This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa File: 1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa (raw, json) Hash identifier: mNfBmy+QZavj44C/mg50P1ETt/knXxq4fEIaA8TAW1A= Subject key identifier: F9:93:9B:19:76:5B:AF:C4:0C:A8:0C:7A:D5:F5:02:05:DD:E8:10:89 Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900 Certificate serial: 019B78A2696B79770EABD309E10E67EC9B9A Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa Signing time: Thu 01 Jan 2026 08:17:48 +0000 ROA not before: Thu 01 Jan 2026 08:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21077 IP address blocks: 193.24.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:69:6b:79:77:0e:ab:d3:09:e1:0e:67:ec:9b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900 Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9939b19765bafc40ca80c7ad5f50205dde81089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:ef:0e:68:15:31:82:ac:e7:b3:aa:e9:6a: f6:69:41:e1:b3:be:b7:6c:94:44:d9:68:d0:c2:16: b9:78:19:28:43:13:56:17:d9:53:91:6d:59:27:6e: 8c:df:36:24:90:e1:18:e4:23:9b:3b:7b:8e:31:7a: ed:fb:22:82:31:54:d1:40:fc:65:4f:ab:a3:18:c5: 4c:c8:fd:c6:78:c8:84:49:6b:9e:a8:a3:44:5f:5e: b2:71:64:bf:8b:cf:25:73:70:d9:ab:27:ae:8d:72: fa:7a:61:1b:13:8b:0a:fd:20:ca:58:be:10:84:ab: 45:24:22:5b:26:15:72:ab:95:37:11:21:f8:72:ad: 80:d0:32:5c:1b:f6:0a:51:4a:9a:4b:1e:07:4e:ea: 4d:06:2a:d4:9b:99:db:ab:83:d8:48:2a:5f:20:c3: a0:73:d6:30:d2:27:bb:f1:52:12:c5:a6:48:fa:68: 33:b4:67:4b:f5:54:09:44:30:85:0f:af:ce:9f:40: 70:c9:47:6e:4a:1c:b0:69:5a:f3:33:b0:f6:cd:68: 18:5f:93:2e:e6:50:8a:2a:dd:8f:11:9e:69:9d:76: ca:2d:d0:5b:1b:16:12:13:da:74:6a:e1:d8:c2:a1: 9a:3c:79:df:92:8b:67:59:f7:c7:43:f4:c3:12:67: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:93:9B:19:76:5B:AF:C4:0C:A8:0C:7A:D5:F5:02:05:DD:E8:10:89 X509v3 Authority Key Identifier: keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.28.0/24 Signature Algorithm: sha256WithRSAEncryption 39:38:bf:f3:33:6f:a0:eb:5b:83:d6:43:0c:02:c2:7c:7c:18: ec:fa:a9:a6:57:da:71:91:2b:49:d4:5b:ab:72:86:c9:c8:76: e3:4b:29:1b:fe:d4:1a:0e:f4:28:b5:14:d7:03:3c:5f:7c:7a: 94:7f:5e:b9:c3:f2:6c:f8:a6:66:43:0b:f9:6b:39:6b:dd:6b: 14:29:c3:88:4d:f4:5e:52:60:30:e8:4d:b6:92:b0:48:5f:36: dd:96:97:66:b1:7e:a9:4e:55:c0:f5:3b:b7:49:a1:d5:97:b4: 20:29:cc:41:75:73:c6:ea:0e:71:d8:20:68:cb:9c:d3:a7:e9: df:76:09:bc:d6:75:e4:31:3d:bc:24:90:fe:66:1a:e1:0f:72: 12:83:3f:d9:90:e1:9c:e1:99:56:1e:69:86:6e:da:42:0c:a3: 68:59:9b:db:6c:48:6f:37:1b:fd:9b:52:2f:79:47:e0:4f:66: 54:c7:54:7c:39:58:46:c2:f6:77:74:4a:ff:50:2a:e3:c2:e7: e3:d3:11:9a:78:df:9a:3b:03:c4:ae:01:94:16:23:67:26:91: 2c:a9:8e:40:a6:2a:47:45:f9:7d:2a:b5:91:a4:11:81:44:2d: 79:3e:60:62:bf:bf:b4:e2:f5:fd:00:c8:89:97:0c:76:ec:dc: 6a:9a:29:72 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4omlreXcOq9MJ4Q5n7JuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZGEyM2QzYjkzMGQ0YzFmM2FjNzMwNjVkNzFhNjA3YzM1 ZDI5MDAwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTkzOWIxOTc2NWJhZmM0MGNhODBjN2FkNWY1MDIwNWRkZTgxMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZzvDmgVMYKs57Oq6Wr2aUHhs763 bJRE2WjQwha5eBkoQxNWF9lTkW1ZJ26M3zYkkOEY5CObO3uOMXrt+yKCMVTRQPxl T6ujGMVMyP3GeMiESWueqKNEX16ycWS/i88lc3DZqyeujXL6emEbE4sK/SDKWL4Q hKtFJCJbJhVyq5U3ESH4cq2A0DJcG/YKUUqaSx4HTupNBirUm5nbq4PYSCpfIMOg c9Yw0ie78VISxaZI+mgztGdL9VQJRDCFD6/On0BwyUduShywaVrzM7D2zWgYX5Mu 5lCKKt2PEZ5pnXbKLdBbGxYSE9p0auHYwqGaPHnfkotnWffHQ/TDEmd1aQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPmTmxl2W6/EDKgMetX1AgXd6BCJMB8GA1UdIwQY MBaAFOLaI9O5MNTB86xzBl1xpgfDXSkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRvajA3a3cxTUh6ckhNR1hYR21COE5kS1FBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWViYjgtYWU4Ni00Njk0LWE5NzIt ODI3YTBhYzA0YTlkLzEvMS1aT2JHWFpicjhRTXFBeDYxZlVDQmQzb0VJay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTIvZGVlYmI4LWFlODYtNDY5NC1hOTcyLTgyN2EwYWMwNGE5 ZC8xLzR0b2owN2t3MU1IenJITUdYWEdtQjhOZEtRQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEYHDAN BgkqhkiG9w0BAQsFAAOCAQEAOTi/8zNvoOtbg9ZDDALCfHwY7PqpplfacZErSdRb q3KGych240spG/7UGg70KLUU1wM8X3x6lH9eucPybPimZkML+Ws5a91rFCnDiE30 XlJgMOhNtpKwSF823ZaXZrF+qU5VwPU7t0mh1Ze0ICnMQXVzxuoOcdggaMuc06fp 33YJvNZ15DE9vCSQ/mYa4Q9yEoM/2ZDhnOGZVh5phm7aQgyjaFmb22xIbzcb/ZtS L3lH4E9mVMdUfDlYRsL2d3RK/1Aq48Ln49MRmnjfmjsDxK4BlBYjZyaRLKmOQKYq R0X5fSq1kaQRgUQteT5gYr+/tOL1/QDIiZcMduzcapopcg== -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:43 2026 by rpki-client