This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/1-kjmng8g4ned1jrB9NFdtyqe9mM.roa File: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (raw, json) Hash identifier: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA= Subject key identifier: FA:48:E6:9E:0F:20:E2:77:9D:D6:3A:C1:F4:D1:5D:B7:2A:9E:F6:63 Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Certificate serial: 019B797E600929083D73E900ED692A87C286 Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/1-kjmng8g4ned1jrB9NFdtyqe9mM.roa Signing time: Thu 01 Jan 2026 12:18:03 +0000 ROA not before: Thu 01 Jan 2026 12:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34953 IP address blocks: 194.55.232.0/23 maxlen: 24 2001:67c:bfc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:60:09:29:08:3d:73:e9:00:ed:69:2a:87:c2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829 Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa48e69e0f20e2779dd63ac1f4d15db72a9ef663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:47:c3:6b:a2:3d:dc:ec:29:4c:b6:15:ed: 9b:87:f6:7d:f1:61:2d:42:a4:fc:07:25:f8:0d:35: d4:69:e9:dd:fa:43:9e:6a:c0:08:75:bd:e6:31:69: 97:55:49:75:e5:21:04:13:6d:7e:5c:8a:8b:d0:58: db:c2:25:df:a2:3f:f5:b9:ee:17:24:ab:f7:92:ad: 01:26:f5:cb:40:40:63:d2:57:f8:cb:3f:fe:ef:ff: b2:f6:be:f4:47:26:80:05:fe:4c:42:c8:68:77:13: 55:7b:9c:2a:0b:5a:5a:69:c7:51:86:06:2a:94:37: 3a:3f:d5:2c:d6:fd:fd:94:12:5f:35:64:0d:ae:df: 84:0d:67:af:5a:c9:b7:3f:a7:a4:fc:16:d9:4f:dd: df:99:23:fd:86:c9:b6:22:45:ce:25:1a:d8:81:16: 63:5b:19:83:1b:f9:45:57:ec:ab:bc:09:11:c9:f1: 1e:6a:eb:58:c3:d6:d6:0a:c2:a7:d2:df:e7:09:83: 79:f0:88:64:6d:92:64:e2:f2:03:eb:41:55:96:3b: 3d:62:e8:0b:ef:46:13:09:2a:ce:d5:11:a0:ba:34: 51:ec:d1:24:a5:b7:8d:f3:1e:2d:7c:79:9f:15:01: 47:81:a1:11:f7:3a:99:4b:20:e8:ee:40:5b:73:76: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:48:E6:9E:0F:20:E2:77:9D:D6:3A:C1:F4:D1:5D:B7:2A:9E:F6:63 X509v3 Authority Key Identifier: keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/1-kjmng8g4ned1jrB9NFdtyqe9mM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.232.0/23 IPv6: 2001:67c:bfc::/48 Signature Algorithm: sha256WithRSAEncryption 7a:0a:48:de:00:37:79:42:a6:23:5b:56:8d:98:ee:1b:42:4e: 4e:46:00:a4:5b:62:b1:73:08:25:46:7f:f9:31:88:0d:5b:38: 6c:61:46:89:aa:a8:70:46:32:e0:34:b1:63:5f:11:d5:ca:ca: 36:32:ec:22:96:ae:bd:cc:5b:f8:2b:6e:e3:d3:0e:4f:e7:31: f5:e6:ac:8f:16:1c:9f:86:8c:3b:0d:93:94:fe:30:97:3b:f2: 85:c2:ab:e2:b0:3e:c1:45:c7:51:d4:e3:d0:81:16:05:a5:c0: 8b:42:2a:f3:78:a0:19:0a:99:d6:a9:c2:88:23:20:33:00:f5: dd:2c:78:7a:14:83:a8:6c:05:92:4d:af:37:7d:39:71:d9:9f: 52:5d:74:a8:f0:a3:fd:8e:b5:b5:0e:e5:1b:07:41:e1:fe:8f: 4e:79:2f:9c:5e:25:2e:d1:41:37:c3:88:5c:6c:52:36:3e:31: 8d:b8:ff:39:ac:14:59:5f:b5:67:32:bc:d5:ca:35:81:c0:29: 0f:87:23:c4:be:50:5e:0a:c4:95:7a:94:6f:e6:4f:8a:6c:cb: 95:f6:b5:63:db:ad:67:1c:48:d4:1a:b2:1b:ab:47:5c:93:7f: 45:55:42:93:fb:74:42:8f:05:fa:cc:70:e3:f8:ca:72:72:b8: af:e6:d4:16 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5fmAJKQg9c+kA7Wkqh8KGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMzI0NTU1OTQwYWU1MWFmNWQxZjQyYmQ1YWM3MTU4NjRm YTE4MjkwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTQ4ZTY5ZTBmMjBlMjc3OWRkNjNhYzFmNGQxNWRiNzJhOWVmNjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwShHw2uiPdzsKUy2Fe2bh/Z98WEt QqT8ByX4DTXUaend+kOeasAIdb3mMWmXVUl15SEEE21+XIqL0FjbwiXfoj/1ue4X JKv3kq0BJvXLQEBj0lf4yz/+7/+y9r70RyaABf5MQshodxNVe5wqC1paacdRhgYq lDc6P9Us1v39lBJfNWQNrt+EDWevWsm3P6ek/BbZT93fmSP9hsm2IkXOJRrYgRZj WxmDG/lFV+yrvAkRyfEeautYw9bWCsKn0t/nCYN58IhkbZJk4vID60FVljs9YugL 70YTCSrO1RGgujRR7NEkpbeN8x4tfHmfFQFHgaER9zqZSyDo7kBbc3Zv+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPpI5p4PIOJ3ndY6wfTRXbcqnvZjMB8GA1UdIwQY MBaAFMsyRVWUCuUa9dH0K9WscVhk+hgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXpKRlZaUUs1UnIxMGZRcjFheHhXR1Q2R0NrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDA5ODMtNGRmZC00MTljLWJjMjAt MjAyYzI2ODlkZmEwLzEvMS1ram1uZzhnNG5lZDFqckI5TkZkdHlxZTltTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjQvMzAwOTgzLTRkZmQtNDE5Yy1iYzIwLTIwMmMyNjg5ZGZh MC8xL3l6SkZWWlFLNVJyMTBmUXIxYXh4V0dUNkdDay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAcI36DAP BAIAAjAJAwcAIAEGfAv8MA0GCSqGSIb3DQEBCwUAA4IBAQB6CkjeADd5QqYjW1aN mO4bQk5ORgCkW2KxcwglRn/5MYgNWzhsYUaJqqhwRjLgNLFjXxHVyso2Muwilq69 zFv4K27j0w5P5zH15qyPFhyfhow7DZOU/jCXO/KFwqvisD7BRcdR1OPQgRYFpcCL QirzeKAZCpnWqcKIIyAzAPXdLHh6FIOobAWSTa83fTlx2Z9SXXSo8KP9jrW1DuUb B0Hh/o9OeS+cXiUu0UE3w4hcbFI2PjGNuP85rBRZX7VnMrzVyjWBwCkPhyPEvlBe CsSVepRv5k+KbMuV9rVj261nHEjUGrIbq0dck39FVUKT+3RCjwX6zHDj+Mpycriv 5tQW -----END CERTIFICATE-----Generated at Tue Jan 27 10:18:47 2026 by rpki-client