This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1-s2FwRU1cILMfQySWQfwcbHn_7o.roa File: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (raw, json) Hash identifier: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0= Subject key identifier: FA:CD:85:C1:15:35:70:82:CC:7D:0C:92:59:07:F0:71:B1:E7:FF:BA Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Certificate serial: 019B7B36323F41AFFAB1CDA369738A61884D Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1-s2FwRU1cILMfQySWQfwcbHn_7o.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 195.210.108.0/24 maxlen: 24 195.210.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:32:3f:41:af:fa:b1:cd:a3:69:73:8a:61:88:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=facd85c115357082cc7d0c925907f071b1e7ffba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:8c:f0:f7:bd:9c:6c:87:28:f1:b5:ea:6d: 56:eb:2f:47:3e:c5:a2:ef:19:ea:7e:44:ba:f6:98: 96:3f:25:b4:7e:de:7c:d8:9c:e3:26:2a:02:20:0f: 47:cd:2a:1b:bc:aa:a4:b4:ee:7b:0e:47:34:02:04: 74:77:75:48:e9:f8:34:c7:a7:fa:62:ba:81:32:dd: 82:4d:54:de:8b:72:1a:65:92:1b:3c:67:94:1c:cf: 0e:eb:d0:18:2c:e5:f9:e1:eb:61:6d:98:89:5c:21: 74:98:c4:6b:53:8c:61:a5:3d:51:00:ac:7b:47:23: 3d:2f:43:60:45:d1:e7:1a:ef:92:d0:b2:cd:49:6a: 0e:48:04:d4:72:e0:66:10:a2:c7:46:e2:7d:99:6f: 4a:f5:4a:98:a5:b7:52:e4:58:0c:35:5d:78:74:60: 8f:f9:72:53:c7:ca:89:ca:5c:a1:19:a1:1a:82:59: a6:89:87:b6:8b:17:4f:04:cb:62:22:fd:93:8b:31: 4b:b7:e1:fa:c5:bb:75:42:e4:42:61:69:2d:86:b6: 73:61:4b:b1:86:af:b3:60:39:91:02:25:18:97:9d: ce:5b:1c:ec:51:a4:0d:8a:c2:47:53:e2:73:1d:7d: 76:24:fa:87:02:c7:dc:97:d5:5b:08:be:7f:41:a0: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CD:85:C1:15:35:70:82:CC:7D:0C:92:59:07:F0:71:B1:E7:FF:BA X509v3 Authority Key Identifier: keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/1-s2FwRU1cILMfQySWQfwcbHn_7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.108.0/23 Signature Algorithm: sha256WithRSAEncryption 22:93:2e:71:a8:46:80:81:04:e7:4e:60:d1:ff:8d:24:09:51: 8a:01:a9:b9:74:78:e5:49:0a:e8:eb:f6:cd:ee:65:a0:2f:18: 32:59:61:1c:a0:e7:b6:f8:d2:86:83:07:11:1d:62:af:42:ba: 0d:c8:5c:8c:7a:0e:98:9a:b2:27:d0:9a:5b:a9:ea:ef:b2:4a: f1:87:01:0a:8d:a6:9f:4b:a3:6f:17:16:7a:24:9d:c1:de:39: 17:23:e9:a9:34:a0:aa:e0:85:12:76:ec:df:af:7e:5b:28:7a: 23:b7:3c:d0:6a:bf:d4:30:5a:06:5c:9d:e7:29:91:88:6f:2d: 98:fb:0a:5d:9d:6f:1d:70:15:f6:4f:15:79:35:a3:4a:73:f1: 7c:b0:81:f6:28:27:77:4e:6b:68:ab:a1:7d:f2:64:72:cb:c1: e1:ff:dc:bd:94:e5:b5:03:db:69:b2:96:e6:7d:3f:96:4d:3a: 28:e4:af:7e:4e:73:3e:4e:c6:df:54:cb:4a:2e:40:1f:0e:32: 59:20:75:e4:f8:f2:20:13:20:9f:ae:d7:c3:b0:42:72:ca:56: bd:c4:9f:8e:6f:0a:1e:9e:ea:ff:e3:db:7a:82:e9:2e:ba:38: 81:f2:02:ec:f2:5d:67:8b:9f:78:50:52:42:75:fe:bd:34:be: 78:42:c3:31 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NjI/Qa/6sc2jaXOKYYhNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5 ZTBhNTEwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWNkODVjMTE1MzU3MDgyY2M3ZDBjOTI1OTA3ZjA3MWIxZTdmZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/2M8Pe9nGyHKPG16m1W6y9HPsWi 7xnqfkS69piWPyW0ft582JzjJioCIA9HzSobvKqktO57Dkc0AgR0d3VI6fg0x6f6 YrqBMt2CTVTei3IaZZIbPGeUHM8O69AYLOX54ethbZiJXCF0mMRrU4xhpT1RAKx7 RyM9L0NgRdHnGu+S0LLNSWoOSATUcuBmEKLHRuJ9mW9K9UqYpbdS5FgMNV14dGCP +XJTx8qJylyhGaEaglmmiYe2ixdPBMtiIv2TizFLt+H6xbt1QuRCYWkthrZzYUux hq+zYDmRAiUYl53OWxzsUaQNisJHU+JzHX12JPqHAsfcl9VbCL5/QaDt2QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPrNhcEVNXCCzH0MklkH8HGx5/+6MB8GA1UdIwQY MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt YWYxY2MyMzE3ZTM5LzEvMS1zMkZ3UlUxY0lMTWZReVNXUWZ3Y2JIbl83by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjYvNjE0ZTVjLTI5OWItNGZkNC1hMGJjLWFmMWNjMjMxN2Uz OS8xL19yaE5uNC1lTXhWbGlhWHI5eUlnT29tZUNsRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcPSbDAN BgkqhkiG9w0BAQsFAAOCAQEAIpMucahGgIEE505g0f+NJAlRigGpuXR45UkK6Ov2 ze5loC8YMllhHKDntvjShoMHER1ir0K6DchcjHoOmJqyJ9CaW6nq77JK8YcBCo2m n0ujbxcWeiSdwd45FyPpqTSgquCFEnbs369+Wyh6I7c80Gq/1DBaBlyd5ymRiG8t mPsKXZ1vHXAV9k8VeTWjSnPxfLCB9ignd05raKuhffJkcsvB4f/cvZTltQPbabKW 5n0/lk06KOSvfk5zPk7G31TLSi5AHw4yWSB15PjyIBMgn67Xw7BCcspWvcSfjm8K Hp7q/+PbeoLpLro4gfIC7PJdZ4ufeFBSQnX+vTS+eELDMQ== -----END CERTIFICATE-----Generated at Tue Jan 20 12:46:21 2026 by rpki-client