This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa File: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (raw, json) Hash identifier: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y= Subject key identifier: F8:D6:29:F8:03:43:24:65:A7:DB:30:5A:EA:D6:71:C5:81:9D:0D:F0 Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Certificate serial: 019B78A30FD6493227FCC7FFF62C3DD784C0 Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58291 IP address blocks: 5.39.184.0/21 maxlen: 21 185.79.152.0/22 maxlen: 22 185.140.184.0/22 maxlen: 22 2a02:f640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0f:d6:49:32:27:fc:c7:ff:f6:2c:3d:d7:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8 Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8d629f803432465a7db305aead671c5819d0df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:d0:91:e7:8c:b2:f1:fa:92:1b:69:42:37: 9e:60:74:0e:32:4f:b0:26:f7:86:a0:14:8f:38:ad: 06:6f:0a:68:07:2f:61:ee:77:0d:b7:ed:3f:90:90: 79:3f:12:a7:ca:9c:8c:81:ca:8a:a2:ea:98:7c:96: 9e:9d:dd:79:e8:29:c1:8c:9a:33:3e:6f:98:d4:1f: eb:ed:d0:10:14:a6:46:df:8d:a1:13:68:5b:05:ad: 5f:13:b9:0c:8b:bd:e0:7a:d0:52:1e:be:95:1a:d1: 26:3f:ae:69:a6:b4:12:b0:8f:aa:c5:29:61:50:08: 6a:74:06:89:9b:1c:1e:c6:10:ba:7d:3a:ac:ea:cf: ca:12:3c:f8:a3:61:f1:53:04:a7:fa:3d:8c:7b:ba: 89:52:e3:a2:cd:a2:70:2c:aa:7b:82:19:f5:cf:96: 6a:27:42:0c:71:e8:ea:7b:94:a8:34:12:df:13:03: d3:cd:b9:48:2c:12:34:35:c4:72:44:52:a7:94:52: 38:e3:d4:af:e3:72:d2:83:59:56:ac:cd:2f:2c:11: 3c:ac:e3:49:c0:0b:85:47:0d:ba:c4:03:7a:b9:88: 71:47:77:97:aa:2c:9d:5f:4b:a1:12:0e:25:6a:e0: f9:19:bb:b6:77:d3:a2:40:52:09:5c:f0:06:b0:69: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D6:29:F8:03:43:24:65:A7:DB:30:5A:EA:D6:71:C5:81:9D:0D:F0 X509v3 Authority Key Identifier: keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.39.184.0/21 185.79.152.0/22 185.140.184.0/22 IPv6: 2a02:f640::/29 Signature Algorithm: sha256WithRSAEncryption 71:6e:3a:8c:c5:24:99:a4:f9:57:68:d0:c9:e2:83:01:99:24: b6:ab:9f:8a:c9:e6:60:39:65:c1:3a:65:07:37:8d:1c:96:e6: 98:91:92:e4:91:29:4e:58:36:93:eb:2b:ba:b1:61:4e:77:0c: e3:8d:4f:b6:68:26:a4:06:de:79:56:74:fa:19:b3:5a:78:da: 80:a4:2e:3c:e9:91:32:45:b7:5a:e9:fb:79:e7:86:a1:a5:dc: 9d:f6:1e:0f:1b:ff:2c:be:25:0f:03:79:f2:85:34:f8:d0:d1: d1:43:44:ac:ea:fa:36:c6:ef:8f:b9:97:3d:0b:51:e3:94:ad: 5e:6f:1e:8a:d3:eb:8d:54:ad:bd:a0:52:78:67:10:87:e6:15: 55:47:9c:7d:9c:56:62:9f:e1:f6:19:66:4b:17:ea:e4:20:25: 51:fa:46:d7:12:c6:7a:0a:14:11:a5:87:dc:7a:14:dd:01:4c: 16:38:29:b7:a5:b7:42:d8:19:60:e9:90:bf:92:28:39:24:bd: 8b:de:f4:c6:40:eb:80:76:1e:72:51:1b:98:d4:76:2f:2f:08: 45:32:96:b1:8a:29:97:38:76:19:9a:a6:a5:bd:5b:b8:7b:93: 30:66:04:ad:f9:49:c5:cd:ab:07:74:7e:25:c6:9d:36:90:52: 63:d3:e2:e5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt4ow/WSTIn/Mf/9iw914TAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4 ZDhlYzgwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGQ2MjlmODAzNDMyNDY1YTdkYjMwNWFlYWQ2NzFjNTgxOWQwZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiozQkeeMsvH6khtpQjeeYHQOMk+w JveGoBSPOK0GbwpoBy9h7ncNt+0/kJB5PxKnypyMgcqKouqYfJaend156CnBjJoz Pm+Y1B/r7dAQFKZG342hE2hbBa1fE7kMi73getBSHr6VGtEmP65pprQSsI+qxSlh UAhqdAaJmxwexhC6fTqs6s/KEjz4o2HxUwSn+j2Me7qJUuOizaJwLKp7ghn1z5Zq J0IMcejqe5SoNBLfEwPTzblILBI0NcRyRFKnlFI449Sv43LSg1lWrM0vLBE8rONJ wAuFRw26xAN6uYhxR3eXqiydX0uhEg4lauD5Gbu2d9OiQFIJXPAGsGl1JwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPjWKfgDQyRlp9swWurWccWBnQ3wMB8GA1UdIwQY MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt ZTQxMWI0M2RjNjhhLzEvMS1OWXAtQU5ESkdXbjJ6QmE2dFp4eFlHZERmQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTQvMWQ4ZmNhLWI0NjItNDMxMy1hNTIzLWU0MTFiNDNkYzY4 YS8xL1VfT2RMeURpMmJUNWJMMFROLW95MmxHTmpzZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAwUnuAME ArlPmAMEArmMuDANBAIAAjAHAwUDKgL2QDANBgkqhkiG9w0BAQsFAAOCAQEAcW46 jMUkmaT5V2jQyeKDAZkktqufisnmYDllwTplBzeNHJbmmJGS5JEpTlg2k+srurFh TncM441PtmgmpAbeeVZ0+hmzWnjagKQuPOmRMkW3Wun7eeeGoaXcnfYeDxv/LL4l DwN58oU0+NDR0UNErOr6Nsbvj7mXPQtR45StXm8eitPrjVStvaBSeGcQh+YVVUec fZxWYp/h9hlmSxfq5CAlUfpG1xLGegoUEaWH3HoU3QFMFjgpt6W3QtgZYOmQv5Io OSS9i970xkDrgHYeclEbmNR2Ly8IRTKWsYoplzh2GZqmpb1buHuTMGYErflJxc2r B3R+JcadNpBSY9Pi5Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:37 2026 by rpki-client