This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa File: 1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa (raw, json) Hash identifier: NLxrLA0OqYxqRmfJGl+OFXBhEszRqDielh1bnhVcZzg= Subject key identifier: FA:9B:7E:21:73:84:5E:A6:6E:F2:45:03:1A:AB:AE:2F:BF:B5:81:C7 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809C7EFC81B8B4920099ABA6DA09E3 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56512 IP address blocks: 185.86.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9c:7e:fc:81:b8:b4:92:00:99:ab:a6:da:09:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9b7e2173845ea66ef245031aabae2fbfb581c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:58:e3:b2:30:3c:6e:81:73:e3:3d:4d:4d:32: 2e:83:8d:36:6e:4e:51:21:bb:f4:07:4e:eb:91:33: e2:bb:ed:15:19:16:84:0b:bb:27:90:3f:53:12:56: 7e:d1:07:4a:9b:b7:f1:d5:1f:af:9a:6a:ce:4d:48: 04:b3:a4:da:51:aa:bd:39:d8:59:64:be:d2:84:ef: ec:55:ca:bb:d4:77:2d:8d:bf:0b:1a:99:ea:c3:8b: b1:5c:bb:36:3e:a7:93:63:45:0b:fb:5e:c8:b3:bd: 41:57:e4:70:7b:47:2a:17:f0:1d:45:4d:e8:e5:c7: df:33:05:77:d3:31:07:02:71:f6:0b:a0:9c:e7:da: e7:b0:21:12:13:8b:9f:c7:bd:6b:fb:47:c1:19:b1: 28:b6:35:bc:e0:0d:2d:a3:10:b3:82:ba:06:62:76: 5a:98:d5:de:31:31:c2:e0:af:10:e4:31:e3:06:4f: 98:46:de:c2:5a:d1:5f:9c:34:0e:28:26:5f:87:1c: 87:31:b6:52:21:a5:19:f0:f4:60:f9:87:4a:59:0c: 96:eb:10:a7:02:74:a9:ec:67:72:f9:f6:4c:6c:99: 6e:da:38:c2:57:83:08:47:80:9b:20:26:60:8a:03: f6:16:6f:12:e9:bb:58:7d:ba:05:38:c5:b1:9b:26: 26:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9B:7E:21:73:84:5E:A6:6E:F2:45:03:1A:AB:AE:2F:BF:B5:81:C7 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-pt-IXOEXqZu8kUDGquuL7-1gcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.65.0/24 Signature Algorithm: sha256WithRSAEncryption d2:fc:a8:b3:7d:b2:fa:07:89:6a:d9:4e:71:bf:1f:1a:dd:f5: 2e:89:96:9d:58:e6:1f:76:57:04:31:3c:da:8c:0f:d6:b3:56: cb:96:0b:91:35:ba:18:f1:97:87:13:7f:6b:41:ed:32:13:45: 01:69:e8:ad:d1:71:18:89:04:51:1e:8c:3c:cc:d1:f8:a6:45: 57:62:e9:0f:e2:66:6f:2f:ee:38:3e:d1:ca:74:a7:93:95:56: 2b:9e:db:fc:fb:09:41:16:d4:3f:84:3b:9e:7e:18:a0:ce:ff: 62:b0:90:13:62:7c:31:f8:4c:1f:d2:72:5e:50:3e:33:f9:4f: d0:f8:fd:b3:60:03:a8:d9:ee:f6:0c:03:63:81:47:8a:5a:0a: 11:cc:74:b5:b6:29:4e:ad:9c:92:58:e2:b2:95:17:58:2b:64: cc:dd:24:8e:88:f9:1f:4c:17:92:c0:fd:e7:04:2a:b3:b6:79: 3c:a5:56:45:64:1f:94:cc:bc:39:2f:bb:39:8c:9f:e6:4d:4c: c0:40:bc:03:97:7a:f4:db:97:9e:a8:3b:0b:13:5f:c0:f8:7c: 6f:c0:d6:d5:34:96:56:bc:34:fb:e2:45:5b:31:7e:d4:c9:78: ad:51:ea:8a:c4:d3:b4:e0:95:76:2e:9c:d3:18:46:d1:d9:ea: 20:2f:fb:36 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gJx+/IG4tJIAmaum2gnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTliN2UyMTczODQ1ZWE2NmVmMjQ1MDMxYWFiYWUyZmJmYjU4MWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnljjsjA8boFz4z1NTTIug402bk5R Ibv0B07rkTPiu+0VGRaEC7snkD9TElZ+0QdKm7fx1R+vmmrOTUgEs6TaUaq9OdhZ ZL7ShO/sVcq71Hctjb8LGpnqw4uxXLs2PqeTY0UL+17Is71BV+Rwe0cqF/AdRU3o 5cffMwV30zEHAnH2C6Cc59rnsCESE4ufx71r+0fBGbEotjW84A0toxCzgroGYnZa mNXeMTHC4K8Q5DHjBk+YRt7CWtFfnDQOKCZfhxyHMbZSIaUZ8PRg+YdKWQyW6xCn AnSp7Gdy+fZMbJlu2jjCV4MIR4CbICZgigP2Fm8S6btYfboFOMWxmyYm/wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqbfiFzhF6mbvJFAxqrri+/tYHHMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvMS1wdC1JWE9FWHFadThrVURHcXV1TDctMWdjYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzAvYjI2YWE4LWFjZTctNGZhNi05ZThlLTVkNDhiNjVjZTU3 My8xL19saVZMVGs1TmZEVHZPZ1VfWkY0MEVhVHJyay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlWQTAN BgkqhkiG9w0BAQsFAAOCAQEA0vyos32y+geJatlOcb8fGt31LomWnVjmH3ZXBDE8 2owP1rNWy5YLkTW6GPGXhxN/a0HtMhNFAWnordFxGIkEUR6MPMzR+KZFV2LpD+Jm by/uOD7RynSnk5VWK57b/PsJQRbUP4Q7nn4YoM7/YrCQE2J8MfhMH9JyXlA+M/lP 0Pj9s2ADqNnu9gwDY4FHiloKEcx0tbYpTq2ckljispUXWCtkzN0kjoj5H0wXksD9 5wQqs7Z5PKVWRWQflMy8OS+7OYyf5k1MwEC8A5d69NuXnqg7CxNfwPh8b8DW1TSW Vrw0++JFWzF+1Ml4rVHqisTTtOCVdi6c0xhG0dnqIC/7Ng== -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:22 2026 by rpki-client