This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/1jX8vpWuzH003x-Qpi8XxrbKqjw.roa File: 1jX8vpWuzH003x-Qpi8XxrbKqjw.roa (raw, json) Hash identifier: fIBfbZN1KJlMbAU4QQDCO0WxA1fKbyJMB6d4i6/8a0c= Subject key identifier: D6:35:FC:BE:95:AE:CC:7D:34:DF:1F:90:A6:2F:17:C6:B6:CA:AA:3C Certificate issuer: /CN=5ad9c45020072b3369c2b810fef4527244c5b741 Certificate serial: 019B7CEDFE1119645906E63A3533DD14AA08 Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/1jX8vpWuzH003x-Qpi8XxrbKqjw.roa Signing time: Fri 02 Jan 2026 04:18:50 +0000 ROA not before: Fri 02 Jan 2026 04:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203986 IP address blocks: 185.78.176.0/22 maxlen: 22 2a00:67e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:fe:11:19:64:59:06:e6:3a:35:33:dd:14:aa:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741 Validity Not Before: Jan 2 04:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d635fcbe95aecc7d34df1f90a62f17c6b6caaa3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:47:ec:3f:e7:37:e7:d0:7e:62:18:7d:af: f8:ed:73:33:d7:ef:cd:95:d0:67:0c:6c:99:63:92: dd:e5:34:22:e8:0a:8f:1e:9c:8f:81:74:65:a5:87: f9:ba:95:81:1a:9f:c8:a0:a1:e5:cc:4c:0c:5e:c3: 28:b2:4b:de:d6:d0:00:44:b6:97:c5:05:59:7e:d6: 7c:3b:c4:5f:8e:92:11:72:90:56:39:7c:94:31:35: e0:22:7b:1e:2a:36:c7:d8:f2:90:b3:29:70:14:a6: e8:ea:21:17:62:63:aa:ed:b7:d5:21:b6:ed:40:35: 9b:38:c5:db:83:7f:92:45:3e:03:7e:63:04:42:2f: ad:c6:d5:f2:b1:59:4a:89:90:9c:53:f5:2b:2b:c1: 53:3c:bc:3d:03:93:50:8b:fa:fa:8d:dc:59:b7:45: ca:0c:e4:34:02:3e:91:95:c4:45:fb:5b:8f:84:54: ac:cf:00:2e:1d:d1:74:6a:79:bc:76:0e:37:66:ac: 19:7e:25:dc:11:4e:58:1b:de:bb:89:60:8a:0c:f0: e9:a0:6d:84:0a:85:c3:f2:7e:78:cf:93:30:2c:53: 23:42:67:17:46:43:6f:98:3f:3d:fa:72:f9:73:94: 77:ea:5d:2c:8c:6e:30:c8:32:4e:54:d1:65:87:4a: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:FC:BE:95:AE:CC:7D:34:DF:1F:90:A6:2F:17:C6:B6:CA:AA:3C X509v3 Authority Key Identifier: keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/1jX8vpWuzH003x-Qpi8XxrbKqjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.176.0/22 IPv6: 2a00:67e0::/32 Signature Algorithm: sha256WithRSAEncryption 78:e6:f5:a2:a2:9d:31:52:19:03:3f:0b:1b:e3:ba:5c:4a:41: 32:a8:34:b4:12:07:be:10:9e:1e:8a:d4:dd:bf:27:ce:35:ed: d0:17:cc:39:59:c6:9d:e7:58:c2:e8:19:35:eb:e5:e6:b1:15: 93:4d:0d:fb:a1:98:cf:8b:17:eb:e9:cf:af:7f:28:58:2b:7e: df:1a:1f:c9:0e:0a:37:a8:6d:95:4c:27:4d:da:53:50:35:59: 8f:f3:7f:b1:8a:23:85:0b:45:32:35:6f:a5:5a:a6:da:fa:6f: aa:23:7c:2b:7f:af:81:3e:87:e2:97:04:3e:c1:42:7e:b4:e9: d3:cb:d9:a4:4a:98:e4:29:4b:76:0d:e3:f2:c8:59:97:3a:d7: bd:8b:06:7b:e5:22:57:bd:f4:62:71:53:a5:ab:bc:2e:97:39: 03:f3:8f:36:44:0a:da:78:fa:e0:3b:a6:78:72:9f:ed:72:50: b5:3a:4f:eb:7b:f1:5d:f6:3c:9e:2d:21:c7:6e:19:fd:44:3c: 9e:cb:da:79:0f:d2:b7:9b:82:38:78:f7:50:4a:81:97:b4:a0: 68:77:28:6f:30:08:5d:20:2b:ef:91:8b:1d:cc:5e:0e:97:45: a0:99:68:20:0f:b1:2a:0d:ff:01:a2:30:73:5e:5e:33:fc:6a: 3d:ea:3c:9d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87f4RGWRZBuY6NTPdFKoIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDljNDUwMjAwNzJiMzM2OWMyYjgxMGZlZjQ1MjcyNDRj NWI3NDEwHhcNMjYwMTAyMDQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjM1ZmNiZTk1YWVjYzdkMzRkZjFmOTBhNjJmMTdjNmI2Y2FhYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp11H7D/nN+fQfmIYfa/47XMz1+/N ldBnDGyZY5Ld5TQi6AqPHpyPgXRlpYf5upWBGp/IoKHlzEwMXsMoskve1tAARLaX xQVZftZ8O8RfjpIRcpBWOXyUMTXgInseKjbH2PKQsylwFKbo6iEXYmOq7bfVIbbt QDWbOMXbg3+SRT4DfmMEQi+txtXysVlKiZCcU/UrK8FTPLw9A5NQi/r6jdxZt0XK DOQ0Aj6RlcRF+1uPhFSszwAuHdF0anm8dg43ZqwZfiXcEU5YG967iWCKDPDpoG2E CoXD8n54z5MwLFMjQmcXRkNvmD89+nL5c5R36l0sjG4wyDJOVNFlh0oFFwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNY1/L6Vrsx9NN8fkKYvF8a2yqo8MB8GA1UdIwQY MBaAFFrZxFAgByszacK4EP70UnJExbdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RuRVVDQUhLek5wd3JnUV92UlNja1RGdDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jZjM2NDEtNWMzMC00ZGVhLWIwMDQt YzhlN2ZkODA5ZjkwLzEvMWpYOHZwV3V6SDAwM3gtUXBpOFh4cmJLcWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jZjM2NDEtNWMzMC00ZGVhLWIwMDQtYzhlN2ZkODA5Zjkw LzEvV3RuRVVDQUhLek5wd3JnUV92UlNja1RGdDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuU6wMA0E AgACMAcDBQAqAGfgMA0GCSqGSIb3DQEBCwUAA4IBAQB45vWiop0xUhkDPwsb47pc SkEyqDS0Ege+EJ4eitTdvyfONe3QF8w5Wcad51jC6Bk16+XmsRWTTQ37oZjPixfr 6c+vfyhYK37fGh/JDgo3qG2VTCdN2lNQNVmP83+xiiOFC0UyNW+lWqba+m+qI3wr f6+BPofilwQ+wUJ+tOnTy9mkSpjkKUt2DePyyFmXOte9iwZ75SJXvfRicVOlq7wu lzkD8482RAraePrgO6Z4cp/tclC1Ok/re/Fd9jyeLSHHbhn9RDyey9p5D9K3m4I4 ePdQSoGXtKBodyhvMAhdICvvkYsdzF4Ol0WgmWggD7EqDf8BojBzXl4z/Go96jyd -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:47 2026 by rpki-client