This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/1-HOgfqgF1c2biBD-AElNfVIIn-8.roa File: 1-HOgfqgF1c2biBD-AElNfVIIn-8.roa (raw, json) Hash identifier: rquQp1RP8UWH3zSrtD5UitItXmlFwyR6n5PUoIakQfM= Subject key identifier: F8:73:A0:7E:A8:05:D5:CD:9B:88:10:FE:00:49:4D:7D:52:08:9F:EF Certificate issuer: /CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Certificate serial: 019B77C6A7743C94FA93F1DA5DE561787079 Authority key identifier: 3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/1-HOgfqgF1c2biBD-AElNfVIIn-8.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34945 IP address blocks: 86.36.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.mft rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a7:74:3c:94:fa:93:f1:da:5d:e5:61:78:70:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4d3fb044eb1c0a11be0602aceef88e5f5d2ddf Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f873a07ea805d5cd9b8810fe00494d7d52089fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:73:64:67:52:1b:27:ec:12:c6:75:3f:32:f4: 2f:d4:9c:98:b8:ef:a1:8a:81:ab:04:04:66:6f:18: 73:a5:e1:38:1f:a8:34:6a:66:4e:a8:74:f7:34:8a: f4:08:ea:86:19:2d:59:b9:12:0a:61:c9:65:b6:04: 6f:e1:c5:fd:63:ee:8b:5b:6f:1c:a3:3c:ec:5e:5d: 05:33:d3:50:58:60:12:fe:7c:d3:b7:73:ea:98:e4: a8:81:4b:8b:88:31:77:45:f9:97:c5:6a:1f:46:0d: 28:83:9b:ba:e0:5e:cd:05:87:a2:ad:bb:5a:48:64: 9c:4f:93:c6:2c:f9:8b:9b:e6:5e:22:8c:d3:10:ae: 5e:da:6f:93:9b:5f:78:7b:2a:52:02:97:f4:44:e4: 15:51:fa:93:ec:4d:f0:f1:12:7d:8e:af:df:16:97: 0a:86:a6:25:26:24:a6:60:63:40:34:1a:aa:50:e5: f0:4a:63:34:12:1b:df:36:5e:10:f7:c6:e5:59:83: 4f:31:d6:8c:49:8e:34:72:2a:75:d6:68:6d:8a:ba: 70:f3:8b:c6:de:50:e3:b8:5f:d3:42:2d:60:86:85: 1f:c2:3e:80:5d:cf:76:2c:be:ad:57:d5:09:a3:c0: 28:81:70:0f:59:c6:bc:a9:cf:d9:25:d5:65:26:44: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:73:A0:7E:A8:05:D5:CD:9B:88:10:FE:00:49:4D:7D:52:08:9F:EF X509v3 Authority Key Identifier: keyid:3C:4D:3F:B0:44:EB:1C:0A:11:BE:06:02:AC:EE:F8:8E:5F:5D:2D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE0_sETrHAoRvgYCrO74jl9dLd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/1-HOgfqgF1c2biBD-AElNfVIIn-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/76e07c-8a32-489d-91d1-b184e3f4b50e/1/PE0_sETrHAoRvgYCrO74jl9dLd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.36.20.0/22 Signature Algorithm: sha256WithRSAEncryption 00:f2:0f:fd:7a:5c:3c:3a:59:bd:25:8b:d9:c3:a8:9f:ae:83: 72:26:ef:7c:4f:1f:7a:27:93:e2:18:62:1a:3f:ad:c7:99:79: 7c:70:72:71:77:06:03:b9:80:e0:b2:42:be:1e:91:e9:e4:e6: 0e:21:c3:17:44:b5:ed:4f:d4:03:78:7e:3f:41:0f:68:61:3b: e9:13:58:94:96:aa:88:e7:57:6e:67:95:70:df:8b:8e:97:c8: 7f:13:d9:7c:50:04:ee:2b:7b:aa:4f:54:30:84:48:5c:de:04: 8d:58:00:e4:94:9d:17:1f:11:e5:e9:9e:b9:0a:95:b9:e4:c5: 58:70:af:ef:d7:ff:c9:d9:a5:73:b1:12:86:b0:be:8e:03:f6: 8b:4d:07:f8:f0:c8:74:9c:51:57:d7:f0:ea:e8:e6:b9:7d:7d: bf:63:9f:cc:06:dc:8d:1e:fa:1c:eb:59:a2:5a:48:91:47:bd: 05:19:6d:11:b1:e8:97:ba:4e:44:e5:88:53:48:2d:81:ee:b2: a7:31:83:a2:77:af:2e:44:f9:80:91:6c:66:31:9f:e1:67:7c: 38:f6:7c:0a:16:5f:e9:c8:45:f1:e9:86:dd:fe:ec:62:ec:7c: 1b:c6:43:df:cd:40:60:82:e2:9f:3a:f1:c0:ee:2c:dd:39:8d: 4d:17:e7:db -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xqd0PJT6k/HaXeVheHB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjNGQzZmIwNDRlYjFjMGExMWJlMDYwMmFjZWVmODhlNWY1 ZDJkZGYwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODczYTA3ZWE4MDVkNWNkOWI4ODEwZmUwMDQ5NGQ3ZDUyMDg5ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XNkZ1IbJ+wSxnU/MvQv1JyYuO+h ioGrBARmbxhzpeE4H6g0amZOqHT3NIr0COqGGS1ZuRIKYclltgRv4cX9Y+6LW28c ozzsXl0FM9NQWGAS/nzTt3PqmOSogUuLiDF3RfmXxWofRg0og5u64F7NBYeirbta SGScT5PGLPmLm+ZeIozTEK5e2m+Tm194eypSApf0ROQVUfqT7E3w8RJ9jq/fFpcK hqYlJiSmYGNANBqqUOXwSmM0EhvfNl4Q98blWYNPMdaMSY40cip11mhtirpw84vG 3lDjuF/TQi1ghoUfwj6AXc92LL6tV9UJo8AogXAPWca8qc/ZJdVlJkQlTwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPhzoH6oBdXNm4gQ/gBJTX1SCJ/vMB8GA1UdIwQY MBaAFDxNP7BE6xwKEb4GAqzu+I5fXS3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEUwX3NFVHJIQW9SdmdZQ3JPNzRqbDlkTGQ4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83NmUwN2MtOGEzMi00ODlkLTkxZDEt YjE4NGUzZjRiNTBlLzEvMS1IT2dmcWdGMWMyYmlCRC1BRWxOZlZJSW4tOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjUvNzZlMDdjLThhMzItNDg5ZC05MWQxLWIxODRlM2Y0YjUw ZS8xL1BFMF9zRVRySEFvUnZnWUNyTzc0amw5ZExkOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlYkFDAN BgkqhkiG9w0BAQsFAAOCAQEAAPIP/XpcPDpZvSWL2cOon66DcibvfE8feieT4hhi Gj+tx5l5fHBycXcGA7mA4LJCvh6R6eTmDiHDF0S17U/UA3h+P0EPaGE76RNYlJaq iOdXbmeVcN+LjpfIfxPZfFAE7it7qk9UMIRIXN4EjVgA5JSdFx8R5emeuQqVueTF WHCv79f/ydmlc7EShrC+jgP2i00H+PDIdJxRV9fw6ujmuX19v2OfzAbcjR76HOtZ olpIkUe9BRltEbHol7pOROWIU0gtge6ypzGDonevLkT5gJFsZjGf4Wd8OPZ8ChZf 6chF8emG3f7sYux8G8ZD381AYILinzrxwO4s3TmNTRfn2w== -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:52 2026 by rpki-client