This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1ELxKjGpmVAiLSQY-ihoRVyEu8E.roa File: 1ELxKjGpmVAiLSQY-ihoRVyEu8E.roa (raw, json) Hash identifier: lzhOFgjxVmmVv6VxRho4Ch24PJ+F7QGwA9hWgzzBpO0= Subject key identifier: D4:42:F1:2A:31:A9:99:50:22:2D:24:18:FA:28:68:45:5C:84:BB:C1 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C5F16B74037831AD5991F2D4D7B3 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1ELxKjGpmVAiLSQY-ihoRVyEu8E.roa Signing time: Fri 02 Jan 2026 16:20:35 +0000 ROA not before: Fri 02 Jan 2026 16:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202562 IP address blocks: 185.186.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c5:f1:6b:74:03:78:31:ad:59:91:f2:d4:d7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d442f12a31a99950222d2418fa2868455c84bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:24:d2:ff:d9:41:20:93:80:bd:f7:1a:ef: 21:07:f4:f5:1f:18:3d:06:c7:d6:85:d1:b9:80:a7: ed:c4:ba:ff:e3:3f:14:30:0e:57:9f:4d:85:37:60: 2c:76:eb:c3:02:1d:42:4d:81:0e:23:8a:05:8b:dc: 0a:d2:21:bd:15:35:9a:6f:55:e3:37:ac:e6:e4:68: 10:ba:7e:62:37:c2:dc:e1:0a:d7:1e:34:25:50:e1: 30:26:2e:39:00:5c:d9:59:88:5a:8c:8c:0c:d7:a2: 42:8a:ce:e8:7b:55:70:d5:07:84:0a:3f:53:f5:cd: 29:0f:19:55:b0:df:6d:77:d9:ff:08:f7:7b:68:eb: 2b:53:9b:70:5a:e9:0c:75:72:8e:e1:c3:a8:7c:d8: 6b:60:a1:fa:41:16:c4:ee:97:30:c6:77:d3:77:0f: 86:a0:b1:cc:3f:1f:2c:9d:49:9b:31:05:d6:db:7e: e2:d6:57:50:c5:7f:d1:15:45:3c:7d:16:d0:29:fc: 0b:aa:71:d4:26:32:40:1d:d6:1f:73:be:df:3c:69: 15:18:80:99:e2:31:64:48:8d:8e:6f:d1:a2:f4:30: da:7b:e8:a8:06:67:b6:8a:d3:bb:0f:97:88:cd:7d: fa:9e:ce:4a:85:6f:08:cf:f8:5b:ca:50:b0:61:d1: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:42:F1:2A:31:A9:99:50:22:2D:24:18:FA:28:68:45:5C:84:BB:C1 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1ELxKjGpmVAiLSQY-ihoRVyEu8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.64.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ab:30:b6:11:66:88:ca:12:d3:67:02:e6:c6:cc:a9:ed:b1: 2a:f9:fd:9c:16:89:07:d7:0a:54:13:7b:b5:36:3f:fc:30:05: a4:b3:ad:c8:30:2f:b6:b6:53:2f:67:17:f2:f0:43:82:7e:fe: 03:dc:a8:f5:ed:ee:ae:01:9d:d4:6f:4f:53:b9:aa:1d:29:ef: 90:d3:f9:e6:15:da:33:09:55:36:77:7f:ee:68:ed:3f:27:67: a9:1e:6e:bc:51:e7:8c:00:66:ef:43:f6:e0:dc:b8:76:e9:2b: 70:a8:f3:cc:d1:5c:39:99:d8:24:ab:1e:09:e4:7d:2f:f8:e5: b5:00:d4:73:d2:61:e8:5c:9f:48:df:ae:ce:4a:90:68:69:82: 96:28:4d:ba:8e:75:09:b3:d4:54:7d:07:cb:c3:74:4b:ab:e6: 3c:e1:6d:2f:4d:7f:11:34:81:50:92:6f:51:d9:3a:2e:c1:67: a7:ec:3d:81:af:14:5d:c5:ba:0f:dd:69:92:63:10:38:fd:df: 8a:42:aa:76:01:48:3d:4a:da:91:b2:ce:df:69:3b:cf:91:f3: b0:3a:00:39:a3:fa:88:e5:bc:03:65:18:51:53:c1:e9:b1:86: 0d:37:93:c2:77:44:4a:e6:c6:9b:5c:d3:5e:2b:d4:84:e3:89: 87:ff:96:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gsXxa3QDeDGtWZHy1NezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQyZjEyYTMxYTk5OTUwMjIyZDI0MThmYTI4Njg0NTVjODRiYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvsk0v/ZQSCTgL33Gu8hB/T1Hxg9 BsfWhdG5gKftxLr/4z8UMA5Xn02FN2AsduvDAh1CTYEOI4oFi9wK0iG9FTWab1Xj N6zm5GgQun5iN8Lc4QrXHjQlUOEwJi45AFzZWYhajIwM16JCis7oe1Vw1QeECj9T 9c0pDxlVsN9td9n/CPd7aOsrU5twWukMdXKO4cOofNhrYKH6QRbE7pcwxnfTdw+G oLHMPx8snUmbMQXW237i1ldQxX/RFUU8fRbQKfwLqnHUJjJAHdYfc77fPGkVGICZ 4jFkSI2Ob9Gi9DDae+ioBme2itO7D5eIzX36ns5KhW8Iz/hbylCwYdGU7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRC8SoxqZlQIi0kGPooaEVchLvBMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvMUVMeEtqR3BtVkFpTFNRWS1paG9SVnlFdThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubpAMA0G CSqGSIb3DQEBCwUAA4IBAQCaqzC2EWaIyhLTZwLmxsyp7bEq+f2cFokH1wpUE3u1 Nj/8MAWks63IMC+2tlMvZxfy8EOCfv4D3Kj17e6uAZ3Ub09TuaodKe+Q0/nmFdoz CVU2d3/uaO0/J2epHm68UeeMAGbvQ/bg3Lh26StwqPPM0Vw5mdgkqx4J5H0v+OW1 ANRz0mHoXJ9I367OSpBoaYKWKE26jnUJs9RUfQfLw3RLq+Y84W0vTX8RNIFQkm9R 2TouwWen7D2BrxRdxboP3WmSYxA4/d+KQqp2AUg9StqRss7faTvPkfOwOgA5o/qI 5bwDZRhRU8HpsYYNN5PCd0RK5sabXNNeK9SE44mH/5YU -----END CERTIFICATE-----Generated at Tue Jan 20 15:20:59 2026 by rpki-client