This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa File: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (raw, json) Hash identifier: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0= Subject key identifier: D4:34:94:43:48:F1:B3:A7:46:D0:4A:05:A9:F1:BD:D6:61:50:C8:CC Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf Certificate serial: 019B78A35ECC5A3A980C913A4B5571C8AD66 Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.69.1.0/24 maxlen: 24 195.42.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5e:cc:5a:3a:98:0c:91:3a:4b:55:71:c8:ad:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d434944348f1b3a746d04a05a9f1bdd66150c8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:cd:d8:63:6b:7d:b2:e8:13:89:8b:e0:ba: 1e:f5:3e:49:0c:67:fb:52:fc:93:82:88:8e:92:72: 25:68:a3:7e:f2:45:fc:33:0d:a4:9f:54:30:d0:dc: f8:ae:bb:63:ae:4f:a8:e1:37:da:28:1f:22:50:77: 8c:f8:48:d9:48:30:e6:02:ec:08:67:7c:85:47:26: 1c:85:6f:fb:68:3c:44:14:79:aa:42:4d:d4:e0:18: bb:20:d3:4e:a9:8c:08:34:a6:45:0c:55:ba:df:eb: 01:19:21:9d:15:55:b2:fd:4b:15:37:cd:9a:a5:9b: 20:88:d5:5b:c6:07:36:4b:26:da:36:3b:11:6d:1d: 1e:44:2b:d9:53:dd:9b:70:ff:92:ea:d1:e5:57:6e: 1c:93:e7:f3:39:c8:60:28:d3:27:41:72:12:6a:40: 97:78:c4:aa:b3:af:57:e7:ec:09:df:c5:fc:df:88: 49:02:b1:da:28:fc:c4:36:a1:8f:42:c7:44:68:b2: 56:35:99:50:f2:e1:c1:30:53:52:3b:70:38:01:2f: 05:ca:84:58:6f:da:b3:96:9c:4f:b1:a2:1b:6e:eb: 2b:a4:1b:80:b6:a9:4e:3e:3b:99:7e:fd:10:4f:c6: 54:e4:ef:1f:58:5b:55:11:d3:a6:cf:f0:42:09:f4: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:34:94:43:48:F1:B3:A7:46:D0:4A:05:A9:F1:BD:D6:61:50:C8:CC X509v3 Authority Key Identifier: keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.1.0/24 195.42.240.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e7:0f:6c:af:cf:48:98:84:8d:46:b5:a3:40:27:b4:09:8a: 8b:3b:d1:df:af:3d:c8:a8:29:52:5d:95:ff:0b:d2:65:2a:ae: 66:69:6b:94:e8:2b:36:06:95:a2:d0:e9:fb:d1:60:c3:bc:51: 87:ad:39:49:09:26:c4:fc:8d:e4:b6:a0:0f:dc:16:19:ab:99: 20:58:89:74:17:e7:2b:19:09:ac:92:de:23:3a:89:c9:f4:81: 28:5e:1e:cb:ae:90:60:9d:9a:7c:22:24:fe:f0:30:b1:cc:72: a5:65:38:a8:c8:36:16:31:83:4a:13:cc:6d:f1:24:22:11:42: bb:a9:fa:30:92:7f:4a:79:d4:b3:db:90:c3:00:9d:80:fa:20: a1:97:9a:39:02:c0:81:c8:1e:92:a1:64:25:ce:a2:f8:ca:2b: 5b:04:34:27:0a:15:fa:38:f3:76:3c:de:82:7d:17:98:92:d6: cc:bf:15:89:8b:9f:5f:bb:b4:bb:fc:40:c0:5c:1a:be:5b:ac: 52:4e:22:07:bd:bf:f6:54:02:0f:49:dd:c6:3b:11:eb:d3:e2: 83:31:a9:72:97:f0:42:02:ed:6c:a0:e7:98:ce:a3:71:8b:eb: c3:2f:7c:bb:36:0b:99:88:b0:fe:3c:c0:51:07:f4:5c:9e:c5: 1c:c1:31:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o17MWjqYDJE6S1VxyK1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkODA2NzliOTZjYTMyMmJmYTg1NTAwY2FiMjA2YzZkNDc0 MTJlZGYwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDM0OTQ0MzQ4ZjFiM2E3NDZkMDRhMDVhOWYxYmRkNjYxNTBjOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAbN2GNrfbLoE4mL4Loe9T5JDGf7 UvyTgoiOknIlaKN+8kX8Mw2kn1Qw0Nz4rrtjrk+o4TfaKB8iUHeM+EjZSDDmAuwI Z3yFRyYchW/7aDxEFHmqQk3U4Bi7INNOqYwINKZFDFW63+sBGSGdFVWy/UsVN82a pZsgiNVbxgc2SybaNjsRbR0eRCvZU92bcP+S6tHlV24ck+fzOchgKNMnQXISakCX eMSqs69X5+wJ38X834hJArHaKPzENqGPQsdEaLJWNZlQ8uHBMFNSO3A4AS8FyoRY b9qzlpxPsaIbbusrpBuAtqlOPjuZfv0QT8ZU5O8fWFtVEdOmz/BCCfSeHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNQ0lENI8bOnRtBKBanxvdZhUMjMMB8GA1UdIwQY MBaAFK2AZ5uWyjIr+oVQDKsgbG1HQS7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAt OTBjMGJkZTA5ODY5LzEvMURTVVEwanhzNmRHMEVvRnFmRzkxbUZReU13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hMTM5OWEtZWE2Yi00YTA5LThiNDAtOTBjMGJkZTA5ODY5 LzEvcllCbm01YktNaXY2aFZBTXF5QnNiVWRCTHQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUUBAwQA wyrwMA0GCSqGSIb3DQEBCwUAA4IBAQA15w9sr89ImISNRrWjQCe0CYqLO9Hfrz3I qClSXZX/C9JlKq5maWuU6Cs2BpWi0On70WDDvFGHrTlJCSbE/I3ktqAP3BYZq5kg WIl0F+crGQmskt4jOonJ9IEoXh7LrpBgnZp8IiT+8DCxzHKlZTioyDYWMYNKE8xt 8SQiEUK7qfowkn9KedSz25DDAJ2A+iChl5o5AsCByB6SoWQlzqL4yitbBDQnChX6 OPN2PN6CfReYktbMvxWJi59fu7S7/EDAXBq+W6xSTiIHvb/2VAIPSd3GOxHr0+KD Malyl/BCAu1soOeYzqNxi+vDL3y7NguZiLD+PMBRB/RcnsUcwTH4 -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:10 2026 by rpki-client