This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa File: 1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa (raw, json) Hash identifier: 5J/OI2dEj1+pitq2Ddbn9qs+VNc92Ln8d1C+2m5pm54= Subject key identifier: F8:B0:C0:26:E2:12:41:C4:F0:2B:D2:1C:25:C3:11:0F:BF:95:4B:38 Certificate issuer: /CN=011bf02928cccb516b719fe558884842f19c0877 Certificate serial: 019B7B368A609CAB1C247FEA690A48D24018 Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 194.33.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.mft rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8a:60:9c:ab:1c:24:7f:ea:69:0a:48:d2:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011bf02928cccb516b719fe558884842f19c0877 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b0c026e21241c4f02bd21c25c3110fbf954b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:b9:ef:a7:b6:18:4a:85:43:83:9c:f1:f0: 86:4b:79:c4:57:e0:3d:a0:d5:3a:af:ef:e6:ea:38: b6:3b:96:33:b4:d3:d2:cf:1b:fb:56:9b:45:26:72: a2:0f:5e:1c:72:1a:75:c8:40:ef:e9:c1:fb:ed:e7: 22:3c:ce:64:89:11:09:a6:a7:6f:49:40:30:14:bd: 6d:34:36:87:69:1d:ca:f4:f5:0c:f7:e6:94:02:02: 74:e8:83:66:c5:d4:4f:21:21:3e:0e:f3:53:00:38: 89:69:49:1b:a8:f5:9d:b0:8f:79:2b:82:89:ed:b6: e0:8d:ee:54:6b:7e:8f:04:a2:77:c1:38:38:5d:12: 3f:da:2e:d3:37:10:7f:6e:72:9b:66:fd:3d:91:09: 3a:b7:36:31:1d:1e:09:ee:15:5e:b1:97:b6:b0:9a: d8:72:41:d1:3d:f9:d8:d8:23:f3:f8:50:98:51:14: ca:11:e0:14:9f:62:7a:f6:9d:35:39:5f:e6:15:8c: ed:ef:4d:fa:4b:11:6d:55:bc:cd:0c:a7:ec:19:54: 7f:ce:e7:ae:2d:22:b4:4f:35:04:10:c1:9d:91:d8: 4c:97:a8:13:d4:e5:2b:01:bc:a8:a6:a2:d9:3e:10: f7:d5:fb:81:22:b3:9a:8c:0f:c7:ff:27:53:10:33: eb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B0:C0:26:E2:12:41:C4:F0:2B:D2:1C:25:C3:11:0F:BF:95:4B:38 X509v3 Authority Key Identifier: keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/1-LDAJuISQcTwK9IcJcMRD7-VSzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.183.0/24 Signature Algorithm: sha256WithRSAEncryption a0:5e:cf:03:42:1f:8b:23:46:b6:6d:f5:cb:cb:9a:01:69:b9: a5:be:19:b1:da:f1:0c:21:d0:3d:6f:5e:1d:5d:ac:cf:7b:e6: 5f:12:2f:8b:91:60:7e:e6:30:bb:d7:ec:4d:6d:68:b4:b1:68: 4a:24:a6:17:17:04:6f:cd:b2:4c:95:d0:02:4b:6c:e9:73:ff: 56:97:24:c5:1d:f8:54:14:91:54:26:b1:8b:7a:18:0b:21:85: 2c:4e:7f:a2:15:94:b3:ff:0d:3e:ac:92:c7:06:e4:59:ce:29: 87:8a:7b:d4:f3:6d:61:ea:7c:56:23:3d:ad:63:61:92:ea:ae: c0:4f:26:9b:da:28:ab:7e:24:48:a0:ee:95:11:7f:6d:ea:83: 4d:21:d6:fd:f9:a5:c5:84:3b:1f:cf:56:11:65:6c:c5:9c:44: d5:1d:fe:3a:b4:5b:f8:44:87:9c:e4:bf:14:e3:52:b6:1e:7b: 02:d0:82:d6:96:06:8e:34:35:6d:60:38:78:b4:1d:13:9c:1b: 3b:da:36:7d:94:9d:7a:19:dc:c8:44:76:6d:e5:a1:52:44:f2: 6b:68:24:e6:e1:8b:7a:a9:d2:1c:1e:51:02:d9:62:9a:c0:cb: 40:4a:72:9e:2c:a2:80:2f:7a:91:a1:a0:44:ab:e6:bc:e6:75: fe:cd:96:ca -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NopgnKscJH/qaQpI0kAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMWJmMDI5MjhjY2NiNTE2YjcxOWZlNTU4ODg0ODQyZjE5 YzA4NzcwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIwYzAyNmUyMTI0MWM0ZjAyYmQyMWMyNWMzMTEwZmJmOTU0YjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8e576e2GEqFQ4Oc8fCGS3nEV+A9 oNU6r+/m6ji2O5YztNPSzxv7VptFJnKiD14cchp1yEDv6cH77eciPM5kiREJpqdv SUAwFL1tNDaHaR3K9PUM9+aUAgJ06INmxdRPISE+DvNTADiJaUkbqPWdsI95K4KJ 7bbgje5Ua36PBKJ3wTg4XRI/2i7TNxB/bnKbZv09kQk6tzYxHR4J7hVesZe2sJrY ckHRPfnY2CPz+FCYURTKEeAUn2J69p01OV/mFYzt7036SxFtVbzNDKfsGVR/zueu LSK0TzUEEMGdkdhMl6gT1OUrAbyopqLZPhD31fuBIrOajA/H/ydTEDPrSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPiwwCbiEkHE8CvSHCXDEQ+/lUs4MB8GA1UdIwQY MBaAFAEb8CkozMtRa3Gf5ViISELxnAh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVJ2d0tTak15MUZyY1pfbFdJaElRdkdjQ0hjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZTA1YjQtMDg3My00ZjFmLWJhMWYt N2U5YzBiMDIyNDhlLzEvMS1MREFKdUlTUWNUd0s5SWNKY01SRDctVlN6Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWEvZmUwNWI0LTA4NzMtNGYxZi1iYTFmLTdlOWMwYjAyMjQ4 ZS8xL0FSdndLU2pNeTFGcmNaX2xXSWhJUXZHY0NIYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIhtzAN BgkqhkiG9w0BAQsFAAOCAQEAoF7PA0IfiyNGtm31y8uaAWm5pb4ZsdrxDCHQPW9e HV2sz3vmXxIvi5FgfuYwu9fsTW1otLFoSiSmFxcEb82yTJXQAkts6XP/VpckxR34 VBSRVCaxi3oYCyGFLE5/ohWUs/8NPqySxwbkWc4ph4p71PNtYep8ViM9rWNhkuqu wE8mm9ooq34kSKDulRF/beqDTSHW/fmlxYQ7H89WEWVsxZxE1R3+OrRb+ESHnOS/ FONSth57AtCC1pYGjjQ1bWA4eLQdE5wbO9o2fZSdehncyER2beWhUkTya2gk5uGL eqnSHB5RAtlimsDLQEpyniyigC96kaGgRKvmvOZ1/s2Wyg== -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:06 2026 by rpki-client