This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/1Cy83jCl7kBGDNxqyufm78TXI0c.roa File: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (raw, json) Hash identifier: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo= Subject key identifier: D4:2C:BC:DE:30:A5:EE:40:46:0C:DC:6A:CA:E7:E6:EF:C4:D7:23:47 Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837 Certificate serial: 019B7E38F72C59C8DE54AD1F369EAB160BE0 Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/1Cy83jCl7kBGDNxqyufm78TXI0c.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48934 IP address blocks: 185.178.248.0/24 maxlen: 24 185.178.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:2c:59:c8:de:54:ad:1f:36:9e:ab:16:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145ceb292089e0df75719db3e96c509754f94837 Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d42cbcde30a5ee40460cdc6acae7e6efc4d72347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:20:7d:50:7c:02:d6:bf:9f:68:d5:ca:7c: 15:8e:4a:58:f7:db:bc:c0:66:73:df:2f:bf:8c:64: 5a:4c:e8:47:7a:37:68:56:3d:c7:ee:37:c1:f5:e5: ed:7e:29:ae:fa:0a:a0:14:63:6b:93:88:d7:67:1f: fc:86:96:54:bf:78:5f:d6:f0:8f:d1:5d:ff:49:6c: 69:9b:40:77:88:47:c6:3d:40:5c:64:cd:c7:9c:94: d2:1d:53:7b:9a:e5:f6:06:62:7a:86:92:a4:c8:42: a5:dc:5f:8e:f2:61:c0:b8:95:21:b8:77:d9:78:ef: e2:52:7f:58:3c:fb:27:e6:86:15:d5:95:83:74:5a: 44:85:0b:34:ed:f6:36:19:f8:4a:7c:a5:e3:a2:cc: e4:1f:53:5e:44:78:bd:f6:81:53:65:c9:3a:ca:0f: 4b:ba:1f:b0:8d:19:4a:c7:0b:eb:d5:32:26:8d:42: bf:72:53:d8:f2:bf:34:be:47:67:a8:bf:bc:de:61: b9:ff:f6:ea:e3:a6:b5:29:19:de:5f:10:0c:66:d6: d8:40:f5:4e:b0:16:58:e0:1f:b4:c8:8f:8e:33:a3: 95:46:14:c5:c9:34:c4:90:d9:2c:dd:99:f2:8c:be: 68:66:27:6f:c1:58:3e:d2:db:8d:5d:c3:3b:39:77: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2C:BC:DE:30:A5:EE:40:46:0C:DC:6A:CA:E7:E6:EF:C4:D7:23:47 X509v3 Authority Key Identifier: keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/1Cy83jCl7kBGDNxqyufm78TXI0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.248.0/23 Signature Algorithm: sha256WithRSAEncryption 56:d5:e0:84:51:b3:1e:8b:59:e0:58:97:ab:52:a5:fd:4f:8a: c3:27:c2:b0:8a:cb:ef:1b:93:7a:4a:37:30:42:86:21:5e:ac: dc:ad:e3:0e:f3:ac:16:33:44:5a:59:d8:20:89:82:e2:ce:9d: 89:65:8e:d1:87:2b:1e:98:a0:7d:26:16:db:3a:fe:46:19:6d: 72:6b:67:cf:19:76:ac:25:83:d8:25:ba:78:24:3a:fc:6c:e1: 9c:a7:a1:1d:e0:31:3e:7a:10:ec:11:c8:8a:ca:dd:4d:68:7e: 90:ee:96:65:d2:af:f0:7c:de:4d:85:86:02:82:33:90:da:1b: 7d:ab:6a:60:6b:7a:2f:81:c5:31:52:10:66:6d:f9:b6:31:df: 2d:94:48:a8:05:0a:71:29:d3:f0:50:93:b3:07:ae:b0:0a:87: d5:ee:c8:30:8f:62:ff:43:ba:9f:fb:01:ea:32:44:5c:2f:13: 23:ab:a0:15:50:a9:e7:3b:f7:40:64:52:c1:d4:8b:4a:16:a8: 49:34:c1:73:b0:30:fc:86:18:88:48:45:42:04:4b:32:82:20: dd:38:de:36:8e:b9:12:c4:83:39:27:d2:24:bb:32:f2:ec:ed: d9:88:8c:b7:72:06:21:72:9f:35:09:18:33:b9:f9:03:ae:e5: 6c:90:14:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OPcsWcjeVK0fNp6rFgvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NWNlYjI5MjA4OWUwZGY3NTcxOWRiM2U5NmM1MDk3NTRm OTQ4MzcwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDJjYmNkZTMwYTVlZTQwNDYwY2RjNmFjYWU3ZTZlZmM0ZDcyMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YQgfVB8Ata/n2jVynwVjkpY99u8 wGZz3y+/jGRaTOhHejdoVj3H7jfB9eXtfimu+gqgFGNrk4jXZx/8hpZUv3hf1vCP 0V3/SWxpm0B3iEfGPUBcZM3HnJTSHVN7muX2BmJ6hpKkyEKl3F+O8mHAuJUhuHfZ eO/iUn9YPPsn5oYV1ZWDdFpEhQs07fY2GfhKfKXjoszkH1NeRHi99oFTZck6yg9L uh+wjRlKxwvr1TImjUK/clPY8r80vkdnqL+83mG5//bq46a1KRneXxAMZtbYQPVO sBZY4B+0yI+OM6OVRhTFyTTEkNks3ZnyjL5oZidvwVg+0tuNXcM7OXep1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQsvN4wpe5ARgzcasrn5u/E1yNHMB8GA1UdIwQY MBaAFBRc6ykgieDfdXGds+lsUJdU+Ug3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEt MTI3MTljMjYxY2MwLzEvMUN5ODNqQ2w3a0JHRE54cXl1Zm03OFRYSTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jNzFmZGUtM2VmMi00YmY3LTg2NDEtMTI3MTljMjYxY2Mw LzEvRkZ6cktTQ0o0TjkxY1oyejZXeFFsMVQ1U0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubL4MA0G CSqGSIb3DQEBCwUAA4IBAQBW1eCEUbMei1ngWJerUqX9T4rDJ8KwisvvG5N6Sjcw QoYhXqzcreMO86wWM0RaWdggiYLizp2JZY7RhysemKB9JhbbOv5GGW1ya2fPGXas JYPYJbp4JDr8bOGcp6Ed4DE+ehDsEciKyt1NaH6Q7pZl0q/wfN5NhYYCgjOQ2ht9 q2pga3ovgcUxUhBmbfm2Md8tlEioBQpxKdPwUJOzB66wCofV7sgwj2L/Q7qf+wHq MkRcLxMjq6AVUKnnO/dAZFLB1ItKFqhJNMFzsDD8hhiISEVCBEsygiDdON42jrkS xIM5J9IkuzLy7O3ZiIy3cgYhcp81CRgzufkDruVskBSn -----END CERTIFICATE-----Generated at Mon Jan 12 00:14:48 2026 by rpki-client