This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/R1ohmYJEu56Bfs07T3EgDidDkJI.roa File: R1ohmYJEu56Bfs07T3EgDidDkJI.roa (raw, json) Hash identifier: Y1jRS/ZVpA6RpVUuvHtsb5WhLGj0fmu9R54h10BXmEE= Subject key identifier: 47:5A:21:99:82:44:BB:9E:81:7E:CD:3B:4F:71:20:0E:27:43:90:92 Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED265D1B967279B584E1694597BA2E Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/R1ohmYJEu56Bfs07T3EgDidDkJI.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207105 IP address blocks: 194.181.47.0/24 maxlen: 24 2001:a10:185::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:26:5d:1b:96:72:79:b5:84:e1:69:45:97:ba:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=475a21998244bb9e817ecd3b4f71200e27439092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:9f:54:dc:a6:28:47:27:4e:37:38:be:ff: 84:f1:3d:d6:dd:86:03:b7:62:ab:89:f5:8d:9e:b3: 33:f5:28:dd:da:18:3c:51:20:f5:b2:80:33:74:d8: e7:cb:b3:2e:7e:b9:be:fe:00:20:2e:c8:30:b9:0a: c1:4c:15:c4:47:b2:98:9d:a7:e4:5b:6b:00:41:3e: 6f:64:ac:80:11:15:70:0a:cd:3e:3a:e4:9c:4d:48: a6:76:f0:17:22:58:6e:38:32:ee:03:8f:d6:6d:7b: fa:17:38:08:64:de:92:13:d3:0a:44:b1:1d:e5:3e: ce:8a:57:82:46:87:17:18:e5:28:0c:c2:db:e7:84: 6c:16:bc:bf:4b:99:a0:a6:2e:cd:08:b8:1c:2e:ef: 11:f9:8e:e7:73:0d:54:57:ed:96:2e:e0:f9:13:9f: 74:50:cd:d5:48:88:8e:9a:89:f9:17:57:2b:e9:84: fe:45:0a:d6:f9:68:2c:fc:4b:76:7b:75:f2:69:7e: 07:2c:e3:f6:38:09:39:7b:21:79:c7:2f:7a:04:47: 0e:c2:04:2e:0f:f2:a2:70:b7:f8:78:68:71:88:17: 9a:71:0a:21:a9:4f:82:b7:33:5f:c4:36:1c:c8:07: 63:c3:c3:d9:54:0c:20:75:ec:d5:c1:66:10:e7:a2: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:21:99:82:44:BB:9E:81:7E:CD:3B:4F:71:20:0E:27:43:90:92 X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/R1ohmYJEu56Bfs07T3EgDidDkJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.181.47.0/24 IPv6: 2001:a10:185::/48 Signature Algorithm: sha256WithRSAEncryption 70:d5:65:be:29:23:31:74:b5:b9:4e:a5:01:da:90:68:e7:03: f7:ea:9a:1e:4d:22:40:8e:a5:01:b9:53:82:74:d9:b8:49:fb: 5d:0a:a5:6c:35:0e:57:27:ca:32:a5:91:47:01:ae:73:43:58: b0:a3:db:58:15:34:5f:aa:12:a5:dc:9d:13:17:59:61:2e:ec: 50:0b:cc:97:b1:81:29:1b:24:7f:4a:92:94:9f:85:74:d4:ba: 45:9e:5d:00:1d:77:36:5b:07:33:31:dd:53:26:3a:33:6e:fc: b1:1f:f7:37:f1:67:cb:e8:75:19:85:c9:cc:78:91:b0:e4:69: a6:da:14:a5:dc:8b:d8:f0:d6:8f:65:a5:3d:1e:a5:95:2a:77: f4:f4:44:41:22:e9:8a:05:7f:01:77:7d:44:5e:fc:1e:e0:96: 4e:ca:3b:38:af:65:2d:1f:6b:ae:aa:06:45:8b:d7:9d:7f:42: 1e:1d:83:cc:5b:14:9a:0f:e7:e0:ef:56:d1:6d:d4:eb:4f:d0: b5:e4:f3:2a:66:46:4b:25:ce:06:18:29:fc:ba:77:be:90:bd: c5:a2:d6:5d:d7:79:7d:fd:b8:24:61:e8:7f:42:d1:39:a6:34: c0:5d:ef:96:e0:55:5f:42:ac:62:8a:a8:a7:f2:01:1d:54:d4: 03:a1:d3:a1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57SZdG5ZyebWE4WlFl7ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzVhMjE5OTgyNDRiYjllODE3ZWNkM2I0ZjcxMjAwZTI3NDM5MDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoASfVNymKEcnTjc4vv+E8T3W3YYD t2KrifWNnrMz9Sjd2hg8USD1soAzdNjny7Mufrm+/gAgLsgwuQrBTBXER7KYnafk W2sAQT5vZKyAERVwCs0+OuScTUimdvAXIlhuODLuA4/WbXv6FzgIZN6SE9MKRLEd 5T7OileCRocXGOUoDMLb54RsFry/S5mgpi7NCLgcLu8R+Y7ncw1UV+2WLuD5E590 UM3VSIiOmon5F1cr6YT+RQrW+Wgs/Et2e3XyaX4HLOP2OAk5eyF5xy96BEcOwgQu D/KicLf4eGhxiBeacQohqU+CtzNfxDYcyAdjw8PZVAwgdezVwWYQ56LcgwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEdaIZmCRLuegX7NO09xIA4nQ5CSMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvUjFvaG1ZSkV1NTZCZnMwN1QzRWdEaWREa0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwrUvMA8E AgACMAkDBwAgAQoQAYUwDQYJKoZIhvcNAQELBQADggEBAHDVZb4pIzF0tblOpQHa kGjnA/fqmh5NIkCOpQG5U4J02bhJ+10KpWw1DlcnyjKlkUcBrnNDWLCj21gVNF+q EqXcnRMXWWEu7FALzJexgSkbJH9KkpSfhXTUukWeXQAddzZbBzMx3VMmOjNu/LEf 9zfxZ8vodRmFycx4kbDkaabaFKXci9jw1o9lpT0epZUqd/T0REEi6YoFfwF3fURe /B7glk7KOzivZS0fa66qBkWL151/Qh4dg8xbFJoP5+DvVtFt1OtP0LXk8ypmRksl zgYYKfy6d76QvcWi1l3XeX39uCRh6H9C0TmmNMBd75bgVV9CrGKKqKfyAR1U1AOh 06E= -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:04 2026 by rpki-client