This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa File: 1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa (raw, json) Hash identifier: kPFIvOSItFULlAv6xE5AfJ3FLqi1ddmAun9gCXBE4M4= Subject key identifier: F8:33:66:97:1D:9F:9A:BC:12:43:BB:91:CA:FF:31:F3:4B:33:41:FF Certificate issuer: /CN=113eaf2521dcbf764242431a781f68d0dd551402 Certificate serial: 019B76EB5C421622ECC283F8EF156594AEF6 Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207187 IP address blocks: 45.130.248.0/22 maxlen: 22 185.163.180.0/22 maxlen: 24 213.194.212.0/22 maxlen: 22 213.194.216.0/21 maxlen: 21 213.194.224.0/19 maxlen: 19 2a0a:1c00::/29 maxlen: 29 2a0e:59c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5c:42:16:22:ec:c2:83:f8:ef:15:65:94:ae:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f83366971d9f9abc1243bb91caff31f34b3341ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:85:cd:3c:d8:ce:82:fb:8a:a4:34:a0:42: a1:61:ef:3a:8a:40:33:b0:a3:31:5f:89:d8:88:60: a1:89:b9:a4:cf:20:ab:d9:5b:4e:9c:4d:43:54:32: 8f:a9:25:9b:cf:8c:51:ce:42:bc:2a:a4:40:d7:e0: 71:02:d3:0f:c5:e8:11:db:d9:8d:21:be:bd:d3:c0: 85:e9:e7:86:7d:61:18:72:1b:c0:00:8f:23:9b:35: c0:60:b8:66:bb:e2:d9:d4:89:18:96:59:e0:ef:9d: c9:a1:66:78:5e:11:4d:c8:bd:69:2b:ce:1d:df:cf: c7:de:25:a5:bf:fb:96:c8:5d:dc:16:f1:40:c5:e2: 32:8d:bf:32:e4:32:20:b2:a9:66:cc:52:55:93:c4: 8e:f7:fb:30:e7:ca:ad:bb:4e:56:55:34:7d:e6:f8: 11:99:c8:58:62:c7:ac:da:8e:ef:f2:20:41:b7:a4: 6a:15:9e:91:b5:3c:30:7e:25:da:3e:fa:61:f2:c9: 11:35:19:67:09:23:72:84:cb:79:a0:f3:2b:44:a5: 93:df:c3:14:d4:ae:76:50:93:12:17:29:e6:bb:9a: 3a:93:ba:27:0f:59:e6:6b:d9:d0:88:54:9c:32:82: 50:58:08:ca:52:db:81:2c:e8:46:04:95:0e:34:a6: a3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:33:66:97:1D:9F:9A:BC:12:43:BB:91:CA:FF:31:F3:4B:33:41:FF X509v3 Authority Key Identifier: keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/1-DNmlx2fmrwSQ7uRyv8x80szQf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.248.0/22 185.163.180.0/22 213.194.212.0-213.194.255.255 IPv6: 2a0a:1c00::/29 2a0e:59c0::/29 Signature Algorithm: sha256WithRSAEncryption ec:47:e5:22:6d:35:82:2c:73:40:a6:53:67:c1:82:1e:5d:25: 76:5c:f5:66:00:1b:3a:e7:e3:9b:61:9a:eb:f5:68:eb:70:4a: dc:a1:62:90:6a:02:4c:94:c4:d4:64:7b:5e:4a:ec:1a:ca:b7: 24:03:00:76:36:92:86:05:e6:48:fd:d7:d4:76:15:64:52:ff: c4:8b:4c:82:34:cc:97:ae:b1:37:06:5c:ba:08:58:38:b7:f5: fd:86:9c:d5:9a:9c:4a:5f:ff:e5:ff:0f:07:63:a1:e2:37:c4: 3f:66:8c:1d:4c:46:3d:ad:28:6b:ec:8e:80:07:8a:de:0d:d0: c8:bb:25:6a:06:2c:c3:4a:fd:73:95:46:59:bb:4d:b9:6a:39: 9f:9c:c9:7c:71:d3:d0:22:dc:8a:82:f8:30:04:d8:d9:6e:8c: 48:29:3a:ea:69:50:2e:14:f3:5a:12:2a:d2:20:47:16:9a:67: 3c:df:6e:15:74:46:59:47:d1:4c:a9:f0:04:7c:fc:4b:07:7d: ec:16:e6:e2:7b:46:c3:73:48:cc:c9:e5:1c:c2:24:da:dd:66: 44:cb:fc:a1:36:fd:31:d8:ab:bb:5c:df:eb:57:f9:1d:e2:ef: b2:c8:c2:9b:69:50:4c:e9:47:ec:4a:67:18:49:35:0b:ef:9a: 14:24:e3:8c -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt261xCFiLswoP47xVllK72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1 NTE0MDIwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODMzNjY5NzFkOWY5YWJjMTI0M2JiOTFjYWZmMzFmMzRiMzM0MWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstaFzTzYzoL7iqQ0oEKhYe86ikAz sKMxX4nYiGChibmkzyCr2VtOnE1DVDKPqSWbz4xRzkK8KqRA1+BxAtMPxegR29mN Ib6908CF6eeGfWEYchvAAI8jmzXAYLhmu+LZ1IkYllng753JoWZ4XhFNyL1pK84d 38/H3iWlv/uWyF3cFvFAxeIyjb8y5DIgsqlmzFJVk8SO9/sw58qtu05WVTR95vgR mchYYses2o7v8iBBt6RqFZ6RtTwwfiXaPvph8skRNRlnCSNyhMt5oPMrRKWT38MU 1K52UJMSFynmu5o6k7onD1nma9nQiFScMoJQWAjKUtuBLOhGBJUONKajVQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFPgzZpcdn5q8EkO7kcr/MfNLM0H/MB8GA1UdIwQY MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct MWE1ZDhmNTA1MThmLzEvMS1ETm1seDJmbXJ3U1E3dVJ5djh4ODBzelFmOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjMvODczNTQ5LTRlODgtNGM1MS04NzE3LTFhNWQ4ZjUwNTE4 Zi8xL0VUNnZKU0hjdjNaQ1FrTWFlQjlvME4xVkZBSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBIBggrBgEFBQcBBwEB/wQ5MDcwHwQCAAEwGQMEAi2C+AME ArmjtDALAwQC1cLUAwMA1cIwFAQCAAIwDgMFAyoKHAADBQMqDlnAMA0GCSqGSIb3 DQEBCwUAA4IBAQDsR+UibTWCLHNAplNnwYIeXSV2XPVmABs65+ObYZrr9WjrcErc oWKQagJMlMTUZHteSuwayrckAwB2NpKGBeZI/dfUdhVkUv/Ei0yCNMyXrrE3Bly6 CFg4t/X9hpzVmpxKX//l/w8HY6HiN8Q/ZowdTEY9rShr7I6AB4reDdDIuyVqBizD Sv1zlUZZu025ajmfnMl8cdPQItyKgvgwBNjZboxIKTrqaVAuFPNaEirSIEcWmmc8 324VdEZZR9FMqfAEfPxLB33sFubie0bDc0jMyeUcwiTa3WZEy/yhNv0x2Ku7XN/r V/kd4u+yyMKbaVBM6UfsSmcYSTUL75oUJOOM -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:57 2026 by rpki-client