This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/1--BuZyc8pfUknFLYM1EBmYwu6nU.roa File: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (raw, json) Hash identifier: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk= Subject key identifier: FB:E0:6E:67:27:3C:A5:F5:24:9C:52:D8:33:51:01:99:8C:2E:EA:75 Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019B7E38B55D601041D94336D98E67AB944B Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/1--BuZyc8pfUknFLYM1EBmYwu6nU.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 185.236.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b5:5d:60:10:41:d9:43:36:d9:8e:67:ab:94:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbe06e67273ca5f5249c52d8335101998c2eea75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b5:a3:a4:cc:25:38:50:6b:ae:09:18:cf:2d: 59:c0:71:44:c2:71:a0:8f:a0:53:fd:74:78:58:5e: 23:b6:66:64:0f:a3:6d:cc:bc:39:de:fb:10:ab:85: 49:71:2d:a6:08:a9:d8:73:50:9b:20:c6:24:22:2a: 67:01:fa:7f:69:a9:46:8c:33:cf:8c:08:f1:f6:de: 3f:73:5c:a3:32:96:06:08:90:63:ed:91:a7:d9:cc: 51:50:4a:45:06:ea:39:92:bd:d7:8f:24:3f:dc:48: 50:f3:b3:0c:a5:e9:de:51:c4:eb:ea:e8:ec:b4:54: 5f:32:58:fa:92:73:d2:de:82:a9:06:8c:73:12:ae: d4:67:c0:d0:f5:a1:bd:da:24:83:b9:e3:b0:30:e1: 16:a4:2c:10:5a:02:13:89:3d:f9:ec:e1:78:9b:b4: a3:13:c4:75:b0:c5:b6:89:2a:e5:5d:2b:94:5e:97: 86:8f:59:b0:d2:3d:af:d9:55:e0:19:08:2d:b4:ff: fe:6f:f3:98:b6:6d:02:65:1d:a8:7b:b9:0d:0a:81: f1:42:91:8b:cc:a1:d2:65:1d:f5:a7:a5:17:77:e6: de:90:8e:68:d8:70:c2:88:9a:ba:fb:af:9d:9d:df: 16:ed:de:7e:46:4a:51:29:e2:47:fe:e2:2e:83:96: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E0:6E:67:27:3C:A5:F5:24:9C:52:D8:33:51:01:99:8C:2E:EA:75 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/1--BuZyc8pfUknFLYM1EBmYwu6nU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.92.0/22 Signature Algorithm: sha256WithRSAEncryption 91:91:27:90:c9:f8:f3:70:ce:3c:69:67:d8:6c:d1:06:d2:e2: 1c:8d:30:db:46:4f:1f:84:74:a6:ad:d1:3e:cb:49:29:65:b3: 9e:d5:9d:19:81:12:77:da:8d:a2:eb:c8:c0:f8:94:84:a1:7b: d2:0b:43:bc:8c:79:f8:2f:b5:21:d6:37:3e:59:d4:1d:79:2d: a9:49:64:0e:76:cc:4d:65:c0:22:50:e2:17:2d:f9:6a:73:aa: dc:aa:0a:4c:bb:80:44:e2:57:bf:13:f6:08:90:fd:21:34:3b: 54:d8:2a:c1:7b:d1:36:89:ad:2d:d4:43:1c:f9:36:15:84:a7: f8:12:e8:e2:6d:e9:9b:ac:76:8a:16:bb:6e:d2:47:b3:80:86: 39:bc:8b:e6:d8:3a:26:12:4c:76:6e:c7:8b:9d:71:3d:01:37: 05:65:ce:93:aa:ef:16:8f:b8:91:d7:d3:81:a2:49:af:18:07: c0:a2:e9:60:2c:4d:80:4d:87:89:9b:1b:05:b5:78:e4:51:38: 95:c0:5b:33:31:12:d9:aa:c3:65:f9:53:b6:c8:04:35:aa:5e: 32:46:76:8e:83:d5:46:7c:de:51:1e:bd:fd:7b:15:62:4b:48: 10:d1:7c:5f:c9:5e:2f:43:f3:21:08:1e:94:77:6f:5d:f2:fc: 90:21:83:b9 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+OLVdYBBB2UM22Y5nq5RLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmUwNmU2NzI3M2NhNWY1MjQ5YzUyZDgzMzUxMDE5OThjMmVlYTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rWjpMwlOFBrrgkYzy1ZwHFEwnGg j6BT/XR4WF4jtmZkD6NtzLw53vsQq4VJcS2mCKnYc1CbIMYkIipnAfp/aalGjDPP jAjx9t4/c1yjMpYGCJBj7ZGn2cxRUEpFBuo5kr3XjyQ/3EhQ87MMpeneUcTr6ujs tFRfMlj6knPS3oKpBoxzEq7UZ8DQ9aG92iSDueOwMOEWpCwQWgITiT357OF4m7Sj E8R1sMW2iSrlXSuUXpeGj1mw0j2v2VXgGQgttP/+b/OYtm0CZR2oe7kNCoHxQpGL zKHSZR31p6UXd+bekI5o2HDCiJq6+6+dnd8W7d5+RkpRKeJH/uIug5YzHQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvgbmcnPKX1JJxS2DNRAZmMLup1MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvMS0tQnVaeWM4cGZVa25GTFlNMUVCbVl3dTZuVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWEvNGYzMzZiLTRhNzktNDQyNS05NTU2LWJlNDVmMGQyYWJi Yi8xL25MSmM1VkRrMmIyZ1c5WFVYSXRybzNRd3U3by5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnsXDAN BgkqhkiG9w0BAQsFAAOCAQEAkZEnkMn483DOPGln2GzRBtLiHI0w20ZPH4R0pq3R PstJKWWzntWdGYESd9qNouvIwPiUhKF70gtDvIx5+C+1IdY3PlnUHXktqUlkDnbM TWXAIlDiFy35anOq3KoKTLuAROJXvxP2CJD9ITQ7VNgqwXvRNomtLdRDHPk2FYSn +BLo4m3pm6x2iha7btJHs4CGObyL5tg6JhJMdm7Hi51xPQE3BWXOk6rvFo+4kdfT gaJJrxgHwKLpYCxNgE2HiZsbBbV45FE4lcBbMzES2arDZflTtsgENapeMkZ2joPV RnzeUR69/XsVYktIENF8X8leL0PzIQgelHdvXfL8kCGDuQ== -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:03 2026 by rpki-client