This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa File: 1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa (raw, json) Hash identifier: yeb95MQ1jWVaDNletMrd1A7+zn+xP4T23RlauaIghYw= Subject key identifier: D4:CE:B4:A9:A2:61:45:2B:94:B9:22:A3:B4:21:22:55:BC:B1:8D:64 Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Certificate serial: 019B78A2A7366940EF54D41D192F612EC079 Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa Signing time: Thu 01 Jan 2026 08:18:04 +0000 ROA not before: Thu 01 Jan 2026 08:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207410 IP address blocks: 185.7.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a7:36:69:40:ef:54:d4:1d:19:2f:61:2e:c0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Validity Not Before: Jan 1 08:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ceb4a9a261452b94b922a3b4212255bcb18d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:9b:86:50:54:b3:a5:00:d8:5e:80:02:2d: 01:c5:22:c8:81:b5:ec:cf:84:2c:f5:da:1d:b6:19: d2:b7:3a:59:24:58:8b:2e:33:21:65:51:79:05:06: 7b:e4:ea:f6:62:3c:c8:d9:3f:ce:fd:31:00:47:c1: 88:75:f5:81:6d:e6:f2:5a:ec:c0:a9:54:15:d1:f5: 20:d4:ea:b2:b5:ed:b5:f7:68:24:71:87:62:3c:fb: df:29:b5:3f:07:9c:46:df:2b:17:b4:b3:fc:55:15: 1d:71:7e:09:af:91:0e:79:bf:09:e8:3a:3a:2c:83: 7c:87:82:1f:af:c4:20:73:e2:53:ba:09:88:fc:b2: 75:f9:6d:37:73:97:58:60:ae:af:bc:3e:ea:9d:00: 81:ba:e8:9c:4c:1b:ab:c9:91:52:15:02:f6:f4:e9: b4:92:e9:50:5a:18:59:3f:57:c0:32:e6:91:02:9e: 41:54:95:93:25:59:43:ee:cc:a3:ca:3b:08:5a:88: af:0e:92:65:80:47:62:0d:26:25:39:0e:57:16:c3: 40:0b:7d:7d:88:a1:d9:0a:ca:1f:f6:59:41:ab:20: e9:a2:17:a7:25:e4:3a:fd:80:13:00:59:85:c8:77: 30:e4:77:2a:45:7f:e6:f9:70:b6:76:3e:f7:06:c8: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CE:B4:A9:A2:61:45:2B:94:B9:22:A3:B4:21:22:55:BC:B1:8D:64 X509v3 Authority Key Identifier: keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/1M60qaJhRSuUuSKjtCEiVbyxjWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.160.0/24 Signature Algorithm: sha256WithRSAEncryption 62:be:22:56:ea:4d:89:03:55:7a:de:f6:d3:3b:ba:98:b7:f0: ff:14:da:6c:24:28:d8:f7:23:4a:47:a4:3b:9b:5a:99:0b:03: 39:1b:92:e8:0c:cd:03:75:e8:7c:e0:48:37:9f:46:24:9c:cc: 2e:e0:7c:30:ba:d8:e1:46:62:1f:5c:8e:a0:fe:0d:20:8a:45: 2f:cf:e7:cc:b5:07:86:be:28:09:f0:68:21:36:57:4a:90:1b: ba:21:2f:5e:cc:5a:60:9c:c6:39:e8:8a:ed:9d:8d:43:17:a8: 35:25:7e:bb:1e:d0:46:fe:3a:d5:0b:1e:4b:ba:18:b5:27:2c: 39:5b:a7:e5:df:27:b9:9f:77:32:17:da:0e:3e:03:fb:dd:0b: 8b:a8:27:0a:af:ca:e3:45:36:51:49:c9:a3:c1:34:97:81:10: 07:49:39:73:1e:ea:ff:96:d0:98:aa:66:eb:b5:ea:95:63:3b: 64:ac:8b:f4:5e:06:6f:a7:ff:46:4e:2c:02:0d:c6:40:bd:93: 2a:15:e6:c9:13:5d:a3:4f:77:73:38:43:0e:1c:c2:fa:42:8e: c4:78:ab:e8:59:86:3e:d3:91:4a:f9:14:5d:3e:d2:f3:ab:15: fe:86:41:03:1d:d0:8c:e2:0f:9d:92:07:14:26:89:76:2e:ed: a4:f5:31:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oqc2aUDvVNQdGS9hLsB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl NzgzYjIwHhcNMjYwMTAxMDgxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGNlYjRhOWEyNjE0NTJiOTRiOTIyYTNiNDIxMjI1NWJjYjE4ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ2bhlBUs6UA2F6AAi0BxSLIgbXs z4Qs9dodthnStzpZJFiLLjMhZVF5BQZ75Or2YjzI2T/O/TEAR8GIdfWBbebyWuzA qVQV0fUg1Oqyte2192gkcYdiPPvfKbU/B5xG3ysXtLP8VRUdcX4Jr5EOeb8J6Do6 LIN8h4Ifr8Qgc+JTugmI/LJ1+W03c5dYYK6vvD7qnQCBuuicTBuryZFSFQL29Om0 kulQWhhZP1fAMuaRAp5BVJWTJVlD7syjyjsIWoivDpJlgEdiDSYlOQ5XFsNAC319 iKHZCsof9llBqyDpohenJeQ6/YATAFmFyHcw5HcqRX/m+XC2dj73Bsi6hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTOtKmiYUUrlLkio7QhIlW8sY1kMB8GA1UdIwQY MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt ZDg1ODUzNjg4YjQzLzEvMU02MHFhSmhSU3VVdVNLanRDRWlWYnl4aldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQegMA0G CSqGSIb3DQEBCwUAA4IBAQBiviJW6k2JA1V63vbTO7qYt/D/FNpsJCjY9yNKR6Q7 m1qZCwM5G5LoDM0Ddeh84Eg3n0YknMwu4HwwutjhRmIfXI6g/g0gikUvz+fMtQeG vigJ8GghNldKkBu6IS9ezFpgnMY56IrtnY1DF6g1JX67HtBG/jrVCx5Luhi1Jyw5 W6fl3ye5n3cyF9oOPgP73QuLqCcKr8rjRTZRScmjwTSXgRAHSTlzHur/ltCYqmbr teqVYztkrIv0XgZvp/9GTiwCDcZAvZMqFebJE12jT3dzOEMOHML6Qo7EeKvoWYY+ 05FK+RRdPtLzqxX+hkEDHdCM4g+dkgcUJol2Lu2k9THZ -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:48 2026 by rpki-client