This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/1xVEjhQE9q20oXVNNhsn5zEoY7Q.roa File: 1xVEjhQE9q20oXVNNhsn5zEoY7Q.roa (raw, json) Hash identifier: 8p4K4uwRtctRWOC7mSCiV88ZU41loGPvxjZBmuT5O8M= Subject key identifier: D7:15:44:8E:14:04:F6:AD:B4:A1:75:4D:36:1B:27:E7:31:28:63:B4 Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63 Certificate serial: 019B7834C9581B98984E125B7331F9B3052F Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/1xVEjhQE9q20oXVNNhsn5zEoY7Q.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213528 IP address blocks: 185.72.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c9:58:1b:98:98:4e:12:5b:73:31:f9:b3:05:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d715448e1404f6adb4a1754d361b27e7312863b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:c0:be:27:56:81:f5:da:95:f1:d1:2a:fd: c4:42:2d:56:e6:fc:ec:3f:40:85:6b:14:84:f0:d6: c4:9f:99:e6:8b:94:0d:91:ee:36:17:98:3c:7b:71: 06:36:d8:a9:b4:f5:c5:df:1f:5e:03:4c:20:95:59: 25:5d:cc:53:db:1c:28:a4:16:26:f1:54:a5:27:b1: 73:50:ca:94:ef:c6:98:70:42:3b:87:81:ce:18:2d: 64:6d:f0:00:0d:14:de:dc:61:ee:46:da:77:a5:8a: 47:99:02:fb:27:d7:64:28:07:55:d4:7a:ba:f1:f7: 0a:b0:1d:77:c5:a3:b2:ec:35:20:3f:39:d9:4a:b5: 0a:85:77:69:6b:e0:28:73:d9:63:1b:40:6b:61:11: c8:12:b8:3d:79:8b:81:da:d3:1d:df:b5:a9:ec:63: 28:37:d3:50:34:66:70:81:e0:f8:7a:d8:fa:3c:98: 9f:5c:36:19:ce:48:24:dd:a7:01:9d:13:a9:a9:9f: ab:f2:7b:95:96:62:b9:43:87:54:91:8c:5f:98:f5: ae:28:9c:0e:21:5c:db:30:5a:41:38:a3:58:61:6c: 89:cf:20:a2:91:69:bd:0d:18:11:91:d4:6a:86:ee: 7e:41:57:81:93:0a:6d:79:32:bd:b6:55:71:13:b6: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:15:44:8E:14:04:F6:AD:B4:A1:75:4D:36:1B:27:E7:31:28:63:B4 X509v3 Authority Key Identifier: keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/1xVEjhQE9q20oXVNNhsn5zEoY7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.100.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:06:a4:bb:12:e7:9f:84:71:15:21:5e:d7:a8:bc:a9:8c:7a: c8:c5:7f:eb:10:40:22:0b:f3:dc:95:0f:19:ef:77:35:58:17: b8:e5:67:83:12:04:6b:1a:8e:5d:eb:fa:3d:01:87:0e:d1:c6: 2f:ee:27:2e:d1:ca:e6:23:dc:33:88:7b:e5:6c:56:64:5d:0f: 3d:70:98:87:d8:67:c9:b9:35:c6:35:6b:51:0b:b3:e2:e4:d1: fa:a6:fa:96:24:63:dd:76:5c:4a:d8:d7:b0:cb:c5:47:c1:0b: 20:95:8d:9d:a4:ef:36:c2:1b:93:b7:0a:21:f8:bd:30:7f:2e: 74:b6:42:94:13:cd:7d:10:be:0a:58:9b:45:f2:a6:01:48:87: 72:4e:09:dc:94:5c:37:29:60:1c:ca:68:8a:54:3e:bf:04:9f: 69:c1:ea:32:8b:54:ae:d1:a7:74:f4:f1:e0:35:e2:e9:b9:d5: 9f:fe:f7:0c:e0:8d:a3:95:10:a7:69:81:e1:49:98:42:f4:0c: 4b:c2:16:15:ef:f6:38:93:01:42:48:52:87:1f:33:3c:34:5b: 8e:a3:8c:e0:4f:ef:1a:a7:3a:22:64:c4:a7:2d:f1:4e:a1:3a: f7:43:c2:2f:6f:19:cf:86:ef:92:d8:d5:0b:78:5c:99:68:3d: b9:40:00:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMlYG5iYThJbczH5swUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjU4N2U0ZTA3YWNkZmIzODllMjU5MTYxZGExODZiMzg2 YjRmNjMwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE1NDQ4ZTE0MDRmNmFkYjRhMTc1NGQzNjFiMjdlNzMxMjg2M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraHAvidWgfXalfHRKv3EQi1W5vzs P0CFaxSE8NbEn5nmi5QNke42F5g8e3EGNtiptPXF3x9eA0wglVklXcxT2xwopBYm 8VSlJ7FzUMqU78aYcEI7h4HOGC1kbfAADRTe3GHuRtp3pYpHmQL7J9dkKAdV1Hq6 8fcKsB13xaOy7DUgPznZSrUKhXdpa+Aoc9ljG0BrYRHIErg9eYuB2tMd37Wp7GMo N9NQNGZwgeD4etj6PJifXDYZzkgk3acBnROpqZ+r8nuVlmK5Q4dUkYxfmPWuKJwO IVzbMFpBOKNYYWyJzyCikWm9DRgRkdRqhu5+QVeBkwpteTK9tlVxE7ZTRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNcVRI4UBPattKF1TTYbJ+cxKGO0MB8GA1UdIwQY MBaAFD/1h+Tges37OJ4lkWHaGGs4a09jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEt NTZmYTA2YzQzMTgwLzEvMXhWRWpoUUU5cTIwb1hWTk5oc241ekVvWTdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mOTE3YzItZmM2ZC00NDY4LWExMjEtNTZmYTA2YzQzMTgw LzEvUF9XSDVPQjZ6ZnM0bmlXUllkb1lhemhyVDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUhkMA0G CSqGSIb3DQEBCwUAA4IBAQA8BqS7EuefhHEVIV7XqLypjHrIxX/rEEAiC/PclQ8Z 73c1WBe45WeDEgRrGo5d6/o9AYcO0cYv7icu0crmI9wziHvlbFZkXQ89cJiH2GfJ uTXGNWtRC7Pi5NH6pvqWJGPddlxK2Newy8VHwQsglY2dpO82whuTtwoh+L0wfy50 tkKUE819EL4KWJtF8qYBSIdyTgnclFw3KWAcymiKVD6/BJ9pweoyi1Su0ad09PHg NeLpudWf/vcM4I2jlRCnaYHhSZhC9AxLwhYV7/Y4kwFCSFKHHzM8NFuOo4zgT+8a pzoiZMSnLfFOoTr3Q8IvbxnPhu+S2NULeFyZaD25QADt -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:57 2026 by rpki-client