwNjA3Mzk2ZDgyY2NjMmE3YWI1ZjllNTQ4MWUyZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwKpLN+pD2Qhsehc1ZCk1I6STtkY +rGOYK0wlmFQ1amIdSqz4haFTkPLLXcXS07vBaTZsBLHNsYMLBNHj+lWMFAMOMoY Fot2FMGWXVwqanVZILaz2v0hbUH6GUfvxEp8tSKKHk76VGIWDXt2rw+KWqH/sQw+ gR60ARr/rSsmp6pOvCIY/Cl5AxY1GvhArD5Tb5FVQIJSb1ukyy8sGo3e3vaUB1fw MenZjVRNBAPccYlqS4l0qey10FyU3Y8COi1eHyL7W6Gol6ZSifOUVqpZ+4NfF7z1 rDgVfhwbQY42YHIobDlt+9CfTpbZpUDxgP8B7v7P+LqSxBFQG+dN+PEIAwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhf+FxAYHOW2CzMKnq1+eVIHi5HMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvMS1GXzRYRUJnYzViWUxNd3Flclg1NVVnZUxrYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQw Ny8xL1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALl5RjAN BgkqhkiG9w0BAQsFAAOCAQEARtJZt5gx7WwJghiY64TL53HGRUCsNLkZ22G7dvY+ /XhRryYH+O18BI9H2Y+chrBsnvDRH93Igg87Gf8WlsKOktacYHVhbQVuiciSFj7b XIgsHOhRxV8ghyNzzKVkK8RoWs+ZHjEZkpAKViIfMD6Cz5ePsszvSwwY9IhXbWd5 rhu04BCMEFvnaYi1dfNJMZLm/g2koFZRP5c8/KdsREtYA/QYowueUxukCK3upQZY KhHeVSwn2V8KRAIbHGt8rAahhvahXlJbj4rzZPIdCGBpudDcWuJztxk2YH+H5nvZ PwnhuyZjUrHQmgdiN7EDZq3eJW5SldyQHBLDNYG9jG0dBA== -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:12 2026 by rpki-client